---
title: "Security and personal data | Robinsontjek"
description: "Your lists stay in the EU, are deleted automatically and are used only to check them against the Danish Robinson list. We act as your data processor."
url: https://robinsonlistenapi.dk/en/security
---

1. [Home](https://robinsonlistenapi.dk/en)
2. Security and personal data

# Your lists are yours. We only borrow them for the check.

We process your lists on your behalf and only to check them against the Robinson list. Data stays in the EU, files are deleted automatically, and you can delete a list the moment you've downloaded the result.

The data processing agreement is accepted in the app once you have signed up. Write to us if you want to read it first.

## In short

**EU** all data is stored on servers in the EU

**30 days** default automatic deletion, choose 0 to 90

**No CPR numbers** we don't ask for Danish ID numbers or store them

**Processor** you decide, we follow your instructions

## What happens to a list you send

From the moment a list arrives until it's deleted again. The same applies to upload, email, API and integrations.

### The list arrives

By upload, email, API or your integration, over an encrypted connection all the way.

### Every row is checked

Against the Robinson list, on our own servers in the EU. We don't pass your data to anyone else to do the check.

### You download the result

It's kept for the number of days you've chosen. 30 days by default, 90 at most.

### We delete

When that time is up, we delete the file and the names and addresses. Only the counts and the check receipt remain, and they hold no personal data.

We only receive a list once you have an account and have accepted the data processing agreement.

## How we look after data

The routine work, so you don't have to think about it.

### Data processing agreement

We act as your processor under the GDPR. The agreement sets out what we may do, how we protect data and when we delete it.

### Subprocessors

We use few suppliers. You get the list with names and locations when you sign up, or when you write to us.

### Encryption

Data is encrypted in transit, and files are kept in encrypted storage.

### Access

Only staff who need to help you have access. They sign in with two-factor authentication, and key actions are logged.

### Your own copy of the list

Prefer to use a Robinson list you bought from the CPR register yourselves? We can check against that instead and delete it when you ask.

### Breach notice

If a breach affects your data, you're told within 24 hours of us discovering it.

## Data questions

Didn't find the answer? Write to us

### Are you a controller or a processor?

A processor. You decide which lists are checked and what the result is used for. We process data only on your instructions.

### We're a call centre working for a Danish client. What's our role?

Usually your client is the controller, you are their processor, and we are your subprocessor. Our DPA is written to work in that chain.

### Do you use our lists for anything else?

No. We don't sell data, use it for marketing, or mix your lists with anyone else's.

### Where is the data?

On servers in the EU. Our suppliers and their locations are available on request.

## Questions from your DPO?

Write to us and we'll answer directly. We're happy to send you the DPA before you decide.

[Write to us](https://robinsonlistenapi.dk/en/contact) [See how it works](https://robinsonlistenapi.dk/en/list-check#demo)