Privacy Policy Klarna
Privacy Policy Klarna
It is important to us that you feel protected when you pay with Klarna or use any of our other services. That is why we provide all information about how we use your personal data in this privacy statement.
For your convenience, we have divided this statement into different categories, so you can find what you are looking for right away. To go directly to a category, simply click on one of the options below.
1. Who is responsible for your personal data?
Klarna Bank AB (publ) is registered in the Swedish Companies Register under registration number 556737-0431 with its registered office at Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna, "we", "us"). Klarna Bank AB is the data controller for the purposes of the EU General Data Protection Regulation "GDPR". If you have any questions regarding the processing of your personal data, you can contact our data protection team by writing to dataprotection@klarna.nl .
2. Your rights with regard to your personal data
-
Right to information. You have the right to be informed about the way we process your personal data. We do this by means of this privacy statement, by publishing information on our website and by answering your questions.
-
Right to access your data. You can request a copy of your personal data if you want to know what information we have about you.
-
Right to data portability. You can request a copy in a machine-readable format of the personal data that we use to enter into an agreement with you or based on your consent.
-
Right to rectification. You have the right to correct or supplement incorrect or incomplete information about yourself.
-
Right to have your data erased. You have the right to request the erasure of your personal data. This applies to information that is no longer necessary for the purpose for which it was originally collected, or for which you withdraw your consent. It is important to note that your right to erasure is not absolute. Klarna is required to retain certain information even if you ask us to erase it. These retention obligations are described in more detail in the points 4 and 9. It is legally stipulated that certain information may not be deleted immediately.
-
Right to restrict processing. If you believe that your data is incorrect, that our processing is unlawful or that we do not need the information for a specific purpose, you can ask us to restrict the processing of your personal data. You can also request a restriction pending our evaluation to determine whether our interest in processing your data outweighs your right not to have this data processed.
-
Right to object to the processing of your personal data or to object to our processing. You can object to our processing of your personal data based on our legitimate interest (Article 6, paragraph 1, under f, GDPR), referring to your personal circumstances. Furthermore, you can always object to the use of your personal data for marketing purposes.
-
Right to object to an automated decision that significantly affects you. You have the right to object to an automated decision made by Klarna if the decision produces legal effects or significantly affects you. See in point 6 how Klarna uses automated decisions.
-
Right to withdraw your consent. As described in point 5 you have the right to withdraw your consent at any time in the event that we process your personal data based on your implicit or explicit consent. This means that we will stop processing, but this will not affect the processing that has already been carried out.
-
Right to lodge a complaint . You have the right to lodge a complaint with Integritetsskyddsmyndigheten, the Swedish supervisory authority for Klarna's processing of personal data. You can reach Integritetsskyddsmyndigheten via the following link .
If you wish to exercise one or more of your rights, you can do so by sending an email to dataprotection@klarna.nl with specific mention of which rights are involved. You can also use our home page to request access to your personal data, or to have it deleted. For other questions, you can use the contact information in point 12 consult.
Settings in the Klarna App: In this Klarna App, Klarna gives you the opportunity to adjust your preferences for certain services, such as ongoing notifications or the automatic filling of your information when purchasing. We will always respect your choices.
3. What personal data do we collect?
In this section we describe the categories of personal data that we use. In point 4 we describe the purposes of the processing of these categories of personal data, i.e. how the data is used.
-
Contact and identification details - Name, date of birth, social security number, title, profession, gender, billing and delivery address, email address, mobile phone number, nationality, age, income data, sound recordings, your photos and video recordings, your identity card, etc.
-
Information about goods/services - Information about the goods/services you have purchased or ordered, such as the type of item or the delivery tracking number.
-
Information about your financial capacity - Information about, for example, your income, any credits, a negative payment history and previous credit approvals.
-
Payment information - Credit and debit card details (card number, expiry date and CVV code), bank account number, bank name.
-
Information about your use of Klarna's services - What service(s) and what different features have you used in these services and how have you used them. This includes information about outstanding and past debts, your repayment history and your personal preferences.
-
Technical information generated by your use of Klarna's services - Technical data such as web page response times, download errors, date and time you used the service.
-
Information about your contacts with Klarna customer service - Recorded telephone conversations, chat conversations and email correspondence.
-
Your contacts with the stores you frequent - Information about your interactions with stores, e.g. whether you received the merchandise and what type of store you frequent.
-
Device information - IP address, language settings, browser settings, time zone, operating system, platform, screen resolution and similar information about your device settings.
-
Information from external PEP and sanctions lists - Sanctions lists and lists of politically exposed persons ("PEP") contain information such as name, date of birth, place of birth, profession or position, and the reason for the person's inclusion on the list in question.
-
Sensitive personal data - Sensitive personal data are data concerning religious beliefs, political or philosophical convictions or trade union membership, as well as data concerning sex life or sexual orientation.
-
Service-specific personal data - In the context of our services via the Klarna App we use additional personal data that does not fall under the categories mentioned below: Klarna's savings and payment accounts, Email Connect, Personal Finances and event registrations. Information about each service:
-
The Klarna App: Any content you upload to your app (such as photos or receipts), location data, information about how you use your browser and which websites you visit;
-
Klarna's savings and payment accounts: Information about your incoming and outgoing money transactions. Klarna will also process data about third parties (such as beneficiaries or payers) for this service;
-
Email Connect: Information from your affiliated email account that we pass to the Klarna App; this includes purchase history, product, price and quantity information, delivery tracking numbers and store information;
-
Personal finance: Information about your other bank accounts and other types of accounts (such as card accounts) that you choose to link to the Service, as well as information such as account number, bank, past transactions from your linked accounts, balances and credits; and
-
Event registration via social media: Information about your social media account profile and company information such as your employer's name, address, and type of business.
-
Detailed information about the relevant personal data for each service can also be found in the terms and conditions that we here have listed.
4. Which personal data do we process, for what purpose and on what legal basis?
To make it easier for you, we have described in the tables below what we will use your personal data for (the purpose) and which categories of personal data we use for this purpose. In point 3 you can see which data points belong to each category of personal data. In the tables we also describe our “legal basis”, i.e. which legal rights we have to process data about you under current data protection laws, such as the GDPR. The tables also describe when Klarna will stop using the personal data specifically for each purpose. Finally, we describe whether it is data we receive from you, or whether it is data Klarna receives from another source. Where we receive data from another source, that source is stated in brackets.
