Privacy policy

Data controller

Rooken, [PLACEHOLDER: CVR number], [PLACEHOLDER: company address], is the data controller for the processing described in this policy. Questions about data protection can be sent to [PLACEHOLDER: support email].

This website collects nothing

rooken.dk uses no cookies, no analytics and no third-party scripts. No tracking technology is placed in your browser, and no information about your visit is collected. That is also why there is no cookie banner: there is nothing to consent to.

This is a deliberate choice. A company selling trust that your data stays home should not itself send your visit data to third parties.

The web server keeps an ordinary technical log (IP address, time, requested page) for a short period for operational reasons and abuse prevention. The log is not used for profiling and is not shared.

When you write to us or sign up as a pilot customer

If you send a message via the contact form, the pilot sign-up or by email, we process the information you provide yourself: typically name, email address, and for businesses the company name and number of machines.

The information is used solely to answer your enquiry and administer the pilot programme. The legal basis is Article 6(1)(b) of the GDPR (performance of a contract or steps prior to one) and Article 6(1)(f) (legitimate interest in answering enquiries).

What the Argos agent sends, and what it does not send

This is the most important section of this policy. Argos runs on your computer and sends status about the computer’s security settings to Rooken’s servers, so the status can be shown in your overview.

Argos sends: the computer’s name, the Windows version, and the result of the eight checks, e.g. "firewall: on", "latest backup: 3 September", "BitLocker: not enabled". Timestamps of the checks and the agent’s own version are included.

Argos does not send: your files, documents, photos or other content. No browser history. No keystrokes. No screenshots. No information about which programs you use or what you do on the computer. This boundary is technical as well as contractual: the agent is built so it cannot read the contents of your files.

The legal basis for the processing is Article 6(1)(b) (delivery of the agreed service).

Retention

Enquiries via the contact form and email are kept while the dialogue is active and deleted no later than [PLACEHOLDER: e.g. 12 months] after the last contact.

Status data from Argos is kept while the subscription is active. On cancellation, account data and status history are deleted no later than [PLACEHOLDER: e.g. 90 days] after the subscription ends, unless legislation (e.g. the Danish Bookkeeping Act) requires longer retention of invoice details.

Data processors

Rooken uses a small number of data processors for operations, e.g. server hosting. All processors are bound by data processing agreements, and data is stored within the EU/EEA.

[PLACEHOLDER: list of data processors with name and purpose, e.g. hosting provider]

Your rights

Under the GDPR you have the right to:

• Access the data we process about you
• Rectification of inaccurate data
• Erasure ("the right to be forgotten") where the conditions are met
• Restriction of processing
• Data portability of data you have provided yourself
• Object to processing based on legitimate interest

Complaints

You can complain about our processing of your personal data to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk. We would, however, appreciate hearing from you first, so we can try to resolve it directly.