Operating status: You may currently experience problems logging into e-Boks

e-Boks Privacy Policy

  1. e-Boks as the Data Controller
  2. Categories of data subjects, types of personal data, purposes and legal grounds for processing
  3. Recipients or categories of recipients
  4. Transfer to recipients in third countries, including international organizations
  5. Storage of your personal data
  6. Your rights
  7. Changes to privacy policy

1. e-Boks as the Data Controller

This privacy policy explains how e-Boks Nordic A/S (hereinafter ”e-Boks”, ”we”, ”our”, ”us” or equivalent personal pronouns) as Data Controller processes personal data about you as

  • a private end-user with a digital mailbox, and who receives digital messages ("Private End-User")
  • an employee in an enterprise with a digital mailbox, and who receives digital messages ("End-User Enterprise")
  • an employee of an enterprise or authority that sends mail to Private End-Users and/or End-User Enterprises ("Sender Customers")
  • a recipient of newsletter or participant in a webinar
  • a participant in an event
  • a participant in a user survey
  • a contact person working at one of e-Boks' partners (data subjects are also collectively referred to as “you” or equivalent personal pronouns).

Please note that e-Boks is not the data controller for the contents of the digital mailbox that includes messages from/to Private End-Users or End-User Enterprises. e-Boks is therefore not the data controller for the personal data processed, stored and displayed in the digital mailbox. e-Boks is therefore solely the data controller for data linked to the administration of the digital mailbox, which includes login details and data on activities in your digital mailbox - please refer to the description below.

1.1 Content of enterprise digital mailboxes

In its capacity as end-user, the Enterprise is the data controller for the personal data processed and stored in its digital mailbox, and e-Boks is the data processor for the Enterprise. e-Boks acts under instruction from the enterprise and the relationship is regulated by a Data Processing Agreement in accordance with Article 28 of the General Data Protection Regulation, which is contained in the terms of use for enterprises. If, as an enterprise, you have questions concerning the content of your digital mailbox, you can contact the sender, e.g. a public authority or enterprise that has sent you the messages.

1.2 Content of private digital mailboxes

The content (i.e. Messages) in the digital mailbox of a Private End-User is not covered by the General Data Protection Regulation, as processing is done as part of the Private End-User’s purely personal activities. e-Boks is therefore neither data controller nor data processor for processing of personal data in messages in the digital mailboxes of Private End-Users. The relationship between e-Boks and a Private End-User is regulated by the terms of use for Private End-Users. If a Private End-User has questions concerning the content of your digital mailbox, you can contact the sender, e.g. a public authority or enterprise that has sent you the messages.

1.3 How to contact us

You are always welcome to contact us or our Data Protection Officer if you have any questions concerning how we process your personal data, or if you want to exercise one of your rights.

The contact details for e-Boks are as follows:

e-Boks Nordic A/S
Hans Bekkevolds Allé 7
2900 Hellerup

CVR no.: 25674154
Tel.: + 45 70 21 24 00

You can also contact our Data Protection Officer (DPO) if you have any questions concerning how we process your personal data via e-mail [email protected] or telephone 70 21 24 00.

2. Categories of data subjects, types of personal data, purposes, and legal grounds for processing

2.1 Private End-Users

In relation to the actual administration of the digital mailbox and commercial viewing client, e-Boks processes the following ordinary personal data about you in its capacity as data controller:

  • Login details,
  • Data that you have entered yourself in our systems, such as those related to a request for support,
  • Data on your communications with e-Boks,
  • Data on activities in your digital mailbox,
  • Data identifying the digital mail you receive,
  • Information about the content of the mail you receive if using the enhanced reading tools in e-Boks’ iOS mobile application,
  • Contact details in the form of name, email address, telephone number, address,
  • Identification details in the form of civil registration number (CPR number) and user ID,
  • Your registered status as active or inactive (or deceased if relevant) in the Civil Registration System (Det Centrale Personregister (CPR)),
  • Details on the operating system of your computer and mobile device including the chosen browser and IP address.

e-Boks processes your personal data for the following purposes as part of its activities:

  • To be able to provide e-Boks’ services/products
    • This includes being able to identify you on the basis of your CPR number, other identification details, your contact details or combinations of the same,
  • For administrative purposes when communicating with Sender Customers, Private End-Users and other stakeholders, and to ensure the erasure of your personal data,
  • To be able to provide support assistance,
  • For anonymised statistics and analyses, and
  • For product development and improvement of e-Boks´ services.

