Privacy policy – Road tolls

This privacy policy describes how Sund & Bælt Holding A/S processes personal data in connection with the Road Tolls scheme.

“Us” and “We” in this policy refer to Sund & Bælt Holding A/S.

1. Controller

The legal entity responsible for processing your personal data is:

Sund & Bælt Holding A/S

CVR number: 15 69 46 88

Address:
Vester Søgade 10
1601 Copenhagen V

E-mail: persondata@vejafgifter.dk

Tel.: +45 70 80 43 10

(Hereafter referred to as “Sund & Bælt”)

2. Description of processing

In accordance with the Danish Act on Road Tolls (Road Tolls Act), Sund & Bælt will, from 1 January 2025, collect road tolls on behalf of the government from lorries driving on tolled road sections (the Road Tolls Scheme). This includes various activities, which are described in more detail below.

2.1. Calculation of road toll

Purpose  

When driving on tolled road sections with equipment - for example, a box or mobile app - from an EETS provider, we will process personal data about you for the purpose of calculating the charge.  

 

Categories of personal data

Sund & Bælt can process the following personal data about you when calculating the road toll charge:

  • Vehicle data in the form of number plate, country code, weight and CO2 emissions rating
  • ID of vehicle equipment
  • Customer number with EETS provider
  • Information about the route driven in the form of GPS location data, speed, date and time

 

Sources

Sund & Bælt collects personal data from the EETS provider via the equipment used.  

In certain circumstances, we may be obliged to disclose your contact details to the Danish authorities. In such cases, we will collect your contact details from the relevant EETS provider and then disclose them to the authorities.  

 

Legal basis  

Our legal basis is General Data Protection Regulation (GDPR) article 6, section 1, paragraph e (necessary for the performance of a task carried out in the exercise of official authority vested in the controller).

It follows from § 7, section 2, of the Road Tolls Act that the road toll is calculated by Sund & Bælt based on the driving data collected through the vehicle equipment.  

It also follows from § 17 a, section 2, of the Danish Act on Sund & Bælt that Sund & Bælt can collect and process personal data necessary for the performance of our tasks within the context of the Road Tolls scheme. This means that Sund & Bælt can process personal data for the purpose of calculating road tolls.  

 

Retention

If your data shows that a road toll is payable, this information will be stored for 14 months from the time of the calculation.  

If, however, your data shows that no road toll is payable, your information will be anonymised from the time when it was established that no charge is payable.

 

Recipients of personal data

Sund & Bælt will disclose  your personal data to the EETS provider when this is necessary for the calculation, collection, and payment of the road toll. Within this context, the EETS provider is an independent data controller for their processing of personal data.   

Sund & Bælt can also disclose your personal data to Statistics Denmark if this is necessary for statistical calculations, etc.   

We can also disclose your data to the Danish tax and customs authorities in accordance with § 6, section 3, 4th sentence of the Road Tolls Act in order for the tax and customs authorities to control that there is no discrepancy between the registered toll charge and the amount paid.  

In certain circumstances, we are also obliged to disclose your data to the Danish authorities, e.g. in connection with audits.

Moreover, Sund & Bælt uses IT suppliers to whom your personal data can be entrusted, typically in connection with the operation, development and hosting of our IT systems, including file management and e-mail services.  

Our suppliers are based in Ireland and Belgium. 

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than specified in the data processing agreements.

2.2. Issuance of KmToll ticket

Purpose

KmToll tickets can be purchased from our website (www.vejafgifter.dk). When you purchase a KmToll ticket, we process your personal data for the purpose of calculating and collecting road tolls based on the specified driving on the tolled road sections.

Read more about KmToll tickets.

 

Categories of personal data

Sund & Bælt can process the following personal data about you when you purchase a KmToll ticket:

  • Contact details in the form of name, address, telephone number and email address
  • Vehicle data in the form of country of registration, registration number, VIN number, CO2 emissions rating and permissible total weight (“technically permissible total weight”)
  • Payment card details for making online payments
  • Planned route for identification of tolled road segments
  • Start time of the validity of the KmToll ticket
  • Vehicle registration documents, including registration certificate, CIF or CoC document if necessary.

 

Sources

As a general rule, personal data is collected directly from you.

