Klarna privacy policy

"At Klarna, we care about your privacy. We therefore collect and process personal information responsibly and with your privacy in mind. This Privacy Notice describes how Klarna Bank AB (publ) ("Klarna" ) collects and uses your personal data when you use any of Klarna's services (the "Service" or collectively, the "Services") and become a customer. Examples of our Services are when you pay with one of our payment options, when contacts, when you use the Klarna web portal and mobile application (the "Klarna Apps") or when your personal data is automatically filled in at  checkout. This Privacy Policy describes your rights regarding the processing of personal data and how to exercise them.

 

It is important that you read and understand the content of this Privacy Policy which applies to all personal data that Klarna processes, except as provided in Section 1.

 

Some of our Services will provide you with access to content and functionality offered by other companies or organizations other than Klarna ("Third Party Services"). This happens, for example, when you link to third-party sites from our websites, when you access third-party sites while using the web browser in the Klarna app. This Privacy Policy does not apply to the collection and use of your personal information on Third Party Services, and Klarna is not responsible for the processing of your personal information by such third parties.

 

"We", "our" or any other reference to "us" means Klarna Bank AB (publ) registered in the Swedish Commercial Register under number 556737-0431 and having its head office at Sveavägen 46, 111 34 Stockholm (Sweden ). For the purposes of European data protection law, we act as a data controller for personal data received from you, or otherwise about you and collected by us, and we are responsible for using your data in accordance with applicable laws on data protection.

 

1. Learn more about Klarna's privacy 

The processing of your personal data by Klarna Ident and Klarna Open Banking in the execution of the Services takes place in compliance with the provisions of the privacy policies relating to those services, which are presented to you when you use them. Those separate policies apply in place of the information given here. Other specific privacy information may be provided for selected campaigns or offers available for a limited time, and in these cases will be presented together with them.

 

If you are an employee of Klarna or have applied to work with us, or are employed at a shop we cooperate with, Klarna's processing of your personal data is subject to other privacy policies and you will be provided with the information relevant depending on your relationship with Klarna. Contact us using the information in Section 13 below if you would like a copy of the relevant privacy notice that applies to you.

 

2. What data do we use?

2.1 The personal data you provide

You may provide us with information about yourself when you use a Klarna Service, such as when you choose a payment method from those offered by Klarna, when you contact us or use the Klarna App.  Therefore, the user is invited to remember that for the purposes of the correct provision of the Services it is necessary to provide his/her personal data.

 

Depending on the Services chosen, the following personal data may be processed:

  • Identification data and contact details – name, date of birth, tax code, educational qualification, billing and shipping address, e-mail address, mobile phone number, nationality , salary, audio recordings, photos and video recordings of you and your identity card etc

  • Payment data – credit or debit card data (card number, expiration date and CVV code), current account number, etc.

  • Special categories of data  – the user can, at his complete discretion, provide us with information concerning him constituting "special categories" of personal data pursuant to EU Regulation 2016/ 679 ("GDPR"), which includes, for example, data concerning religious beliefs, political opinions or philosophical beliefs, trade union membership, data relating to health, biometric data or sex life or orientation sexual of the person. The user will never be asked to communicate this type of personal data in order to access our Services. This category of personal data may only be provided to us on a strictly voluntary basis and with the explicit consent of the user. Please refer to paragraph 5 for information on how to revoke consent.

 

You can change your profile information, contact details and other editable settings at any time by using the Klarna App or by contacting us.

 

2.2. Your personal data collected by Klarna

Depending on the Service you choose to use, Klarna may collect the following information about you, either directly or through third parties (such as credit reference or fraud prevention agencies, and public consultation database):

  • Identification data and contact details – name, date of birth, tax code, educational qualification, occupation, gender, billing and shipping address, e-mail address, number mobile number, nationality, etc.

  • Information on goods and/or services – data concerning the goods or services purchased or ordered by the user, including, for example, the types of goods or shipment identification numbers .

  • Financial information – financial information collected by third parties regarding income, any loans, negative payment reports, a previous payment or credit acceptance.

  • Information about your interaction with Klarna – how you use the Services, including information about your outstanding debts and payment history debts as well as Klarna's repayment history; technical data such as page response times, download errors, personal preferences; customer interaction with Klarna customer service etc.

  • Recorded telephone conversations – we record the telephone conversations made by the user to customer service.

  • Information regarding the interaction between the user and the stores – the user's relationship with the store where he makes the purchase, such as information regarding the receipt of the goods and the store type.

  • Information about the device  – such as IP address, language settings, browser , time zone, operating system and platform, and screen resolution.Please refer to paragraph 11 below for further information regarding the ways in which we collect data from the user's device  or store them on the same

  • Information from external sanctions and politically exposed persons (PPE) lists – we can analyze your data against those in sanctions and politically exposed persons (PPE) lists so-called “Politically Exposed Persons” (PPE). These lists contain data such as name, date of birth, place of birth, occupation or position and reason for inclusion in said lists.

