KLARNA PRIVACY NOTICE
It is important to us that you feel secure when paying with Klarna or using any of our other services. Therefore, in this privacy notice we provide all the information about how we use your personal data.
So that you can easily find the sections that interest you, we have divided the notice into several headings. To go directly to a section, just click on the relevant heading in the list below.
-
Who is responsible for the processing of your personal data?
-
What personal data is used for what purposes and on what legal basis?
1. Who is responsible for the processing of your personal data?
Klarna Bank AB (publ), registered with the Swedish Companies Register under company number 556737-0431 and having its registered office at Sveavägen 46, 111 34 Stockholm (“Klarna”, “we”, “our” or “us”) , is responsible for data processing in accordance with the. If you have any questions about the processing of your personal data, please contact our data protection team by writing to privacidad@klarna.es .
2. Your rights in relation to your personal data
-
The right to obtain information. You have the right to obtain information about how we treat your personal data. We do this through this privacy notice, through information on our website, and by answering your questions.
-
Right of access to your data. You can request a copy of your personal data if you want to know what information we hold about you.
-
Right to data portability. You may request a copy of the personal data concerning you that we process for the performance of a contract with you, or based on your consent, in a machine-readable format.
-
Right of rectification. You have the right to rectify inaccurate information about yourself and to complete incomplete information.
-
Right of erasure. You have the right to request that your personal data be deleted. This applies to information that is no longer required to be processed for the purpose for which it was originally collected, or if you withdraw your consent. However, it is important to know that the right to delete your data is not absolute. Klarna is required to retain certain information even if you ask us to delete it. These information retention obligations are described in more detail in the sections 4 and 9 . These laws prevent us from immediately removing certain information.
-
Right to limitation of treatment. If you believe that the data is inaccurate, that our processing is unlawful, or that we do not need the information for a specific purpose, you can request that we limit the processing of your personal data. You can also request a limitation while you await our evaluation to see if our interest in the processing of your data prevails over your right not to have it processed.
-
Right to oppose the processing of your personal data or to oppose our treatment. You can object to our processing of your personal data based on our legitimate interest (Article 6, paragraph 1, letter f) of the GDPR), in relation to your personal circumstances. In addition, you can always object to our use of your personal data for marketing purposes.
-
Right to object to an automated decision that significantly affects you . You have the right to object to an automated decision made by Klarna if this decision has legal consequences or constitutes a decision that significantly affects you in a similar way. See the section 6 about how Klarna makes use of automated decisions.
- Right to withdraw consent. As described in the section 5 , where we process your personal data based on your consent, whether implied or explicit, you have the right to withdraw your consent at any time. This means that we will stop the treatment, but it does not affect the treatment that we have already carried out
- Right on the classification of post-mortem data. You have the right to give (or designate the person empowered to do so) instructions regarding the retention, deletion and communication of your personal data after your death.
- Right to File a Claim . You have the right to file a claim with Integritetsskyddsmyndigheten , which is Klarna's Swedish supervisory authority for the processing of personal data. can reach Integritetsskyddsmyndigheten through the next link .
If you wish to exercise one or more of your rights, you can do so by sending an email to privacy@klarna.es indicating what rights you wish to exercise. You can also request access to your personal data, or its deletion, by filling in This formulary which is available in our website . For other questions, please see the contact information on the section 12 .
Settings in the Klarna mobile app: In the Klarna mobile app, Klarna provides you with the functionality to tailor your preferences for certain services, such as current notifications or auto-filling of your information on purchase. We will always respect your decisions.
3. What kind of personal data do we collect?
In this section, we describe the categories of personal data that we use. In the section 4 , we describe the purposes of our processing of these categories of personal data, that is, how the data is used.
- Contact and identification data - Name, date of birth, social security number, job title, occupation, gender, billing and delivery address, email address, mobile phone number, nationality, age, income information, audio recordings, photos and video recordings of you and your ID, etc.
-
Information about products/services - Details regarding the products/services you have purchased or ordered, such as the type of item or the delivery tracking number.
-
Information about your financial situation - Information about, for example, your income, any credit, negative payment history, and previous credit approvals.
-
Payment information - Credit and debit card details (card number, expiration date and CVV code), bank account number, bank name.
-
Information about your use of Klarna services - which service(s) and different features of these services you have used and how. This includes information about your outstanding and historical debt, your repayment history, and your personal preferences.
-
Technical information generated by your use of Klarna services - Technical data such as the response time of web pages, download errors and the date and time you used the service.
-
Information about your contacts with Klarna customer service - recorded phone calls, chat conversations and email correspondence.
-
Your contacts with the stores where you buy or visit - Information about how you interact with stores, such as whether you have received products and the type of store you shop at.
-
Device Information - IP address, language settings, browser settings, time zone, operating system, platform, screen resolution and similar information about the settings of your device.
- Information from external sanctions lists and PEP lists - Sanctions lists and Politically Exposed Persons (“PEPs”) lists include information such as name, date of birth, place of birth, occupation or title, and the reason the person It's on the list in question.
- sensitive personal data - Sensitive personal data are those that reveal political opinions, religious or philosophical convictions, or union affiliation or constitute information about health, sexual life or sexual orientation, as well as biometric data.
-
Service-specific personal data - in the framework of our services via the Klarna mobile app, Klarna savings and payment accounts, Connect by Email, Personal Finance and for event registrations, we use additional personal data that is not included in the categories mentioned above. Here you will find information about each service:
-
The Klarna mobile app: Any content you upload to the App (such as photos or receipts), location information, information about how you use your browser and the websites you visit;
-
Klarna savings and payment accounts: Information about your transactions and deposits and information about where your money came from. Klarna will also process data from third parties (such as payees or payers) for this service;
-
Connect by email: Information from the connected email account about your purchases made, information about the product, price and quantity, delivery tracking numbers and information about the stores that we pass on to the Klarna mobile application;
-
Personal Finance: Information from your other bank accounts and other types of accounts (such as card accounts) that you choose to connect to the service, as well as information such as account number, bank, historical transactions of your connected accounts, and balances and assets
-
Registration of the event on social networks: Information about your profile from your social media account and business information, such as your employer's name, address, and type of business.
