Go to content

Personal data in the VAT One Stop Shop

How do we treat your personal data?

If your business is registered as a sole proprietorship or a general partnership, your personal data should be processed according to the EU’s General Data Protection Regulation. Additionally, special acts govern the Danish Customs and Tax Administration’s processing of personal data in certain fields.

You can see the rules on what we have to inform you about in article 13 of the EU’s General Data Protection Regulation.

Why do we register your personal data?

We process your personal data as the business you own or co-own has registered for VAT One Stop Shop.

How long do we store your personal data?

We delete your data when we no longer need it for our work, and we will only store your data as long as we need it or have an obligation to do so. After that, it will be deleted. The rules on how public authorities should store documents are set out in the Danish Archives Act (Arkivloven).

Do we pass on your data to other recipients?

We forward your personal data to the tax authorities in the EU countries that you trade with according to the rules of the Danish VAT Act (Momsloven) and the Council’s Data Protection Act on VAT obligations in relation to the supply of services and distance selling of goods. We also pass on your data to Statistics Denmark (Danmarks Statistik).

Your rights when we process your personal data

You have rights when we process your personal data. These include the right to:

  • be notified when we collect and process personal data about you unless you are already familiar with the data, or if we need to consider other things and prioritise accordingly
  • be notified of the purpose and lawful basis of processing your personal data unless you are already familiar with the data, or if we need to consider other things and prioritise accordingly
  • have inaccurate data about you rectified
  • obtain access to the personal data we process about you.

In some cases, you also have the right to: 

  • delete information or restrict our processing of your personal data
  • object (i.e. raise objections and submit comments) to us about our processing of your data

You can read more about your right at www.skat.dk/english in our privacy policy.

If you wish to exercise your rights, please contact us. See our contact information in the section ‘We are the data controller - how do you contact us?’

What rules apply when we process your personal data?

Generally, the rules of the EU General Data Protection Regulation apply. In some cases, we may also process your data according to Danish acts or regulations issued by the EU, i.e. special acts.

When we receive your data in connection with our responsibilities as an authority, we may process this data about you in accordance with Article 6(1)(e) of the EU General Data Protection Regulation, the Danish VAT Act (Momsloven) and the Council’s regulations on VAT obligations in relation to supply of services and distance selling of goods.

For control purposes, we are entitled to check your data against other information from our IT systems, see section 86 of the Danish Tax Control Act (Skattekontrolloven).

We are the data controller - how do you contact us? 

We are the data controller for the personal data we have received about you. If you have any questions about the processing of your data or if you wish to exercise your rights, please contact us in one of the following ways:

  • email via www.skat.dk/tastselv.
  • phone (+ 45) 72 22 18 18
  • letter to: Skattestyrelsen, Hannemanns Allé 25, 2300 Copenhagen S, Denmark.

How to contact the Data Protection Officer (DPO)

Please feel free to contact our DPO, if you have any questions about data protection.

You can contact the DPO in the following ways

  • By email: DPO@sktst.dk We recommend that you don't send CPR numbers or other confidential and sensitive personal data by unencrypted email to the DPO.
  • By post:
    Attn: Databeskyttelsesrådgiveren
    Skattestyrelsen
    Hannemanns Allé 25
    2300 København S

You can complain to the Danish Data Protection Agency

If you find that our processing of your personal data violates the Regulation, you have the right to complain to the Danish Data Protection Agency.

The Danish Data Protection Agency is the key independent authority that checks that the personal data rules are met.

You find the contact information of the Data Protection Agency here.