How we handle data when we contact businesses

The controller is Albin Lindén, sole trader, trading as Qonnecta in Sweden ("Qonnecta", "we").

Contact for all questions about personal data: kontakt@qonnecta.se or +46 8 400 629 94. We have no data protection officer because we are not required to have one. Questions are answered by Albin Lindén personally.

Qonnecta sells booking software for rental businesses: online booking, payment and digital locks. We contact companies and associations that rent out things like machines, storage units, trailers or venues, because we think the software may be relevant to them.

We use the data to:

• send a short email about Qonnecta, and at most two follow-ups over about three weeks
• call a number your business has published
• reply to you and keep track of what we have said to each other, if you reply
• make sure we never contact you again if you have said no (suppression list)

We make no automated decisions and no profiling with legal or similarly significant effects for you.

We rely on legitimate interest (GDPR Article 6(1)(f)). Our interest is offering a relevant service to businesses that may benefit from it. Recital 47 GDPR recognises that direct marketing may be a legitimate interest.

Before we started, we carried out a documented balancing test. In summary:

• We use very little. We use business contact details that the business itself published for enquiries, We only email generic addresses such as info@, contact@ or booking@, not addresses with a person's name.
• What you can reasonably expect. A short, relevant offer to an address published for business enquiries is something most businesses expect. We only email limited companies, partnerships, associations and foundations. We do not email sole traders without consent; we call them instead.
• Low impact. At most three emails in total or a few calls, then we stop. We stop immediately if you say no.
• Safeguards. This information and your right to object are included in every email, we keep a suppression list, and we delete data we don't use (see below). Only Albin has access to the data.

You can get the full assessment by emailing kontakt@qonnecta.se.

Usually we only hold data about the business, which is not personal data. We hold personal data about you if you run a sole proprietorship, if your email address or phone number contains your name, or if your name is listed as a contact person on the website.

We do not collect private mobile numbers, data from private social media or LinkedIn profiles, or sensitive data.

The data does not come from you. We found it in public sources:

• your business's own website, usually the contact page (we name the website in the email)
• public business pages and directories, for example booking platforms and industry directories where the business lists its units, Bygdegårdarnas Riksförbund (bygdegardarna.se), Folkets Hus och Parker (folketshusochparker.se) and storage comparison sites
• ordinary web searches for rental businesses in a given industry and town
• the Swedish Companies Registration Office (Bolagsverket) and allabolag.se, for legal form and registration number

We started collecting the data on 5 October 2026. Want to know exactly which source and date apply to you? Email us and we will tell you.

We never sell data and never share it with other businesses for their marketing. We use a few suppliers that process data on our behalf (processors):

Our sending tool runs on Qonnecta's own computer. Emails are sent from our own domains, which clearly show that the sender is Qonnecta.

Transfers outside the EU/EEA. Where a supplier or its group companies in the US can access the data, we rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework (for certified suppliers) and the European Commission's standard contractual clauses. You can get a copy of the safeguards by emailing us.

• If we have not contacted you, we delete the personal data no later than 30 days after collecting it.
• If you don't reply, we delete the data no later than 6 months after our last contact.
• If you are interested and we keep talking, our privacy policy applies from then on. If you become a customer, the customer terms apply.
• If you have said no, we keep only the email address, phone number or domain, the date and the reason on our suppression list for as long as we do outreach. That is the only way to make sure we never contact you again. Everything else is deleted.

Besides the right to object (the box at the top), you have the right to:

• access the data we hold about you and get a copy (Article 15)
• rectify inaccurate data (Article 16)
• have the data erased (Article 17). If you want us never to contact you again, we need to keep the address on the suppression list; tell us if you would rather we delete that too.
• restrict processing while we look into a question (Article 18)

Email kontakt@qonnecta.se. We reply within one month, usually much sooner.

You can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden, imy@imy.se, imy.se. If you live in another country, you can also contact the data protection authority there, for example Datatilsynet in Norway or the Information Commissioner's Office (ICO) in the UK. Please contact us first, and we will try to sort it out.

We update this text when we change how we work. The date of the latest change is shown at the top.