-
You can also find detailed information about the personal data relevant to each service in the terms and conditions that we have listed. here .
4. What personal data is used for what purposes and on what legal basis?
To make it easier for you, we have described what we will use your personal data for (the purpose) and which categories of personal data we use for this in the tables below. In the section 3 , you will see what data is included in each category of personal data. In the tables, we also describe what legal rights we have under applicable data protection law, such as the GDPR, to process data about you, which is called our "legal basis." The tables also describe when Klarna stops using personal data for each purpose. Finally, we describe if it is data that we receive from you, or if it is information that Klarna receives from another source. If we receive data from another source, this is indicated in parentheses.
|
Purpose of the treatment: what we do and why |
Categories of personal data used for the purpose, and its origin (the source). see the section 3 for more information on what each category contains. |
Legal basis for processing under the GDPR |
When purpose wanes (see section 9 for more information on when data is deleted) |
|
To manage our customer relationship with you in accordance with our agreements, for each service you use. This includes creating and sending information to you in electronic (non-marketing) format. |
From you:
From other sources:
|
The processing is necessary for Klarna to perform a contract with you (Article 6 para. 1 lit. b) GDPR). If the service processes information that constitutes sensitive personal data (for example, from materials that you choose to upload), our treatment is based on your explicit consent (article 9.2.a of the GDPR). |
When there is termination of the contract between you and Klarna. |
|
Being able to carry out customer satisfaction surveys and market studies, through email, text messages, telephone or through other communication channels. If you do not want us to carry out this treatment, please contact us to let us know. see the section 2 for more information about your rights. see the section 12 for our contact information. |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in being able to carry out the processing of personal data, that the processing is necessary to achieve that purpose, and that our interest prevails over your right not to process your personal data. data for this purpose. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
When there is termination of the contract between you and Klarna. |
|
Ensuring network and information security in Klarna services. |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in being able to guarantee network and information security, that the processing is necessary to carry out that purpose, and that our interest prevails over your right not to your data is processed for this purpose. It is also in your interest as a customer that we ensure good information security. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
This treatment lasts as long as the service is used. |
|
To be able to help you as a vulnerable customer (ie if you need additional support when contacting us due to particular circumstances). This means that we can offer you special help, for example when you contact customer service. |
From you:
From other sources:
|
Based on your consent (Article 6(1)(a) and Article 9(2)(a) of the GDPR). |
When you notify us that you are no longer a vulnerable customer or withdraw your consent. We will also stop processing your data when you notify us that you no longer wish to be a Klarna customer. |
|
Be able to perform risk analysis, prevent fraud and carry out risk management. We carry out the treatment to confirm your identity and that the data you provide us is correct, as well as to counter criminal activities. This processing constitutes profiling and automated decision-making. To do this, we use automated decision making in order to determine if you are a fraud risk. see the section 6 for more information on profiling and automated decisions. |
From you:
From other sources:
|
The processing is necessary for Klarna to enter into and perform a contract with you (Article 6 para. 1 lit. b) GDPR). We are also required by law to establish the identity of our customers (Article 6 Paragraph 1 Letter c GDPR). ( Swedish Law (2017:630) on measures against money laundering and financing of terrorism ) Sensitive personal data is processed on the basis of your explicit consent. |
This processing will take place while you use any Klarna service. If Klarna has identified a risk in your use of Klarna, we will continue to use your information for this purpose and will continually update our risk assessment if there is a risk of fraud. This treatment will last as long as the law requires us to keep your data. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
Anonymize your personal data to improve our services and products and analyze customer behavior. |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing interests, Klarna has determined that we have a legitimate interest in anonymizing your personal data for product development purposes and in analyzing customer behavior to improve customer service and experience. We ensure that the particular processing involved is necessary to achieve the purpose in question, and that our interest prevails over your right not to have your data processed for this purpose. By anonymizing the information that concerns you, we also ensure that we use personal data as little as possible. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
This processing takes place for the entire period in which Klarna must keep the information on its systems, for example, to perform the contract executed with you or to comply with applicable legislation. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
To carry out data analysis for product development and testing to improve our credit and risk models and to design our services (if possible, we first anonymise the data, which means that no personal data processing takes place from so). |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in conducting data analysis for the purposes of product development and testing. We make sure that the treatment involved is necessary to achieve the purpose of the treatment, and that our interest prevails over your right not to have your data processed for this purpose. In addition, our clients benefit from processing because it helps us to provide error-free and sustainable services. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
This processing takes place for the entire period that Klarna must keep the information on its systems, for example, to perform the contract made with you or to comply with applicable law. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
Produce statistics and reports for economic analysis or analysis of payment trends or payment volumes in certain regions or sectors (if possible, we first anonymize the data, which means that no personal data processing is carried out from so). |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in obtaining statistical data and reports for this purpose. We make sure that the treatment involved is necessary to achieve the purpose of the treatment, and that our interest prevails over your right not to have your data processed for this purpose. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
This processing takes place for the entire period that Klarna must keep the information on its systems, for example, to perform the contract made with you or to comply with applicable law. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
To check and verify your identity. |
From you:
|
The processing is necessary for Klarna to perform a contract with you (Article 6 para. 1 lit. b) GDPR). |
Whenever you use one of the Klarna services. |
|
Sharing your personal data with the categories of recipients described in the section 7.1 (suppliers and subcontractors, companies of the Klarna Group, people with authority over their financial transactions, authorities and buyers of credits, businesses or assets). |