  • Service-specific information: To provide you with some of our Services, we may collect and process additional personal data not covered by the above categories. Please refer to Section 4 for the additional personal data processed for the relevant Service.

 

3. Type, purpose and legitimacy of the processing of personal data

Depending on the Services used, Klarna may process personal data for the purposes listed below, on the legal basis indicated for each purpose. Please refer to Section 4 below for more information on how we process your data in our Services.

 

Treatment aimed at providing the Services

 

Purpose of processing

Personal data

Legal basis of the processing

Manage the relationship with the user/customer in various ways, for example in relation to the management of the user's payments or to fulfill our obligations deriving from the credit agreements entered into with the user.

Identification and contact details, payment details, information on goods and/or services, financial information, information regarding the interaction between the user and Klarna, information regarding the interaction between the user and the shops, information on the device, specific information about the Services.

Fulfill contractual obligations.

Create and send electronic (non-commercial) information to you.

Identification and contact details, payment details, information on goods and/or services, financial information, information regarding the interaction between the user and Klarna, information regarding the interaction between the user and the shops, information on the device, specific information about the Services.

Fulfill contractual obligations.

Evaluate the best channel for contacting the user and informing him of outstanding debts.

Identification and contact details, financial information (if available) and information regarding the interaction between the user and Klarna.

Klarna has a legitimate interest in being able to contact you in the most efficient way.

 

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Evaluate in which order the different payment methods should be presented to the user at the checkout of a store. This treatment and relative presentation, however, do not affect the payment methods available to you.

 

You can object to this at any time by contacting Klarna using the contact details provided below.

 

This processing constitutes profiling Please read Section 6 for more information on profiling.

Identification and contact information, information about goods and services, information about the interaction between the user and Klarna, and information about the interaction between the user and the shops.

If you have accepted the Klarna Terms of Services set out in Section 4.4, the applicable legal basis is the fulfillment of contractual obligations.

 

However, if you have not agreed to those terms, Klarna bases this processing on a legitimate interest, as Klarna (and you as a customer) have a legitimate interest in having your preferred payment method prominent at the  checkout.

 

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Carry out fact-finding surveys among users/customers regarding their degree of satisfaction with our Services (for example, after having used Klarna's customer service) via email, text message, telephone or other.

 

You can always object to this data processing. The user will also be informed of his right to object (opt-out) from such communications whenever his email address or telephone number is used for this purpose.

Identification data and contact details, information on goods/services and information regarding the interaction between the user/customer and Klarna and between the user/customer and the shops.

Klarna has a legitimate interest in conducting customer satisfaction surveys.

 

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

 

Conduct credit and fraud assessments to determine which payment methods we can offer you based on Klarna's internal data.

Identification data and contact details, information on goods/services and financial information (if already available internally), information regarding the interaction between the customer and Klarna and between the customer and the shop, as well as device data.

Klarna has a legitimate interest in carrying out credit and fraud assessment activities to determine which payment method to offer you.

 

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Carry out creditworthiness assessments before granting  credit (Please refer to Section 4.1 for information on our Credit Services and to Section 7 for information on our methods of cooperation with creditworthiness agencies).

Identification and contact details, financial information and information regarding the interaction between the customer and Klarna.

Fulfill legal obligations if the disbursement of credit is governed by legal provisions. In the absence of legal obligations to be respected, the treatment takes place for the purpose of fulfilling the contractual obligations.

Prevent cyber-attacks (such as DDoS) targeting the Klarna Services as part of our efforts to ensure the continuity and security of our Services

Identification data and contact details, information regarding the interaction between the customer and Klarna and between the customer and the stores, as well as data relating to the devices used.

To pursue Klarna's legitimate interest in ensuring the security of its Services.

 

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Ability to manage the client's vulnerability (if, due to personal circumstances, he is in a vulnerable position).

Identification data and contact details, information regarding the interaction between the user and Klarna, special categories of personal data.

Based on the customer's consent.

Improve our Services, for the training of our operators and guarantee the quality of the services as well as documenting what has been agreed and decided between the user and Klarna customer service.

Recording of telephone conversations.

Klarna has a legitimate interest in improving its Services, and providing training and quality assurance.

 

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Communicate user data to shops, suppliers and other subjects. (Refer to Section 7 for more information regarding our ways and purposes of sharing user data).

All categories of personal data referred to in paragraph 2.

Depending on the recipients, please refer to Section 7. For example, Klarna has a legitimate interest in using suppliers for the purpose of providing the Services and may be subject to a legal obligation to disclose data to authorities . The communication of data to payment service providers is required for the execution of the payment contract stipulated with the user.