e-Boks processes your personal data based on the following legal grounds:

  • We process your civil registration number on the basis of your prior consent, in accordance with section 11(2)(2) of the Danish Data Protection Act (Databeskyttelsesloven) and Article 7 of the General Data Protection Regulation, for Norwegian End-Users see section 12 of the Norwegian Data Protection Act (Personopplysningsloven), see Article 6(1)(a) of the General Data Protection Regulation, for Swedish End-Users see section 10 of the Swedish Data Protection Act (Dataskyddslagen), see Article 6(1)(a) of the General Data Protection Regulation as it is necessary to be able to administer your digital mailbox and ensure that your mail reaches you
  • Upon registration, you accepted our terms of use, and our processing of your personal data is therefore also necessary to be able to fulfil our agreement with you, including identifying you as recipient of digital mail from senders in accordance to article 6(1)(b) of the General Data Protection Regulation. This applies to your login details, user number, digital signature, details you have entered yourself in our systems, identification and contact details, details of communications in your e-Boks, details identifying the digital mail you receive and on activities in your digital mailbox.
  • Details of your status in the Civil Registration System are processed to be able to pursue our legitimate interests in erasing your personal data after you are registered as deceased in the Civil Registration System, to be able to limit the length of time we store personal data to that necessary according to Article 6(1)(f) of the General Data Protection Regulation.
  • Under specific circumstances, we can process data in pursuance of a legitimate interest in accordance with Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests that justify the processing are:
    • Responses to user enquiries,
    • Internal statistics and analyses,
    • For product development and improvement of e-Boks’ products,
    • Disclosure to the affiliates e-Boks Development A/S and e-Boks Group A/S to be able to pursue the other legitimate interests.
  • If you give your explicit consent, in accordance with art. 6(1)(a) and art. 9(2)(a) of the General Data Protection Regulation, we will process details on the content of your messages to provide reading tools in e-Boks’ iOS mobile application.

In principle, e-Boks gathers the above personal data from you. However, we obtain your address and status from the Civil Registration System, for which the Ministry of Digital Affairs is the data controller.

2.1.1 Private End-Users of e-Wallet

e-Wallet is a digital identity wallet. It enables you to safely store, manage, and present digital identity credentials, i.e. student ID’s, on your own device (hereinafter: “e-Wallet”). It also allows you to document and verify your identity to other digital services.

If you use this service, e-Boks, as the data controller, processes the following personal data about you:

  • Login details,
  • Name,
  • Your role, affiliation, and associated access rights with the issuer of the credentials (e.g. student),
  • Photo,
  • Contact information,
  • Birthday,
  • Expiration date,
  • Identification and insurance numbers/codes assigned to you by the issuer of the credentials,
  • Nationality/citizenship,
  • Data that you have entered into our systems or otherwise provided for the purpose of user support and assistance to you, and
  • Pseudonymised transaction identification value (hash-value).

All such processed personal data will be collected either from you or from the issuer of your identity credentials.

If you use our digital age verification, e-Boks will also process the following personal data about you:

  • Identification data contained in the data chip and the machine-readable zone of your passport,
  • Address,
  • UserID,
  • Information about your digital signature,
  • Civil registration number (CPR number), and
  • Biometric data that is not used for the purpose of uniquely identifying you.

All such processed personal data will be collected from you.

e-Boks processes your personal data based on the following legal grounds:

  • Upon registration, you accepted our terms of use, and our processing of your personal data is therefore also necessary to be able to fulfil our agreement with you, including providing e-Wallet to you in accordance with Article 6(1)(b) of the General Data Protection Regulation. This applies to all the abovementioned types of personal data.
  • We process your civil registration number on the basis of your prior consent, in accordance with section 11(2)(2) of the Danish Data Protection Act (Databeskyttelsesloven) and Article 7 of the General Data Protection Regulation, as it is necessary to singularly identify you.
  • Under specific circumstances, we can process the abovementioned data in order to pursue a legitimate interest in accordance with Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests that justify the processing may include improvement of e-Boks’ services, providing notifications regarding our services, and responding to your enquiries.
  • In addition, we may process information about the number of users of the e-Wallet and their use of the e-Wallet by aggregating and anonymizing such data in order to pursue a legitimate interest, in accordance with Article 6(1)(f) of the General Data Protection Regulation. The legitimate interest justifying this processing is to compile statistics on the use of the e-Wallet in order to ensure stable operation and further development of this service.

