Privacy Policy

Last updated: 2026-08-27

This is a translation. In case of any conflict of interpretation, the Swedish version applies.

This policy explains what personal data TaxiTeori.se processes, why we do it and what rights you have. We only collect what is needed to run the course — never more.

1. Data controller

KörkortAkademi, Sjöfrökens väg Norsborg, is the controller of the personal data processed on TaxiTeori.se.

2. What data we process

Account: email address and password (stored encrypted by our provider), plus registration and last login times.

Study data: your answers to practice questions, completed mock exams, bookmarks, notes and goals. These belong to your account and are visible only to you.

Purchases: chosen period, amount, payment status and receipt reference. Card details are handled solely by Stripe and never reach our servers.

Reviews: if you write a review we store the display name you enter, an optional city, the rating, the text and your IP address at submission (to prevent abuse).

Support: the content of messages you send through the contact form.

Technical: anonymised visitor statistics and error reports, only if you have consented (see section 6).

3. Why we process it and on what legal basis

To deliver the service you bought — account, course content, exam results and support. Legal basis: performance of a contract.

To handle payments and meet bookkeeping obligations. Legal basis: contract and legal obligation respectively.

To review and publish reviews and to prevent abuse. Legal basis: our legitimate interest in showing only genuine reviews.

For web analytics and debugging. Legal basis: your consent, which you can withdraw at any time.

4. Who we share data with

We never sell your data. We use the following processors, who may only act on our instructions: Supabase (accounts and database), Stripe (payments), Resend (email), Vercel (hosting), Sentry (error reporting) and — if you consented — Google Analytics and Microsoft Clarity (visitor statistics).

Some of these providers may process data outside the EU/EEA. Where that happens, the transfer relies on the European Commission's standard contractual clauses or a valid adequacy decision.

5. How long we keep data

Your account and study data are kept for as long as you have an account with us. Deleting your account removes your study data and reviews.

Records relating to purchases are kept for seven years under the Swedish Bookkeeping Act.

Support messages are normally deleted within twelve months.

6. Cookies and analytics

We use necessary cookies for login and security. They are required for the service to work and cannot be switched off.

Analytics cookies (Google Analytics 4 and Microsoft Clarity) load only after you have actively accepted them. Before that, no analytics scripts run at all.

You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.

7. Your rights

You have the right to know what data we hold about you, to have inaccurate data corrected, to have data erased, to object to certain processing, to restrict processing and to receive your data in a machine-readable format.

Write to info@korkortakademi.se and we will help you. We reply within one month at the latest.

If you are unhappy with how we handle your data you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

8. Changes

We may update this policy, for example if we change provider. The date at the top shows when it was last changed. We notify signed-in users by email of any material change.