4.1 Below are the purposes for which Klarna always uses your personal data, regardless of the service you use.
|
Purpose of processing - what we do and why |
Categories of personal data used for the purpose and where they come from (the source). See point 3 for more information on what each category entails. |
Legal basis for processing under the GDPR. |
When the goal ends (see point 9 for further information on when the data will be deleted) |
|
To manage the interaction with you as a customer as agreed, and this for each service you use. This includes creating and sending information in electronic format (no marketing). |
From you:
From other sources:
|
Data processing is necessary for Klarna to enter into a contract with you (Article 6, paragraph 1, point (b), GDPR). If the service processes sensitive personal data (e.g. material that you wish to upload), this is done on the basis of your explicit consent (Article 9, paragraph 2, sub a, GDPR). |
When the agreement between you and Klarna ends. |
|
To conduct customer satisfaction surveys and market research, via email, SMS, telephone or other communication channels. If you do not want us to carry out this processing, please contact us to let us know. See point 2 for more information about your rights. See point 12 for our contact details. |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6, paragraph 1, letter f, GDPR). In a balancing of interests, Klarna states that it has a legitimate interest in being able to process personal data, that the processing is necessary to achieve the specific purpose and that our interest outweighs your right to object. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
When the agreement between you and Klarna ends. |
|
To ensure the network and information security of Klarna's services. |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6, paragraph 1, letter f, GDPR). In a balancing of interests, Klarna states that it has a legitimate interest in ensuring the security of the network and information, that the processing is necessary to achieve the specific purpose and that its interest outweighs your right to object. It is also in your interest as a customer that we ensure good information security. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
This processing lasts as long as you use a service. |
|
To be able to help you as a vulnerable customer (i.e. if you contact us for extra support due to special circumstances). This means that we can offer you special support, e.g. when you contact customer service. |
From you:
From other sources:
|
Based on your consent (Article 6, paragraph 1, point (a), and (Article 9, paragraph 2, point (a), GDPR). |
When you tell us that you are no longer a vulnerable customer or when you withdraw your consent. We will also stop this processing if and when you tell us that you no longer wish to be a Klarna customer. |
|
To be able to perform risk analysis, prevent fraud and carry out risk management. We carry out the processing to confirm your identity and to verify that the data you provide is correct, as well as to prevent criminal activity. This processing amounts to profiling and automated decision-making. We use automated decision-making for this purpose, to determine whether you are at risk of fraud. See point 6 for more information about profiling and automated decisions. |
From you:
From other sources:
|
The processing is necessary for Klarna to conclude a contract with you (Article 6, paragraph 1, point (b), GDPR). We are also legally obliged to verify the identity of our customers (Article 6, paragraph 1, letter c, GDPR). ( Swedish Act (2017:630) on Measures against Money Laundering and Terrorist Financing ) |
This processing takes place while you use a Klarna service. If Klarna has identified a risk in the way you use Klarna, we will continue to use your information for this purpose and update our risk assessment on an ongoing basis for as long as there is a risk of fraud. This processing will continue for as long as we are legally required to retain your data. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To anonymize your personal data in order to improve our services and products and to analyze consumer behavior. |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6 paragraph 1 lit. f GDPR). In this balancing of interests, Klarna has determined that it has a legitimate interest both in anonymizing your personal data for product development purposes and in analyzing consumer behavior to improve the service and customer experience. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right not to have your data processed for this purpose. Anonymizing your information also ensures that we use as little personal data as possible. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
This processing will continue for as long as Klarna needs to keep the information in its systems, for example to fulfil the agreement concluded with you or to comply with applicable law. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To perform data analysis for product development and testing, to improve our risk and credit models and to design our services (where possible, we first anonymize the data, which means that no more personal data is processed afterwards). |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6 (1) (f) GDPR). In balancing the interests, Klarna assumes that it has a legitimate interest in carrying out data analyses for product development and testing purposes. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. Furthermore, our customers benefit from the processing because it helps us to provide error-free and sustainable services. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
This processing will continue for as long as Klarna needs to keep the information in its systems, for example to fulfil the agreement concluded with you or to comply with applicable law. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To compile statistics and reports for economic analyses or analyses of payment trends or volumes in certain regions or industries (where possible, we first anonymize the data, which means that no further processing of personal data takes place afterwards). |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6 (1) (f) GDPR). In the balancing of interests, Klarna claims to have a legitimate interest in obtaining statistics and reports for this purpose. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
This processing will continue for as long as Klarna needs to keep the information in its systems, for example to fulfil the agreement concluded with you or to comply with applicable law. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To verify and verify your identity. |
From you:
|
Data processing is necessary for Klarna to enter into a contract with you (Article 6, paragraph 1, point (b), GDPR). |
As long as you use one of Klarna's services. |
|
To share your personal data with the categories of recipients described in point 7.1 (suppliers and subcontractors, companies within the Klarna Group, those responsible for your financial transactions, authorities and purchasers of claims, businesses or assets). |
|
Depending on the beneficiary (see point 7.1 ). |
This processing continues for as long as Klarna needs to keep the information in its systems, e.g. to fulfil the agreement concluded with you or to comply with applicable law. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To decide what kind of marketing we will offer you. If you do not want us to perform this processing, please contact us. Contact information can be found in point 12 . The processing may involve profiling. See point 6 for more information about your rights. |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6 (1) (f) GDPR). In the balancing of interests, Klarna claims to have a legitimate interest in determining what type of marketing we should offer you. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest overrides your right to object. We have also taken into account that marketing is listed in the GDPR as an example of legitimate interest. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
When the agreement between you and Klarna ends, or when you let us know that you are not interested in this processing. |
|
To provide you with marketing materials and offers about our services. If you do not want us to carry out this processing, please contact us to let us know. See point 12 for our contact details. |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6 (1) (f) GDPR). In balancing the interests, Klarna claims to have a legitimate interest in sending you marketing about our services and offers. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest overrides your right to object. We have also taken into account that marketing is listed in the GDPR as an example of legitimate interest. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
When the agreement between you and Klarna ends, or when you let us know that you are not interested in this processing. |
|
To protect Klarna against legal claims and to safeguard Klarna's legal rights. |
In the event of a dispute, Klarna may also collect other categories of personal data about you if we need them to exercise our rights. |
The processing is based on a balancing of interests (Article 6 (1) (f) GDPR). In the balancing of interests, Klarna claims to have a legitimate interest in protecting itself from legal claims. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
This processing will continue for as long as Klarna needs to keep the information in its systems, for example to fulfil the agreement concluded with you or to comply with applicable law. See point 9 for more information about our obligations and the right to retain information as required by law. |
4.2 Purposes for which your personal data is used when you use one of Klarna's payment methods, log in to Klarna in a store, or choose to pay with a debit or credit card at Klarna's checkout in a store.
