New to Denmark

KO1 and your personal data

In the form - KO1 - you are about to complete, SIRI is at the moment not able to give you the necessary information about how we process your personal data. Therefore, you can read about this below.

A link to online form KO1 is available at the bottom of this page.

Information on how we process your personal data

SIRI is obliged to inform you how we process your data and to inform you of your rights in regard to how we process your data.

Data controller

SIRI is the data controller and responsible for processing the personal data given in this application form and the data provided about you during the processing of the case. You can contact the agency by writing to the following address: The Danish Agency for International Recruitment and Integration (SIRI), Carl Jacobsens Vej 39, PO box 304, 2500 Valby or through our contact form.

Go to SIRI's contact form

Data protection officer

You can contact our data protection officer by writing to the aforementioned address (Att. Data protection officer) or by using our contact form.

Go to SIRI's contact form

Purpose and legal basis

The personal data you provide to SIRI is collected and used:

to process your application for a residence and/or work permit in Denmark
in any later application for an extension or for a new residence and/or work permit in Denmark
for verification and spot checks of the conditions for your residence and/or work in Denmark

The legal basis for processing your personal data is:

The Danish Aliens Act, in particular chapter 1 on the entry and residence of aliens in Denmark.
The General Data Protection Regulation (GDPR), article 6.1 (c) (relating to the processing of data in order to comply with the legal obligation to which the controller is subject) and 6.1 (e) (relating to the exercise of official authority vested in SIRI by the Aliens Act).
The General Data Protection Regulation (GDPR), article 9.2 (f) (relating to the necessity of processing in order to establish, exercise or defend legal claims).
The Danish Data Protection Act section 8 (relating to the official authority only being allowed to process information about criminal offences if it is necessary for tasks of that official authority).

The information you give or have given in connection with your application will be registered in the registers of Danish immigration authorities. The same holds true for any information you later give in connection with an application to extend your residence permit or for a new residence and/or work permit in Denmark.

Some of your data will be registered in the Civil Registration System (CPR). This will in some instances happen immediately when you are granted a permit. In other situations the registration will take place only when you take up residence in Denmark.

Some data, including biometric data, will be registered in the Schengen Information System (SIS) under certain circumstances. This applies if you have been given a time limit for departure in relation to your application or your residence in Denmark. It also applies if you have been banned from the Schengen area.

We process the following categories of data about you:

General personal data, such as: information about your name, possible civil registration number (CPR-number), citizenship, occupation, education, marital status, financial information and whether you have committed any legally punishable offences
Sensitive personal data, such as: health information and biometric data collected for the purpose of establishing your identity.

We can disclose your data to the following recipients

SIRI can pass on your data to your sponsor (e.g. your employer, place of study, host or family member), municipal authorities, the police, the Danish Security and Intelligence Service and the Danish Defence Intelligence Service, the public prosecutor, the Immigration Appeals Board, the Refugee Appeals Board, the Ministry of Immigration and Integration, the Danish immigration Service, the Danish Return Agency, the Danish Agency for Labour Market and Recruitment, the Ministry of Foreign Affairs of Denmark and The Danish Parliament.

In isolated cases, SIRI also passes on your data to other public authorities, private sector organizations and foreign organizations and authorities when it is necessary to exercise our official authority.

Personal data will be shared with the relevant authorities in the other Schengen states, when SIRI is legally obliged to do so. These authorities will have access to the information registered in SIS by SIRI when it is relevant to their case processing.

Furthermore, data from SIRIs registers and the CPR register are shared with other relevant authorities or organisations via the Aliens Information Portal (Udlændingeinformationsportalen) if they need the data in order to process aspects of your stay in Denmark.

SIRI shares data when it is necessary in order to exercise our official authority, including when we are legally obliged to share information.

If you lose your residence permit, we will inform your current or previous employers, if any, that you no longer have the right to work. This will happen, if we issue a refusal to an application for a residence permit or to an extension of a residence permit. It will also happen if we revoke your residence permit or if we establish that your residence permit has lapsed. Employers who within the last three months have reported salary payments to you to the income register will be informed.

What is the origin of the data we process about you?

The personal data that SIRI processes about you have been provided by you in this application form. We will also process data you may submit to your case later.

In addition, we will process data obtained from:

any of your previous applications submitted to SIRI,
searches in databases, such as: the Civil Registration System (CPR), the Central Business Register (CVR), the Income Register (eIncome), the Building and Housing Register (BBR) and the Schengen Information System (SIS)
other authorities, such as: municipal authorities, the Agency of Family Law, the Danish Immigration Service, the Immigration Appeals Board and the Refugee Appeals Board,
third-parties or sponsors, such as: your au pair- or internship host, employer or educational institutions
any person applying for a residence permit based on your grounds for residence in Denmark, and this person’s previous cases with SIRI.