Perform risk analysis, prevent fraud and manage risks (for example by ascertaining the user's identity and carrying out checks with agencies responsible for fraud prevention and the like).

 

Please refer to paragraph 7 for a more specific description of the fraud prevention companies we cooperate with.

Identification and contact details, payment details, information on goods and/or services, financial information, information regarding the interaction between the user and Klarna, information regarding the interaction between the user and the shops, special categories of personal data, information on the device.

Klarna and other parties (in particular, its customers) have a legitimate interest in carrying out business risk management activities, for example by addressing fraud risks.

 

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

 

Klarna also has a legal obligation to establish the identity of its customers.

 

Special categories of data are processed on the basis of your explicit consent.

Carry out activities related to debt collection (e.g. collection and assignment of credits).

Identification and contact details, information on goods/services, financial information and information regarding the interaction between the customer and Klarna and between the customer and the shops.

Klarna has a legitimate interest in carrying out the debt collection and assignment business.

 

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Product improvement and research

Anonymize your personal data for the purpose of analyzing customer behavior for product development.

Identification and contact details, payment details, information on goods and/or services, financial information, information regarding the interaction between the user and Klarna, information regarding the interaction between the user and the shops, information on the device, specific information about the Services.

Klarna has a legitimate interest in anonymizing your personal data for product development purposes for customer behavior analysis.

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Perform data analysis to improve and test products (for example, to improve models aimed at preventing risk and fraud).

Identification and contact details, payment details, information on goods and/or services, financial information, information regarding the interaction between the user and Klarna, information regarding the interaction between the user and the shops, information on the device, information from external lists relating to sanctions and politically exposed persons (PPE), specific information on the Services.

Klarna has a legitimate interest in analyzing data for product development and testing.

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Allow internal analyzes and development of statistical models.

Identification and contact details, payment details, information on goods and/or services, financial information, information regarding the interaction between the user and Klarna, information regarding the interaction between the user and the shops, information on the device, specific information about the Services.

Klarna has a legitimate interest in enabling internal analytics for the development of statistical models.

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Allow external research, for example conducted by universities or other entities.

Identification and contact details, payment details, information on goods and/or services, financial information, information regarding the interaction between the user and Klarna, information regarding the interaction between the user and the shops, information on the device, specific information about the Services.

Klarna has a legitimate interest in enabling external research and contributing to the general interest of society in supporting research

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

 

Compliance and mitigation of Klarna exposure to lawsuits

 

Comply with applicable legislation, such as anti-money laundering and accounting legislation and related to compliance with capital adequacy requirements.

Identification and contact details, payment details, information on goods and/or services, financial information, information regarding the interaction between the user and Klarna, information regarding the interaction between the user and the shops, information on the device, information from external lists relating to sanctions and politically exposed persons (PPE), specific information on the Services.

Fulfillment of legal obligations.

Analysis of the lists relating to sanctions and politically exposed persons (PPE).

Identification data and contact details, information contained in the lists relating to sanctions and politically exposed persons (PPE).

Fulfillment of legal obligations.

To protect Klarna from legal action and enforce its rights under the law.

All categories of personal data referred to in paragraph 2.

Klarna has a legitimate interest in defending itself against legal claims, and in the enforcement of its rights deriving from the law.

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

 

Commercial offers

 

Providing customers with proposals and commercial offers regarding our services.

It is always possible for the user to use the opt-out by contacting us: see paragraph 13.

Identification data and contact details, information regarding the interaction between the customer and Klarna and between the customer and the shops, specific information about the Services.

Klarna has a legitimate interest in providing customers with marketing and commercial offers.

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Select the commercial offers to be provided to the user. This data processing ceases when the user opts out of receiving commercial offers.

Identification data and contact details, information on goods/services, information regarding the interaction between the customer and Klarna and between the customer and the shop, information on the  device, specific information on Services.

Klarna has a legitimate interest in selecting commercial offers to be provided to you.

It ensures that the processing carried out for these purposes is necessary to achieve our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

Provide links sponsored products and services of the shops. Information about products/services, information about the interaction between the user and Klarna, information about the interaction between the customer and the shops, information about the device and specific information about services

Klarna has a legitimate interest in providing sponsored links to promote our shops in the Klarna app and on our website.

 

We guarantee that the processing carried out for this purpose is necessary to satisfy our legitimate interest, and that our interest exceeds that of the user in not having their data processed.

 

4. Processing of specific personal data for certain Services

This paragraph indicates the processing operations of the user's personal data carried out specifically for certain Services. Please refer to the terms and conditions of the relevant Service for further information regarding our Services and their characteristics.

