Visit nyidanmark.dk/ukraine if you need information from SIRI and the Danish Immigration Service to Ukrainian citizens
Before you complete online application form AR6/7 - this is how we process the employer's and the applicant's personal data
SIRI processes a number of personal data in connection with an application. Before you complete the online application form, below you can read about how we process the employer's and the applicant's data, which data we are permitted to use and what the employer's and the applicant's rights are.
AR6/7 and personal data
In the form - AR6/7 - you are about to complete, SIRI is at the moment not able to give the necessary information about how we process both the employer's and the applicant's personal data. Therefore, you can read about this below.
A link to online form AR6/7 is available at the bottom of this page.
Information on how we process personal data
SIRI is obliged to inform you how we process your and the applicant’s data (if you are the contact person or own a one-person business) and to inform you of your and the applicant’s rights in regard to how we process data.
Data controller
SIRI is the data controller and responsible for processing the personal data given in this application form and the data provided about you and the applicant during the processing of the case. You can contact the agency by writing to the following address: The Danish Agency for International Recruitment and Integration (SIRI), Carl Jacobsens Vej 39, PO box 304, 2300 Copenhagen S or through our contact form.
Data protection officer
You can contact our data protection officer by writing to the aforementioned address (Att. Data protection officer) or by using our contact form.
You can read more about SIRI as data controller and about SIRI’s data protection officer here
Purpose and legal basis
The personal data you provide to SIRI is collected and used:
- to process this application for a residence and/or work permit in Denmark
- in any later application for an extension or for a new residence and/or work permit in Denmark
- for verification and spot checks of the conditions for applicant's residence and/or work in Denmark
The legal basis for processing your personal data is:
- The Danish Aliens Act, in particular chapter 1 on the entry and residence of aliens in Denmark.
- The General Data Protection Regulation (GDPR), article 6.1 (c) (relating to the processing of data in order to comply with the legal obligation to which the controller is subject) and 6.1 (e) (relating to the exercise of official authority vested in the Danish Agency for International Recruitment and Integration by the Aliens Act).
- The General Data Protection Regulation (GDPR), article 9.2 (f) (relating to the necessity of processing in order to establish, exercise or defend legal claims).
- The Danish Data Protection Act section 8 (relating to the official authority only being allowed to process information about criminal offences if it is necessary for tasks of that official authority).
The information you give or have given in connection with the application will be registered in the registers of Danish immigration authorities. The same holds true for any information you later give in connection with an application from the applicant to extend his or her residence permit or for a new residence and/or work permit in Denmark.
Some of the applicant’s data will be registered in the Civil Registration System (CPR). This will in some instances happen immediately when the applicant is granted a permit. In other situations the registration will take place only when the applicant takes up residence in Denmark.
Some data, including biometric data, will be registered in the Schengen Information System (SIS) under certain circumstances. This applies if the applicant has been given a time limit for departure in relation to the applicant’s application or residence in Denmark. It also applies if the applicant has been banned from the Schengen area.
We process the following types of data about you as the contact person or employer
- General personal data, such as: information about your name, contact information and information about your position at the company
We process the following types of data about the applicant
- General personal data, such as: information about the applicant’s name, possible civil registration number (CPR-number), citizenship, occupation, education, marital status, financial information and whether the applicant has committed any legally punishable offences
- Sensitive personal data, such as: health information and biometric data collected for the purpose of establishing the applicant’s identity.
We can pass on data to the following recipients
SIRI can pass on information to others, and we for example pass on information to the police, the Danish Security and Intelligence Service and the Danish Defence Intelligence Service, the public prosecutor, local municipalities, the Immigration Appeals Board, the Ministry of Immigration and Integration, the Danish Return Agency, the Danish Immigration Service, the Danish Agency for Labour Market and Recruitment (STAR) the Regional Labour Market Councils (RAR), the Danish Parliament and the Ministry of Foreign Affairs of Denmark.
SIRI shares data when it is necessary in order to exercise our official authority, including when we are legally obliged to share information.
The following relates specifically to the applicant’s personal data:
- SIRI can pass on data to the applicant’s sponsor (e.g. your employer or family member)
- In isolated cases, SIRI also passes on your data to other public authorities, private sector organizations and foreign organizations and authorities when it is necessary to exercise our official authority.
- Personal data will be shared with the relevant authorities in the other Schengen states, when SIRI is legally obliged to do so. These authorities will have access to the information registered in SIS by SIRI when it is relevant to their case processing.
- Furthermore, data from SIRIs registers and the CPR register are shared with other relevant authorities or organisations via the Aliens Information Portal (Udlændingeinformationsportalen) if they need the data in order to process aspects of your stay in Denmark.
- If you lose your residence permit, we will inform your current or previous employers, if any, that you no longer have the right to work. This will happen, if we issue a refusal to an application for a residence permit or to an extension of a residence permit. It will also happen if we revoke your residence permit or if we establish that your residence permit has lapsed. Employers who within the last three months have reported salary payments to you to the income register will be informed.
What is the origin of the information we process about you?
The data that SIRI processes about you and the applicant, have been provided by you in this application form. We will also process data you or the applicant may submit to the case later.