|
Varies depending on the recipient (see section 7.1 ). |
This processing takes place for the entire period that Klarna is required to retain the data on its systems, for example to fulfill the agreement with you or to comply with applicable law. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
To decide what type of marketing we will provide to you. If you do not want us to carry out this processing of your data, please contact us. Contact information is available at section 12 . Processing may involve profiling. see the section 6 for more information on profiling. |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in identifying what type of marketing we should provide to you. We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. We have also taken into account the fact that marketing is listed as an example of legitimate interest in the GDPR. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
When there is termination of the contract between you and Klarna, or if you notify us that you are not interested in this treatment. |
|
To provide you with marketing materials and offers about our services. If you do not want us to carry out this processing of your data, please contact us to let us know. see the section 12 for our contact information. |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in sending you marketing about our services and offers. We make sure that the processing involved is necessary to pursue that objective, and that our interest prevails over your right not to have your data processed for this purpose. We have also taken into account the fact that marketing is listed as an example of legitimate interest in the GDPR. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
When there is termination of the contract between you and Klarna, or if you notify us that you are not interested in this treatment. |
|
Protect Klarna from legal claims and safeguard Klarna's legal rights. |
In the event of a dispute, Klarna may also collect other categories of personal data concerning you if we need it to exercise our rights. |
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in being able to protect ourselves from legal claims. We make sure that the treatment involved is necessary to achieve the purpose of the treatment, and that our interest prevails over your right not to have your data processed for this purpose. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
This processing takes place for the entire period in which Klarna must keep the information on its systems, for example, to perform the contract executed with you or to comply with applicable legislation. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
Purpose of the treatment: what we do and why |
Categories of personal data used for the purpose, and its origin (the source). see the section 3 for more information on what each category contains. |
Legal basis for processing under the GDPR |
When purpose wanes (see section 9 for more information on when data is deleted) |
|
To transfer to Klarna the store's right to pay for your purchase (“factoring”). |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we (and the store) have a legitimate interest in selling or buying your outstanding debt. We ensure that the processing is necessary to achieve the purpose of the processing and that our interest prevails over your right not to have your data processed for this purpose. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
When the purchase is made. |
|
Sharing your personal information with the categories of recipients described in the section 7.2 (Shops, payment service providers and financial institutions, fraud prevention agencies and companies that provide identity information, and Google). |
From you:
From other sources:
|
Varies depending on the recipient (see section 7.2 ). |
Mainly when the purchase is made, but also during the entire period that Klarna has the data on its systems, that is, until the data is deleted. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
When you shop at a store that offers Klarna as a payment method or has a Klarna checkout, we will assess the order in which the different payment methods should be presented at the store checkout. This processing does not affect the Klarna payment methods that are available to you. If you do not want us to carry out this processing of your data, please contact us to let us know. Contact information is available at section 12 . This processing constitutes profiling. see the section 6 for more information on profiling. |
From you:
From other sources:
|
If you have accepted and use the Klarna service called “Shopping Service”, as further described in the terms and conditions of the service, you will find here , the legal basis for the treatment is the performance of the contract 6(1)(b) GDPR). On the other hand, if you have not signed the "Purchasing Service" agreement, the treatment will be based on a balance of interests (article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in examining the order in which the different payment options will be presented to you when checking out in the store. We make sure that the treatment involved is necessary to achieve the purpose of the treatment, and that our interest prevails over your right not to have your data processed for this purpose. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
When payment methods are displayed at checkout. |
|
Prevent Klarna's operations from being used for money laundering or terrorist financing, by monitoring and reviewing transactions. Klarna also carries out continuous risk assessments and creates risk models to combat money laundering and terrorist financing. This processing constitutes profiling and automated decision-making. see the section 6 for more information on profiling and automated decisions. |
From you:
From other sources:
|
To comply with the law (Article 6(1)(c) GDPR). ( Swedish Law (2017:630) on measures against money laundering and financing of terrorism ) Regarding sensitive personal data, the basis is that the processing is necessary for reasons of public interest (Article 9, paragraph 2, letter g) of the GDPR). However, if you have provided us with sensitive personal data, its processing is based on your explicit consent. |
When there is termination of the contract between you and Klarna. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
Conduct a fraud prevention assessment before accepting a purchase. This processing constitutes profiling and automated decision-making. To do this, we use automated decision making in order to determine if you are a fraud risk. see the section 6 for more information on profiling and automated decisions. See also the section 7.2.3 about our use of fraud prevention agencies to which your information may be shared, and our legal basis for sharing it. |
From you:
From other sources:
In addition to the above, Klarna receives information from fraud prevention agencies whether your information indicates a fraud attempt. |
To enter into and perform the contract (Article 6, paragraph 1, letter b) of the GDPR). |
When the fraud assessment is carried out. |
|
Keep accounting in accordance with accounting legislation and keep it in accordance with current legislation. |
From you:
From other sources:
|
To comply with the law (Article 6(1)(c) GDPR). ( Swedish Accounting Act (1999:1078) ) |
During the period in which the accounting is recorded and 7 years after the end of the year in which the information was recorded. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
Carry out the calculations in accordance with the regulations on capital adequacy obligations. |
From you:
From other sources:
|
To comply with the law (Article 6(1)(c) GDPR). ( Capital Adequacy Regulation 575/2013 , and Capital Adequacy Directive 2013/36 ) |
Seven years after the end of the year in which the information was recorded. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
The following services involve the granting of a credit to you: "Pay later" (invoice), "Pay now" (for direct debit payment), "Financing" (pay in installments), as well as the Klarna card and the card unique (both are offered in the Klarna mobile app).