 

4.1 Klarna Credit Services

The following Services concern the disbursement of credit in favor of the user: Deferred payment (invoice), Immediate payment (in case of direct debit), Financing, the Klarna Card and the disposable card ( both available in the Klarna app). For the purpose of providing these Services we carry out a credit assessment of the user, based on the identification data and contact details provided by the user, information regarding the interaction between the user/customer and Klarna and financial information. Financial information includes information obtained externally from credit rating agencies, such as income and payment reports. Please refer to paragraph 7 for further information on our treatment of creditworthiness.

 

The Klarna Card and disposable paper

When you apply for Klarna Card and Disposable Card (available in the Klarna App), Klarna conducts a credit assessment of your/customer in the same way it does with respect to other credit services. If the customer owns the Klarna Card, the customer's credit rating is constantly updated, and is based on the customer's interaction with Klarna.

 

We share data about you and your purchases when you use your Klarna Card with VISA and with members of the VISA network, as necessary to process your card, prevent fraud and follow applicable rules. If you renew your Klarna card or receive a new one, we transfer this information to VISA so that VISA informs third parties where you have stored your card data (for example in case of recurring transactions).

 

In addition, if you add your Klarna Card to your e-wallet, we may need to share your information with your e-wallet service provider as described in that provider's privacy policy.

 

4.2 The user clicks on one of our promotions or announcements of events published by third parties on social media

If you click on one of our promotions or event announcements posted by third parties on social media, we may receive contact details about you provided in connection with your profile used on that social media (such as name, address e-mail and telephone number and any other relevant commercial information such as company name, address and sector of activity).

 

4.3 Klarna's accounts (savings and payment accounts)

If you hold an account with Klarna, Klarna will also process data relating to your transactions and funds. If you transact or make payments to other accounts, Klarna will pass on the name and account number of the user to the recipient and the recipient's financial institution.

 

Furthermore, if you have made payments to a Klarna account, Klarna will process the data received from the bank that you used for the transaction including your name and account number.

 

4.4 The user experience provided by Klarna under the Terms of Service

In order to provide you with a smooth experience before and after your purchase, Klarna offers the services described below, which are also described in more detail by the Klarna Terms of Services. The use of these Services involves the processing of the user's personal data as indicated below:

 

Operation history

We save information relating to goods and services purchased by the user through our Services, or those that we have otherwise been permitted to access, in order to be able to show them to the user.

 

Automatic filling of information 

The automatic filling of users' contact information can be done in two ways: through user interaction and/or through i cookies.

 

Autofill through user interactions

When you use the Services, we may ask for your identification and contact details, such as your name, address, telephone number, e-mail address, date of birth and/or identification card number. We will hold this information in our systems and on your return you will only need to provide a few contact details such as telephone number, email, postcode or ID (depending on country) in order for us to fill in automatic the remaining fields with the further data.

 

Automatic filling via cookie

Another method of automatic data filling occurs through the installation of a Klarna cookie on the device of the user (computer, tablet, telephone mobile) which allows the user to decide whether to save their data such as name, address, telephone number, e-mail, date of birth, ID number and card details on the Klarna platform. In this case we will use the  cookie to import the data already stored by Klarna when you use our services with the same device. We will then automatically fill in the data when you interact with Klarna.

 

Deactivation of the automatic filling function

If you don't want to use the autofill feature, you can contact us to turn this setting off. You can also change your settings directly through the Klarna App or in the shopping process at a store. Finally, the user can delete the  cookies  from his device, thus also eliminating ours.

 

Preferred payment methods pre-selected

Klarna can determine your preferred payment method for purchases, and pre-select it for you. This procedure, however, does not affect the payment methods available to the user. To this end, Klarna processes data about your interactions with Klarna, such as data about your past payment methods, purchases, amounts and shop.Such data processing constitutes profiling. Please refer to paragraph 6 for further information on profiling.

 

Offers and benefits

In order to provide you with offers and benefits such as discounts, special events, product pre-sales, promotions, commercial offers, samples, giveaways, etc., we consider information about your interactions with Klarna (such as the number of purchases in a given period of time) and data to contact and identify the user. These are activities that may involve a profiling activity. Please refer to paragraph 6 for further information on profiling.

This data will form the basis for Klarna's customer and marketing analyses, for the development of the company's business and processes, as well as for statistical purposes.

As part of the offers and benefits program, Klarna, its suppliers and subcontractors (on behalf of Klarna) may use this data to communicate offers and benefits to you by postal mail, SMS,  email, social media and other digital channels. Klarna and its suppliers and subcontractors will not use any direct marketing channels for this purpose (e.g. email or text messages) if the user has expressed the opt-out to receive  marketing actions  direct (i.e. if the user has not expressed the opt-in if the same is required by national legislation).

