Qnister

Subscribe to our newsletter and get news, articles and offers straight to your inbox.

GDPR

Whistleblowing

Sanctions

Contract Management

Solutions

News and articles

Safety

Knowledge

References

About us

Contact us

Career

Book a demo

Software for GDPR

Whistleblowing software

Search in sanctions lists

Contract management softwear

thumbnail_Kvinna i konferensrum.jpg

Kvinna i konferensrum.jpg

Qnister is your support in compliance. Our digital solutions help you meet legal requirements, so you can focus on your core business.

Qnister_GDPR_Symbols_4-3.webp

No more self-composed excel documents. With Qnister GDPR, we guide you through the data protection regulation and create the registers for handling personal data you need by law. It includes ongoing monitoring of legal development and template documents, and you get everything gathered in one place. It doesn´t get simpler than that.

*   Easy to follow, step by step
*   Multiple levels of licence
*   Two separate modules
*   Developed by corporate lawyers

Trusted by more than 500 companies

Man med moln i bakgrunden.jpg

The Data Protection Regulation entered into force in 2018 and entails protection for physical persons with regard to the processing of personal data.

Omvärldsbevakning GDPR.jpg

As a user of Qnister GDPR, you benefit from monitoring of data protection developments, directly within the tool.

We keep track of everything relevant to data protection and the processing of personal data, so you don’t have to. You receive the latest news from across Europe, summarized within the tool.

DSO ansvarig.jpg

Let Qnister act on your behalf as a Data Protection Officer in your organization. We have data protection specialists with many years of experience working with personal data management.

Many organizations that handle personal data are, according to the GDPR, required to appoint a DPO, short for Data Protection Officer. The overall and most important task of a DPO is to monitor that the organization complies with the GDPR and to act as a contact person to the data subjects.

Important to keep in mind is that the DPO must be able to work independently and not handle personal data within the organization. Another important part is that the DPO should have good knowledge of the GDPR and how it affects the organization.

 OnePartnerGroup was early with GDPR and whistleblowing

Leende kvinna konferensrum.jpg

Want to see the software before you decide? Book a demo and we will show you how it works.

Do you have any questions? Get answers to the most common questions our customers ask.

Una forma sencilla de trabajar con las rutinas de la protección de datos según el RGPD.

Qnister RGPD

System för att administrera personuppgiftsarbetet enligt dataskyddsförordningen.

GDPR-verktyg

A simple way to work with data protection routines according to GDPR.

Qnister GDPR

Whistleblowing_software_Symbols.webp

Our whistleblowing software makes you compliant with the requirements. Qnister Whistle is our secure and anonymous whistleblowing software for receiving and managing whistleblowing cases. Qnister Whistle is User-friendly and organized – all by the whistleblowing directive.

*   Anonymous and secure
*   Easy to administrate
*   Templates, policies, and checklists
*   Created by lawyers

Man på arbetsplats artikel om visselblåsarlagen.jpg

In 2019, the Whistleblower Directive was adopted within the EU, which aims to strengthen control of EU rules and that there is a high level of protection for people who report violations of these. The directive has been implemented in Sweden through a law (2021: 890) on the protection of persons who report malpractice (the Whistleblower Act). The law entered into force on 17 December 2021 and covers all types of activities, regardless of the form of association. Authorities are also covered by the law.

Balder chose Qnister's system and case management

Want to see our whistleblowing software before you decide? Book a demo and we will show you how it works.

Kvinna hanterar inkomna visselblåsarärenden.jpg

Add our receiver function to your whistleblower system. Resolve the issue of monitoring and access to independent assessment.

With us as recipients, you get an assigned lawyer who receives , makes an initial assessment and gives feedback to you – and to the whistleblower according to the legal requirements. If necessary, we have a dialogue with the whistleblower and are available for legal support and further action.

The investigation function is handled by our own lawyers with experience from global group companies, authorities, the public prosecutor's office and law and auditing firms.

