According to the General Data Protection Regulation (GDPR), data processing made on behalf of others must be regulated by a contract or other legally binding document. As Statistics Denmark performs services that involve processing of our customers’ data, e.g. personal data, we must draw up a so-called data processor agreement by which the customer is the data controller and Statistics Denmark is the data processor.
Statistics Denmark uses the Data Protection Agency’s standard template and we use the same agreement for all services where we act as a data processor for our customers.
In addition to the data processor agreement, we also draw up a contract for the individual services.
Statement of assurance