Kvanta

Privacy Policy

Last updated: 2025-08-26

Our objective at Kvanta AB is that you should feel safe when providing your personal data to us. We take all reasonable measures to keep your information secure. We process personal data in accordance with applicable data protection legislation (GDPR and supplementary laws).

Kvanta AB (reg. no. 559232-2670) is the data controller for information collected through expressions of interest, when using our service, or otherwise processed as part of our operations.

What personal data we process

The information you may provide to us and that we may store includes:

  • Name
  • Personal identity number
  • Email address
  • Phone number
  • Other information you choose to provide

When a company representative registers the company's share ledger in Kvanta's service, the representative's personal data is registered as a contact person. In addition, only data needed for Kvanta to fulfill the assignment is registered.

We do not process sensitive personal data. Any material from survey responses or feedback is anonymized after the survey is completed.

Purpose and legal basis

We process personal data for the following purposes:

  • Provide the service: administration of user accounts, share ledger registration, invoicing, etc.
    • Legal basis: Contract and, in certain cases, legitimate interest.
  • Communication and support: responding to inquiries, customer service.
    • Legal basis: legitimate interest.
  • Marketing: sending information about the service.
    • Legal basis: consent.
  • Development and improvement: analysis of usage patterns and technical troubleshooting.
    • Legal basis: consent (analytics), legitimate interest (troubleshooting and security).

Cookies and similar technologies

We use cookies and similar technologies in our service. Some are necessary for the website to function, while others are only used if you provide consent.

Necessary cookies

  • Used for basic functionality such as login, security, and operation.
  • These cannot be turned off because they are required for the service to function.

Analytics and statistics cookies

Google Analytics (GA4)

  • Provider: Google Ireland Limited
  • Purpose: Collects statistics about website usage (e.g., number of visits, traffic flows) so we can improve the service.
  • Retention period: Up to 13 months
  • Transfer outside EU/EEA: Data may be transferred to the United States. Google uses the EU Commission's Standard Contractual Clauses (SCC) and additional safeguards. IP anonymization is enabled.

Hotjar

  • Provider: Hotjar Ltd (Malta)
  • Purpose: Used to understand user behavior via, for example, heatmaps and session replay, to improve the user experience.
  • Retention period: Up to 12 months
  • Transfer outside EU/EEA: Data is primarily stored within the EU but may in some cases be transferred to the United States based on SCC.

PostHog

  • Provider: PostHog, Inc.
  • Purpose: Measures website usage (e.g., clicks and page interactions) to improve the service and user experience.
  • Retention period: Up to 12 months (may vary depending on configuration).
  • Transfer outside EU/EEA: Data may be transferred to third countries (e.g., the United States). Transfers are based on the EU Commission's Standard Contractual Clauses (SCC) and supplementary safeguards.

Troubleshooting and performance cookies

Sentry

  • Provider: Functional Software, Inc. (“Sentry”)
  • Purpose: Used to detect errors and crashes in the service. This is necessary to ensure operation and security.
  • Retention period: Session-based logging (deleted according to Sentry's retention policy).
  • Transfer outside EU/EEA: If EU hosting is used, data is stored in Frankfurt (EU). If the US version is used, data may be transferred to the United States based on SCC.

Your choices

You can change or withdraw your consent at any time via “Manage cookies” in our service.

Where data is stored

We strive to always store personal data within the EU/EEA. Where data is processed by providers in third countries (e.g., the United States), the EU Commission's Standard Contractual Clauses (SCC) and additional safeguards are used.

Retention period

We retain personal data for as long as required to provide the service or for as long as we are legally obligated to do so. Marketing contact details are stored until you request deletion. Cookies are stored according to the retention periods stated above.

Your rights

You have the right to request:

  • Access to the data we process about you
  • Correction of inaccurate data
  • Deletion of data (in certain cases)
  • Restriction of processing
  • Data portability (where applicable)
  • Objection to certain processing

You also have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY).

Contact

Questions about data protection and personal data can be sent to:

Kvanta AB
Mäster Samuelsgatan 1, 111 44 Stockholm
privacy@kvanta.com