Sköld svart.png

Qnister's solutions are designed to make you confident that they meet high security standards. Below are some examples of our security measures:

*   ISO 27001-certified 
*   Swedish servers 
*   Daily backups 
*   Penetration tested by a third party. Contact our CTO if you want to read their statements. 
*   Security logs 
*   Login with Swedish BankID 
*   Access control 
*   Encryption of information

135A3392.jpg

With our startup package, you will get everything you need to get started with your whistleblowing function. All templates and policies are created and updated by the lawyers at our sister company, Insatt AB.

*   Whistleblower policy 
*   Whistleblowing procedure 
*   Information text about the organization's whistleblowing function for employees and other relevant stakeholders 
*   Information for the data subjects - information about the processing of personal data in connection with the whistleblowing function to comply with GDPR 
*   Implementation checklist for a whistleblowing function 
*   Informational video to be shown to employees and other relevant stakeholders

Software seguro para recibir y gestionar los casos de denuncia de irregularidades.

Qnister Whistle

Säkert visselblåsarsystem för hantering, uppföljning och utredning av visselblåsningsärenden. 

System för visselblåsning

Secure whistleblowing software for receiving and managing whistleblowing cases. 

Qnister Whistle 

Sök i sanktionslistor kvinna konferensrum.jpg

Qnister Screening makes it easy to find blacklisted companies and individuals. Search multiple lists at once and see if there are sanctions that could affect your collaboration with a particular actor.

*   3 free searches
*   Daily updated
*   All sanction registers within the EU, UK, Switzerland and the UN

två kvinnor med olika hårfärger på Elmiafältet som skulle kunna vara visselblåsare

två kvinnor på Elmiafältet.jpg

Through a simple search in Qnister Screening, you can find out if a person or company currently has sanctions issued against them. It can help you to determine how a possible collaboration with the actor can be affected.

If your search is listed in one of the registers, you will be immediately informed and can see which register or registers are relevant.

artikel om sanktioner man på arbetsplats.jpg

Sanctions impose restrictions on the freedom of action of a state, a group or individuals through a unilateral decision of one state or collective decision of other states. This is because the states want to try to influence the behavior of the state, group or individual through various economic and political measures.

Visseblåsarfunktion har positiv påverkan, få personal att titta framåt.

Man tittar bort från bild med molnigt väder.jpg

Averigua si hay personas físicas o empresas en alguna de nuestras listas de sanciones vinculadas.

Qnister Screening

Ta reda på om personer eller företag har sanktioner utfärdade mot sig. 

Sök i sanktionslistor

Find out if persons or companies are listed in any of our linked sanction lists.  

thumbnail_Leende kvinna konferensrum.jpg

We started out of a need to make laws and regulations easier to understand and comply with. Contact us or book a demo to see how we can help you.

"The software gives us a structured way of working, and a partner who makes sure we are doing things correctly and by law."

 OnePartnerGroup fue un adelantado en materia del RGPD y la denuncia de irregularidades

OnePartnerGroup var tidiga med visselblåsarfunktion

thumbnail_03_OPG_Logo_Svart_RGB.png

03_OPG_Logo_Svart_RGB.png

Kontakta oss personer i konferensrum.jpg

Do you have any questions or want to book a demo? We are ready to guide you through the compliance jungle.

**Another supervisory authority (SA) has struck down on the use of Google Analytics.**

Previously, the Austrian SA and others have disallowed the use of Google Analytics. The Italian SA started an investigation of the Italian company Caffeina Media S.r.l’s use of Google Analytics after a complaint from the interest group NOYB (None of Your Business). The SA found that visitors to the company’s website got their personal data transferred to the US without supplementary measures in addition to the Standard Contractual Clauses. Therefore, the SA concluded that American authorities could access the personal data. The company has got 90 days to make the use of Google Analytics compliant with the GDPR or otherwise the company’s use of Google Analytics will be prohibited.

