GDPR Compliance

Kliva AB (org. nr. 559217-1721) is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights as a data subject.

As a data subject, you have the following rights: Right of Access (Article 15): You have the right to know whether we process your personal data and, if so, to access that data and receive information about the processing. Right to Rectification (Article 16): You have the right to have inaccurate personal data corrected and incomplete personal data completed. Right to Erasure (Article 17): You have the right to have your personal data deleted in certain circumstances, also known as the "right to be forgotten." Right to Restrict Processing (Article 18): You have the right to restrict the processing of your personal data in certain circumstances. Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Right to Object (Article 21): You have the right to object to the processing of your personal data in certain circumstances. Right to Withdraw Consent (Article 7): Where processing is based on consent, you have the right to withdraw your consent at any time.

We process your personal data based on the following legal grounds: • Consent: When you have given clear consent for us to process your personal data for specific purposes • Contract: When processing is necessary for the performance of a contract with you • Legal Obligation: When we need to process your data to comply with legal obligations • Legitimate Interest: When we have a legitimate interest in processing your data that is not overridden by your rights and interests

For questions regarding data protection and GDPR compliance, you can contact us at hello@kliva.com. We take all privacy concerns seriously and will respond to your inquiries promptly.

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates GDPR. In Sweden, the supervisory authority is: Dataskyddsmyndigheten (Swedish Data Protection Authority) Website: www.dataskyddsmyndigheten.se Email: dataskyddsmyndigheten@dataskyddsmyndigheten.se

To exercise any of your GDPR rights, please contact us: Email: hello@kliva.com Subject: GDPR Rights Request Please include: • Your full name • Your email address • The specific right you wish to exercise • Any additional information that helps us locate your data We will respond to your request within one month of receipt, as required by GDPR.