We can also obtain vehicle data from vehicle registers if this data is available here. If we do not have electronic access to the vehicle’s CO2 emissions rating and weight class, you will be required to upload the vehicle registration papers where this information is clearly shown.  

Legal basis  

Our legal basis is GDPR article 6, section 1, paragraph e (necessary for the performance of a task carried out in the exercise of official authority vested in the controller).

Within this context, it follows from § 6, section 1, and § 8, section 1 of the Road Tolls Act that Sund & Bælt collects road tolls on behalf of the government through the sale of road toll tickets.

If we are obliged to store and/or report information about you to the public authorities, we process your personal data on the basis of GDPR article 6, section 1, paragraph c (legal obligation). This would be the case, for example, if your data is included in auditing records or needs be reported to SKAT (the Danish tax authorities). 

 

Retention

Sund & Bælt will store your data for 180 days from the time you purchased your KmToll ticket unless your data is included in auditing records. In this case, the data is storeded for five years plus the current year in accordance with the rules of the Danish Bookkeeping Act.

 

Recipients of personal data

Sund & Bælt can disclose information about sold road toll tickets to the Danish tax and customs authorities in order for them to control the amount collected and paid.

Sund & Bælt uses IT suppliers to whom your personal data can be entrusted, typically in connection with the operation, development and hosting of our IT systems, including file management, e-mail services and the supply of road toll technology.  

Our suppliers are based in Ireland, Belgium and Sweden. 

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than those specified in the data processing agreements.

2.3. Control with the Toll Scheme

Purpose

Sund & Bælt sets up roadside equipment in the form of cameras and radio communication antennaes on Denmark’s road network to control that you have paid the relevant road toll.

 

Categories of personal data

We can process the following personal data about you when you pass our roadside equipment:

  • Number plate
  • Country code
  • Type of vehicles
  • Time and place of vehicle passing the roadside equipment
  • An image of the vehicle

Individuals who may appear in the image will be blurred in a subsequent process. 

If the vehicle passing our roadside equipment has a built-in DSRC antenna, this will be identified, and the number recorded.

 

Sources

We collect your details when you pass the roadside equipment, which then registers your vehicle. 

We may also collect your details from the Danish Register of Motor Vehicles (DMR).

 

Legal basis

Our legal basis is GDPR Article 6, section 1, paragraph e (necessary for the performance of a task carried out in the exercise of official authority vested in the controller).

If follows from § 6, section 4 of the Road Tolls Act that Sund & Bælt conducts digital control to ensure that the rules on tolled roads are complied with.

It also follows from the Danish Act on Sund & Belt § 17 a, section 1 that Sund & Bælt can deploy fixed and mobile roadside equipment for monitoring, including TV monitoring and automatic registration of number plates, on the tolled road network to support toll collection.

Moreover, it is stated in § 17 a, section 2, of the Act that we can collect and process personal data for the performance of our tasks within the context of the Road Tolls scheme. This means that Sund & Bælt can monitor compliance with the law. 

 

Retention

If you have passed our video equipment and no violation has been detected, your data will be anonymised after 24 hours.  

If you pass our video equipment and a violation has been detected, we will disclose your personal data to the Danish Road Safety and Transport Agency. We will store your personal data for up to 180 days from the time the case is closed. A case is closed when the fine is paid, rejected by the Danish Road Traffic Authority or transferred to the Danish Police or the Danish Debt Collection Agency.  

In some situations, we may store your data for five years from the time the passage was registered. This can happen, for example, if we do not have your correct address or if any information is lacking. The retention period is determined in accordance with the statute of limitations in the Danish Criminal Code. Please read more about our retention period in connection with violations of the Road Tolls Act under section 2.4.

 

Recipients of personal data

The roadside equipment is set up by our supplier, who collects personal data via the equipment and provides this to Sund & Bælt via ANPR-based free-flow systems.

Sund & Bælt also uses IT suppliers to whom your personal data can be entrusted in connection with the operation, development and hosting of our IT systems, including file management and e-mail services and the provision of road toll and collection solutions that enable public and private customers to operate and manage the payment of road tolls efficiently.   

Our suppliers are based in the UK, Ireland and Sweden. 

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than specified in the data processing agreements.