To express the opt-out to receive offers and benefits, the user can unsubscribe through the link indicated in the emails sent by Klarna or by contacting Klarna (see paragraph 13).

 

The Klarna App

If you use the Klarna App, some additional personal data will be processed (for example, information uploaded by you based on your consent) in order to ensure the provision of the Services you choose to use at the within the App, as indicated below. Additionally, when you choose to redeem rewards or participate in specific offers, the provider of those offers may infer that you are using Klarna's services. The personalization of content constitutes a profiling of user data, which is an integral part of the Klarna Shopping Assistance App online; see Section 6.

for more information
  • Articles and personalized ads: the user will be able to see personalized articles and ads based on previous purchases, contact details and identification data, data on goods or services, data relating to interaction between you and Klarna, data about your interaction with the stores, data about your device, and service-specific data.

  • Sponsored links: if the user clicks on a link that promotes a store, product or service, the user you will be redirected to the store's website via a third party, a so-called "affiliate network" (see paragraph 7.14 for further explanation). The affiliate network may place tracking technology on the user's device containing data relating to the user's click on the link sponsored in the App Klarna and which is then used to track your visit to a shop in order to calculate a potential commission to Klarna.
  • Personalized overview of Klarna: it is possible to view the overview to consult the status of purchases made with Klarna and the relative history, access any refunds and pay or extend the payment terms

  • Personalized shopping collections: If you have shared information, topics, products and services that interest you in general with Klarna, Klarna will use this information to provide you with personalized shopping collections, where you can find products and services on measures customized according to your interests.
  • Shipping and parcel tracking: in some cases, the user can trace the route of shipments.

  • Ability to "follow" shops: if the user decides to "follow" a shop, he receives information on the offers connected to that shop. Klarna will automatically evaluate whether those purchases grant access to discounts or other offers as part of the current offer.

  • Credit Services: We may offer users credit based on previous purchases.

  • Shopping with a disposable card: Shopping through the Klarna App is one of the ways to use Klarna's payment methods in almost any store via a disposable card. When you use your disposable card, Klarna collects information about your purchases and displays it to you in the app.
  • Customer Service: When customer service is contacted through or in connection with the Klarna App, we will have access to the information you provide.

  • Email Connect: if you have connected your email account to the Klarna Email Connect service, Klarna will log into your email account on a regular basis to extract further information relating to the goods and services and your interaction with the stores to upload that information to the Klarna App. The user can deactivate the service at any time, by removing the access of Klarna.

  • Find shop: You can choose to share your location with Klarna, in which case we will allow Klarna to use this information to show you nearby shops. You can withdraw your consent by disabling sharing on your device. Klarna will not retain your location after showing you shops.

  • The web browser in-app: The Klarna app contains a web browser where you can access store websites and online shops and then shop with Klarna payment methods even with stores that do not yet use our payment methods. Klarna collects information about your browser usage in order to provide you with relevant offers. Furthermore, the websites visited by the user can set their own cookies and other tracking technologies on his device.

  • Visual search: the user can choose to upload product photos,  either by taking a photo of the product or choosing a photo from their phone's library, and Klarna will try to find products similar to the ones uploaded to show to the user.

  • Wishlist: You can choose to add products and services in the Klarna app to your Wishlist, so you can find them later, or keep track of their prices. He can also share his Wish List with other people, such as friends and family, who will then be able to see his profile photo and username.In some cases, if you are logged in to a store website, a link to a product or service you have chosen to add to your Wish List may include personal information such as your email address

  • Connected bank accounts (the Personal Finance Service): Using this service will allow the user to obtain an overview of their finances, including not only their transactions with Klarna, but also with connected bank accounts. When you choose to use this Service, Klarna will process information regarding external account and other accounts (such as card accounts) that you choose to connect, and will collect personal data such as account number, bank, transaction history account, funds and available goods. Based on this data, Klarna will visualize and provide you with tools to control your finances through offers tailored to your specific situation (based on profiling, as explained in paragraph 6). This is accomplished by comparing your charges with those of other users of the Service. Based on this comparison, Klarna, together with its partners, can offer ways to minimize fixed and non-fixed costs.

  • Profile picture: You can choose to upload a profile picture to the Klarna app, in which case you give your consent for the picture to be shown in various Klarna interfaces (such as in the checkout of Klarna in a shop, or in the Klarna App). Klarna skins can also be installed in store apps. The photo may also be shown to others if you share your device with others (using autofill through i cookies), or if you choose to share the content of your Klarna App with others. You can withdraw your consent at any time in accordance with paragraph 5, and Klarna will then delete the image.

