GDPR and Integrity Policy

Updated 20230905

GDPR

The General Data Protection Regulation (GDPR) is an EU regulation that came into force throughout the EU on May 25, 2018. GDPR replaced the Swedish Personal Data Act (PUL).

In this Privacy Policy, we provide a detailed description of how we save and process personal data and other things that have to do with user privacy.

Cookies

A cookie is a text file that is managed by your browser and can be active for a specific period. If you do not want to allow cookies, you can set this in your browser's settings for how cookies should be handled and what type of cookies may be stored. You can also delete cookies stored in your browser at an earlier time. If you choose not to allow cookies for kvarttis.se, functionality is limited, and we cannot guarantee the availability of certain functions.

Kvarttis uses a minimum of cookies, in principle only to make the website work, for example to maintain a session but also to enable the function "Remember me", to enable auto-login on the website and choice of language. You have this option when you log in to kvarttis.se.

The cookies stored in your browser never contain any information linked to you as a person. We do not store any information about your payment cards or Swish. However, we store all payments for 7 years as this is a legal requirement. In that payment, you can see what you paid for.

Your personal data

For you to be able to use our services, for example to advertise yourself or contact advertisers, we need to collect certain personal data about you or / and the organization you represent. We try to keep it to a minimum and your privacy means everything to us. Here we describe what we collect about you and how we use your personal information and what choices and rights you have, such as how you can request your personal information from us.

Under the section "My Account" you will see exactly what personal information we have about you. This is information that you have provided in connection with the registration of your account.

Mandatory information

This data is necessary for the performance of our agreement with you and for you to be able to create an account.

• Username - we have this to hide your name. It is used between you and other users.
• E-mail - this we hide from everyone. It is only used for us to communicate with you and for verification of you as a user and to forward messages from other users to you.
• Phone number - You can also keep it hidden, but you can also choose that it is available to either all logged in users, or all website visitors. The phone number is also used for verification of you as a user.
• For user types that are not Private Persons, organization numbers and contact person information are also required.

Required Seller Details (to be able to publish an ad)

• Name and Surname
• Address

Optional data:

• Home location - If you are looking for ads close to home and use this function, you must enter one of the options: country, county, municipality, city and in most detail - zip code.

My Current Location - if you search for ads in your area and use this function, your GPS location is used if you visit Kvarttis via a wireless connection and your IP address if it is a fixed connection.

The rights the data subject has under the GDPR are:

• Right to information - the right to request information about and access to the personal data we process.
• Right to rectification - the right to request that we correct or update personal data if it is inaccurate or incomplete.
• Right to erasure - the right to request that we erase your personal data.
• Right to restriction - the right to request that we temporarily or permanently restrict certain marked personal data to be processed only for certain limited purposes.
• Right to object
  • the right, at any time, to object to us processing personal data based on consent or that we process based on the general terms and conditions or other legal obligation.
  • the right to object to the processing of personal data for direct marketing.
• Right to data portability – Data subjects have the right to request a copy of their personal data in electronic format to transmit this personal data for the purpose of being used in another party's services; and
• Right not to be subject to automated decision-making – Data subjects have the right not to be subject to any decisions based solely on automated decision-making, including profiling, where decisions would produce legal effects or other impacts of a similar nature for you as a person.

Communication with other users via the messaging service

All the communication you have had with other users on Kvarttis is available to you if your ad is active. You can delete freely, but this communication is also saved together with the deleted ad for 12 months at Kvarttis.

Other information

Your ad will be saved in its entirety for 12 months after it has been deactivated to facilitate any requests from the authorities but also for certain internal trend analyses within Kvarttis.

The own trend analyses only aim to see a holistic perspective on our website so that we know which categories are popular, where in the country etc. We use this for even better service offerings.

In all ads, we also have the function "Email Invitation" (You invite them specifically to your ad) - here we have the email addresses of the people who were specifically invited to see your ad. We do not have the right to save this information as we do not have the consent of those people and therefore these emails are deleted immediately after the ad has been published. After publishing, you'll see how many people you've invited.