How I use your contact details

If I emailed you out of the blue

Short version: I found your business email address on your company's public website. I used it once to introduce a service I think is relevant to you. One word back and I stop for good. That is the whole of it.

This page explains the longer version, because European data protection law says you are entitled to it and because you should not have to take my word for anything.

Who is writing to you

Rozmach is a trading name of Arbos Folk, a sole proprietorship registered in Denmark.

• Arbos Folk, CVR 46278895, VAT DK46278895
• Byhøjvænget 17, 8380 Trige, Denmark
• info@rozmach.xyz

Arbos Folk is the data controller. It is a one-person business, so there is no data protection officer. Anything you send to the address above reaches Leif Pettersen directly, and he is the person who wrote to you.

What I hold about you

Only what was already published, and only what I need to write you a useful email:

• your business email address
• your name and your role, if they were published alongside them
• your company name and website
• a short note in my own words on why I thought your business might want this service

Nothing else. I do not buy contact lists. I do not use tools that guess or enrich email addresses. I do not track whether you opened my email or clicked anything in it. There is no pixel in the message.

Where I got it

From your company's own public website, or from a public business register such as the KVK. I visited the page, read it, and wrote the address down. No scraper bought the list from someone else, and nobody sold it to me.

If you would like to know exactly which page your address came from, ask and I will tell you.

Why I am allowed to

Two rules apply, and I rely on both.

On sending the email. Dutch law allows a business to send an unsolicited commercial message to another business, without asking first, where the address was published by that business for contact and the message is relevant to it. That is article 11.7(3) of the Telecommunicatiewet. Every message I send carries a working way to stop it.

On holding your details. My legal basis under the GDPR is legitimate interests, article 6(1)(f). The interest is straightforward: finding businesses whose websites suggest they could use the work I do, and offering it to them once. I have written down the assessment weighing that interest against your privacy, and I will send it to you if you want to see it.

I am not relying on your consent, because I never had it. Pretending otherwise would be the dishonest version of this page.

How long I keep it

• If you ask me to stop, or simply do not reply: your details are deleted within twelve months of my last message to you.
• If you ask me to delete them sooner: immediately, and I will confirm when it is done.
• If you opt out, I keep only your email address, on a suppression list, permanently. That is the only way I can be sure I never accidentally contact you again. It is not used for anything else, ever.

Who else can see it

• Google Workspace, which runs my email. Google Ireland Ltd is the provider.
• Notion, where I keep my notes on who I have written to. Notion Labs, Inc. is the provider.

That is the complete list. I do not share your details with anyone else, I do not sell them, and there are no advertising networks or data brokers involved.

Some of this data is processed outside the European Economic Area (Notion stores its data in the United States), under the European Commission's standard contractual clauses.

Your rights

You can ask me to:

• show you what I hold about you
• correct anything that is wrong
• delete it
• restrict what I do with it
• send you a copy in a portable format
• stop, which is the one below and it deserves its own line

Your right to object

You have an absolute right to object to me using your details to contact you about my services. You do not have to give a reason, I do not get to weigh it against anything, and I have to stop. This is article 21 of the GDPR.

One email to info@rozmach.xyz saying stop, and it is done. No form, no login, no "are you sure", no offer to send you something else instead.

To be exact about what "stop" means, because the word is often used loosely: I stop writing to you and I delete what I hold, but I keep your email address by itself on a do-not-contact list. That is the only way I can be certain I never write to you again by accident. It is not used for anything else.

If you think I have got this wrong

Tell me first if you are willing to, because if I have made a mistake I would rather fix it than argue about it.

But you do not have to. You can complain directly to a data protection authority:

• in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)
• in Denmark, where this business is registered, Datatilsynet (datatilsynet.dk)
• or to the authority in your own country

If we spoke on the phone first

This section is for you if I called your business, we talked, and you told me an email address so I could send you something.

Who I am: the same Arbos Folk described above. CVR 46278895, Byhøjvænget 17, 8380 Trige, Denmark, info@rozmach.xyz.

What I hold and why: the email address you gave me, your name, your company, and my notes on what we discussed. I use them to send you what you agreed I could send, and to keep a record that you agreed.

My legal basis here is your consent, not legitimate interests. That matters, because it means you can take it back whenever you like, for any reason or none, and I have to stop. Reply "stop" to any message, or say so next time I call.

Why I keep a record of the call: Danish marketing law puts the burden on me to prove you said yes. So I log when we spoke, what I asked you, and the words I used. You are entitled to see that record; ask and I will send it to you.

How long: the same twelve months from our last contact, then deleted. The record that you consented is kept for two years, because that is how long I could be asked to produce it.

Everything else above applies here too: the same rights, the same complaint routes, no sharing, no tracking.

If you visit this website

Arbos Folk, trading as Rozmach, is responsible for this website and the analytics described here. Our contact details and privacy rights are set out above.

When you send an enquiry

When you submit an enquiry, we use the details you provide to receive and respond to your request. Enquiry contents are sent to our business inbox and are not included in analytics.

Optional website analytics

If you choose Allow analytics, we use Google Analytics 4 to measure visits to our pages and completed enquiries. Google receives a cookie identifier, page and referral information, visit times, browser and device information, and approximate location derived from the connection.

We strip URL query strings and fragments from analytics data and do not send enquiry text, names, email addresses or phone numbers. We do not enable advertising features, Google Signals, User-ID or session recordings.

The legal basis for this optional measurement is your consent, GDPR Article 6(1)(a). Analytics does not load before you agree. Rejecting it does not affect the website or your ability to contact us.

You can withdraw consent at any time using Analytics settings in the footer. Withdrawal stops future measurement and removes analytics cookies on this browser; it does not undo processing that already occurred lawfully.

Open Analytics settings

Cookies and settings

When you agree, Google Analytics uses _ga and _ga_[property ID] cookies to distinguish visits. We limit these cookies to six months without refreshing that period on each visit.

We store your analytics choice, its date and the notice version in your browser for six months so we can remember and honour it. Your chosen language and appearance are also stored locally to provide the settings you requested.

Providers and transfers

Google provides Google Analytics under its data processing terms. Processing may take place outside the EEA, including in the United States, under Google’s applicable transfer safeguards. See Google’s data processing terms and information about how Google uses data from sites that use its services.

Retention

We configure user-level and event-level analytics data to expire after two months, without resetting retention on new activity. Google’s standard aggregated reports are not covered by that two-month deletion setting.

We do not use these statistics to make decisions about you or build advertising profiles. You may contact info@rozmach.xyz to exercise applicable privacy rights or complain to Datatilsynet or your local data protection authority.

Nothing on this privacy page tracks you. It does not load analytics, scripts, cookies or embeds. The settings link takes you to the homepage to manage your choice.

About this page

If I change how any of this works, I will change this page and update the date at the top. I will not move this page, because emails I have already sent point at it.