---
title: "Security and personal data | Robinsontjek"
description: "Your lists are checked and stored in the EU, are deleted automatically and are used only to check them against the Danish Robinson list. We act as your data processor."
url: https://robinsontjek.dk/en/security
---

1. [Home](https://robinsontjek.dk/en)
2. Security and personal data

# Your lists are yours. We use them only for the check.

We process your lists on your behalf and only to check them against the Robinson list. Your lists are checked and stored in the EU, files are deleted automatically, and you can delete a list the moment you've downloaded the result.

We create your account after a short chat. The data processing agreement is accepted in the app before you send anything. Write to us if you want to read it first.

## In short

**EU** your lists are checked and stored on servers in the EU

**30 days** default automatic deletion, choose 0 to 90

**No CPR numbers** we don't ask for Danish ID numbers or store them

**Processor** you decide, we follow your instructions

## What happens to a list you send

From the moment a list arrives until it's deleted again. The same applies to upload, email, API and integrations.

### The list arrives

By upload, email, API or your integration, over an encrypted connection all the way.

### Every row is checked

Against the Robinson list, on our own servers in the EU. We don't pass your data to anyone else to do the check.

### You download the result

It's kept for the number of days you've chosen.

### We delete

We delete lists and files after the number of days you choose, at most 90 and 30 by default. Lists you ask us to watch are kept while monitoring runs and deleted when you stop it. When the agreement ends, we delete all your data within 30 days. The check receipt holds no personal data.

We only receive a list once you have an account and have accepted the data processing agreement.

## How we look after data

The routine work, so you don't have to think about it.

### Data processing agreement

We act as your processor under the GDPR. The agreement sets out what we may do, how we protect data and when we delete it.

### Subprocessors

We use few suppliers. You get the list with names and locations when you sign up, or when you write to us.

### Encryption

Data is encrypted in transit, and files are kept in encrypted storage.

### Access

Only staff who need to help you have access. Staff sign in with a one-time code sent by email, and key actions are logged.

### Breach notice

If a breach affects your data, you're told within 24 hours of us discovering it.

## Data questions

Didn't find the answer? Write to us

### Are you a controller or a processor?

A processor. You decide which lists are checked and what the result is used for. We process data only on your instructions.

### We're a call centre working for a Danish client. What's our role?

Usually your client is the controller, you are their processor, and we are your subprocessor. Our DPA is written to work in that chain.

### Do you use our lists for anything else?

No. We don't sell data, use it for marketing, or mix your lists with anyone else's.

### Where is the data?

Your lists are checked and stored in the EU. Our suppliers and their locations are available on request.

## Questions from your DPO?

Write to us and we'll answer directly. We're happy to send you the DPA before you decide.

[Write to us](https://robinsontjek.dk/en/contact) [See how it works](https://robinsontjek.dk/en/list-check#demo)