Privacy Policy

Geetanjali Dubey, trading as Rooklyn, NIF/NIE Z0680759X, Calle Transversal Sexta 24, 28021 Madrid, Spain; geet29.dubey@gmail.com; https://rooklyn.co.

Rooklyn is the controller for its own commercial, contact, contracting and service-management purposes. When processing data on a client's instructions, Rooklyn may act as a processor under an appropriate agreement.

This policy applies to rooklyn.co, clima.rooklyn.co and aureaclima.rooklyn.co, and related forms, booking pages, demonstrations and owned channels. Áurea Clima is a Rooklyn demonstration environment and is not necessarily an independent HVAC company.

Identity and contact data: name, company, professional role, email and telephone number.

Requests and commercial relationship data: business type, services of interest, information voluntarily supplied in forms or messages, meeting and booking dates, communication history, and information required for proposals, quotes, contracts, billing or support.

Technical and browsing data: IP and connection data, browser, device and operating system, access date and time, and usage data where appropriate. Consent will be requested when required for non-essential cookies or similar technologies.

Answering enquiries and requests: pre-contractual steps requested by the person concerned and, where appropriate, legitimate interest in professional correspondence. Arranging requested demonstrations and meetings: pre-contractual steps.

Sales management and CRM follow-up: pre-contractual steps or applicable legitimate interest in managing professional relationships. Providing services, support, billing and administration: performance of a contract and legal obligations.

Commercial communications: consent where required, or another legal basis applicable to existing relationships. Security, fraud prevention, maintenance and technical diagnosis: legitimate interest in secure operation, and legal obligations where applicable. Consent may be withdrawn at any time without affecting processing already carried out lawfully.

Required fields are necessary to handle the relevant request; without them we may be unable to respond or provide the requested feature. The data-protection information shown beside forms supplements this policy. Consent for optional purposes such as some marketing communications is requested separately and is not preselected.

Data is kept for the time needed for the purpose collected, then for applicable liability or legal periods. Enquiries and sales opportunities are kept while interaction or a reasonable prospect of a commercial relationship continues and as needed afterwards for possible claims. Customer data is kept during the contract and applicable legal periods. Consent-based marketing data is kept until consent is withdrawn or an objection is made, subject to retaining evidence of the preference or consent.

Depending on the site's configuration, providers may include web hosting, DNS, security and content delivery providers such as Cloudflare; GoHighLevel / HighLevel for CRM, forms, automations, opportunities and communications; email and calendar providers; messaging providers including WhatsApp/Meta; and infrastructure, automation or AI providers needed for specific features.

Rooklyn does not sell personal data. Processor relationships are governed by applicable requirements. Data may also be disclosed where legally required.

Some providers may process data outside the European Economic Area. Transfers subject to the GDPR rely on a valid mechanism, such as an adequacy decision, standard contractual clauses or another recognised safeguard. Further details can be requested by email.

Some Rooklyn forms and workflows integrate with GoHighLevel / HighLevel. Information supplied may enter the CRM to manage enquiries, contact the person, schedule demonstrations or meetings, follow up and keep relevant communication history.

Áurea Clima is a commercial demonstration of automation and management for the HVAC sector. Data entered into active demonstration forms is handled under this policy when Rooklyn receives it for its own purposes. Do not enter highly sensitive or health data, confidential third-party information or real customer data unnecessary for the demonstration.

Automations may classify requests, create tasks, assign statuses or support internal follow-up. Unless expressly stated otherwise, they are not used to make solely automated decisions with legal or similarly significant effects on individuals.

Where applicable, you may request access, rectification, erasure, restriction, portability or objection, and withdraw consent. Email geet29.dubey@gmail.com with the subject ‘Data protection’ and enough information to identify the request. We may reasonably request further information to verify identity.

You may complain to the Spanish Data Protection Agency (AEPD) if you consider that processing infringes the rules. See https://www.aepd.es.

Rooklyn applies technical and organisational measures appropriate to the nature, scope, context, purposes and risk of processing. No internet-connected system can guarantee absolute security.

Anyone providing another person's data must have a lawful basis to do so and share only what is necessary.

Rooklyn's services are mainly for businesses and professionals. We do not intentionally seek minors' data through commercial forms or demonstrations.

Third-party websites and services may be linked from our sites. Their own policies and terms govern their privacy practices.

See the Cookie Policy at https://rooklyn.co/en/cookie-policy.

Rooklyn may update this policy when processing, providers, services or legal requirements change. The last-update date appears at the beginning.