Storage of data

SIRI will store your personal data for as long as it is necessary in order to be able to carry out our tasks in relation to establishing or defending a legal claim to residence.

Data submitted as part of an immigration related matter can be stored for use by the immigration authorities at a later date. This means that the data can enter into the decision making process regarding future applications for extension of a residence permit, when revoking a residence permit, for verification and spot checks, when deciding whether a permit has lapsed, in relation to applications for permanent residency and for naturalization and in cases concerning any family members.

In practice this means that SIRI will store your data for the period of your ‘lifecycle’ – i.e. your entire life. Basic data regarding your stay in Denmark, e.g. when and why you have been granted a residence permit and information on other decisions made by SIRI regarding your residence in Denmark will not be erased.

If you have your finger prints and facial photo taken for use with your residence card and for identification and identity control, your fingerprints and photo will be stored in the immigration authorities’ database. If you are granted a residence permit, your fingerprints and photo will be stored for 10 years. If you are not granted a residence permit, your fingerprints and photo will be stored for 20 years. If you are granted Danish citizenship, your fingerprints and photo will be deleted.

Personal data registered in the Schengen Information System (SIS) in relation to a deadline for departure are normally stored in SIS until your exit from the Schengen area is registered. If the data are registered in relation to an entry ban to the Schengen area, these data will, as a rule, be stored until the entry ban has expired.

Finally, it must be mentioned that data will be transferred to the Danish National Archives in accordance with the Danish Archives Act.

Your rights

Under the GDPR you have a number of rights in relation to our processing of data about you:

The right to know what kind of data we process about you

You have the right to ask what kind of data we are processing about you and be granted access to these data. If you request access to your data, your application will be processed in accordance with the GDPR’s regulations governing right of access. If there are other regulations which provide you with greater access than the GDPR affords, your request for access will be processed in accordance with these regulations as well. These additional regulations may include those contained in the Public Administration Act that governs freedom of information requests.

The right to rectification (data correction) and the right to have your data erased

You have the right to request that corrections be made to personal data about you that you find inaccurate. In specific situations, you also have the right to have your data erased. As a rule, information can only be erased, if it is not necessary for processing your case as SIRI is obliged to record and register information in accordance with the Public Administration Act.

The right to restriction of processing

In some situations, you have the right to restrict the processing of your personal data. Where processing has been restricted, SIRI may thereafter, with the exception of storage, only process your data with your consent unless the purpose of the processing is to establish or defend a legal claim, to protect another person or for reasons of important public interest.

The right to object

In some situations, you have the right to object to otherwise legal processing of your personal data. This means that you can request that your data is erased, corrected or restricted.

You can read more about your rights in the Danish Data Protection Agency’s guidelines about GDPR on the Danish Data Protection Agency’s website.

Go to the Danish data Protection Agency's website

If you would like make use of your rights under the GDPR, contact SIRI.

Complaints to the Data Protection Agency

You have the right to submit a complaint to the Data Protection Agency if you are dissatisfied with the way we process your personal data. Contact information for the Data Protection Agency is available on the Danish Data Protection Agency’s website.

Go to the Danish Data Protection Agency's website

Verification and spot-checks

Your case may be selected for a spot-check. The spot-check aims to verify the following:

The accuracy of the information you have given.
Whether you meet the conditions for a residence and/or work permit, if such is granted to you.
Whether you are staying and/or working in Denmark without the necessary permit.

Verification may involve the following:

Checking public registers, such as the Civil Registration System (CPR)
Comparing information contained in the registers of SIRI and the Danish Immigration Service with records held by the Civil Registration System (CPR), the Buildings and Housing Register (BBR), the Central Business Register (CVR) and the Income Register (eIncome).
Contacting other authorities, such as municipalities
Contacting third parties, such as employers, au pair- or internship host or educational institutions
Turning up in person at your residence, place of study or workplace
Using information about employment registered by the employer (in a so-called digital logbook). The Danish Agency for International Recruitment and Integration, the Danish Tax Agency, The Danish Agency for Labour Market and Recruitment as well as municipal councils can impose the use of digital logbooks on employers.

You may be asked to supply additional information as part of the verification and spot-check process.

Use the online form KO1 - remember to save the screen receipt

Before you complete online application form KO1 - this is how we process your personal data

KO1 and your personal data

Information on how we process your personal data