We process your personal data only for certain, specific purposes and when we have legal grounds to do to.
To prepare and administer agreements
The most common purpose for which we process your personal data is to document, administer and execute agreements we have with you. We need to collect personal data for this purpose in order to be able to enter into agreements with you.
To meet our legal obligations
We also need to process your personal data to be able to meet our obligations pursuant to laws, other statutes or decisions by authorities. This can include the following, for example:
- to meet requirements under bookkeeping laws
- to meet requirements under anti–money laundering laws
- to check personal data against sanction lists, which we are required to apply by law or decision by authority
- to be able to report to the Swedish Tax Agency, the Swedish Police Authority, the Swedish Enforcement Authority, the Swedish Financial Supervisory Authority and other Swedish and foreign authorities
- to comply with laws governing risk management, which includes processing of data to quality-assure loans for capital adequacy purposes
- to comply with laws governing payment services, such by sharing data with third-party service providers that have licences to offer services involving account information or payment initiation, and through our measures to monitor payments for the purpose of detecting fraud
- to comply with laws governing securities business
When we have a legitimate interest
We process your personal data when it is necessary for a purpose for which we, after a consideration of interests, have determined that we have a legitimate interest.
When we have a legitimate interest, we may process your personal data to perform market and customer analyses for business development and to improve our product offering to our customers. This information may also be used to develop our systems and to perform customer analyses for the purpose of detecting fraud.
We may also process your data for the purpose of providing personal offers to you. Such marketing may at times be based on how you use our services and your behaviour in our digital channels. You can read more about profiling further below.
What is profiling?
We may also use your personal data to target direct advertising and offers to you. If you do not want to receive direct advertising, you can notify us. You can read more about how to do this further below.
How do I notify you if I do not want to receive advertising from you?
When you have given your consent
In certain cases we need your consent to process your personal data. In such cases we will ask for your consent to process your personal data for the specific purpose. This applies, for example, when you provide information about your so-called sensitive personal data. You can read about what constitutes sensitive personal data in the sections above.
What is personal data?
You can withdraw a consent you have given at any time. The processing that we have already done will not be affected, but we will not continue processing your personal data if we do not have other grounds for the processing. If you withdraw your consent, it may affect certain contractual terms, for example if you have received a lower price because you have given your consent to use certain data.