2.4. Issuance of fines following the detection of a violation in connection with control

Purpose

If it is established through our control points that you have not paid the correct toll, Sund & Bælt can process your data in order to assist the Danish Road Traffic Authority in issuing a fine.

If the Danish Road Traffic Authority agrees that a violation has taken place, they will issue an administrative penalty notice. If you acknowledge and pay the fine via the administrative penalty notice issued by the Danish Road Traffic Authority, we will process your personal data for the purpose of registering the payment with us.

If you do not acknowledge or pay the fine, the Danish Road Traffic Authority can decide to report you to the Police or pass the matter to the Danish Debt Collection Agency.

 

Categories of personal data

We may process the following personal data about you if we have detected a violation via our control of the Road Tolls scheme:

  • Contact details in the form of name and address
  • Number plate
  • Country code
  • Type of vehicle
  • Time and place of the vehicle passing the roadside equipment
  • An image of the vehicle
  • CVR number if the vehicle is linked to a company
  • CPR number if the vehicle is linked to a private person
  • Criminal information in the form of your violation of the Road Tolls Act

Individuals who may appear in the image will be blurred in a subsequent process. 

If the vehicle passing our roadside equipment has a built-in DSRC antenna, this will be identified, and the number will be registered.

 

Sources

We collect your details when you pass the roadside equipment, which then registers your vehicle.  

We may also collect your details from the Danish Register of Motor Vehicles (DMR).

 

Legal basis

Our legal basis is GDPR article 6, section 1, paragraph e (necessary for the performance of a task carried out in the exercise of official authority vested in the controller).

If follows from § 6, section 4, of the Road Tolls Act that Sund & Bælt conducts digital control to ensure that the rules on tolled roads are complied with. It also follows from the explanatory notes to the Act that Sund & Bælt will send information about violations to the Danish Road Traffic Authority for the Authority’s possible issuance of an administrative penalty notice.

It also follows from the Act on Sund & Belt § 17 a, section 1 that Sund & Bælt can deploy fixed and mobile roadside equipment for monitoring, including TV monitoring and automatic registration of number plates, on the tolled road network to support toll collection.

Moreover, it is stated in § 17 a, section 2, of the Act that we can collect and process personal data for the performance of our tasks within the context of the Road Tolls scheme. This means that Sund & Bælt can monitor compliance with the law.  

We can also process your CPR number under § 11, section 2, number 1 of the Danish Data Protection Act, c.f. Act on Sund & Bælt § 17 a, section 2.

We can also process data on criminal offences under § 8, section 3 of the Danish Data Protection Act when it is necessary for Sund & Bælt to fufil its obligations under the Road Tolls Act.

 

Retention

If you pass our video equipment and a violation is detected, we will disclose your personal data to the Danish Road Traffic Authority.  We will store your personal data for up to 180 days from the time the case is closed. A case is closed when a fine is paid, rejected by the Danish Road Traffic Authority or passed to the Police or the Danish Debt Collection Agency. 

If the Danish Road Traffic Authority decides not to issue a fine based on our documentation, the data will be anonymised within 24 hours from the time of the Danish Road Traffic Authority's decision.

In some situations, however, we may store your information for five years from the time that your passage was registered. This can happen, for example, if we do not have your correct address or if any information is lacking. The storage period is determined in accordance with the statute of limitations in the Danish Criminal Code.

 

Recipients of personal data

If a violation is determined, we may disclose your personal data to the Danish Road Traffic Authority with the purpose of issuing fines.  

We can also disclose your personal data to the Police if we become aware of a criminal offence, e.g. in connection with random checks.  

The roadside equipment is set up by our supplier, who collects personal data via the equipment and provides this to Sund & Bælt via ANPR-based free-flow systems.

Sund & Bælt also uses IT suppliers to whom your personal data can be entrusted in connection with the operation, development and hosting of our IT systems, including file management, e-mail services and the supply of road toll and collection solutions that enable public and private customers to operate and manage the payment of road tolls efficiently.   

Our suppliers are based in the UK, Ireland and Sweden. 

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than those specified in the data processing agreements.

