Privacy policy

Data controller

Rooken, CVR no. 46854349, Ulsøparken 1, 10. 3, 2660 Brøndby Strand, Denmark, is the data controller for the processing described in this policy. Questions about data protection can be sent to support@rooken.dk.

This website collects nothing

rooken.dk uses no cookies, no analytics and no third-party scripts. No tracking technology is placed in your browser, and no information about your visit is collected. That is also why there is no cookie banner: there is nothing to consent to.

This is a deliberate choice. A company selling trust that your data stays home should not itself send your visit data to third parties.

The web server keeps an ordinary technical log (IP address, time, requested page) for a short period for operational reasons and abuse prevention. The log is not used for profiling and is not shared.

When you write to us or sign up as a pilot customer

If you send a message via the contact form, the pilot sign-up or by email, we process the information you provide yourself: typically name, email address, and for businesses the company name and number of machines.

The information is used solely to answer your enquiry and administer the pilot programme. The legal basis is Article 6(1)(b) of the GDPR (performance of a contract or steps prior to one) and Article 6(1)(f) (legitimate interest in answering enquiries).

What the Argos agent sends, and what it does not send

This is the most important section of this policy. Argos runs on your computer and sends status about the computer’s security settings to Rooken’s servers, so the status can be shown in your overview.

Argos sends: the computer’s name, the Windows version, and the result of the twelve checks, e.g. "firewall: on", "latest backup: 3 September", "BitLocker: not enabled". Timestamps of the checks and the agent’s own version are included. If a check finds a problem with a local user account, e.g. a password not changed in over 90 days or a new administrator account, the account’s name is included in the result.

Argos does not send: your files, documents, photos or other content. No browser history. No keystrokes. No screenshots. No information about which programs you use or what you do on the computer. The agent does not read the contents of your files and has no function for sending them.

The legal basis for the processing is Article 6(1)(b) (delivery of the agreed service).

Retention

Enquiries via the contact form and email are kept while the dialogue is active and deleted no later than 12 months after the last contact.

Status data from Argos is kept while the subscription is active. On cancellation, account data and status history are deleted no later than 90 days after the subscription ends, unless legislation (e.g. the Danish Bookkeeping Act) requires longer retention of invoice details.

Data processors

Rooken uses three data processors for operations. All are bound by data processing agreements. Data is stored in the EU/EEA or in Switzerland, which the European Commission recognises as providing an adequate level of protection.

• Hetzner Online GmbH, Germany: the servers and database that run Argos and this site.
• Proton AG, Switzerland: email, including messages to support@rooken.dk.
• Brevo SAS, Paris: sending emails from Argos and from the forms on this site. Servers in France and Belgium; a few sub-processors in the USA and India, covered by standard contractual clauses and the EU-US Data Privacy Framework.

Your rights

Under the GDPR you have the right to:

• Access the data we process about you
• Rectification of inaccurate data
• Erasure ("the right to be forgotten") where the conditions are met
• Restriction of processing
• Data portability of data you have provided yourself
• Object to processing based on legitimate interest

Complaints

You can complain about our processing of your personal data to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk. We would, however, appreciate hearing from you first, so we can try to resolve it directly.