|
Purpose of processing - what we do and why |
Categories of personal data used for the purpose and where they come from (the source). See point 3 for more information on what each category entails. |
Legal basis for processing under the GDPR. |
When the goal ends (see point 9 for further information on when the data will be deleted) |
|
To transfer the store's right to payment for your purchase to Klarna ("factoring"). |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6 paragraph 1 lit. f GDPR). In the balancing of interests, Klarna states that it (and the store) has a legitimate interest to buy or sell your outstanding credit. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
When the purchase takes place. |
|
To share your personal data with the categories of recipients listed in point 7.2 are described (retailers, payment service providers and financial institutions, fraud prevention agencies and companies that provide identity information, as well as Google). |
From you:
From other sources:
|
Depending on the beneficiary (see point 7.2 ). |
Firstly, when the purchase takes place, but also for the entire period that Klarna has the data in its systems, i.e. until the data is deleted. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
In a store that offers Klarna as a payment method or has Klarna checkout, we evaluate the order in which the different payment methods should be presented to you at the store's checkout. This processing does not affect which of Klarna's payment methods are available to you. If you do not want us to carry out this processing, please contact us to let us know. Contact information can be found in point 12 . This processing creates profiling. See point 6 for more information about your rights. |
From you:
From other sources:
|
If you have accepted and used the so-called "Shopping Service" service, as described in more detail under the terms of the service you If you find this here , the legal basis for the processing is the performance of the contract (Article 6, paragraph 1, letter b, GDPR). If, on the other hand, you have not concluded a "Shopping Service" agreement, the processing is based on a balancing of interests (Article 6 para. 1 lit. f GDPR). In the balancing of interests, Klarna claims to have a legitimate interest in examining the order in which the different payment options will be presented to you at the checkout in the store. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
When the payment methods are shown at checkout. |
|
Prevent Klarna’s activities from being used for money laundering or terrorist financing by monitoring and evaluating transactions. Klarna also carries out ongoing risk assessments and creates risk models to prevent money laundering and terrorist financing. This processing amounts to profiling and automated decision-making. See point 6 for more information about profiling and automated decisions. |
From you:
From other sources:
|
To comply with the law (Article 6, paragraph 1, point (c), GDPR). ( Swedish Act (2017:630) on Measures Against Money Laundering and Terrorist Financing ) The basis for processing sensitive personal data is that it is necessary for reasons of public interest (Article 9, paragraph 2, point (g), GDPR). |
When the agreement between you and Klarna is terminated. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To conduct a fraud prevention assessment before accepting a purchase. This processing amounts to profiling and automated decision-making. We use automated decision-making for this purpose, to determine whether you are at risk of fraud. See point 6 for more information about profiling and automated decisions. See also point 7.2.3 regarding our use of fraud prevention agencies to which your data may be transferred and our legal basis for such transfer. |
From you:
From other sources:
In addition to the above, Klarna receives information from fraud prevention agencies about whether your information indicates attempted fraud. |
To enter into and perform the contract (Article 6, paragraph 1, point (b), GDPR). |
When the credit evaluation is performed. |
|
To maintain the accounting and administrative processing as determined in the accounting legislation, and to store them in compliance with the applicable legislation. |
From you:
From other sources:
|
To comply with the law (Article 6, paragraph 1, point (c), GDPR). ( The Swedish Accounting Act (1999:1078) ) |
During the accounting period, and for 7 years after the end of the year in which the information was recorded. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To perform calculations in accordance with the rules on capital adequacy requirements. |
From you:
From other sources:
|
To comply with the law (Article 6, paragraph 1, point (c), GDPR). ( Capital Adequacy Regulation 575/2013 , and Capital Adequacy Directive 2013/36 ) |
Seven years after the end of the year in which the information was recorded. See point 9 for more information about our obligations and the right to retain information as required by law. |
4.3 Purposes for which your personal data is processed when you use one of Klarna's payment methods that provide credit, or when you use the Klarna Card or the one-time card.
These are the services that provide credit: “Pay later” (invoice), “Pay now” (for payment by direct debit), “Financing” (payment in installments), as well as the Klarna Card and the one-time card (both of which are offered in the Klarna App).
|
Purpose of processing - what we do and why |
Categories of personal data used for the purpose and where they come from (the source). See point 3 for more information on what each category entails. |
Legal basis under the GDPR |
When the goal ends (see point 9 for further information on when the data will be deleted) |
|
To perform a credit assessment before credit is granted. This involves profiling and the decision to approve or reject credit holds an "automated decision" in. See point 6 for more information about profiling and automated decisions. See also point 7.3.1 regarding our use of fraud prevention agencies to which your data may be transferred and our legal basis for such transfers. |
From you:
From other sources:
|
To enter into and perform the credit agreement (Article 6, paragraph 1, letter b, GDPR). |
When the credit evaluation is performed. |
|
To share your personal data with the categories of recipients listed in point 7.3 are described (credit bureaus, debt collection agencies and other buyers of outstanding debts, as well as VISA, debt collectors and digital wallet providers). |
From you:
From other sources:
|
Depending on the beneficiary (see point 7.3 ). |
Firstly, when the purchase takes place, but also as long as Klarna stores the data in its systems, i.e. until it is deleted. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To exercise Klarna's right to transfer the payment for your purchase to a new beneficiary ("factoring"). |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6, paragraph 1, letter f, GDPR). In the balancing of interests, Klarna states that it has a legitimate interest to sell outstanding credits as part of its business policy. We assure you that the processing is necessary to pursue this interest and that our interest prevails over your right to object. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
Processing can be carried out even if the debt is unpaid (you will be notified if the debt is transferred). |
|
Providing debt collection services, i.e. collecting and selling overdue debts. |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6 paragraph 1 lit. f GDPR). In the balancing of interests, Klarna states that it has a legitimate interest in collecting and selling debts. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
When the debt is paid. |
|
To prevent Klarna's activities from being used for money laundering or terrorist financing, by monitoring and evaluating transactions, performing risk assessments and creating risk models. This processing involves profiling, and a decision that you are at risk of money laundering is called an "automated decision". See point 6 for more information about profiling and automated decisions. |
From you:
From other sources:
|
To comply with the law (Article 6, paragraph 1, point (c), GDPR). ( Swedish Act (2017:630) on Measures against Money Laundering and Terrorist Financing ) The condition for the processing of sensitive personal data is that it is necessary for reasons of public interest (Article 9, paragraph 2, point (g), GDPR). |
Up to five years after the termination of the agreement or after the termination of the customer relationship (up to ten years in cases where requested by law enforcement authorities). See point 9 for more information about our obligations and the right to retain information as required by law. |
|
Archiving and accounting in accordance with accounting legislation. |
From you:
From other sources:
|
To comply with the law (Article 6, paragraph 1, point (c), GDPR). ( The Swedish Accounting Act (1999:1078) ) |
Seven years after the end of the year in which the information was recorded. See point 9 for more information about our obligations and the right to retain information as required by law. |
4.4 Use of your personal data and information to provide you with access to the Klarna accounts service (savings and payment accounts).