2.5. Testing of equipment relating to the Road Tolls scheme

Purpose

Sund & Bælt has set up test roadside equipment on the Denmark’s road network for continuous training and the development of our equipment. We will process your personal data when you pass this equipment.  

 

Categories of personal data

We can process the following personal data about you if you pass the roadside equipment:

  • Number plate
  • Country code
  • Type of vehicle
  • Time and place that the vehicle passes the roadside equipment
  • An image of the vehicle

Individuals who may appear in the image will be blurred in a subsequent process.  

If the vehicle passing our roadside equipment has a built-in DSRC antenna, this will be identified, and the number will be registered.

 

Sources

We collect your data when you pass the roadside equipment, which then registers the vehicle.

 

Legal basis

Our legal basis is GDPR article 6, section 1, paragraph e (necessary for the performance of a task carried out in the public interest) since it is in the public’s interest that we keep the equipment up to date and ensure that the systems work efficiently.

It is also pursuant to § 17 a, section 2 in the Act on Sund & Bælt that Sund & Bælt may collect and process personal data when necessary for the performance of Sund & Bælt’s tasks under the Road Tolls scheme. This means that Sund & Bælt can test equipment, etc. which will later be used in the Road Tolls scheme.  

 

Retention

Data recorded by the roadside equipment will be deleted no later than one year after the test has been completed.

 

Recipients of personal data

Our test roadside equipment is installed by one of our suppliers who assists us with the training of the equipment. When the supplier has collected the data via the equipment, this is provided to Sund & Bælt in order to test the integration into Sund & Bælt’s IT systems.

Sund & Bælt also uses IT suppliers to whom your personal data can be entrusted in connection with the operation, development and hosting of our IT systems, including file management and e-mail services as well as the provision of road toll and collection solutions that enable public and private customers to operate and manage the payment of road tolls efficiently. 

Our suppliers are based in the UK, Ireland and Sweden. 

Our suppliers, with whom we have entered into data processing agreements, are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than those specified in the data processing agreements.

2.6. Preparing of objections

Purpose

If you have been fined for violating the Road Tolls Act, you can file an objection at www.vejafgifter.dk. If you file an objection, Sund & Bælt will prepare your objection and in that context, process your personal data. We will then disclose your data to the Danish Road Traffic Authority who will finalise your objection.

 

Categories of personal data

We may process the following personal data about you within the context of preparing your objection:

  • Contact details in the form of name, telephone number and e-mail address
  • Registration number
  • Type of objection
  • Other content in your objection, including uploaded documentation

 

Sources

We collect data directly from you.  

 

Legal basis

Our legal basis is GDPR article 6, section 1, paragraph e (necessary for performance of a task carried out in the public interest).

It is also pursuant to § 17 a, section 2 in the Act on Sund & Bælt that Sund & Bælt may collect and process personal data when necessary for the performance of Sund & Bælt’s tasks under the Road Tolls scheme. This means that Sund & Bælt can process and forward objections received in relation to the Road Tolls scheme.  

 

Retention

The information will be deleted five years after we have handed the matter over to the Danish Road Traffic Authority.

 

Recipients of personal data

Sund & Bælt can disclose your personal data to the Danish Road Traffic Authority for the purpose of handling your objection.

Sund & Bælt uses IT suppliers to whom your personal data can be entrusted, typically in connection with the operation, development and hosting of our IT systems, including file management, e-mail services and the supply of road toll technology.  

Our suppliers are based in Ireland, Belgium and Sweden. 

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than those specified in the data processing agreements.

2.7. Reviewing objections

Purpose

If you disagree with a decision concerning the collection or assessment of a fee, you can appeal this to the complaints authority. The objection must be submitted to Sund & Bælt, which will undertake the initial review. In this connection, we will process personal data about you. If we uphold the decision, we will forward your objection to the complaints authority.

 

Categories of personal data

When you submit an objection, we may process the following personal data about you:

  • Contact details in the form of your name, telephone number and e-mail address
  • Registration number
  • Type of objection
  • Other content contained in your objection, including uploaded documentation

 

Sources

We collect data directly from you.  

 

Legal basis

Our legal basis is GDPR article 6, section 1, paragraph e (necessary for performance of a task carried out in the public interest).

