Data processing agreement

Last updated 10 November 2026

Parties and roles

The coworking space that creates an account on bookroom.dk is the controller. bookroom.dk is the processor and processes personal data only on the controller's instructions (GDPR art. 28).

Subject matter and duration

Providing the booking system for the subscription period. On termination the data is deleted or returned, as the controller chooses.

Data subjects and data

• Data subjects: administrators and employees of the coworking space and its companies.
• Data: name, email, login details, bookings, check-ins, invitations and administrative logs.

Security

• Encrypted connections (TLS) and passwords stored as hashes.
• Two-factor authentication, which the coworking space can make mandatory.
• Separation of each coworking space's data and a log of administrative actions.
• Regular encrypted backups.

Sub-processors

• Server and database hosting: a hosting provider with a data centre in the EU.
• Google Cloud: encrypted backups.
• Resend: email provider for sending email.

Assistance and breaches

The processor helps with data subjects' rights and notifies the controller without undue delay of personal data breaches.