 

5. Withdrawal of consent

In cases where Klarna processes the user's personal data based on consent, even explicit (for example if a power of attorney is presented that allows another person to access your data, or in the case of a declaration of vulnerability of the customer or if you have uploaded particular data to our Services), you can withdraw your consent at any time by contacting us or by deleting your uploaded data in the Klarna App. The withdrawal of consent will not harm the user as said data are not required for the purpose of providing the Services.

 

6. Profiling and automated decision making

"Profiling" consists of the automated processing of personal data aimed at examining certain personal characteristics of the user, such as aspects of his financial situation or his preferences, such as purchasing preferences. We use the profiling of the personal data of users that we have in order to make individual or automated decisions concerning the user for the purposes indicated below.

 

Decisions without legal effect or of similar importance

Klarna makes the following decisions without legal effect or similar relevance to the user:

  • predict potentially interesting commercial content. The user can always oppose this type of commercial offer and unsubscribe from marketing or profiling by contacting us. Please refer to paragraph 3 for further information on the processing of personal data for marketing purposes;

  • decide which loyalty rewards best suit the user. Please refer to paragraph 4.4 "Offers and benefits" for further information;

  • decide on the most appropriate way to inform the user about his outstanding debt position. Please refer to paragraph 3 for further information;

  • select content for users to view in the Klarna App. Please refer to section 4.4 "The Klarna App" for more information;

  • select the order in which the different payment methods should be presented to the user at checkout in store.

In addition, some of our Services (such as connecting bank accounts and other similar accounts with the Klarna App), use profiling in order to be able to provide the applicable Service to you, such as communicating information to you relevant financial assets or a range of offers, in accordance with the terms of the Service.

 

Decisions having legal effect or similar relevance

Automated decision making having legal effect or automated decisions with similar relevance means that some decisions in our Services are based solely on automatic means, without any interaction from our employees and have a significant impact on you as a consumer. Through automated decisions, the objectivity and transparency in the decisions in the offer of those Services are increased.

We use this type of automated decision making when:

  • we decide to approve your request to use a Credit Service;

  • we decide not to approve your request to use a Credit Service;

  • we decide whether the user is engaging in behavior with a risk of fraud or money laundering, if our processing operations reveal that the user's behavior is attributable to money laundering or fraudulent behaviour, or that the user's behavior is inconsistent with previous uses of the Service or in the event of suspected and deliberate misrepresentation of their identity. If applicable, Klarna also checks whether or not a particular customer is on a so-called anti-money laundering list.

 

Refer to paragraph 3 for further information on the type of data processed for these purposes.

 

You always have the right to contest an automated decision that has legal or similar effect  (together with related profiling) by contacting us via the email address referred to in paragraph 13. A Klarna employee will deal with then appropriate.

 

7. Disclosure of User Information

We may need to share your personal data with the categories of recipients listed below for the purposes listed below. The recipients and the purposes for which the data are communicated depend on the Services used by the users. When we share your personal data, we take all reasonable contractual, legal, technical and organizational measures to ensure that your personal data is treated with an adequate level of protection and in compliance with applicable law.

 

7.1 Suppliers and sub-suppliers 

Klarna may share your personal data with the suppliers and subcontractors it uses to provide the Services. Suppliers and subcontractors are companies authorized to process data received by Klarna or on behalf of Klarna. By way of example, this category includes suppliers of software and data retention services, providers of payment processing services and business consultants.

 

72 Stores 

Klarna shares personal data with the shops you visit or shop at (which may include companies within the shop group, if you have been notified by the shop). This is done to allow the store to execute and manage the purchase and administer the relationship with the store or its group, such as verifying the customer's identity, shipping the goods, handling queries and disputes, sending relevant offers and fraud prevention. Personal data shared with a store will be subject to privacy policies.

 

7.3 Payment service providers ("FSP") and financial institutions   

The FSPs provide shops and Klarna with services for accepting and processing electronic payments through a variety of payment methods, including credit cards, and payments by direct bank debit, bank transfers etc. Some shops use FSP with which they share user data for payment processing. The sharing is carried out in compliance with the privacy policies of the shops. Stores may also, for payment processing and administration, require us to share user information with FSPs. Some FSPs collect and use user data themselves, in accordance with their respective privacy policies. This occurs for example if you use an electronic wallet.

Also, in order to carry out transactions, Klarna may share your data with other financial institutions when you transact with your account.

 

7.4 Credit rating agencies 

If you request to use a Credit Service (please refer to paragraph 4.1 for the specification of the relevant Credit Services), your personal data may be shared with credit reference agencies ("ARCs"). evaluate your credit score in connection with your credit application, to confirm your identity and contact information, and to protect you and other customers from fraud. Such sharing constitutes a credit check.

In Italy, Klarna sends your address, date of birth and tax code to credit bureaus in order to have your profile checked.

