Privacy policy

The website and the service are provided by Albin Lindén, sole trader, trading as Qonnecta ("Qonnecta", "we"). Where the table below names Qonnecta as controller, the controller is Albin Lindén. Contact: kontakt@qonnecta.se, +46 8 400 629 94.

So if you book something through a booking page, it is the rental business that decides about your data, and that is who you should contact first with questions about your booking. The rental business's name and contact details are on the booking page and in your booking confirmation. If you use the same customer account with several rental businesses, for example on a shared booking page, each rental business is responsible for your bookings with it, and we process the account on their behalf.

What we collect. The website sets no cookies and uses no third-party analytics. The fonts are served from our own server. The website is delivered by Netlify, which sees your IP address when the page loads. If you arrive from a campaign link, the campaign's name is kept in your browser's session storage until you close the tab. Example booking pages are embedded from boka.qonnecta.se, only when you ask for them.

The Fråga Qonnecta chat. On qonnecta.se you can ask questions to an AI assistant. It answers only from what is on the website. What you write, the answers and a hashed form of your IP address, which cannot be read back, are kept for at most one day after your last message and are used to answer you and stop abuse. You can delete the chat at once with New chat. The questions are sent to our AI provider Anthropic to be answered; they are not used to train AI models. We use no cookies for the chat; it remembers the conversation only while the tab is open (session storage). When you use the chat we count a few steps (for example that the chat was opened or that you chose to be called back) on our own server, without cookies, without the IP address and without what you write; those counts are kept for 13 months. If you choose to be called back, write to us or book a call, we keep what you fill in, and the chat if you tick that box, for up to 12 months after the last contact, so that we can contact you about Qonnecta. You can ask us to delete it at any time. Legal basis: legitimate interest (Article 6(1)(f)) in answering your questions and, if you wish, steps before entering into a contract (Article 6(1)(b)). Abuse attempts (blocks) are kept for 30 days.

Your booking page and other enquiries. If you send the form on Your booking page, we process the web address, your e-mail, your phone number if you give it and the kind of rental, to build a booking page for you and get in touch about it. The form is received through Netlify. If you e-mail or call us, we process what you tell us. Legal basis: legitimate interest (Article 6(1)(f)) in answering enquiries and, if you wish, steps before entering into a contract (Article 6(1)(b)). The booking page we build is deleted after 30 days if you do not want to go on. We keep the enquiry itself for at most 12 months after our last contact if you do not become a customer.

Here the rental business is the controller (see section 1). This is what we process on its behalf, so that you know what happens in the system:

• Account and contact: name, e-mail, phone, language, login.
• Invoicing details if you book as a business: company name, registration number and address.
• Bookings and contracts: what you have booked, when, price, extras, notes, accepted rental terms (for some terms the IP address and browser are stored as proof of acceptance).
• Payments: amount, status and references. We never store card details. Card, Apple Pay, Google Pay and Klarna payments are handled by Stripe on the rental business's own account, and Swish payments in Sweden by the rental business's bank. For Swish in Sweden your phone number is processed.
• Self-service and locks: codes for digital locks, time windows, answers to safety checks and photos, for example of damage at pickup and return. The lock maker igloohome receives only the lock's ID, the time window and the booking number, never your name.
• E-signing: if the rental business uses e-signing, the contract, your name and your e-mail are sent to Scrive, where you sign.
• The chat on the booking page: what you write to the AI assistant and its answers. Chats without login are deleted after one day, and chats while you are logged in after 30 days.
• Messages: confirmations, receipts, reminders and contracts that we send by e-mail in the rental business's name (and push notifications in the app if you have allowed them).
• Location: on the map you can choose to share your position to find the nearest rental location.
• Statistics: an anonymous session ID and device type, so that the rental business can see how many people visit the booking page.

Service messages and support from Qonnecta. We may send short messages in Qonnecta's name about outages, faults, security issues and changes to your booking. They are factual, never marketing, and go only to the contact details on the booking. If you have a technical problem with the booking page, the payment, a lock or the app, you can also ask us. Questions about the rental itself, such as price, damage, terms and refunds, we pass on to the rental business. The rental business is told when we have contacted you.

The rental business can set inactive customer accounts to be anonymised automatically, for example after 24 months without bookings. You can delete your account yourself in the account settings. If you have active bookings, contracts or unpaid payments, the rental business reviews the request first. Booking history is kept without personal data.

We never sell personal data. We use the following providers (processors). The current list for customer data is also in the data processing agreement.

Stripe is not used for our fees. Payments on the booking pages go to the rental businesses' own Stripe accounts and are governed by the rental businesses' agreements with Stripe, see section 4.

If you log in to Qonnecta Admin with your Google account, Google is responsible for that account under Google's own privacy policy.

Transfers outside the EU/EEA. When data is processed outside the EU/EEA, or can be accessed by a provider's group companies in, for example, the US, we rely on European Commission adequacy decisions (for example the EU–US Data Privacy Framework for certified providers, and for Switzerland) or on the European Commission's standard contractual clauses, with supplementary measures where needed.

We may also disclose data when the law requires it, for example to the police or the Swedish Tax Agency, and to advisers such as auditors and attorneys bound by confidentiality.

We keep data for as long as it is needed for the purpose in the tables above. In addition:

• Logs for security and traceability (the change log, booking attempts and visit statistics) are kept as long as the customer agreement runs and are then deleted together with the customer's other data.
• Backups of the database are taken daily and overwritten automatically on DigitalOcean's schedule.
• When a customer agreement ends, the customer's data is deleted under section 11 of the customer terms.

Traffic is encrypted (HTTPS). Passwords are stored hashed, one-time codes for digital locks encrypted, and the IP address in the change log hashed. Access to production data is limited to the people who need it to run the service. The database is backed up daily.

You have the right to access your data, to have incorrect data rectified, to have data erased, to restrict processing, to object to processing based on legitimate interest and to receive data you have provided in a machine-readable format (data portability). If you object to direct marketing, we always stop.

E-mail kontakt@qonnecta.se. If it concerns a booking with a rental business, we pass your request on to them and help them answer. We reply within one month.

You can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden, imy@imy.se, imy.se, or to the data protection authority where you live. Please contact us first.

We update this policy when the service or the law changes. We tell customers about material changes by e-mail. The date of the latest change is shown at the top.