|
Purpose of the treatment: what we do and why |
Categories of personal data used for the purpose, and its origin (the source). see the section 3 for more information on what each category contains. |
Legal basis according to the GDPR |
When purpose wanes (see section 9 for more information on when data is deleted) |
|
To carry out a credit evaluation before credit is granted. This constitutes profiling and the decision to approve or deny credit constitutes an “automated decision”. see the section 6 for more information on profiling and automated decisions. See also the section 7.3.1 about our use of credit reporting agencies with which your information may be shared, and our legal basis for sharing your information. |
From you:
From other sources:
|
To enter into and execute the credit agreement (article 6, paragraph 1, letter b) of the GDPR). |
When the credit evaluation is carried out. |
|
To share your personal data with the categories of recipients described in the section 7.3 (credit bureaus, debt collection companies and other buyers of outstanding credit, as well as VISA, debt acquirers and digital wallet providers). |
From you:
From other sources:
|
Varies depending on the recipient (see section 7.3) . |
Mainly when the purchase is made, but also for as long as Klarna keeps the data on its systems, ie until it is deleted. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
To transfer Klarna's right to payment for your purchase to a new owner. |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in selling outstanding receivables as part of conducting our business. We make sure that the treatment is necessary to pursue that objective, and that our interest prevails over your right not to have your data processed for this purpose. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
Treatment can be done while the debt is unpaid (you will be notified if the debt is transferred). |
|
Perform debt collection services, that is, collect and sell past-due debts. |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After having weighed the interests, Klarna has determined that we have a legitimate interest in the collection and sale of debts. We make sure that the treatment involved is necessary to achieve the purpose of the treatment, and that our interest prevails over your right not to have your data processed for this purpose. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
When the debt has been paid. |
|
Prevent Klarna's operations from being used for money laundering or terrorist financing, by monitoring and reviewing transactions, conducting risk assessments and creating risk models. This processing constitutes profiling, and a decision that you pose a money laundering risk constitutes an “automated decision”. see the section 6 for more information on profiling and automated decisions. |
From you:
From other sources:
|
To comply with the law (Article 6(1)(c) GDPR). ( Swedish Law (2017:630) on measures against money laundering and financing of terrorism ) As regards sensitive personal data, the condition is that the processing is necessary for the public interest (Article 9, paragraph 2, letter g) of the GDPR). |
Up to five years from the termination of the agreement or after the termination of the relationship with the client (up to ten years in cases where the police authorities request it). see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
File and account in accordance with accounting legislation. |
From you:
From other sources:
|
To comply with the law (Article 6(1)(c) GDPR). ( Swedish Accounting Act (1999:1078) ) |
Seven years after the end of the year in which the information was recorded. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
Purpose of the treatment: what we do and why |
Categories of personal data used for the purpose, and its origin (the source). see the section 3 for more information on what each category contains. |
Legal basis according to the GDPR |
When purpose wanes (see section 9 for more information on when data is deleted) |
|
|
|||
|
Provide Klarna savings and payment accounts. |
From you:
From other sources:
|
The processing is necessary for Klarna to perform a contract with you (Article 6 para. 1 lit. b) GDPR). If the service processes data that constitutes sensitive personal data (of your transactions), our processing takes place on the basis of your explicit consent (Article 9(2)(a) GDPR). Information about third parties (such as the recipient of the payment or the payer) is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that both we and you (and also the payee/payer) have a legitimate interest in having this data processed to carry out the transactions in question. We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
When there is termination of the contract between you and Klarna. |
|
Sharing your personal data with the categories of recipients described in the section 7.4 (credit institutions and other financial institutions). |
From you:
From other sources:
|
The processing is necessary for Klarna to perform a contract with you (Article 6 para. 1 lit. b) GDPR). If the service processes data that constitutes sensitive personal data (of your transactions), our processing takes place on the basis of your explicit consent (Article 9(2)(a) GDPR). |
When there is termination of the contract between you and Klarna. |
|
Prevent Klarna's operations from being used for money laundering or terrorist financing, by monitoring and reviewing transactions, conducting risk assessments and creating risk models. This treatment constitutes profiling, and the decision that you pose a money laundering risk constitutes an automated decision. see the section 6 for more information on profiling and automated decisions. |
From you:
From other sources:
|
To comply with the law (Article 6(1)(c) GDPR). ( Swedish Law (2017:630) on measures against money laundering and financing of terrorism ) As regards sensitive personal data, the condition is that the processing is necessary for the public interest (Article 9, paragraph 2, letter g) of the GDPR). |
Up to five years from the termination of the contract or after the end of the relationship with the client (up to ten years in cases where the police authorities request it). see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
File and account in accordance with accounting legislation. |
From you:
From other sources:
|
To comply with the law (Article 6(1)(c) GDPR). ( Swedish Accounting Act (1999:1078) ) |
Seven years after the end of the year in which the information was first recorded. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
Carry out the calculations in accordance with the regulations on capital adequacy obligations. |
From you:
From other sources:
|
Comply with the law (article 6, section 1, letter c) of the GDPR) ( Capital Adequacy Regulation 575/2013 , and Capital Adequacy Directive 2013/36) |
Seven years after the end of the year in which the information was recorded. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
4.5 Processing of your personal data when you use the Klarna shopping service
When you use the Klarna Shopping Service, Klarna will process your personal data for the purposes described in the table below. The conditions of the Shopping Service and the description of the features included in the shopping service are available here .