In addition, we will process data about the applicant obtained from:
- any of the applicant’s previous applications submitted to SIRI,
- searches in databases, such as: the Civil Registration System (CPR), the Central Business Register (CVR), the Income Register (eIncome), the Buildings and Housing Register (BBR), the Central Crime Register (KR), the Central Passport Register and the Schengen Information System (SIS)
- other authorities, such as: municipal authorities, the Agency of Family Law, the Danish Immigration Service, the Immigration Appeals Board and the Refugee Appeals Board,
- third-parties or sponsors, such as: your au pair- or internship host, employer or educational institutions
- any person applying for a residence permit based on the applicant’s grounds for residence in Denmark, and this person’s previous cases with SIRI.
Storage of data
SIRI will store your personal data for as long as it is necessary in order to be able to carry out our tasks in relation to establishing or defending a legal claim to residence.
Data submitted as part of an immigration related matter can be stored for use by the immigration authorities at a later date. This means that the data can enter into the decision making process regarding future applications for extension of a residence permit, when revoking a residence permit, for verification and spot checks, when deciding whether a permit has lapsed, in relation to applications for permanent residency and for naturalization and in cases concerning any family members. In practice this means that SIRI will store your data for the period of the applicant's ‘lifecycle’ – i.e. his or her entire life.
Finally, it must be mentioned that data will be transferred to the Danish National Archives in accordance with the Danish Archives Act.
The following relates specifically to the applicant’s personal data:
- Basic data regarding the applicant’s stay in Denmark, e.g. when and why the applicant has been granted a residence permit and information on other decisions made by SIRI regarding the applicant’s residence in Denmark will not be erased.
- If the applicant has finger prints and a facial photo recorded for use in issuing a residence card and for identification and identity control, the applicant’s fingerprints and photo will be stored in the immigration authorities’ database. If the applicant is granted a residence permit, the recorded fingerprints and photo will be stored for 10 years. If the applicant is not granted a residence permit, the recorded fingerprints and photo will be stored for 20 years. If the applicant is granted Danish citizenship, the recorded fingerprints and photo will be deleted.
- Personal data registered in the Schengen Information System (SIS) in relation to a deadline for departure are normally stored in SIS until the applicant’s exit from the Schengen area is registered. If the data are registered in relation to an entry ban to the Schengen area, these data will, as a rule, be stored until the entry ban has expired.
Your rights
Under the GDPR you and the applicant have a number of rights in relation to our processing of your personal data. SIRI has written the following standard text about these rights that both you and the applicant can refer to in relation to your personal data:
The right to know what kind of data we process about you
You have the right to ask what kind of data we are processing about you and be granted access to these data. If you request access to your data, your application will be processed in accordance with the GDPR’s regulations governing right of access. If there are other regulations which provide you with greater access than the GDPR affords, your request for access will be processed in accordance with these regulations as well. These additional regulations may include those contained in the Public Administration Act that governs freedom of information requests.
The right to rectification (data correction) and the right to have your data erased
You have the right to request that corrections be made to personal data about you that you find inaccurate. In specific situations, you also have the right to have your data erased. As a rule, information can only be erased, if it is not necessary for processing your case as SIRI is obliged to record and register information in accordance with the Public Administration Act.
The right to restriction of processing
In some situations, you have the right to restrict the processing of your personal data. Where processing has been restricted, SIRI may thereafter, with the exception of storage, only process your data with your consent unless the purpose of the processing is to establish or defend a legal claim, to protect another person or for reasons of important public interest.
The right to object
In some situations, you have the right to object to otherwise legal processing of your personal data. This means that you can request that your data is erased, corrected or restricted.
You can read more about your rights in the Danish Data Protection Agency’s guidelines about GDPR on the Danish Data Protection Agency's website.
Go to the Danish Data Protection Agency's website
If you would like make use of your rights under the GDPR, contact SIRI.
Complaints to the Data Protection Agency
You and the applicant have the right to submit a complaint to the Data Protection Agency if you are dissatisfied with the way we process your personal data. Contact information for the Data Protection Agency is available at the Danish Data Protection Agency's website.
Go to the Danish Data Protection Agency's website
Verification and spot-checks
The case may be selected for a spot-check. The spot-check aims to verify the following:
- The accuracy of the information given.
- Whether the conditions for a residence and/or work permit if such is granted, continue to be met.
- If a foreign national is being employed without the necessary work permit or in contradiction to the conditions pertaining to the work permit.
Verification may involve the following:
- Checking public registers, such as the income register (eIncome).
- Comparing information contained in the registers of SIRI and the Danish Immigration Service with records held by the Civil Registration System (CPR), the Building and Housing Register (BBR), the Central Business Register (CVR) and the income register (eIncome).
- Contacting other authorities, such as local municipalities and the Danish Customs and Tax Administration (SKAT).
- Contacting third parties or sponsor, e.g. the employer.
- Turning up in person at the applicant’s residence and workplace.
- Using information about employment registered by the employer (in a so-called digital logbook). The Danish Agency for International Recruitment and Integration, the Danish Tax Agency, The Danish Agency for Labour Market and Recruitment as well as municipal councils can impose the use of digital logbooks on employers.
You may be asked to supply additional information as part of the verification and spot-check process.