Our checks affect the assessment of the creditworthiness agencies relating to your credit profile. In addition, Klarna shares information about your refunds (including late refunds and undisputed payment defaults) with credit reference agencies, and this data may be included in credit default files, which may also influence the assessment. carried out by creditworthiness agencies, and be consulted by third parties. The creditworthiness agencies process your data in accordance with their own privacy policies; below you can find a list of the creditworthiness agencies with which we cooperate.

Your attention is drawn to the fact that Klarna only stores the credit rating received from an ARC in data script format. It is therefore advisable to request a copy of the assessment directly from the ARC if you wish to read it in a legible way.

 

7.5 Fraud prevention and identity verification agencies

Your personal data may be shared with fraud prevention and identity verification agencies for the purpose of verifying your identity, the accuracy of the data you provide and the prevention of criminal activity.The agencies we cooperate with in Italy are listed here The user's attention is drawn to the fact that these companies process data in accordance with their own privacy policies.

 

7.6 Klarna Group Companies

User data may be shared with other Klarna group companies, based on Klarna's legitimate interest in conducting its business.

 

7.7 Social media companies

If the user contacts us through social media such as Facebook or Twitter, his data will be recorded and processed by these companies in parallel with us, in accordance with the respective applicable privacy policies.

 

7.8 Holder of power of attorney provided by the user

Klarna will share your data on the basis of your consent, if it has received from you a power of attorney in favor of a third party. This sharing will be carried out on the basis of the user's consent.
 

7.9 Google

When you use Google Maps in the checkout (for example, by searching for your address in the appropriate search section) or the Klarna App, Google will process your information subject to the terms of service and to the privacy policy of Google Maps/Google Earth. Furthermore, when you use the Klarna App via a browser, Google collects information about your device through the reCAPTCHA service implemented there, sometimes in combination with any information entered in the reCAPTCHA service. Google will process this information in compliance with its  privacy policy. Klarna processes this data on the basis of its legitimate interest in conducting its business, as the reCAPTCHA service prevents the abuse of its Services.
 

7.10 Authority

Klarna may communicate the necessary data to the police, tax or other authorities, if required by law or by the user in certain circumstances or if necessary to manage tax deductions. By way of example, communications required by law are those relating to obligations relating to anti-money laundering or the prevention of terrorist financing.

 

7.11 Logistics and transport company

Klarna may share your personal data with logistics and transport companies for the delivery of goods or if you have chosen to track/monitor the shipment. For example, we may share contact details and identification data and tracking number. Please note that logistics and transport companies will process the data in accordance with their own privacy policies.

 

7.12 Partner in the Personal Finance Service and in the Program of Offers and Benefits

If you choose to participate in offers and benefits (benefit) that Klarna provides in the Personal Finance Service or through the Offers and Benefits Program, Klarna may share personal data necessary to enable you to access offers made in cooperation with our partners (this includes the fact that you are a customer of Klarna). Information about what data is shared is provided with each offer. 

 

7.13 Debt collection agencies and other purchasers of outstanding receivables 

Klarna may share your data in the event of an assignment of outstanding debts to third parties or an assignment for collection of such debts, for example to debt collection agencies.This sharing of personal data is done on the basis of our legitimate interest in carrying out the credit collection and assignment business. Collection agencies or any other buyer may process your personal data in accordance with their own privacy policies or in representation of Klarna.

Collection agencies or any other buyer may also report your unpaid debt to credit reference agencies, which may affect your credit score and ability to obtain credit in the future.

 

7.14 Affiliate networks

Klarna may share the information that the user has clicked on links sponsored (i.e. links promoting shops, products or services) with so-called "affiliate networks". This sharing takes place when you click on a sponsored link, as you are redirected to the store's website via the "affiliate network". The affiliate network may place tracking technology on your device that contains the information that you have clicked on a sponsored link in one of Klarna's interfaces, in order to track your visit to a store to calculate potential commissions in Klarna. Affiliate networks may process your personal data in line with their own privacy policies.

 

7.15 Assignment 

  • If Klarna buys or sells any credit, business or asset, it may share your personal data with the prospective buyer or seller of credit, business or good.

  • If Klarna itself or substantially its entire company is acquired by a third party, personal data of Klarna customers may be shared.

 

8. Klarna's storage of your personal data

We are committed to processing your personal data within the EU/EEA area. In certain circumstances, such as when we share your personal data with a Klarna Group company, supplier or subcontractor based outside the EU/EEA area, your personal data may also be transferred and processed in a location outside the EU/EEA area. If the shop where the user makes the purchase is located outside the EU/EEA area, sharing personal data with the shop will also involve the transfer of data outside the EU/EEA area.

