Privacy policy

The data controller for Kapitalkartan is Rementi Group AB, company registration number 559609-0182. Registered office: Simrishamn. For privacy enquiries or to exercise your rights, contact us at kontakt@kapitalkartan.se.

Account: e-mail address, password credentials (passwords are stored as protected hashes, not plain text), sign-up and sign-in timestamps and language preference.

Membership: tier (Free/Premium), status, billing period and membership change history. The interest list stores your e-mail address and sign-up time. Gift orders may include sender and recipient names and e-mail addresses, a message, selected duration and order status. Do not include sensitive personal data in the message.

Payments: payments are not yet enabled. When payments are introduced through Stripe, Stripe processes card details and payment history. We never see your full card number, only a payment reference, amount and status.

Technical data: IP address, browser and page views in server logs and visitor statistics. Ad impressions and clicks are counted anonymously per ad and day, without any link to you as a person.

Providing the account, membership and Premium features (contract). Charging, bookkeeping and complying with the Swedish Accounting Act (legal obligation). Protecting the service from abuse, measuring traffic and improving content (legitimate interest). Optional cookies for statistics and advertising are only used with your consent.

Necessary storage is used for sign-in, security and your cookie choice. The choice is stored locally in your browser under kk-consent until you change it or clear the site’s storage. Session credentials may also be stored locally. You can block storage in your browser, but sign-in and saved choices may stop working.

No separate optional analytics or advertising cookies are currently connected. If introduced, this policy must describe their providers, purposes and retention periods before they are enabled. Optional cookies may only be set after you click “Accept all” in the cookie banner. If you choose “Necessary only”, no optional cookies are used. You can change your choice at any time via the “Cookie settings” link in the footer.

Hosting providers that store the database and send e-mail (confirmation, password reset) on our behalf. Stripe for payments. Any statistics and advertising providers, but only if you have consented to optional cookies. We never sell personal data.

Transfers outside the EU/EEA may take place to providers covered by the European Commission's standard contractual clauses or equivalent safeguards.

Account data is kept for as long as the account is needed for the service. You can request deletion using the contact address below; automatic account deletion is not yet available on the site. Data required by law or for handling legal claims may be exempt from deletion. Payment records are kept for seven years under the Accounting Act. The interest list is deleted once Premium has launched and you have been notified, or when you unsubscribe. Gift orders are kept to administer the gift and meet any legal obligations; unpaid orders should not be retained longer than necessary. Anonymous ad statistics are kept in aggregate form. Exact deletion routines and technical log retention periods must be established before launch.

You have the right to access your data, have it corrected or erased, request restriction, object to processing based on legitimate interest, receive your data in a machine-readable format and withdraw consent at any time. You can cancel Premium and leave the interest list on My account. Send other rights requests to the contact address below. We normally respond within one month; complex requests may require an extension under GDPR. If you receive a gift membership, your details come from the sender.