This follows from § 12, sections 1 and 2 of the Road Tolls Act, that objections must be submitted in writing to Sund & Bælt, and that Sund & Bælt must forward the objection to the complaints authority.  

 

Retention

The data is deleted 13 months after the time we received the objection.

If your objection relates to auditing records, we will store your data for five years plus the current year, in accordance with the rules in the Danish Bookkeeping Act.   

 

Recipients of personal data

If Sund & Bælt upholds the decision, we will forward your objection and the relevant information to the complaints authority for their processing.

Sund & Bælt uses an IT supplier, to whom your personal data may be transferred. This may be in connection with the operation, development and hosting of our IT systems, including file management and e-mail services.

Our supplier is based in Ireland.

Our supplier is data processor for Sund & Bælt and processes personal data on our instructions. We have entered into data processing agreements with these processors.

2.8. Inquiries to the Road Tolls scheme

Purpose

When you contact Sund & Bælt with questions about the Road Tolls scheme, we collect information about you in order to answer and manage your inquiry.   

In this connection, Sund & Bælt uses AI solutions to support efficient case handling.  

Your inquiry can also be used to test Sund & Bælt’s AI solutions to the extent that it is deemed necessary and proportionate. See more about this under section 2.10.

 

Categories of personal data

We may process the following categories of personal data about you when you contact us with questions about the Road Tolls scheme via e-mail, telephone or chat:

  • Contact details in the form of your name, e-mail and telephone number
  • Time of inquiry
  • Data from IVR (Interactive Voice Response) in the form of which options you have selected in the phone queue if you contact us by telephone
  • Other information to which your inquiry may relate, e.g. number plate or customer number

 

Sources

Sund & Bælt collects data directly from you.

 

Legal basis

When you contact us, we process your personal data on the basis of GDPR article 6, section 1, paragraph f (legitimate interest). Our legitimate interest is to respond to, and communicate with, individuals who contact us.  

If we are obliged to store and/or report information about you to the public authorities, we will process your personal data on the basis of GDPR article 6, section 1, paragraph c (legal obligation). This is the case, for example, if your data is included in audit records or needs to be reported to SKAT (Danish tax authorities).

We also use AI solutions to provide efficient and targeted processing of customer inquiries. When Sund & Bælt monitors and retrains AI solutions, the legal basis for this is GDPR article 6, section 1, paragraph f (legitimate interest) where our legitimate interest is to ensure that the solution works optimally and delivers the correct output.  

For more information on the development and testing of Sund & Bælt’s AI solutions, see section 2.10.

Please see also section 2.9 below regarding the recording of relevant telephone conversations if you contact Sund & Bælt by telephone.  

 

Retention

Sund & Bælt stores your personal data for up to 13 months after the most recent inquiry.

 

Recipients

Sund & Bælt uses IT suppliers, and we can therefore entrust your personal data to them. This may be in connection with the operation, development and hosting of our IT systems, including file management and e-mail services as well as the delivery of our CX platform.

Our suppliers are based in Ireland and Norway. 

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than specified in the data processing agreements.

We may also disclose your personal data to public authorities as we are legally obliged to report certain information. In the same way, we may disclose your personal data to the Police and any other third parties should this be necessary.

2.9. Recording of telephone conversations

Purpose  

Sund & Bælt’s purpose for processing is to be able to document the telephone conversation you have had with our employees. We also use the conversation to train our employees and for quality assurance in general.

 

Categories of personal data

If you contact Sund & Bælt by telephone with questions about the Road Tolls scheme and consent to the recording of the telephone call, we can process the following personal data about you:   

  • Contact details in the form of name, telephone number and e-mail address
  • Customer number with EETS provider
  • Other personal data that might be included in the telephone call

 

Sources

The data is collected directly from you.  

 

Legal basis

Sund & Bælt processes your personal data on the basis of GDPR article 6, section 1, paragraph a (consent).

You can withdraw your consent at any time by contacting Sund & Bælt. You can find our contact details at the top of this policy.  

 

Retention

Sund & Bælt stores telephone recordings for a maximum of three months after the conversation took place.

 

Recipients

Sund & Bælt uses IT suppliers, and we may therefore entrust your personal data to them. This may be in connection with the operation, development and hosting of our IT systems, including file management and e-mail services as well as the delivery of our CX platform.