|
Purpose of the treatment: what we do and why |
Categories of personal data used for the purpose, and its origin (the source). see the section 3 for more information on what each category contains. |
Legal basis according to the GDPR |
When purpose wanes (see section 9 for more information on when data is deleted) |
|
Provide the Klarna Shopping Service and features included therein. The service involves the creation of your profile to personalize the contents in the Klarna mobile application and payments with Klarna. |
The processing is necessary for Klarna to execute a contract (purchasing terms of service) with you (Article 6 para. 1 lit. b) GDPR). If the shopping service also processes data that constitutes sensitive personal data (if you have uploaded this data, for example, through receipts for certain purchases/memberships, or if you have otherwise given us access to this data), our processing takes place on the basis of your explicit consent (Article 9(2)(a) GDPR). see the section 3 for more information on this type of personal data. |
When there is termination of the contract between you and Klarna. |
|
|
You can choose to share your location with us. We use this information to find stores near you. You can turn off location sharing on your device at any time. |
From you:
|
The processing is necessary for Klarna to execute a contract (purchasing terms of service) with you (Article 6 para. 1 lit. b) GDPR). |
When the function is closed. Klarna will not save your location after showing you the stores that are near you. |
|
Provide a browser, via the Klarna mobile app, for you to visit, for example, store websites. Klarna will collect information about your browser usage in order to personalize the content of the Klarna mobile app. |
From you:
|
The processing is necessary for Klarna to execute a contract (purchasing terms of service) with you (Article 6 para. 1 lit. b) GDPR). If the service processes information that constitutes sensitive personal data (for example, from the pages you visit), our processing will take place on the basis of your explicit consent (Article 9, paragraph 2, letter a) of the GDPR). However, this sensitive information will not be used for any other purpose than to show you the current website in your browser. |
When there is termination of the contract between you and Klarna. |
|
Sharing your personal data with the categories of recipients described in the section 7.5 (affiliate networks, Google, partners within the framework of the Personal Finance service and the offers and benefits program, and logistics and transport companies). |
From you:
From other sources:
|
Varies depending on the recipient (see section 7.5 ). |
When there is termination of the contract between you and Klarna. |
4.6 Additional services you can access via the Klarna mobile app
|
Purpose of the treatment: what we do and why |
Categories of personal data used for the purpose, and its origin (the source). see the section 3 for more information on what each category contains. |
Legal basis according to the GDPR |
When purpose wanes (see section 9 for more information on when data is deleted) |
|
If you have connected your email account to the Klarna Email Login service, Klarna will regularly connect to your email account(s) to obtain information about your purchases. You can unsubscribe from this service at any time and thereby cancel Klarna's access to your email account. |
From other sources:
|
The processing is necessary for Klarna to execute a contract (purchasing terms of service) with you (Article 6 para. 1 lit. b) GDPR). If the service processes sensitive personal data (from your transactions), our processing will be carried out on the basis of your explicit consent (Article 9(2)(a) of the GDPR). see the section 3 for more descriptive information. |
When there is termination of the contract between you and Klarna. |
|
If you have chosen to connect your bank accounts to the Personal Finance service, Klarna will show you and give you tools to control your finances, through offers tailored to your specific needs. This treatment constitutes profiling whose objective is to personalize the content of the service based on what we think may interest you. You can read more about creating profiles in the section 6 . If you decide to take advantage of the offers and benefits that Klarna offers as part of this service, we will share your personal information with the partner that offers them (see the section 7.5.3 ). |
From other sources:
|
The processing is necessary for Klarna to execute a contract (purchasing terms of service) with you (Article 6 para. 1 lit. b) GDPR). If the service processes sensitive personal data (from your transactions), our processing will be based on your explicit consent (Article 9(2)(a) of the GDPR). see the section 3 for more information. |
When there is termination of the contract between you and Klarna. |
|
Purpose of the treatment - What we do and why |
Categories of personal data used for the purpose, and its origin (the source). see the section 3 for more information on what each category contains. |
Legal basis for processing under the GDPR |
When purpose wanes (see section 9 for more information on when data is deleted) |
|
If you register for an event published on social networks, we will process your personal data to provide the requested service. You can always unsubscribe by contacting us. see the section 12 for contact information. |
From you:
|
The processing is necessary for Klarna to perform a contract with you (with regard to participation in the event) (Article 6 Para. 1 lit. b) GDPR). You can contact us for more information on how the decision was made. see the section 12 for our contact information. |
When the event has been held |
4.8 Treatment of Klarna when you contact Klarna customer service
|
Purpose of the treatment - What we do and why |
Categories of personal data used for the purpose, and its origin (the source). see the section 3 for more information on what each category contains. |
Legal basis for processing under the GDPR |
When purpose wanes (see section 9 for more information on when data is deleted) |
|
Manage all issues that reach Klarna customer service. This includes retaining various forms of written conversations to document customer issues, as well as for security purposes and to counter fraud. |
From you:
From other sources:
|
Execution of contracts (article 6, paragraph 1, letter b) of the GDPR). |
Up to ten years, according to the prescription regime. see the section 9 for more information about our obligations and our right to retain information in accordance with the law. |
|
Quality and service improvement (to ensure satisfactory customer service). We may record telephone conversations between you and our employees for quality purposes to provide you with better products and services. |
From you:
From other sources:
|
The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in improving our services, our internal training and quality control and in documenting communications with Klarna customer service. We make sure that the specific treatment involved is necessary to achieve that purpose, and that our interest prevails over your right not to have your data processed for this purpose. As a customer, you also have an interest in the quality of your interactions with Klarna. You can contact us for more information on how the decision was made. See contact information in section 12 . |
90 days from the day the registration was made. |
|
If you contact us through social networks such as Facebook or Twitter, your personal data will also be collected and processed by these companies, in accordance with their privacy notices. The same goes for the response you receive from us. Klarna processes this information to answer your questions. |
From you:
From other sources:
|
Execution of contracts (article 6, paragraph 1, letter b) of the GDPR). |
When we have answered your question. |
5. How is consent withdrawn?
When Klarna uses your personal data based on your consent, you can withdraw your consent at any time. You can do this by sending an email to privacy@klarna.es or through the contact information that you will find in the section 12 .
You can also delete the information uploaded from the Klarna mobile application, or terminate the service in which the personal data is processed. We will then cancel the information. If you withdraw your consent or delete the uploaded information, you may not be able to use the service in cases where Klarna's processing of personal data is based on your consent.
6. Klarna's profiling and automated decisions that significantly affect you
6.1 Profiling by Klarna about you as a customer.
"Profiling" means the automated processing of personal data to assess certain personal aspects, for example, by analyzing or predicting your personal preferences, such as purchasing interests. At the same time, we compare your data with those preferred by other customers with similar use of our services.
The purpose of Klarna profiling and the categories of personal data used on each occasion and for each profiling are described in detail in the section 3 . Profiling for these purposes does not have a significant impact on you as a customer.
We use profiling for the following purposes:
-
to deliver our personalized services, targeting your content based on what we think is most interesting to you (this includes the Klarna mobile app, its various features and the order in which different payment methods appear at the Klarna checkout ), and
-
to offer you personalized marketing.
If you have any questions about how the profiling process works, please contact us. Contact information is available at section 12 . You can object to our commercial profiling at any time by contacting us (and we will then stop profiling for commercial purposes). You can also end profiling for our services by canceling the service.
6.2 Klarna Automated Decisions Significantly Affecting You.
Automated decisions with legal consequences, or automated decisions that significantly affect you in a similar way, means that certain decisions on our services are fully automated, without our employees being involved. These decisions have a significant effect on you as a customer, comparable to the legal consequences. By making these decisions automatically, Klarna increases your objectivity and transparency in the decision to offer you these services. At the same time, you have the right to object to these decisions at any time. Later in this section, you will find a description of how to object to these decisions.