If you use e-Wallet to confirm your identity to other digital services, we process the following personal data about you:

  • Civil registration number (CPR number),
  • Name,
  • Age,
  • Birthday,
  • UserID, and
  • Pseudonymised transaction identification value (hash-value).

All such processed personal data will be collected from you or through the information in your e-Boks account.

e-Boks processes your personal data based on the following legal grounds:

  • Upon registration, you accepted our terms of use, and our processing of your personal data is therefore also necessary to be able to fulfil our agreement with you, including providing e-Wallet to you in accordance with Article 6(1)(b) of the General Data Protection Regulation. This applies to all the abovementioned types of personal data.
  • We process your personal data based on your prior consent, in accordance with art. 6(1)(a) of the General Data Protection Regulation. You consent to the processing, when you approve that the personal data specified in your app, is transferred to the third party whom you use the e-Wallet to verify your identity. The specific personal data covered by this processing depends on the information required to verify your identity in the particular case. The specific personal data will be displayed when you give your consent.
  • We process your civil registration number on the basis of your prior consent, in accordance with section 11(2)(2) of the Danish Data Protection Act and Article 7 of the General Data Protection Regulation, as it is necessary to singularly identify you.
  • Under specific circumstances, we can process the abovementioned data in order to pursue a legitimate interest in accordance with Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests that justify the processing may include improvement of e-Boks’ services, providing notifications regarding our services, and responding to your enquiries.
  • In addition, we may process information about the number of users of the e-Wallet and their use of the e-Wallet by aggregating and anonymizing such data in order to pursue a legitimate interest, in accordance with Article 6(1)(f) of the General Data Protection Regulation. The legitimate interest justifying this processing is to compile statistics on the use of the e-Wallet in order to ensure stable operation and further development of this service.

2.2 Contact persons/employees of enterprises with a digital mailbox (End-User Enterprises)

e-Boks processes the following ordinary personal data about you:

  • Name
  • Information about your employer (the enterprise with a digital mailbox)
  • Contact details in the form of email and telephone number.
  • Details of your activities in the enterprise's digital mailbox
  • Login details
  • Details on the operating system of your computer and mobile device including the chosen browser and IP address.

e-Boks processes your personal data for the following purposes as part of its activities:

  • To be able to provide e-Boks’ services/products to your employer
  • For administrative purposes when communicating with your employer
  • To be able to provide support assistance.
  • For anonymised statistics and analyses
  • For product development and improvement of e-Boks´ services.

e-Boks processes your personal data based on the following legal grounds:

  • If you are the contact person for an enterprise that is our customer, we process your contact details to be able to pursue our legitimate interests in being able to fulfil our contract with the enterprise in which you are employed, by providing our services, administrative purposes related to the same and support and improvement of our services, in accordance with Article 6(1)(f) of the General Data Protection Regulation.
  • In certain instances, the processing of your personal data is necessary to fulfil a legal obligation to which e-Boks is subject, e.g. in connection with the storage of accounts in accordance with the Danish Bookkeeping Act (Bogføringsloven). In such instances, the legal ground is Article 6(1)(c) of the General Data Protection Regulation.

2.3 Contact persons/employees at Sender Customers

e-Boks processes the following ordinary personal data about you if you are employed with an enterprise or authority sending mail to Private End-Users and/or End-User Enterprises:

  • Name
  • Details of your employer (the enterprise/authority sending the mail)
  • Contact details in the form of email and telephone number.

e-Boks processes your personal data for the following purposes as part of its activities:

  • To be able to provide e-Boks’ services/products to your employer
  • For administrative purposes when communicating with your employer
  • To be able to provide support assistance.

e-Boks processes your personal data based on the following legal grounds:

  • If you are the contact person for an enterprise/authority that sends mail via our services, we process your contact details to be able to pursue our legitimate interests in being able to fulfil our contract with the enterprise/authority in which you are employed, by providing our services, administrative purposes related to the same and support, in accordance with Article 6(1)(f) of the General Data Protection Regulation.
  • In certain instances, the processing of your personal data is necessary to fulfil a legal obligation to which e-Boks is subject, e.g. in connection with the storage of accounts in accordance with the Danish Bookkeeping Act. In such instances, the legal ground isArticle 6(1)(c) of the General Data Protection Regulation.