Our suppliers are based in Ireland and Norway. 

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than specified in the data processing agreements.

2.10. Development and testing of AI solutions for efficient processing of customer inquiries

Sund & Bælt continuously focuses on the potential of AI when it comes to the efficient and targeted handling of inquiries. As a result, Sund & Bælt develops AI solutions (work processes driven by artificial intelligence) to handle inquiries from customers and other individuals. 

 

Purpose

Data is processed with the purpose of developing AI solutions that support the efficient processing of inquiries from customers and other individuals.

 

Categories of personal data

Should we deem it necessary and expedient to use personal data for the development and testing of an AI solution, we will typically use specific customer inquiries that we have received via the form on the website or e-mail. These customer enquiries will never be more than one year old.

When developing and testing based on customer inquiries, we generally process the personal data listed above under section 2.8. This section lists the categories of personal data that may be registered when we respond to enquiries - e.g. contact information and the content of the inquiry in question.

 

Sources

The data is collected directly from you as it originates from your inquiry.

 

Legal basis

We process your personal data on the basis of GDPR article 6, section 1, paragraph f (legitimate interest) where Sund & Bælt’s legitimate interest is to be able to develop a technical solution that enables a more efficient and faster response to inquiries from customers and individuals.

 

Retention

The personal data included in the development of AI solutions will be stored for 28 days from the time that the inquiry was used in the training of the AI solution. However, the data will be deleted immediately after the test period has ended – regardless of whether this time is before the 28 days.

 

Recipients of personal data

When developing and testing Sund & Bælt’s AI solutions, Sund & Bælt entrusts personal data to an IT supplier, who develops and provides IT solutions, that are used, inter alia, to optimise operations. This supplier is based in Denmark.

Sund & Bælt also uses an IT supplier to whom your personal data can be entrusted in connection with the operation, development and hosting of IT systems, including file management and e-mail services. This supplier is based in Ireland.   

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than specified in the data processing agreements.

2.11. Statistics and website optimisation

Sund & Bælt processes your personal data to improve the website www.vejafgifter.dk, remember your settings, adjust our content, show you features for social media and analyse our traffic.

You can read more about our use of cookies in our cookie policy: www.vejafgifter.dk/en/cookie-policy/

 

Categories of personal data

We may process the following categories of personal data about you when you visit our website www.vejafgifter.dk:

  • The type of device that uses Sund & Bælt’s digital platforms (e.g. computer, tablet or mobile phone)
  • IP address of the device
  • General digital behaviour collected via cookies or other tracking technology on Sund & Bælt’s websites

Sources

We collect data directly from you via your browser.

 

Legal basis

When Sund & Bælt collects your personal data through technically necessary cookies, this is on the basis of GDPR article 6, section 1, paragraph f (legitimate interest). Our legitimate interest is to be able to offer you an optimally functioning and efficient website.   

All other data processing takes place on the basis on your consent, c.f. GDPR article 6, section 1, paragraph a (consent). You can withdraw your consent to processing at any time by clicking on “Change of consent” in our cookie policy, which you can find here:  

 

Retention

Sund & Bælt stores your personal data in accordance with Sund & Bælt’s cookie policy. You can read the retention periodes for individual cookies here: www.vejafgifter.dk/en/cookie-policy/

 

Recipients

Sund & Bælt uses IT suppliers to whom your personal data can be entrusted. We do so in connection with the operation, development and hosting of our IT systems and marketing solutions, including file management, e-mail services and delivery of cookies, etc.

Our suppliers are based in Ireland and Denmark.  

Our suppliers are data processors for Sund & Bælt and process personal data on our instructions. Data processors are subject to confidentiality and may not use personal data for purposes other than specified in the data processing agreements.

 

Purpose

Sund & Bælt processes your personal data to improve our website (www.vejafgifter.dk), remember your settings, adapt our content and analyse our traffic.  

You can read more about how we use cookies in our cookie policy: www.vejafgifter.dk/cookiepolitik 

 

Categories of personal data

We process the following types of personal data when you visit our website (www.vejafgifter.dk):

  • Entity IP address
  • Entity device (e.g. computer, tablet or mobile phone)
  • General digital behaviour collected via cookies or other tracking technology on Sund & Bælt’s websites

 

Sources

We collect data from you via your browser.

