Privacy policy for Qurrent AB

Who we are

Qurrent AB is the controller for the personal data described in this policy. This means we decide why and how your personal data is processed, and we are responsible for handling it in line with the EU General Data Protection Regulation (GDPR) and Swedish data protection law.

This policy applies when you visit our website, contact us, book a meeting with us, or deal with us as a customer, partner or supplier. If you have questions about your personal data, email us at legal@qurrent.se.

Personal data we collect

We only collect the personal data we need. Most of it comes directly from you.

• When you contact us. If you use our contact form, email us or call us, we process the information you give us. This is usually your name, email address, phone number, company and the content of your message.
• When you book a meeting. Our meeting booking page is provided by HubSpot. When you book a meeting, we receive your name, email address and any other details you enter in the booking form.
• In business relationships. If you work for one of our customers, partners, resellers, installers or suppliers, we process your name, job title, work contact details and our communication with you. We get this information from you, from your employer or from public sources such as company websites.
• When you apply for a job. Applications are handled on our careers site, career.qurrent.se, which runs on a separate platform from an external provider. Please read the privacy information on that site when you apply.
• When you visit our website. Our hosting provider automatically processes the technical data needed to deliver the website, such as your IP address, browser type, the page you request and the time of the request. We do not use analytics or advertising tools on this website, and we do not build profiles of visitors. Read more in our cookie policy.

You choose whether to share personal data with us. If you do not give us your contact details, we cannot reply to you.

Why we use your data and our legal basis

• To answer your questions and follow up on your inquiry. Legal basis: our legitimate interest in responding to people who contact us (Article 6(1)(f) GDPR). If your inquiry is about a possible agreement with us, the legal basis is taking steps before entering into a contract (Article 6(1)(b)).
• To plan and hold meetings you have booked. Legal basis: our legitimate interest (Article 6(1)(f)), or Article 6(1)(b) when the meeting is about a possible agreement.
• To manage and perform agreements with customers, partners and suppliers. Legal basis: performance of a contract (Article 6(1)(b)) when the agreement is with you personally. If you are a contact person for a company, the legal basis is our legitimate interest in managing the business relationship (Article 6(1)(f)).
• To send you news and marketing by email. Legal basis: your consent (Article 6(1)(a)). You can withdraw your consent at any time, for example by emailing us. This does not affect processing that took place before you withdrew it.
• To run our website and keep it secure. Legal basis: our legitimate interest in providing a website that works and is secure (Article 6(1)(f)).
• To meet our legal obligations, such as bookkeeping rules. Legal basis: legal obligation (Article 6(1)(c)).

When we rely on our legitimate interest, we only do so if your interest in protecting your personal data does not outweigh it. You have the right to object to this processing (see Your rights below).

Who we share your data with

We do not sell your personal data. We only share it when needed for the purposes above:

• Service providers that process personal data on our behalf (processors), such as our website hosting provider (Vercel), our tool for customer relationships and meeting bookings (HubSpot), and providers of email, office software and IT support. They may only use the data according to our instructions.
• Google, which provides the map on our About us page if you choose to show it. Google processes this data under its own privacy policy.
• Advisers such as auditors and lawyers, when needed.
• Authorities, when we are required to by law.
• A buyer or investor, under confidentiality, if all or part of our business is sold or restructured.

Transfers outside the EU/EEA

We aim to process personal data within the EU/EEA. Some of our service providers, including Vercel, HubSpot and Google, belong to groups based in the United States, and personal data may in some cases be processed outside the EU/EEA.

When that happens, the transfer must be covered by a safeguard under the GDPR. This can be an adequacy decision from the European Commission (such as the EU-US Data Privacy Framework, where the provider is certified) or the European Commission's standard contractual clauses. Contact us at legal@qurrent.se if you want to know more about the safeguards that apply.

How long we keep your data

• Inquiries by contact form, email or phone: as long as we need to handle and follow up on your inquiry, normally no more than 24 months after our last contact, unless it leads to a business relationship.
• Contact details in business relationships: for as long as the relationship lasts and for a reasonable period afterwards.
• Marketing: until you withdraw your consent.
• Accounting records: for as long as the Swedish Accounting Act (bokföringslagen) requires, currently seven years.
• Technical data in server logs: for a short period, set by our hosting provider.

When we no longer need the data, we delete or anonymise it.

How we protect your data

We use technical and organisational measures to protect personal data against loss and unauthorised access. We aim to give access only to the people at Qurrent who need the data in their work, and we use service providers that commit to protecting it. No system is completely secure, but we work to keep the risks low.

Your rights

Under the GDPR you have the right to:

• Find out which personal data we process about you and get a copy of it.
• Have incorrect data corrected.
• Have your data erased, for example when we no longer need it.
• Ask us to restrict how we process your data.
• Receive the data you have given us in a machine-readable format and move it to someone else (data portability).
• Object to processing based on our legitimate interest. If you object to direct marketing, we will always stop.
• Withdraw your consent at any time.

To use any of your rights, email us at legal@qurrent.se. We will reply within one month. We may need to confirm your identity before we handle your request.

Complaints

If you think we are handling your personal data incorrectly, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

Links to other websites

Our website links to other websites, such as LinkedIn, our partners' websites, our customer platform and our careers site. This policy does not cover those websites. Please read their privacy information when you visit them.

Changes to this policy

We may update this policy when the way we process personal data changes. The date at the top of this page shows when it was last updated. If we make significant changes, we will let you know in a suitable way, for example here on our website.