2.4 Recipients of newsletters and webinar participants

If you subscribe to our newsletters, we process the following personal data about you to be able send them to you:

  • Name
  • Email

If you receive our Digital Dialog newsletter, we process the following personal data about you to be able send it to you:

  • Details of which industry/sector you are employed in.

e-Boks processes your personal data based on the following legal grounds:

  • Your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation, in conjunction with section 10(1) of the Danish Marketing Practises Act (Markedsføringsloven).

If you have enrolled in a webinar, e-Boks will process the following personal data about you to administer and follow up after the webinar with regard to marketing our own products and those of our collaborative partners:

  • Name
  • Email
  • Details of your employer
  • Details of your job level
  • Details of which webinar(s) you have participated in.

e-Boks processes your personal data based on the following legal grounds:

  • To fulfil our agreement with you on being able to give you access to our webinars, in accordance with Article 6(1)(b) of the General Data Protection Regulation.
  • Your consent, in accordance with article 6(1)(a), in conjunction with section 10(1) of the Danish Marketing Practises Act.

2.5 Participants in events

If you have enrolled for one of our events, e-Boks will process the following personal data about you to administer and follow up after the event with regard to marketing our own products and those of our collaborative partners:

  • Name
  • Email
  • Details of your employer
  • Details of your job level
  • Details of which event(s) you have participated in.

e-Boks processes your personal data based on the following legal grounds:

  • To fulfil our agreement with you on being able to give you access to our events, in accordance with Article 6(1)(b) of the General Data Protection Regulation.
  • Your consent, in accordance with Article 6(1)(a), in conjunction with section 10(1) of the Danish Marketing Practises Act.

2.6 Participants in user surveys

If you agree to taking part in a user survey, we register the following personal data on you for the purpose of conducting the survey and ultimately developing and optimizing our products and services:

  • Name
  • Email
  • Details of your employer
  • Details of your job level
  • Details on whether you are a user of e-Boks' products and services, and if so, which
  • Your responses and feedback given in the user survey, which can vary depending on the specific user survey and its purpose.

e-Boks processes your personal data based on the following legal grounds:

  • e-Boks' legitimate interests in conducting satisfaction surveys and developing and optimising products and services in accordance with Article 6(1)(f) of the General Data Protection Regulation to conduct the survey. If it is specifically necessary to conduct the survey, e-Boks will obtain your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation.

2.7 Contact persons at collaborative partners

e-Boks processes the following personal data about contact persons at suppliers, business associates or other partners when you communicate with us, e.g. in connection with e-Boks' contractual relationship with the enterprise or authority you are employed by, in connection with the signing or termination of a contract, or if you use our online contact forms to communicate with us on behalf of the enterprise or authority you are employed by:

  • Name
  • Details of your employer
  • Contact details in the form of email and telephone number
  • Job title
  • Place of work

e-Boks processes your personal data as part of its activities:

  • To be able to provide e-Boks’ services/products to your employer
  • For administrative purposes when communicating with your employer on the collaboration or when starting or ending collaboration.

e-Boks processes your personal data based on the following legal grounds:

  • If you are the contact person at a current or potential future partner, we process your contact details to be able to pursue our legitimate interests in being able to communicate with our partners, including on the conclusion and performance of a contract, in accordance with Article 6(1)(f) of the General Data Protection Regulation. The legitimate interests pursued by e-Boks are fulfilment of our contractual obligations, maintaining and reinforcing our collaborative relationships, invoicing for services provided by the enterprise/authority you are employed by and vice versa, along with regards to documentation.
  • In certain instances, the processing of your personal data is necessary to fulfil a legal obligation to which e-Boks is subject, e.g. in connection with the storage of accounts in accordance with the Danish Bookkeeping Act. In such instances, the legal ground is article 6(1)(c) of the General Data Protection Regulation.

3. Recipients or categories of recipients

e-Boks processes your personal data in full confidentiality, but we may disclose them to the following third parties.

  • Affiliated companies
  • Registered Sender Customers
  • e-Boks’ partners and Sender Customers when necessary to be able to provide an e-Boks Plus service, e-Wallet, our MobilePay integration or signing solutions to you or to be able to send promotional material to you on products and services.

Disclosure will always be done in compliance with applicable law, and the recipients have a legal obligation to process your personal data securely and confidentially.

Disclosure to affiliated companies is done on the basis of our legitimate interests to be able to share such data within the group and always only when deemed specifically necessary, in accordance with Article 6(1)(f) of the General Data Protection Regulation.

We disclose your personal data to registered sender authorities and enterprises as necessary for the performance of our contract with you and providing our services to you, in accordance with Article 6(1)(b) of the General Data Protection Regulation.

