Privacy policy

This page explains what information caldav.rpix.dk processes about you, why, and for how long it is kept. Last updated 1 November 2026.

Data controller

The service is run by Thomas Jensen as a private individual. Contact: thomas@rpix.dk.

What information

• Your email address, which is also your username.
• Your password, stored as a bcrypt hash. The password itself cannot be read by anyone, including the administrator.
• What you put on the server yourself: calendars, events, tasks, notes and contacts. Contacts may contain information about people other than you.
• Technical logs: time, IP address, username, the server address that was requested, and the program used (e.g. DAVx⁵ or Thunderbird).
• During sign-up and password reset: a one-time link and, during sign-up, your password as a hash until you confirm the account.
• To prevent abuse: your IP address and email address together with the time of sign-up, login and reset attempts.

Why, and on what legal basis

• Your account, password and content are processed to provide the service you asked for (GDPR Article 6(1)(b)).
• Logs and abuse-prevention data are processed to keep the service secure and stable. This is a legitimate interest (Article 6(1)(f)).
• The information is not used for marketing, profiling or statistics about you, and it is not sold or shared with anyone.

Your content

Calendars can contain sensitive information, for example about health. You decide what you put on the server. The administrator has technical access to the server but does not open your content unless you ask for help, or it is necessary to fix a fault or comply with the law.

Data is encrypted while it travels between you and the server (HTTPS), but it is not encrypted on the server's disk.

Where data is stored

Data is stored on a virtual server at Din Server Group ApS (Danmark), which acts as data processor. Data is not transferred to countries outside the EU/EEA. Emails from the service (confirmation and reset) are sent directly from the server to your email provider.

Every night the whole server is backed up to a server in Denmark that the administrator is personally responsible for.

How long

• Account and content: until you delete the account on the My account page, or the service closes.
• Accounts that have not been used for 30 days are deleted automatically with all content. You will get an email warning first. A calendar program syncing counts as use. Data from deleted inactive accounts is kept for another 7 days so that a mistake can be corrected. It is then deleted on the server and disappears from the backups within 14 days.
• Web server logs: up to 31 days.
• Calendar server logs: up to 90 days.
• One-time links: until used or expired, at most 24 hours. Abuse-prevention data: 24 hours.
• Backups: up to 14 days. After that, information deleted on the server is also gone from the backups.
• When you delete your account, the account and content are deleted immediately on the server and disappear from the backups within 14 days. This cannot be undone.

Cookies

The portal only uses two necessary cookies: a session cookie that keeps the forms secure and keeps you logged in (deleted when you close the browser), and a cookie that remembers your language for one year. There is no tracking, analytics or advertising.

Your rights

You have the right to access the information processed about you and to have it corrected, deleted, restricted or handed over in a machine-readable format. You can also object to the processing.

You can delete your account and all data yourself on the My account page, and you can export your content from your calendar program or from the Radicale web interface. Other requests can be sent to thomas@rpix.dk.

You can complain to the Danish Data Protection Agency (Datatilsynet): www.datatilsynet.dk/english.

Security breaches

If a security breach occurs that may affect your information, it will be reported to Datatilsynet, and you will be notified when the rules require it.

Changes

If this policy changes significantly, you will be notified by email before the changes take effect.