Automated decisions that significantly affect you also involve profiling based on your data before making the decision. This profiling is done to assess your financial situation (before the decision to grant you credit) or to identify whether your use of our services involves a risk of fraud or money laundering. We build a profile of your user behavior and financial situation and compare this data with behaviors and conditions that indicate different levels of risk to us.
We make this type of automated decision when:
-
We decided to approve your request to use a credit service.
- We decided to No approve your application to use a credit service
These automated credit decisions are based on data you provide, data from external sources such as credit bureaus, and Klarna's own internal information. In addition to information about you, Klarna's credit model includes a large number of other factors, such as Klarna's internal credit risk levels and the rate of our customers' repayments (based, for example, on the product category current). -
We decide if you are a fraud risk, if our processing shows that your behavior indicates possible fraudulent conduct, that your behavior is inconsistent with your past use of our services, or that you have attempted to hide your true identity. The automated decisions by which we assess whether you are a fraud risk are based on information you have provided yourself, data from fraud prevention agencies (see section 7.2.3 to find out which ones we use) and in Klarna's own internal information.
-
We decide whether there is a risk of money laundering, if our treatment shows that your behavior indicates money laundering. In relevant cases, Klarna also investigates whether certain customers are on sanctions lists.
The categories of personal data used in each decision are described in the section 3 . see the section 7 for more information about who we share information with in regards to profiling during automated decisions.
If you are not approved under the automated decisions described above, you will not have access to Klarna services, such as our payment methods. Klarna has various security mechanisms in place to ensure that decisions are correct. These mechanisms include ongoing reviews of our decision models and random sampling on individual cases. If you have any doubts about the result, you can contact us and we will determine if the procedure has been carried out correctly. You may also object in accordance with the instructions below.
Your right to object to these automated decisions
You always have the right to object to an automated decision with legal consequences or to decisions that may significantly affect you (together with the corresponding profiling) by sending an email to privacidad@klarna.es . A Klarna employee will then review the decision, taking into account any additional information and circumstances you provide.
7. With whom do we share your personal data?
When we share your personal data, we ensure that the recipient treats it in accordance with this notice, for example by entering into data transfer agreements or data processing agreements with recipients. These agreements include all reasonable contractual, legal, technical and organizational measures to ensure that your information is treated with an adequate level of protection and in accordance with applicable law.
7.1.1 Suppliers and subcontractors.
Recipient Description: Suppliers and subcontractors are companies that are only entitled to process personal data that they receive from Klarna on behalf of Klarna, ie data processors. Some examples of these providers and subcontractors are software and data retention providers, payment service providers, and business consultants.
Purpose and legal basis: Klarna needs to access services and functionality from other companies when it cannot do so itself. Klarna has a legitimate interest in being able to access these services and functionalities (Article 6(1)(f) GDPR). We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.1.2 Klarna Group.
Recipient Description: Companies of the Klarna Group.
Purpose and legal basis: This is necessary so that Klarna can provide you with services and functionality. Klarna has a legitimate interest in being able to access these services and functionalities (Article 6(1)(f) GDPR). We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.1.3 A person who has a power of attorney for your financial affairs.
Recipient Description: Klarna may share your personal information with a person who has a right to access it under a power of attorney.
Purpose and legal basis: This treatment is carried out to facilitate your contact with us (through agents), and takes place on the basis of your consent (Article 6, paragraph 1, letter a) of the GDPR).
7.1.4 Authorities.
Recipient Description: Klarna may provide the necessary information to authorities such as the police, financial authorities, tax authorities or other authorities and courts of law.
Purpose and legal basis: Personal data is shared with the authority when the law requires us to do so, or in some cases if you have asked us to, or if it is necessary to manage tax deductions or fight crime. An example of a legal obligation to provide information is when it is necessary to take action against money laundering and terrorist financing. Depending on the authority and purpose, the legal grounds involve the obligation to comply with the law (Article 6(1)(c) GDPR), to perform the agreement with you (Article 6(1)(b) GDPR), or Klarna's legitimate interest in protecting itself from crime (Article 6(1)(f) GDPR).
7.1.5 Divestment of business or assets.
Recipient Description: In the event that Klarna sells businesses or assets, Klarna may transfer your personal information to a potential buyer of those businesses or assets. If Klarna or a significant part of Klarna's assets is acquired by a third party, personal information about Klarna's customers may also be shared.
Purpose and legal basis: Klarna has a legitimate interest in being able to carry out these transactions (Article 6(1)(f) GDPR). We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.2.1 Stores.
Recipient Description: By stores we mean the stores you visit or shop at (which may include the store's group companies if you have been informed by the store).
Purpose and legal basis: So that the store can make and manage your purchase and your relationship with the store or its group companies, for example, confirming your identity, sending merchandise, managing questions and disputes, to prevent fraud and, where appropriate, send the relevant marketing. The store's privacy notice applies to the processing of your personal data that has been shared with the store and that it processes. You will usually find a link to the store's privacy notice on the store's website. The legal basis for exchanging data with shops is partly the performance of a contract (Article 6 para. 1 lit. b) GDPR), insofar as the data exchange takes place to perform the contract between you and the shop, and is partly based on the legitimate interest of Klarna and the shop (Article 6 para. 1 lit. f GDPR). We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.2.2 Payment service providers and financial entities.
Recipient Description: Payment service providers and financial institutions provide services to you, the stores and Klarna to implement and manage electronic payments through a variety of payment methods, such as credit cards and payment methods based on the bank, such as direct debit and wire transfer.
Purpose and legal basis: Some stores use payment service providers with whom they share your information to handle your payment. This sharing is done in accordance with the privacy notices of the stores themselves. The store may also allow Klarna to share your information with the payment service provider they use to process your payment. Some payment service providers also collect and use your information independently, in accordance with their own privacy notices. This is the case, for example, with e-wallet providers. In addition, Klarna may share your information with other financial institutions when you transact with your account to complete transactions. The exchange with payment service providers and financial institutions is carried out to carry out a transaction initiated by you and is carried out to fulfill the agreement with you (Article 6 para. 1 lit. b) GDPR).