|
Purpose of processing - what we do and why |
Categories of personal data used for the purpose and where they come from (the source). See point 3 for more information on what each category entails. |
Legal basis under the GDPR |
When the goal ends (see point 9 for further information on when the data will be deleted) |
|
To offer Klarna's savings and payment accounts. |
From you:
From other sources:
|
Data processing is necessary for Klarna to enter into a contract with you (Article 6, paragraph 1, point (b), GDPR). If the service processes sensitive personal data (from your transactions), this is done on the basis of your explicit consent (Article 9, paragraph 2, sub a, GDPR). Information about third parties (such as the payment recipient or payer) is based on a balancing of interests (Article 6 (1) (f) GDPR). In the balancing of interests, Klarna has stated that both we and you (as well as the payment recipient/payer) have a legitimate interest in processing this data in order to carry out the transactions in question. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
When the agreement between you and Klarna ends. |
|
To pass on your personal data to the in point 7.4 described categories of recipients (credit institutions and other financial institutions). |
From you:
From other sources:
|
Data processing is necessary for Klarna to enter into a contract with you (Article 6 paragraph 1 lit. b GDPR). The Terms of Service are here available. If the service processes sensitive personal data (from your transactions), this is done on the basis of your explicit consent (Article 9, paragraph 2, sub a, GDPR). |
When the agreement between you and Klarna ends. |
|
To prevent Klarna's activities from being used for money laundering or terrorist financing, by monitoring and evaluating transactions, performing risk assessments and creating risk models. This processing involves profiling, and a decision that you are at risk of money laundering becomes an automated decision. See point 6 for more information about profiling and automated decisions. |
From you:
From other sources:
|
To comply with the law (Article 6, paragraph 1, point (c), GDPR). ( Swedish Act (2017:630) on Measures against Money Laundering and Terrorist Financing ) The condition for the processing of sensitive personal data is that it is necessary for reasons of public interest (Article 9, paragraph 2, point (g), GDPR). |
Up to five years after the termination of the agreement or customer relationship (up to ten years in cases where requested by law enforcement authorities). See point 9 for more information about our obligations and the right to retain information as required by law. |
|
Archiving and accounting in accordance with accounting legislation. |
From you:
From other sources:
|
To comply with the law (Article 6, paragraph 1, point (c), GDPR). ( The Swedish Accounting Act (1999:1078) ) |
Seven years after the end of the year in which the information was recorded. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
To perform calculations in accordance with the rules on capital adequacy requirements. |
From you:
From other sources:
|
Follow the applicable law (Article 6, paragraph 1, point (c), GDPR) ( Capital Adequacy Regulation 575/2013 , and Capital Adequacy Directive 2013/36 ) |
Seven years after the end of the year in which the information was recorded. See point 9 for more information about our obligations and the right to retain information as required by law. |
4.5 Processing of your personal data when you use Klarna's shopping service.
When you use Klarna's Shopping Service, Klarna will process your personal data for the purposes described in the table below. The terms of the shopping service and the description of the functions included in it are available here.
|
Purpose of processing - what we do and why |
Categories of personal data used for the purpose and where they come from (the source). See point 3 for more information on what each category entails. |
Legal basis under the GDPR |
When the goal ends (see point 9 for further information on when the data will be deleted) |
|
To provide Klarna's Shopping Service and the functions included therein. The service involves your profiling to personalize the content of the Klarna App and Klarna's checkout. |
Data processing is necessary for Klarna to enter into a contract with you (terms of use for the grocery service (Article 6, paragraph 1, letter b, GDPR). If the grocery service also processes sensitive personal data (if you have uploaded this data, e.g. via receipts for certain purchases/memberships, or if you have otherwise given us access to this data), we process this data on the basis of your explicit consent (Article 9, paragraph 2, sub a, GDPR). See point 3 for more information about this type of personal data. |
When the agreement between you and Klarna ends. |
|
|
You decide whether or not to share your location with us. We use this information to find stores near you. You can disable location sharing on your device at any time. |
From you:
|
Data processing is necessary for Klarna to enter into a contract with you (terms of use for the grocery service (Article 6, paragraph 1, letter b, GDPR). |
When the function is closed. Klarna does not store your location after we have shown you the stores near you. |
|
To provide you with a browser via the Klarna App that allows you to visit e.g. stores' websites. Klarna will collect information about how you use the browser to customize its mobile application. |
From you:
|
Data processing is necessary for Klarna to enter into a contract with you (terms of use for the grocery service (Article 6, paragraph 1, letter b, GDPR). If the service processes sensitive personal data (e.g. from pages you visit), this is done on the basis of your express consent (Article 9, paragraph 2, letter a, GDPR). However, this sensitive information will not be used for any other purpose than to show you the current website in the browser. |
When the agreement between you and Klarna ends. |
|
To pass on your personal data to the categories of recipients described in point 7.5 (affiliated networks, Google, partners within the framework of the Personal Finance service and the Offer and Benefit Program, as well as logistics and transport companies). |
From you:
From other sources:
|
Depending on the beneficiary (see point 7.5 ). |
When the agreement between you and Klarna ends. |
4.6 Additional services that you can use via the Klarna App
|
Purpose of processing - what we do and why |
Categories of personal data used for the purpose and where they come from (the source). See point 3 for more information on what each category entails. |
Legal basis under the GDPR |
When the goal ends (see point 9 for further information on when the data will be deleted) |
|
If you have connected your email account to Klarna's Email Connect service, Klarna will regularly connect to your email account(s) to obtain information about your purchases. You can terminate this service at any time and thereby stop Klarna's access to your email account. |
From other sources:
|
Data processing is necessary for Klarna to enter into a contract with you (terms of use for the grocery service (Article 6, paragraph 1, letter b, GDPR). If the service processes sensitive personal data (from your transactions), this is done on the basis of your explicit consent (Article 9, paragraph 2, sub a, GDPR). See point 3 for more information. |
When the agreement between you and Klarna ends. |
|
If you have linked your bank accounts to the Personal Finance service, Klarna will provide you with tools to help you take control of your finances using needs specifically tailored to you. With this processing we do profiling, with which we want to adapt the content of the service to what we think interests you. More information about profiling can be found in point 6 . If you wish to use the offers and benefits that Klarna provides in the context of this service, we will share your personal data with the partner who provides these (see point 7.5.3 ). |