Disclosure to partners for the provision of an e-Boks Plus service will be based on your consent, according to Article 6(1)(a) of the General Data Protection Regulation or (if it concerns a civil registration number ), section 11(2)(2) of the Danish Data Protection Act, in accordance with Article 7 of the General Data Protection Regulation. Disclosure to partners with regard to marketing, e.g. as follow-up after a webinar or event, is also based on your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation and section 10(1) of the Danish Marketing Practices Act. You will always be informed of what data is disclosed before you give your consent to the disclosure.

When you use the e-Wallet to digitally verify your identity to a third party, e-Boks discloses your personal data to that third party. The disclosure takes place on the basis of your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation or (if a civil registration number is involved) Section 11(2)(2) of the Danish Data Protection Act in conjunction with Article 7 of the General Data Protection Regulation.

In certain situations, e-Boks may be required by law enforcement authorities to disclose personal data on Private End-Users. Such disclosure will be accomplished with regard to fulfilling a legal obligation according to article 6(1)(c).

We may also share your personal data with IT suppliers, our affiliated companies e-Boks Development A/S and e-Boks Group A/S and other third parties that process your data on our behalf (data processors) for hosting, user support handling, security measures, distributing newsletters and related services. These parties process your personal data according to our instructions and can, as such, not process your personal data for other purposes.

4. Transfer to recipients in third countries, including international organizations

Your personal data may be transferred to third countries, meaning countries outside the EU/EEA, e.g. in connection with the use of data processors located in a third country, or who use sub-processors located in a third country. If we transfer your personal data to recipients located in a third country, we ensure beforehand that the transfer comply with the data protection legislation applicable at any given time. This means that a recipient of your personal data that is not based in the EU/EEA will ensure an adequate level of protection, e.g. by entering into an agreement with e-Boks on the use of the European Commission’s standard contractual clauses or by becoming certified by a recognised transfer mechanism that provides adequate protection. When supplementary protective measures are deemed necessary for a specific transfer, the measures will be established prior to the transfer. You can obtain more information on the specific legal grounds for transfer from the above contact details.

5. Storage of your personal data

We only store your personal data for as long as necessary to fulfil the purposes described above and/or as required in accordance with applicable law.

Private End-Users:

  • The account (name, address, civil registration number, email, telephone number, user number) is deleted when the user deletes their own account, or when the user has been inactive for 5 years (that is no login for 5 years and no mail sent or received for 5 years). When an account is deleted, all digital mail and details of digital mail will be deleted.
  • The account is also deleted if the end-user has been registered as deceased for 5 years, and there is no longer access to the end-user’s account for their executor or other persons. When an account is deleted, all digital mail and details of digital mail will be deleted.
  • We store your personal data to be able to respond to your support requests for 5 years after a request has been closed.
  • We store data on activities in your digital mailbox for 5 years after you have performed a given activity.
  • We store information about your communications with e-Boks’ support function for 5 years after closure of your support case.
  • We store details of the operating system of the user’s computer and mobile device for 6 months after it has been registered.
  • If you use Reading Tools in e-Boks’ iOS mobile app, the data generated in the tools will only be used whilst you actively use them (in the duration of an active session).

Private End-Users of e-Wallet:

  • We only retain your personal data for as long as it’s necessary to fulfil the purposes described above in section 2.1.1 and/or as required under applicable law.
  • When an identity credential is issued and stored in your mobile application, we retain your personal data for a maximum of 15 minutes. e-Boks does not retain your personal data beyond this time limit; however, the 15-minute retention period may be repeated if multiple identity credentials are issued to you. Thereafter, your personal data is stored locally on your own device.
  • If you use an identity credential to log in to a service provided by the issuer, we retain your personal data for the duration of the login process, and in any event for no longer than 15 minutes (the duration of an active login session).
  • When you register as a user of our digital age verification, we create a userID linked to your civil registration number (CPR number) in order to identify you. We retain your civil registration number and userID until you delete your digital age verification.
  • When you verify your identity digitally to third parties, we retain the data used to validate your identity for the period during which the validation takes place. In addition, a pseudonymised transaction value is stored for 3 years following the validation of your identity.