We ensure that an adequate level of personal data protection is maintained and that adequate protection measures are taken in accordance with applicable data protection legislation such as the GDPR, when your personal data is transferred outside outside the EU/EEA area. These safeguards consist in ensuring that the third country or state in question is subject to an adequacy decision by the European Commission, or implements the standard contractual clauses of the European Commission.

 

9. Duration of personal data processing

We process your data for the period of time necessary to achieve the purposes of the processing. These purposes are described in this Privacy Policy. Therefore, the user's personal data will be kept even when a purpose ceases to exist if so required for different purposes, and exclusively for the same.In particular:

  • if you have accepted the Terms of Services of Klarna and for the duration of these Terms (by asking us or giving us instructions to cancel of data for example by virtue of the right to cancellation / to be forgotten), we will process the personal data necessary for the provision of the Services to the user, including without limitation data relating to previous purchases;

  • we process your personal data relating to inventory credits, for the purpose of re-evaluating creditworthiness for a period of 90 days from the date the search was conducted;

  • we process personal data concerning debts for the purpose of reassessing creditworthiness for a period of 3 years from the date of repayment of the debt by means of settlement, write-off or assignment made by Klarna;

  • we keep telephone records for a period of 90 years to ensure quality assurance;

  • we process your personal data in compliance with applicable laws, such as consumer protection, banking, anti-money laundering and accounting legislation Depending on the applicable law, your personal data may be kept for the maximum period 10 years from the end of the relationship with the customer.

 

10. Your rights with respect to your personal data

  • Right of access to information. The user has the right to obtain information on how his data is processed. We fulfill this obligation with this Privacy Policy, through the information available on the website and with our responses to requests sent to us by the user.

  • Right of access to data. The user can request a copy of his data if he wants to know which data concern him. We can provide a copy of this data in electronic format (i.e., the "data portability").

  • Right of rectification. The user has the right to obtain the rectification of inaccurate or incomplete data concerning him.

  • Right to cancellation (to be forgotten). The user has the right to request the cancellation of their personal data, for example when they are no longer necessary with respect to the purposes for which have been collected or when consent has been withdrawn. As specified in paragraphs 3 and 9 above, however, Klarna must comply with certain legal obligations that prevent us from immediately deleting some of your personal data.

  • Right to limit data processing or to oppose data processing. If the user believes that the data is incorrect or that it is being processed unlawfully, these have the right to ask us to interrupt the processing. The user can also oppose the treatment when he believes that there are circumstances that would make such treatment unlawful. Furthermore, you can always object to our use of your data for direct marketing.

  • Right to contest an automated decision. You have the right to contest an automated decision made by Klarna. See Section 6 for more information on how Klarna uses automated decisions.

  • Right to withdraw consent. As per Section 5, where Klarna processes the relevant data based on your consent (whether explicit or not), you you can revoke your consent at any time.

  • Rights to the application of the instructions post-mortem.The user has the right to issue (or to designate the person authorized to do so) instructions on the conservation, cancellation and communication of personal data after death)

  • Right to lodge a complaint. You have the right to lodge a complaint with a National Supervisory Authority or the Swedish Data Protection Authority. The complaint to the Swedish authority can be forwarded through the website  https://www.datainspektionen.se/other-lang/in-english/.

  • Control your service settings. In the Klarna App, Klarna allows you to customize your preferences for certain Services, for example in regards to whether you can receive notifications or customized commercial proposals. We will always respect your choices.

 

11. Cookies and other tracking technologies

We use cookies and similar tracking technologies to provide a pleasant and personalized experience in our interfaces online, such as on our site, the Klarna App and the checkout of the shops that cooperate with Klarna. You can find information about the tracking methods used by Klarna, and accept or decline the tracking technologies in the related interface.

 

12. Updating of the Privacy Policy 

We are constantly working to improve our offer of Services, in order to provide you with an increasingly pleasant experience. This includes both changes to existing Services and the offering of new Services over time. For this reason it is important to read this Privacy Policy each time you use a Klarna Service, as the treatment of your personal data may be different than the last time the Services were used.

 

13. How to contact us

Klarna Bank AB (publ) is a company registered in the Swedish Commercial Register under number 556737-0431. Klarna's head office is at Sveavägen 46, 111 34 Stockholm (Sweden).

 

Klarna has a data protection officer and a team of data protection specialists exclusively dedicated to data protection and privacy. Klarna also has a dedicated team of customer support specialists for data protection issues. Further information can be requested by writing to privacy@klarna.co.uk.

 

Klarna Bank AB (publ) is subject to Swedish data protection law. Further information about Klarna can be found at www.klarna.com.

 

The owner of your personal data is Klarna Bank AB (publ), a company subject to Swedish data protection law. For more information about Klarna, visit  https://www.klarna.com/international/. "

 

Last updated: December 3, 2020

.