From other sources:
|
Data processing is necessary for Klarna to enter into a contract with you (terms of use for the grocery service (Article 6, paragraph 1, letter b, GDPR). If the service processes sensitive personal data (from your transactions), this is done on the basis of your explicit consent (Article 9, paragraph 2, sub a, GDPR). See point 3 for more information. |
When the agreement between you and Klarna ends. |
4.7 Offers and invitations to events posted on social media, and your interaction with us through social media
|
Purpose of processing - what we do and why |
Categories of personal data used for the purpose and where they come from (the source). See point 3 for more information on what each category entails. |
Legal basis for processing under the GDPR. |
When the goal ends (see point 9 for further information on when the data will be deleted) |
|
If you register for an event via social media, we process your personal data in order to provide the requested service. You can always unsubscribe from this by contacting us. See point 12 for our contact details. |
From you:
|
Klarna must process your data in order to conclude a contract with you (regarding the participation in an event) (Article 6, paragraph 1, point (b), GDPR). You can contact us if you want more information about how this decision was made. See point 12 for our contact details. |
When the event is over |
4.8 Klarna's processing when you contact its customer service
|
Purpose of processing - what we do and why |
Categories of personal data used for the purpose and where they come from (the source). See point 3 for more information on what each category entails. |
Legal basis for processing under the GDPR. |
When the purpose ends (see point 9 for further information on when the data is erased) |
|
To handle all matters received by Klarna's customer service. This involves keeping various forms of written conversations to document customer issues, as well as for security and fraud prevention purposes. |
From you:
From other sources:
|
Performance of contracts (Article 6, paragraph 1, point (b), GDPR). |
Up to ten years, based on the statute of limitations. See point 9 for more information about our obligations and the right to retain information as required by law. |
|
Quality and service improvement (to ensure satisfactory service). We may record telephone conversations between you and our employees for quality purposes, in order to provide better products and services. |
From you:
From other sources:
|
The processing is based on a balancing of interests (Article 6 (1) (f) GDPR). In balancing the interests, Klarna has determined that it has a legitimate interest in improving its services, internal training and quality control, and in documenting communication with its customer service. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. As a customer, you also have an interest in good interaction quality with Klarna. You can contact us if you want more information about how this decision came about. For other questions, you can use the contact information in point 12 consult. |
90 days from the date the registration was made. |
|
If you contact us via social media such as Facebook or Twitter, your personal data will also be collected and processed by these companies in accordance with their privacy policies. The same applies to the answer you receive from us. Klarna processes this information to be able to answer your questions. |
From you:
From other sources:
|
Performance of contracts (Article 6, paragraph 1, point (b), GDPR). |
Once we have answered your question. |
5. How can you withdraw your consent?
When Klarna processes your personal data based on your consent, you can withdraw this consent at any time. You can do this by sending an email to dataprotection@klarna.nl or via the contact details you provided point 12 finds.
You can also delete uploaded information from the Klarna App, or terminate the service where personal data is processed. We will then delete that information. If you withdraw your consent or delete the uploaded information, you may no longer be able to use the service in cases where Klarna's personal data processing is based on your consent.
6. Klarna's profiling and automated decisions that significantly affect you.
6.1 Klarna's profiling of you as a customer.
"Profiling" means an automated processing of personal data to evaluate certain personal aspects, e.g. by analyzing or predicting your personal preferences, such as your purchasing behavior. At the same time, we compare your data with what our other customers, with a similar use of our services, prefer.
The purpose of Klarna's profiling and the personal data categories used for each occasion and for each profiling are described in detail in point 3. Profiling for these purposes has no significant consequences for you as a customer.
We use profiling for the following purposes:
-
to provide you with tailored services that adapt based on what we think interests you most (this applies to the Klarna App, its different features, and the order in which the different payment methods are shown at Klarna's checkout), and
-
to offer you personalized marketing.
If you have any questions about how the profiling process works, you can contact us. Contact information can be found in point 12 . You can object to our marketing profiling at any time by contacting us (we will then stop the profiling for marketing purposes). You can also end our profiling for our services by ending the service.
6.2 Klarna's automated decisions that significantly affect you.
Certain decisions in our services are fully automated, without the involvement of our employees, such as automated decisions with legal effects, or automated decisions that have a similarly significant effect on you. These decisions have a significant impact on you as a consumer, comparable to a legal effect. By making such decisions automatically, Klarna increases its objectivity and transparency in decision-making in order to offer you these services. At the same time, you have the right to object to these decisions at any time. You will find a description of how to object to these decisions below.
Automated decisions that significantly affect you also involve profiling based on your data before the decision is made. This profiling is done to evaluate your financial situation (before deciding to grant credit) or to determine whether your use of our services poses a risk of fraud or money laundering. We profile your user behavior and financial capacity and compare this data with behavioral patterns and circumstances with different risk levels.
We use this type of automated decision-making when we:
-
decide to let your App use a credit service.
-
decide your App no to use credit service.
These automated credit decisions are based on information provided by you, data from external sources such as credit agencies and Klarna's own internal information. In addition to information about you, Klarna's credit model includes many other factors, such as Klarna's internal credit risk levels and our general repayment rates (based on e.g. current product category). -
decide whether there is a risk of fraud, whether your processing shows possible fraudulent behavior, whether your behavior is inconsistent with previous use of our services, or whether you have attempted to disguise your true identity. automated decisions where we determine whether you pose a risk of fraud based on information provided by you, data from fraud prevention agencies (see point 7.2.3 for details about the ones we use) as well as Klarna's own internal information.