7.2.3 Fraud prevention organizations and companies that carry out identity checks.
Recipient Description: Your personal data is shared with fraud prevention agencies and companies that perform identity checks.
Purpose and legal basis: Klarna shares your information to verify your identity, the accuracy of the data you have provided, and to combat criminal activity. The companies we work with are listed here . Please note that these companies may process your data in accordance with their own data privacy notices. Klarna shares your information based on Klarna's legitimate interest in carrying out its activity (Article 6 para. 1 lit. f) GDPR), as fraud prevention agencies and companies that provide identity checks have information about fraud and identity confirmation activities which is important for Klarna to use to decrease its level of fraudulent transactions. We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights. You can also contact the entities indicated in the previous link, to exercise the same rights that are indicated in section 2 also against said entities.
7.2.4 Google.
Recipient Description: When you use Google Maps at checkout (for example, by searching for your address in the address bar), your personal information will be shared with Google. Google will process your data in accordance with the Terms of Service and the Privacy Policy from Google Maps/Google Earth.
Purpose and legal basis: Klarna shares this information based on the legitimate interest of Klarna to carry out its activity (Article 6, paragraph 1, letter f) of the GDPR), since Google Maps allows to find the functionality of the address when making the payment. We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.3.1 credit reporting agencies.
Recipient Description: If you request a Klarna service that involves the granting of credit (see section 4.3 about which Klarna services involve credit), we will share your personal data with credit reporting agencies. The exchange is not carried out in case of small amounts or when we already have enough information.
Purpose and legal basis: Your personal information is shared with credit bureaus to assess your creditworthiness in connection with your credit application, to confirm your identity and contact information, and to protect you and other customers from fraud. This exchange of data constitutes a credit report.
In Spain, Klarna sends the credit agency your address, date of birth, as well as the Tax Identification Number (NIF), the Foreigner Identity Number (NIE) and/or the National Identity Document (DNI) to receive the search on you.
Our credit search will affect your credit score at the credit bureau. Klarna will also share information about your refunds (including late refunds and outright defaults) with the credit bureau, and such data may be included in the default files, which may also affect your credit score with the credit bureau, and be consulted by third parties. The credit bureau will treat your information in accordance with its own privacy notices and you can find out which ones we cooperate with here .
Klarna shares your information based on the legitimate interest of Klarna to carry out its activity (Article 6, paragraph 1, letter f) of the GDPR), since the credit reporting agencies have information about your financial situation that is important for them to Klarna uses it to ensure a correct credit evaluation, and not grant credit to consumers who cannot repay it. We make sure that the treatment involved is necessary to pursue that purpose, and that our interest prevails over your right not to have your information processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights. You can also contact the entities indicated in the previous link, to exercise the same rights that are indicated in section 2 also against said entities.
Klarna retains credit information about you that we have received from a credit reporting agency in write data format only. If you wish to have a readable version, we recommend that you contact directly the credit agency that has informed you that Klarna has requested a credit report.
7.3.2 Debt collection companies (for overdue debts).
Recipient Description: Klarna may need to share your information when we sell or subcontract the collection of overdue debts through a third party, such as a debt collection company.
Purpose and legal basis: This data is shared to collect your overdue debts. Debt collection companies will process personal data in accordance with their own privacy notices, or only on behalf of Klarna in their capacity as Klarna's data processors. Debt collection companies may report your defaults to credit reporting agencies or authorities, which may affect your creditworthiness and your ability to apply for credit in the future. This data is shared on the basis of our legitimate interest in the collection and sale of the debt (Article 6 Paragraph 1 Letter f GDPR). After having weighed the interests, Klarna has determined that we have a legitimate interest in the collection and sale of debts. We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.3.3 VISA Providers and Digital Wallets.
Recipient Description: We share information about you and your purchases when you use the Klarna card with VISA and with members of the VISA card network. If you also add the Klarna card to your digital wallet, we may need to share your information with the provider of that digital wallet. In that case, the data will be treated in accordance with the privacy notice of that provider.
Purpose and legal basis: The exchange takes place to the extent necessary to carry out card transactions, prevent fraud and follow the rules of the VISA card network. If you renew your Klarna card or receive a new card, we will transfer this information to VISA so that VISA can inform third parties with whom you have previously chosen to store your card information (for example, for recurring transactions). The exchange is carried out in order to fulfill the agreement with you (Article 6 para. 1 lit. b) GDPR).
7.3.4 Debt acquirers (for open debts).
Recipient Description: Klarna can transfer your open debt to debt buyers.
Purpose and legal basis: Upon transfer of your debt to an acquirer and on an ongoing basis until you pay off the debt, Klarna will share your contact and identification information (name, date of birth, social security number, address and telephone number), information about your financial situation (such as residual credit, repayments, and any negative payment history related to the current debt), as well as information about the goods or services associated with the debt. The buyer will treat your personal data in accordance with its own privacy notice, of which you will receive information when the debt is transferred.
The sharing of personal data with different purchasers is based on our legitimate interest in selling outstanding debts as part of our business operations (Article 6 Paragraph 1 Letter f GDPR). We make sure that the processing involved is necessary to pursue that objective, and that our interest prevails over your right not to have your personal data processed for this purpose. You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.4 Categories of recipients when using the Klarna account service (savings and payment accounts).
7.4.1 Credit institutions and other financial institutions.
Recipient Description: We share your information with credit institutions and other financial institutions (such as other banks) when you make transactions or payments to other accounts.
Purpose and legal basis: If you have made payments to a Klarna account, Klarna will process the information we receive from the bank you used for the transaction, such as contact and identification details and payment information. If you make transactions or payments to accounts of other banks, Klarna will also pass on some of your contact and identification data, as well as payment information, to the recipient and also to the recipient's credit or financial institution. The exchange is carried out in order to fulfill the agreement with you (Article 6 para. 1 lit. b) GDPR).
7.5 Categories of recipients with whom Klarna shares your personal information when you use the Klarna Purchasing Service .