Contact persons/employees of enterprises with a digital mailbox:

  • The enterprise's account, including your personal data, will be deleted when the enterprise deletes their own account, or when the enterprise has been inactive for 5 years (. that is no login for 5 years and no mail sent or received for 5 years).
  • If your personal data is part of e-Boks' accounting records, e.g. in connection with invoicing, your personal data will be stored for 5 years from the end of the financial year to which the accounting records relate. The purpose of this is to observe our legal obligations under the Danish Bookkeeping Act in accordance with Article 6(1)(c) of the General Data Protection Regulation.
  • We store your personal data to be able to respond to your support requests for 5 years after a request has been closed.

Contact persons/employees at Sending Customers:

  • Personal data on contact persons are deleted when it is no longer necessary to store them for the purpose of documenting correspondence with the Sender Customer. Personal data linked to the use of the Sender Customer's account will be deleted when the Sender Customer deletes such data or 5 years after termination of the contract.
  • If your personal data is part of e-Boks' accounting records, e.g. in connection with invoicing, your personal data will be stored for 5 years from the end of the financial year to which the accounting records relate. The purpose of this is to observe our legal obligations under the Danish Bookkeeping Act in accordance with Article 6(1)(c) of the General Data Protection Regulation.
  • We store your personal data to be able to respond to your support requests for 10 years after a request has been closed.

Recipients of newsletters and webinar participants:

  • Personal data linked to your newsletter profile will be stored until you withdraw your consent and no longer wish to receive newsletters from us.
  • Personal data linked to your participation in a webinar will be stored until the webinar has been held and any follow-up questions have been answered. Your consent to receive promotional material given in connection with your registration for the webinar will be stored until you withdraw your consent.

Participants in events:

  • Personal data linked to your participants in events will be stored until the event has been held and for a subsequent period for follow-up purposes. Your consent to receive promotional material given in connection with your registration for the event will be stored until you withdraw your consent.

Participants in user surveys:

  • Personal data you have given in a user survey will be deleted or anonymized as soon as the user survey has been finalized and evaluated.

Contact persons at collaborative partners:

  • We process personal data about you as long as e-Boks communicates with you, because you are a contact person at a partner or a potential future partner for up to 3 years after the end of the contractual relationship, or until your personal data are no longer necessary for a legal claim to be imposed, applied or defended.
  • If your personal data is part of e-Boks' accounting records, e.g. in connection with invoicing, your personal data will be stored for 5 years from the end of the financial year to which the accounting records relate. The purpose of this is to observe our legal obligations under the Danish Bookkeeping Act in accordance with Article 6(1)(c) of the General Data Protection Regulation. We store your personal data to be able to respond to your support requests for 10 years after a request has been closed.

6. Your rights

With the limitations and exceptions set out in the General Data Protection Regulation and the Danish Data Protection Act, you have a number of rights in relation to our processing of personal data about you.

Right to see and receive data (right of access)
You have a right to request access to the personal data, including receiving a copy of the personal data, that we process about you. In this connection, you also have the right to receive a number of further details as well as confirmation that we process personal data about you.

Right to rectification (correction)
You have the right to request the correction of incorrect personal data about you and the right to request that incomplete personal data is completed.

Right to erasure
You have a right to request to have personal data about you erased in certain circumstances, for example if the processing is based on your explicit consent and you withdraw your consent.

Right to restrict processing
You have the right to request restriction of the processing of your personal data, for example if you are contesting the accuracy of your personal data.

Right to object
You have the right to object to our processing of your personal data, including, in particular, in relation to direct marketing.

Right to transmit data (data portability)
When our processing is carried out by automated means and is based on your consent or on the performance of a contract with you, you have the right to request to receive the personal data that you yourself have provided to us in a structured, commonly used and machine-readable format, and you have the right to request to have those personal data transmitted to another data controller enterprise if this is technically feasible.

Right not to be subject to an automated decision
You have the right to request not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to withdraw consent
If you have granted your consent to the processing of your personal data, you have the right to withdraw your consent at any given time. However, if you withdraw your consent, this will not affect the processing of your personal data that was carried out before the withdrawal of your consent.

Right to complain
You have the right to lodge a complaint with the Danish Data Protection Agency if you disagree with the way we process your personal data. The Danish Data Protection Agency can be contacted at Contact (datatilsynet.dk/english). However, we hope that you will first contact us so that we have the opportunity to answer any questions you may have regarding the processing of your personal data.

7. Changes to Privacy Policy

This privacy policy replaces all previous versions. It will be necessary to regularly update and revise this policy and we reserve the right to update and change it. In the event of significant changes, we will advise you at www.e-Boks.dk.

Version 3.3 2026/02