-
decide whether there is a risk of money laundering, in case our processing shows that your behavior is indicative of money laundering. In relevant cases, Klarna investigates whether certain customers are listed on sanctions lists.
The categories of personal data used in each decision are described in Section 3. Please see Section 7 for more information on the categories with whom we share information relating to profiling during automated decision-making.
If you are not approved in the context of the automated decisions described above, you will not be able to access Klarna's services, such as our payment options. Klarna has several safety mechanisms in place to ensure that the decisions are correct. These mechanisms include permanent checks on our choice models and random samples in individual cases. If you have concerns about the outcome, you can contact us and we will check whether the procedure was carried out correctly. You can also object using the following instructions.
Your right to object to automated decisions
You always have the right to object to an automated decision which produces legal effects or which otherwise may significantly affect you (together with the relevant profiling). In that case, you can send an e-mail to dataprotectie@klarna.nl . A Klarna employee will then review the decision, taking into account any additional information and circumstances you provide us with.
7. With whom do we share your personal data?
When we share your personal data, we ensure that the recipient processes it in line with this notice, e.g. by concluding data transfer or data processing agreements with the recipients. These agreements include all reasonable contractual, legal, technical and organizational measures to ensure that all your information is processed with an adequate level of protection and in accordance with applicable law.
7.1 Categories of recipients with whom Klarna will always share your personal information, regardless of the service you use.
7.1.1 SUPPLIERS AND SUBCONTRACTORS.
Receiver Description: Suppliers and subcontractors are companies that are only entitled to process the personal data they receive from Klarna on behalf of Klarna, i.e. data processors. Examples of such suppliers and subcontractors are software and data storage providers, payment service providers and business consultants.
Purpose and legal basis: Klarna needs access to services and functionalities from other companies where it cannot perform them itself. Klarna has a legitimate interest in having access to these services and functionalities (Article 6, paragraph 1, subparagraph f, GDPR). We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest overrides your right to object. You have the right to object to this processing on the grounds of circumstances in your particular case. See point 2 for more information about your rights.
7.1.2 KLARNA GROUP
Receiver Description: Companies in the Klarna Group.
Purpose and legal basis: This is necessary to enable Klarna to provide you with services and functionalities. Klarna has a legitimate interest in having access to these services and functionalities (Article 6, paragraph 1, subparagraph f, GDPR). We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest overrides your right to object. You have the right to object to this processing on the grounds of circumstances in your particular case. See point 2 for more information about your rights.
7.1.3 A PERSON WHO HAS A POWER OF ATTORNEY FOR FINANCIAL MATTERS.
Receiver Description: Klarna may share your personal information with a person who has the right to access it under power of attorney.
Purpose and legal basis: This processing is carried out to facilitate your contact with us (via agents) and is based on your consent (Article 6, paragraph 1, sub a, GDPR).
7.1.4 AUTHORITIES.
Receiver Description: Klarna may provide information to authorities such as the police, financial institutions, tax authorities or other authorities and courts.
Purpose and legal basis: Personal data will be shared with authorities if we are legally obliged to do so, or if you ask us to do so, or if necessary for tax purposes or to combat crime. An example of a legal obligation to provide information is when it is necessary to take measures against money laundering and terrorist financing. Depending on the authority and purpose, Klarna's legal basis is the obligation to comply with the law (Article 6 (1) (c) GDPR), to fulfill its agreement with you (Article 6 (1) (b) GDPR), and to legitimately protect itself against crime (Article 6 (1) (f) GDPR).
7.1.5 DIVESTMENT OF BUSINESSES OR ASSETS.
Receiver Description: In the event that Klarna sells any business or assets, it may transfer your personal data to the prospective buyer of such business or assets. If Klarna or a substantial part of Klarna's assets is acquired by a third party, Klarna may also share its customers' personal data.
Purpose and legal basis: Klarna has a legitimate interest in being able to carry out these transactions (Article 6 (1) (f) GDPR). We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest overrides your right to object. You have the right to object to this processing on the grounds that circumstances arise from your particular case. See point 2 for more information about your rights.
7.2 Categories of recipients with whom Klarna shares your personal data when you use its payment methods, log in to Klarna in a store, or choose to pay with a debit or credit card at Klarna's checkout in a store.
7.2.1 STORES.
Receiver Description: By stores we mean the stores you visit or shop at (including the store's affiliated companies, if you have been informed of this by the store).
Objective and legal basis: To enable the store to process and manage your purchase and your interaction with the store or its affiliates, e.g. by confirming your identity, sending you goods, handling questions and disputes, preventing fraud and possibly sending you relevant marketing. The store’s privacy policy applies to the processing of your personal data shared with the store and processed by the store. You will normally find a link to the store’s privacy policy on the store’s website. The legal basis for sharing data with stores is partly the performance of a contract between you and the store (Article 6 (1) (b) GDPR), insofar as the sharing takes place within the framework of this contract, and partly based on the legitimate interest of Klarna and the store (Article 6 (1) (f) GDPR). We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. You have the right to object to this processing on the grounds of circumstances in your particular case. See point 2 for more information about your rights.
7.2.2 PAYMENT SERVICE PROVIDERS AND FINANCIAL INSTITUTIONS.
Receiver Description: Payment service providers and financial institutions provide services to you, the stores and Klarna to make and manage electronic payments through a variety of payment methods, such as credit cards and bank payment methods such as direct debit and bank transfer.
Purpose and legal basis: Some stores use payment service providers with whom they share your information to manage your payment. This sharing takes place in accordance with the stores’ own privacy policies. The store may also allow Klarna to share your information with the payment service provider they use to process your payment. Some payment service providers also collect and use your information independently, in accordance with their own privacy policies. This is the case, for example, for providers of electronic wallets. In addition, Klarna may also share your information with other financial institutions when conducting transactions with your account to complete the transactions. The sharing with payment service providers and financial institutions takes place to complete a transaction initiated by you as agreed with you (Article 6, paragraph 1, point (b), GDPR).
7.2.3 FRAUD PREVENTION AGENCIES AND COMPANIES THAT CARRY OUT IDENTITY CHECKS.
Receiver Description: Your personal data will be shared with fraud prevention agencies and companies that perform identity checks.