7.5.1 Affiliate Networks.
Recipient Description: When you choose to click on a sponsored link on the Klarna mobile app or on our website that links to a store, product or service, you will be redirected to another company's website through a third party, known as an affiliate network.
Purpose and legal basis: The affiliate network may place tracking technology on your device that contains information about your clicking on that link in the Klarna mobile app, which is then used to document your visit to the store to calculate a possible commission. due to Klarna.
The affiliate network may process your data in accordance with its own privacy notice. The processing is based on a balance of interests (Article 6, paragraph 1, letter f) of the GDPR). After weighing the interests, Klarna has determined that we have a legitimate interest in providing you with sponsored links to market shops on the Klarna mobile app and on our website. We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose.
You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.5.2 Google.
Recipient Description: When you use the Klarna mobile app via our web portal, Google will collect information about your device via Google's reCAPTCHA service implemented there, in some cases together with additional information that you choose to enter into the reCAPTCHA service.
Purpose and legal basis : Klarna will process this information based on the legitimate interest of Klarna to carry out its activity (article 6, paragraph 1, letter f) of the GDPR), since the reCAPTCHA service prevents the improper use of our services (for example, preventing bots from trying to log in). Google will treat this information in accordance with its Terms of Service and its privacy policy . We make sure that the treatment involved is necessary to pursue said purpose, and that our interest prevails over your right not to have your data processed for this purpose.
You have the right to oppose this treatment, for reasons related to the circumstances of your particular case. see the section 2 for more information about your rights.
7.5.3 Partners within the framework of the Personal Finance service and the offers and benefits program.
Recipient Description: Partners within the framework of the Personal Finance service and the offers and benefits program.
Purpose and legal basis: If you decide to take advantage of Klarna's offers and benefits under the Personal Finance service or offers and benefits program, Klarna will share the personal information necessary for you to take advantage of the offer with our business partners (including whether it is Klarna customer). Each offer specifies the data that will be shared. The data is shared to carry out the agreement between you and Klarna (Article 6(1)(b) GDPR).
7.5.4 Logistics and transport companies.
Recipient Description: Logistics and transport companies.
Purpose and legal basis: Klarna will share your personal information with the logistics and transport companies that deliver the products you order if you have subscribed to parcel tracking. Examples of information we share are contact and identification details and tracking numbers.
Logistics and transport companies treat your data in accordance with their own privacy notices. The sharing is done to fulfill the agreement between you and Klarna (Article 6(1)(b) GDPR).
7.6.1 Social Networks.
Recipient Description: Social media companies like Facebook, Instagram or Twitter.
Purpose and legal basis: If you contact us through social networks such as Facebook or Twitter, your personal data will also be collected and processed by these companies, in accordance with their privacy notices. The exchange is carried out in order to fulfill the agreement with you (Article 6 para. 1 lit. b) GDPR).
8. Where do we process your personal data?
We always endeavor to process your personal data within the EU/EEA. In certain situations, such as where we share your information within the Klarna Group or with a supplier or subcontractor operating outside of the EU/EEA, your personal data may also be processed outside of the EU/EEA. see the section 7 for more information about who we share data with. If the store you shop at is located outside of the EU/EEA, our exchange with that store also means that your data will be transferred to this non-EU/EEA country. You can contact us for more information about our security measures. Contact information is available at section 12 .
Other countries may have laws that allow held personal data to be the subject of access requests by public authorities for the purpose of fighting crime or safeguarding national security. Regardless of whether we or any of our suppliers process your personal data, we will ensure that an adequate level of protection is ensured when transferring that data and that appropriate protection measures have been taken, in accordance with data protection requirements. applicable (such as the GDPR). Such appropriate safeguards include, among other things, ensuring that:
-
the European Commission has decided that the third country to which your personal data is transferred has an adequate level of protection, or
-
the standard clauses of the European Commission have been entered into between Klarna and the recipient outside the EU/EEA. In these cases, we also assess whether there are laws in the receiving country that affect the protection of your personal data. Where necessary, we take special measures to ensure that your data remains protected during transfer to the relevant country outside of the EU/EEA.
9. How long we keep your personal data
Klarna retains your personal data in accordance with applicable laws, such as money laundering and accounting laws (usually 5 years and 7 years, respectively). In addition, we only keep your personal data for as long as necessary to fulfill the respective purpose of our processing (you can find more information in the table on the section 3 ).
Personal data that is relevant to the contractual relationship between you and Klarna is normally retained for the duration of the contractual relationship and thereafter for a maximum of 10 years depending on the limitation periods.
In some cases, it may be necessary to retain the information for a longer period due to capital adequacy laws with which Klarna must comply. If you do not enter into an agreement with us, personal data is normally kept for a maximum of 3 months, but in some cases the data may need to be kept for longer, for example due to money laundering laws, or to protect Klarna from legal claims and to safeguard Klarna's legal rights.
10. How we use cookies and other types of tracking technology
To provide a personalized and enjoyable experience, Klarna uses cookies and similar tracking technologies on our many interfaces, such as our website, the Klarna mobile app and at the checkout of a store that Klarna uses. You can find information about the tracking technology that Klarna uses, and information about how to opt-in or opt-out of the tracking technology, on each interface.
11. Updates to this privacy notice
We are constantly working to improve our services so that you have a more pleasant user experience. This may involve changes to existing and future services. If that enhancement requires notice or consent under applicable law, you will be notified or given the opportunity to consent. It is also important that you read this privacy notice each time you use any of our services, as the processing of your personal data may differ from your previous use of the service in question.
12. Klarna contact information
Klarna Bank AB (publ) is registered with the Swedish Companies Register under company number 556737-0431 and has its registered office at Sveavägen 46, 111 34 Stockholm.
Klarna has a data protection officer and a team of data protection specialists. We also have a customer service team that handles data protection issues. You can contact all these people at privacidad@klarna.es . If you would like to specifically contact the Klarna data protection officer, please indicate this in the subject line.
Klarna Bank AB for data protection. Visited www.klarna.es for more information about Klarna.
This privacy notice was last updated on June 1, 2021.