Kvanted Oy (“Kvanted”)

Updated: August 2026

Kvanted Oy (“Kvanted”) handles personal data with care and in compliance with applicable data protection regulations. This privacy policy (“Policy”) explains what personal data Kvanted collects, why it is collected, how it is used, who it is shared with, and what rights you have over your own data.

The Policy does not address, and Kvanted is not responsible for the privacy practices of any third parties, also when services include hyperlinks or other links to third parties’ websites or services. This Policy is updated as needed to reflect relevant changes in data processing practices and the latest version can be found on Kvanted’s website. For questions, contact us at privacy@kvanted.com.

WHAT IS PERSONAL DATA?

To provide Kvanted’s services and website, Kvanted must collect, share and process certain personal information (“Personal Data”) that relates to you or can be linked to you either directly or indirectly by your name or another identifier (e.g. phone number or email address). The processing of Personal Data is done in accordance with the General Data Protection Regulation (“GDPR”) and the Finnish Data Protection Act.

WHAT PERSONAL DATA IS BEING COLLECTED?

Kvanted processes the following types of Personal Data:

• Personal details, such as name and contact information

• Investor information, such as financial circumstances, tax residence, profession, income, assets and liabilities

• Invoicing and billing information

• KYC information required by applicable Anti-Money Laundering or Counter Terrorism Financing legislation

• Data collected automatically from the use of our website

The specifics of the processing vary depending on your role. Data is collected primarily from yourself or from your employer. Website usage data is collected automatically. Providing Personal Data is in most instances required for investors or those acting on behalf of one, as Kvanted has a legal obligation to process such data.

Kvanted’s customers include its fund investors, portfolio companies, and other potential investors and investee companies. This Policy addresses natural people representing or working for the aforementioned. Employee and candidate information is also addressed.

WHAT PURPOSE DOES KVANTED USE YOUR DATA FOR?

Kvanted processes your Personal Data for the following purposes:

• To provide Kvanted’s services and to carry out Kvanted’s contractual obligations

• To manage Kvanted’s relationships with investors and other stakeholders

• To provide and administer Kvanted’s website

• To comply with Kvanted’s legal obligations

In most cases, Kvanted relies on legitimate interests for processing your Personal Data. Such a legitimate interest exists, for example, when you work for a company Kvanted is doing business with or email or contact us through our website. This legal ground is used where it is necessary to achieve Kvanted’s legitimate interest and does not outweigh your rights as an individual. Kvanted also processes your Personal Data to perform a contract, to which you are or will be a party or when required by a legal obligation (e.g., tax or social security obligations).

WHO WILL IT BE SHARED WITH?

Kvanted discloses personal information to third parties only where necessary due to legal obligations or regulatory requirements. Kvanted also works with trusted service providers who process Personal Data on our behalf, including providers of website hosting, analytics, investor relations, and operational tools. These providers are required to process data only for the purposes Kvanted specifies and in accordance with the GDPR, under written data processing agreements that meet the requirements of GDPR Article 28.

Kvanted will primarily share your Personal Data with companies located within the EU/EEA. If Personal Data is transferred to companies located outside of the EU/EEA, Kvanted will ensure that there are appropriate agreements in place with the recipients of your Personal Data or other adequate safeguards, such as:

• The European Commission has issued an adequacy decision for the recipient country, or

• Standard Contractual Clauses (SCCs) approved by the European Commission are in place.

We do not sell personal data to third parties. Our website is built and hosted using Framer (Framer B.V., Netherlands) and uses Google Analytics (Google LLC, USA) for anonymized usage analytics. Google Analytics data may be transferred to the United States under the EU-U.S. Data Privacy Framework. Users may opt out of analytics tracking via their browser settings or the Google Analytics Opt-out Browser Add-on.

Access to Personal Data is limited to those who need it to perform their functions.

WHAT ARE YOUR RIGHTS?

Your rights over your personal data include, but are not limited to, the following, and are exercisable at any time by contacting privacy@kvanted.com. In some instances, use of these rights may be limited or subject to certain circumstances.

• Right to access and rectification: You may access, correct or update your Personal Data at any time.

• Right to data portability: Personal Data you have provided may be moved, copied or transmitted electronically under certain circumstances.

• Right to be forgotten: You may request deletion of your Personal Data. Kvanted will comply in accordance with legal requirements.

• Right to restrict processing: You may request restriction of processing of your Personal Data.

• Right to object: You may object to certain types of processing, including direct marketing.

• Right to lodge a complaint with a Supervisory Authority: You may lodge a complaint directly with the relevant data protection authority about how Kvanted processes your Personal Data. In Finland the authority is The Office of the Data Protection Ombudsman (https://tietosuoja.fi/en).

• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

COOKIES

Kvanted’s website uses functional cookies to enhance site performance. Session cookies are temporarily stored and automatically deleted when you close your browser. The website also uses performance and analytics cookies via Google Analytics. A cookie consent banner is displayed on your first visit, allowing you to accept or decline non-essential cookies. Please be aware that some parts of the website may not function properly if essential cookies are refused.

HOW LONG DOES KVANTED KEEP YOUR PERSONAL DATA?

Retention periods are determined by the purpose of the processing and by applicable statutory retention obligations, for example, anti-money laundering and accounting legislation set minimum retention periods for certain KYC, investor and financial records. Where no statutory period applies, Kvanted retains Personal Data only for as long as necessary for the relevant purpose and deletes or anonymizes it thereafter.

CONTACT INFORMATION

If you have any questions about the Privacy Policy, the handling of Personal Data, or wish to exercise your rights, do not hesitate to contact us via privacy@kvanted.com.

Kvanted Fund I Ky 4

Bulevardi 2-4 A

00120 Helsinki

www.kvanted.com