Objective and legal basis: Klarna shares your information to verify your identity and the accuracy of the data you have provided to us, and to prevent misleading and criminal activity. The companies we work with are responsible for: here listed. Please note that these companies process your data in accordance with their own privacy policies.
Klarna shares your information based on its legitimate interest in conducting its business (Article 6 (1) (f) GDPR), as the fraud prevention agencies and identity check companies have information about fraudulent activities and identity confirmation, which is important for Klarna to reduce the amount of fraudulent transactions. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and our interest overrides your right to object. You have the right to object to this processing on the grounds that there are circumstances in your particular case. See point 2 for more information about your rights. You can also contact the organizations listed in the link above to exercise your rights as set out in point 2 , also possibly against these organizations.
7.2.4 GOOGLE.
Receiver Description: If you use Google Maps at checkout (for example, by looking up your address in the address bar), your personal data will be shared with Google. Google will process your data in accordance with the general terms and conditions and the privacy policy from Google Maps/Google Earth.
Purpose and legal basis: Klarna shares this information based on its legitimate interest in conducting its business (Article 6 (1) (f) GDPR), as Google Maps enables the address functionality to be found at checkout. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest overrides your right to object. You have the right to object to this processing due to circumstances in your particular case. See point 2 for more information about your rights.
7.3 Categories of recipients with whom Klarna shares your data when you use one of Klarna's payment methods that provide credit or when you use the Klarna Card or the one-time card.
7.3.1 CREDIT INFORMATION AGENCIES
Receiver Description: If you request a service from Klarna where we provide credit (see point 4.3 about which Klarna services imply credit), we will share your personal data with credit reference agencies. Exchange does not take place in the case of small amounts or when we already have sufficient information.
Objective and legal basis: Your personal information is shared with credit agencies to evaluate your creditworthiness in connection with your credit application, to confirm your identity and contact details, and to protect you and other customers from fraud. Sharing this information produces a credit report.
In the Netherlands, Klarna sends the credit bureau your name, address and phone number to get a lookup on you. This credit search has no effect on your creditworthiness.
The credit bureaus will process your information in accordance with their own privacy policies and you can here find out who we work with.
If you have applied for financing, the following applies: Klarna will share your name, date of birth, address and possibly your email address, as well as information about your financing debt and the repayments on that debt (including late repayments), with the Dutch debt register (Bureau Krediet Registratie-BKR), in accordance with Dutch credit legislation. The information shared with the debt register may affect your future creditworthiness and ability to obtain credit.
Klarna shares your information based on its legitimate interest to conduct its business (Article 6, paragraph 1, letter f, GDPR), where the credit reference agencies have information about your financial standing which is important for Klarna to ensure a proper credit assessment and not to grant credit to consumers who are unable to repay it. We ensure that the processing this entails is necessary to pursue that interest, and that our interest outweighs your objection. You have the right to object to this processing due to circumstances in your particular case. See point 2 for more information about your rights. You can also contact the organizations listed in the link above to exercise your rights as set out in point 2 , also possibly against these organizations.
Klarna stores the credit information about you that we have received from a credit reference agency only in a script data format. If you want a readable version, we recommend that you contact the credit agency that informed you that Klarna has requested a credit report directly.
7.3.2 COLLECTION COMPANIES (FOR DEBTS THAT ARE OVERDUE).
Receiver Description: Klarna may be required to share your information if we sell or outsource the collection of unpaid overdue debts to a third party, such as a debt collection agency.
Objective and legal basis: This data is shared to collect your overdue debts. Debt collectors process personal data in accordance with their own privacy policies or solely on Klarna’s behalf in their capacity as Klarna’s data processors. Debt collectors may report your unpaid debts to credit reference agencies or authorities, which may affect your creditworthiness and ability to apply for credit in the future. This data is shared based on our legitimate interest in collecting and selling debts (Article 6 (1) (f) GDPR). In balancing the interests, Klarna claims to have a legitimate interest in collecting and selling debts. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object. You have the right to object to this processing due to circumstances in your particular case. See point 2 for more information about your rights.
7.3.3. VISA AND DIGITAL WALLET SUPPLIERS.
Receiver Description: We share information about you and your purchases when you use the Klarna card with VISA and with members of the VISA card network. If you also add the Klarna card to your digital wallet, we may need to share your information with the provider of that wallet. In that case, the information will be processed in accordance with the privacy policy of that provider.
Objective and legal basis: The sharing takes place to the extent necessary to carry out card transactions, prevent fraud and comply with the rules for the VISA card network. If you renew your Klarna card or receive a new card, we will pass this information on to VISA so that VISA can inform third parties with whom you previously stored your card details (e.g. for recurring transactions). The sharing takes place in agreement with you (Article 6 (1) (b) GDPR).
7.3.4 DEBT BUYERS (FOR OUTSTANDING DEBTS).
Receiver Description: Klarna can transfer your outstanding debts to debt buyers.
Objective and legal basis: When transferring your debt to an acquiring party and for the entire period until you have paid off the debt, Klarna will share your contact and identification information (name, date of birth, social security number, address and telephone number), information about your financial status (such as remaining balance, repayments and any negative payment history in relation to the current debt), as well as information about the goods or services related to the debt. The buyer will process your personal data in accordance with their own privacy policy, which you will receive information about once the debt is transferred.
Sharing personal data with different buyers is based on our legitimate interest to sell outstanding debts as part of our business operations (Article 6, paragraph 1, sub f, GDPR). We assure you that the personal data processing this entails is necessary to pursue that interest, and that our interest prevails over your right to object. You have the right to object to this processing due to circumstances in your specific case. See point 2 for more information about your rights.
7.4 Categories of recipients when using the Klarna accounts service (savings and payment accounts).
7.4.1 CREDIT INSTITUTIONS AND OTHER FINANCIAL INSTITUTIONS.
Receiver Description: We share your information with credit institutions and other financial institutions (such as other banks) when you make transactions or payments to other accounts.
Objective and legal basis: If you have made payments to a Klarna account, Klarna processes the information we receive from the bank you used for the transaction, such as contact and identification data and payment information. If you make transactions or payments to accounts at other banks, Klarna also passes on your contact and identification data and payment information to both the recipient and the credit or financial institution of the recipient. The sharing takes place in agreement with you (Article 6 (1) (b) GDPR).