 

Basis for processing

Sund & Bælt’s collection of personal data through technically necessary cookies takes place on the basis of GDPR Article 6, section 1, paragraph f (legitimate interest). Our legitimate interest is to offer you an optimally functioning and efficient website.  

All other data processing takes place on the basis of your consent, cf. GDPR Article 6, section 1, paragraph a (consent). You can withdraw your consent at any time by clicking on “Change of consent” in our cookie policy, which can be found here: www.vejafgifter.dk/en/cookie-policy/

 

Retention

Sund & Bælt retains your personal data in accordance with Sund & Bælt’s cookie policy. You can read the retention period for each cookie here: www.vejafgifter.dk/en/cookie-policy/

 

Recipients

Sund & Bælt uses IT and cookie suppliers to whom your personal data can be entrusted. We do so in connection to the operation, development and hosting of our IT systems and marketing solutions, including file management, e-mail services and provision of cookie banners, cookie consent and cookie declarations. 

Our suppliers are based in Ireland and Denmark. We have entered data processing agreements with our suppliers and they are therefore not allowed to use the data for purposes other than those specified in the data processing agreement.

3. Transfers to countries outside the EU/EEA

With regard to the Road Tolls scheme, we will transfer your personal data to our supplier in the UK who is responsible for a significant part of our roadside equipment operation. Since the European Commission has approved the UK as a secure third country, this third country transfer takes place on the basis of GDPR article 45.  

Apart from this situation, Sund & Bælt will not, as a rule, transfer personal data to countries outside the EU/EEA.

If we transfer your personal data to countries outside the EU/EEA, we ensure that transfers are either to countries that the European Commission has assessed as safe, pursuant to GDPR article 45, or that appropriate safeguards are in place. This may,  for example, mean that we use standard contractual clauses approved by the European Commission pursuant to GDPR article 46 for such transfers.

Some of our IT suppliers can transfer personal data to the United States. and other countries where our IT suppliers or their sub-suppliers operate.

If such transfers are made to a third country and/or international organisation where the European Commission has assessed that the country or organisation ensures appropriate safeguards, the transfer will take place on the basis of GDPR article 45. This also applies to companies in the United States that are certified under the EU-U.S. Data Privacy Framework as these also ensure appropriate safeguards.

If the transfers from our IT suppliers are to a third country and/or international organisation not deemed by the European Commission to have appropriate safeguards in place, these transfers will be subject to appropriate safeguards in accordance with GDPR article 46.

A copy of the agreement on these safeguards is available from persondata@vejafgifter.dk.

4. Your rights

Pursuant to GDPR, you have the following rights: 

  • You have right of access, i.e. the right to gain insight into the data we process about you and certain other information.
  • You have the right to rectification, i.e. the right to have incorrect data about you rectified.
  • In special circumstances, the right to deletion, i.e. the right to have data about you deleted before the time of our general deletion takes effect.
  • The right to receive personal data you have provided yourself in a structured, commonly used and readable format (data portability).
  • In certain circumstances, you have the right to restrict the processing of your data.

In addition, you have the right at any time to object to the processing of your personal data when our processing of your data is based on GDPR article 6, section 1, paragraph e (processing in the public interest or the exercise of official authority) or paragraph f (legitimate interest).  You can see our legal basis for individual processing above.

If you choose to object, we will reassess the necessity of processing your personal data, and we may only continue the processing if it can still be deemed necessary after your objection.

If the processing of your personal data is based on your consent, you also have the right to withdraw your consent at any time. Withdrawal will not affect the legality of the processing carried out prior to the withdrawal of consent. You can read above how you can withdraw your consent.  

There may be conditions or limitations to these rights. It is therefore not certain that, for example, you have the right to deletion in a specific case. This depends on the specific circumstances of the processing activities.  

You can make use of your rights by contacting persondata@vejafgifter.dk.

You also have the right to complain to the Danish Data Protection Agency about the processing of your personal data. See more at www.datatilsynet.dk.

5. The Group’s other privacy policies

You can find the Group’s other privacy policies here

 

Latest update: 25 October 2024

Language: English

Language: English