**Read more:** [Italian SA bans use of Google Analytics: no adequate safeguards for data transfers from Caffeina Media S.r.l. to the U.S. | European Data Protection Board (europa.eu)](https://edpb.europa.eu/news/national-news/2022/italian-sa-bans-use-google-analytics-no-adequate-safeguards-data-transfers_en)

La autoridad de la supervisión competente de Italia prohíbe el uso de Google Analytics

Italienska tillsynsmyndigheten förbjuder användandet av Google Analytics

Italian supervisory authority prohibits use of Google Analytics

**The French data protection authority (CNIL) has fined the company Clearview AI 20 million euros due to their collection of over 20 billion images from web sites and social media platforms.**

By collecting images from websites, social media and videos, the Clearview AI company has created an image bank that they market as an image search engine. Using facial recognition, the search engine can find a person based on their photograph and a "biometric template", that is, a digital representation of a person's physical characteristics (the face in this case). Many data subjects in the image bank are unaware of this and of the possibility of identifying them using the biometric template. According to the CNIL, the processing lacks a legal basis as the company has not obtained consent from the data subjects and cannot be considered to have a legitimate interest in the processing. The CNIL attaches particular importance to the fact that the processing poses very serious risks to the data subjects' fundamental rights.

After Clearview AI did not stop processing the data after the CNIL called on them to do so, the CNIL has now decided to fine the company 20 million euros. The CNIL also announced that Clearview AI must cease all illegal collection and processing of French citizens' personal data. The company is given two months to delete all personal data already collected and for each day that passes these two months, the penalty fee is increased by 100,000 euros.

**Source:** [Facial recognition: 20 million euros penalty against CLEARVIEW AI | CNIL](https://www.cnil.fr/en/facial-recognition-20-million-euros-penalty-against-clearview-ai)

La autoridad francesa «Commission Nationale de l'Informatique et des Libertés» (CNIL) ha impuesto una sanción administrativa de 20 millones de euros contra la empresa Clearview AI

CNIL har utfärdat en sanktionsavgift på 20 miljoner euro mot Clearview AI 

CNIL has issued a penalty fine of 20 million euros against Clearview AI

**Following the disclosure of a data breach, an investor demanded the acquisition of a majority stake in the affected company Vastaamo to be rescinded due to lack of disclosures during the due diligence process.**

During 2018 and 2019, the psychotherapy clinic Vastaamo experienced a data breach that resulted in the leakage of approximately 30,000 patient records. The data breach was not reported to the Finnish supervisory authority until 2020, which subsequently led to a fine of €608,000. The company had taken inadequate security measures, had not reported the data breach to the supervisory authority, and lacked the necessary documentation. Therefore, the supervisory authority deemed that the company had neglected its obligations under the GDPR (General Data Protection Regulation).

During the period after the data breach occurred (but before it was reported to the supervisory authority), an investor acquired a majority stake in Vastaamo. When the data breach was finally reported, and the severity of the breach became public knowledge, the investor demanded that the acquisition be canceled. The investor argued that the failure to disclose the data breach constituted a lack of disclosure during the due diligence process. The acquisition was subsequently canceled.

Source: [Administrative fine imposed on psychotherapy centre Vastaamo for data protection violations | Data Protection Ombudsman’s Office (tietosuoja.fi)](https://tietosuoja.fi/en/-/administrative-fine-imposed-on-psychotherapy-centre-vastaamo-for-data-protection-violations)

Our services for compliance

Our solutions

Qnister GDPR

Qnister Whistle

Qnister Screening

We are simplifying compliance

"The software gives us a structured way of working, and a partner who makes sure we are doing things correctly and by law."

Immerse yourself

Italian supervisory authority prohibits use of Google Analytics

CNIL has issued a penalty fine of 20 million euros against Clearview AI

Data protection and data security should be considered during due diligence