7.5 Categories of recipients with whom Klarna shares your personal information if you Use Klarna's Shopping Service .
7.5.1 BRANCH NETWORKS.
Receiver Description: If you click on a sponsored link in the Klarna App or on our website that refers to a store, product or service, you will be redirected to the website of another company via a third party, the so-called affiliate network.
Objective and legal basis: The affiliate network may place tracking technology on your device containing information about the fact that you clicked on that link in the Klarna App, which is then used to document your visit to the store in order to calculate a potential commission for Klarna.
The affiliate network may process your data in accordance with its own privacy policy. The processing is based on a balancing of interests (Article 6 (1) (f) GDPR). In the balancing of interests, Klarna claims to have a legitimate interest in offering you sponsored links to promote stores in the Klarna App and on our website. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest overrides your right to object.
You have the right to object to this processing due to circumstances in your particular case. See point 2 for more information about your rights.
7.5.2 GOOGLE.
Receiver Description: When you use the Klarna App via our web portal, Google collects your device information via Google's reCAPTCHA service implemented there, possibly together with additional information you choose to enter into the reCAPTCHA service.
Purpose and legal basis : Klarna processes this information based on its legitimate interest in conducting its business (Article 6 (1) (f) GDPR), as the reCAPTCHA service prevents misuse of our services (e.g. by preventing bots from trying to log in). Google will process your data in accordance with the general terms and conditions and the privacy policy from Google Maps/Google Earth. We assure you that the specific processing this entails is necessary to achieve the purpose in question, and that our interest prevails over your right to object.
You have the right to object to this processing due to circumstances in your particular case. See point 2 for more information about your rights.
7.5.3 PARTNERS WITHIN THE FRAMEWORK OF THE PERSONAL FINANCES SERVICE AND THE OFFER AND BENEFIT PROGRAM.
Receiver Description: Partners within the framework of the Personal Finance service and the Offer and Benefit Program.
Purpose and legal basis: If you choose to take advantage of Klarna’s offers and benefits within the Personal Finance service or the Offers and Benefits program, Klarna will share the personal information necessary to take advantage of the offer with our business partners (including the fact that you are a Klarna customer). Each offer states the data that will be shared. Data is shared in the context of the agreement between you and Klarna (Article 6 (1) (b) GDPR).
7.5.4 LOGISTICS AND TRANSPORT COMPANIES.
Receiver Description: Logistics and transport companies.
Objective and legal basis: Klarna shares your personal data with logistics and transport companies that deliver the goods you order, if you have signed up for parcel tracking. Examples of information we share are contact and identification details and tracking numbers.
We point out that these companies process your data in accordance with their own privacy policy. The sharing is done in agreement with you (Article 6, paragraph 1, under b, GDPR).
7.6 Categories of recipients with whom Klarna shares your personal data when you contact our customer service via social media.
7.6.1 SOCIAL MEDIA.
Receiver Description: Social media companies such as Facebook, Instagram or Twitter.
Objective and legal basis: If you contact us via social media such as Facebook or Twitter, your personal data will also be collected and processed by these companies, in accordance with their privacy policy. The sharing is done in agreement with you (Article 6, paragraph 1, under b, GDPR).
8. Where do we process your personal data?
We always aim to process your personal data within the EU/EEA. In certain situations, e.g. when we share your data within the Klarna Group or with a supplier or subcontractor operating outside the EU/EEA, your personal data may also be processed outside the EU/EEA. See point 7 for more information about who we share personal data with. If the store you are shopping with is based outside the EU/EEA, sharing your data with that store will also involve transferring your data outside the EU/EEA. You can contact us if you want more information about our security measures. Contact information can be found in point 12 .
Other countries may not have the same laws regarding stored personal data and may be subject to access requests from public authorities for the purposes of combating crime or protecting national security. Whether we or one of our suppliers process your personal data, we will ensure that when transferring such data, an adequate level of protection is maintained and that appropriate safeguards are in place, in accordance with applicable law (such as the GDPR). Such appropriate safeguards include, but are not limited to, ensuring that:
-
the European Commission has decided that the third country to which your personal data are transferred provides an adequate level of protection, or
-
the European Commission's standard contractual clauses have been concluded between Klarna and the recipient outside the EU/EEA. In these cases, we will also check whether there are laws in the recipient country that have implications for the protection of your personal data. Where necessary, we will take special measures to ensure that your data remains protected during the transfer to the relevant country outside the EU/EEA.
9. How long do we retain your personal data?
Klarna stores your personal data in accordance with applicable law, such as anti-money laundering legislation and accounting law (typically 5 years and 7 years respectively). Furthermore, we do not store your personal data longer than necessary for certain purposes of our processing (more information can be found in the table in point 3 ).
Personal data that is important for the contractual relationship between you and Klarna is normally stored for as long as the contractual relationship lasts and thereafter for a maximum of 10 years based on limitation periods.
In some cases, it may be necessary to store the information for a longer period due to capital adequacy legislation that Klarna must comply with. If you do not enter into an agreement with us, personal data is usually stored for a maximum of 3 months, but in some cases the data needs to be stored for longer, e.g. due to anti-money laundering laws, or to protect Klarna from legal claims and to safeguard Klarna's legal rights.
10. How do we use cookies and similar tracking technologies?
To provide a tailored and smooth experience, Klarna uses cookies and similar tracking technologies in our different interfaces, such as our website, the Klarna App and at the checkout of stores that cooperate with Klarna. You can find information about the tracking technology Klarna uses, as well as information about how to accept or refuse the tracking technology, in each interface.
11. Updates to this Privacy Statement.
We are constantly working to improve our service offerings to provide you with an even better user experience. This may include changes to existing and future services. If such improvement requires notice or consent in accordance with applicable law, you will be notified or given the opportunity to give your consent. It is also important that you read this Privacy Statement each time you use one of our services, as the processing of your personal data may have changed since your previous use of the service in question.
12. Klarna's contact details
Klarna Bank AB (publ) is registered with the Swedish Companies Registration Office under number 556737-0431 and has its registered office at Sveavägen 46, 111 34 Stockholm.
Klarna has a data protection officer and a team of data protection specialists. We also have a customer service team that handles data protection issues. You can reach all of these people at dataprotectie@klarna.nl . If you would like to contact Klarna's data protection officer specifically, please include this in the subject line.
Klarna Bank AB (publ) complies with Swedish data protection legislation. Go to www.klarna.nl for more information about Klarna.
This privacy statement was last updated on May 26, 2021.
***