Privacy policy for photography and filming

Who we are

Energinet is an independent public enterprise owned by the Danish Ministry of Climate, Energy and Utilities. We own, operate and develop the general electricity and gas grids in Denmark in order to increase the volume of renewable energy, maintain security of supply and ensure equal market access to the electricity and gas grids.

Identity and contact details of the Data Controller

You can contact Energinet using the contact details provided below. The contact details apply to all companies in the Energinet Group. The Energinet subsidiary you work for or primarily deal with is the Data Controller in respect of the processing of the personal data that we process about you.

Energinet, CVR no.: 28 98 06 71

Tel.:                  +45 70 10 22 44
Email:               info@energinet.dk
Address:           Tonne Kjærsvej 65, DK-7000 Fredericia

Data protection contact

If you have any questions about our processing of your personal data, please contact our Data Protection Officer (DPO) using the contact details provided below:

• Email: kontaktDPO@energinet.dk
  Remember that ordinary email is not a secure method of communication. Your email should not contain private or sensitive information or any other information that you think should be protected.
• Tel.: +45 70 26 29 77
• By letter: Write to the postal address mentioned above, ‘Attn.: DPO’.

We collect personal data about you

Energinet processes the following categories of personal data:

• Ordinary personal data in the form of photos and films

We strive to ensure that all personal data processed by us is accurate and up-to-date.

Disclosure of personal data

Energinet may use photos and films in connection with recruitment, when working with journalistic media, educational institutions, business partners and on social media.

Your personal data may become subject to a right of access under the Danish Public Administration Act.

Purpose

Energinet processes your personal data for the following purposes:

• Storing and sharing photos and films on social media
• Storing and sharing photos and films on Energinet’s intranet (InSite)
• Storing and sharing photos and films in connection with the branding of Energinet

Energinet uses the photo(s) and film recording(s) in electronic and printed media and in other productions co-produced by Energinet. In addition, the photos/films may be used by other media when reporting on Energinet. In such cases, the media in question must comply with the rules on the use of personal data.

Legal basis

Energinet will only process your personal data to the extent necessary for your relationship with us or where necessary according to applicable law.

Legal basis for our processing of personal data:

• Our legal basis for processing your personal data is section 6, subsection 1 of the Danish Data Protection Act, cf. section 6, subsection 1, paragraph e of the General Data Protection Regulation, when the processing of photos and film is considered necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Energinet.

• Our legal basis for processing your personal data is section 6, subsection 1 of the Danish Data Protection Act, cf. section 6, subsection 1, paragraph a of the General Data Protection Regulation, when the processing is not covered by paragraph e, and a declaration of consent has been signed in connection with photography/filming.

Once a year, Energinet reviews photos and films that are more than five years old to assess whether they are still needed. If the photos/films are not found to be needed, they will be erased.

The law gives you a number of rights in relation to our processing of your personal data. You can exercise your personal data rights by contacting us. You can find our contact details at the beginning of this privacy policy.

When we have received your request for access to the personal data we hold about you, we will investigate whether it is possible to honour your request. We will respond to your enquiry as soon as possible and no later than one month after we have received your enquiry.

Your rights:

• Right of access
  You have the right to obtain access to the personal data we process about you.

• Right to rectification
  If you believe that the personal data we process about you is inaccurate, you have the right to have the data rectified. You must contact us and inform us of the nature of the inaccuracies and what data you want us to rectify.
  
  
• Right to erasure or ‘the right to be forgotten’
  We erase personal data when it is no longer necessary to store the data. In special cases, you have the right to have specific personal data about you erased before the time of our ordinary erasure. If you believe that your data is no longer necessary for the purpose for which we collected it, you can request to have your data erased.
  
  
• Right to restriction of processing
  If you contest the accuracy of the data we hold or otherwise process about you, you may request that we restrict the processing of the data until we have been able to establish whether the data is correct. You may also request that we restrict the processing rather than erase the data if you believe that our processing of the data is unlawful, or if you believe that we no longer need the data, or if you believe that your legitimate interests take precedence over Energinet’s legitimate interests as Data Controller.

• Right to data portability
  In some cases, you have the right to receive your personal data and to request that the personal data be transmitted from one data controller to another.

• Right to object
  You have the right to object to our processing of personal data about you. If your objection is justified, we will no longer process the data.
  
  
• Right to complain
  You may complain to the Danish Data Protection Agency if you are unhappy with the way your personal data has been processed or with the response you have received from Energinet. The Danish Data Protection Agency will then investigate the matter and make a decision. You can find the contact details of the Danish Data Protection Agency at https://www.datatilsynet.dk/english.