Klarna

1. Who is responsible for your private data?

Klarna Bank AB (publ), registered with the Swedish Companies Registration Office under company number 556737-0431 and with registered office at Sveavägen 46, 111 34 Stockholm, also active through its UK branch, registration number BR020956, 125 Kingsway, Holborn, London WC2B 6NH, United Kingdom (“Klarna”, “we”, “our” or “us”), is the data controller in accordance with the UK data protection laws (such as the EU Regulation 2016/679 as incorporated and amended into UK domestic law (the “UK GDPR”) and the Data Protection Act 2018. If you have any questions regarding the processing of your personal data, please contact our data protection team by writing to [email protected].

2. Your data protection rights as a data subject 

You have several rights under the UK GDPR related to you having control of your personal data and to receive information directly from us on how we process personal data about you. In the following you can read about your rights. If you want to know more or come in contact with us to exercise your rights, the easiest way is to email us on [email protected]. If you want to receive information about the data Klarna holds about you through so-called subject access, or have certain data deleted, you can send a request to us by filling out this form, which is available on our homepage. For other types of questions please use the contact details in section 12.

Your rights

Right to have personal data deleted (“Right to be forgotten”). In some cases, you have the right to have us delete personal data about you. For example you can request us to delete such personal data that we (i) no longer need for the purpose it was collected for, or (ii) that we process based on your consent and you revoke your consent. There are situations where Klarna is unable to delete your data, for example, when the data is still necessary to process for the purpose for which the data was collected, Klarna’s interest to process the data overrides your interest in having them deleted, or because we have a legal obligation to keep it. You can read more about our legal obligations to keep data in section 4 and 9 in this Privacy Notice. The laws described there prevent us from immediately deleting certain data. You also have the right to object to us using your personal data for certain purposes such as direct marketing, which you can read more about in this list of your rights.

Right to be informed. You have the right to be informed of how we process your personal data. We do this through this privacy notice, by service-specific FAQs, and by answering your questions.

Right to receive access to your personal data (“Subject access”). You have the right to know if Klarna processes personal data about you, and to receive a copy (“data extract”) of such data, so-called subject access. Through the data extract you will receive information about what personal data Klarna holds about you and how we process it.

Right to access, and request a transfer, of your personal data to another recipient (“Data portability”). This right means that you can request a copy of the personal data relating to you that Klarna holds for the performance of a contract with you, or based on your consent, in a machine-readable format. This will allow you to use this data somewhere else, for example to transfer your personal data to another controller/recipient.

Right to rectification. You have the right to request that we rectify inaccurate information or complete information about you that you consider is inaccurate or incomplete.

Right to restrict processing. If you believe that your personal data is inaccurate, that our processing is unlawful or that we do not need the information for a specific purpose, you have the right to request that we restrict the processing of such personal data. You also have the possibility to request that we stop processing your personal data while we assess your request. If you object to our processing per your right described directly below, you may also request us to restrict processing of that personal data while we make our assessment.

Right to object against our processing of your personal data. You have the right to object to processing of your personal data which is based on our legitimate interest (Article 6(1)(f) UK GDPR), by referencing your personal circumstances. You can also always object to our use of your personal data for direct marketing purposes. When you let us know that you no longer wish to receive direct marketing from us, we will turn off marketing for you, and stop sending it to you.

Right to object to an automated decision that significantly affects you. You have the right to object to an automated decision made by Klarna if the decision produces legal effects or significantly affects you in a similar way. See section 6 on how Klarna makes use of automated decisions.

Right to withdraw one’s consent. As described in section 5 below, where we process your personal data based on your consent or explicit consent, you have the right to revoke that consent at any time. When you revoke your consent we will stop processing your data for such purposes.

Right to lodge a complaint. If you have complaints about Klarna’s processing of your personal data, you may lodge a complaint with your supervisory data protection authority, (the Information Commissioner), which can be reached using this link: https://ico.org.uk/.

Settings in the Klarna mobile application: In the Klarna mobile application, Klarna provides you with the functionality to tailor your preferences for certain services, such as current notifications or autofill of your information at purchase. We will always respect your choices.

3. What kind of personal data do we collect?

In this section, we describe the types of personal data that we collect or create. In section 4, we describe for what purposes we use these types of personal data.

Contact and identification data - Name, date of birth, social security number, title, occupation, gender, billing and delivery address, e-mail address, mobile phone number, nationality, age, income data, employment and employment history, audio recordings, photos and video recordings of you and your ID card etc.

Information about goods/services - Details concerning the goods/services you have bought or ordered, such as type of item or delivery tracking number.

Information about your financial standing - Information about, for example, your income, any credits, negative payment history and previous credit approvals.

Payment information - Credit and debit card details (card number, expiry date and CVV code), bank account number, bank name.

Information about your use of Klarna’s services - Which service(s) and what different functions in these services you have used and how you have used them. This includes information about outstanding and historical debt, your repayment history, and your personal preferences.

Technical information generated through your use of Klarna’s services - Technical data such as response time for web pages, download errors and date and time when you used the service. 

Information about your contacts with Klarna’s customer service - Recorded phone calls, chat conversations and email correspondence.

Your contacts with the stores you shop at or visit - Information about how you interact with stores, such as whether you have received goods and the type of store you shop at. 

Device information - IP address, language settings, browser settings, time zone, operating system, platform, screen resolution and similar information about your device settings.

Information from external sanction lists and PEP lists - Sanction lists and lists of persons constituting politically exposed persons (“PEP”) include information such as name, date of birth, place of birth, occupation or position, and the reason why the person is on the list in question. 

Sensitive personal data - Sensitive personal data are data that reveal religious beliefs, political or philosophical views, trade union membership, or constitute information about health, sex life or sexual orientation as well as biometric data. 

Service-specific personal data - Within the framework of our services through the Klarna mobile application and browser extension, Klarna’s savings and payment accounts, Auto-import, Personal Finance and for event registrations, we use additional personal data that are not covered by the types listed above. Information regarding each service is listed here:

The Klarna mobile application and browser extension: All content you upload (such as photos or receipts), location information, geolocation information and websites you visit in the application’s browser, or with the extension installed;

Klarna’s savings and payment accounts: Information about your transactions and deposits and information about where your money comes from, or will be used for. Klarna will also process data about third parties (such as payees or payers) for this service;

Auto-import: Information from the connected e-mail account about your completed purchases, product, price and quantity information, delivery tracking numbers and information about stores that we pass on to the Klarna mobile application;

Personal Finance: Information from your other bank accounts and other types of accounts (such as card accounts) that you choose to connect to the service, as well as information such as account number, bank, historical transactions from your connected accounts and balances and assets; and

Event registration on social media: Information about your profile from your social media account and business information such as your employer’s name, address and type of company.

Detailed information on relevant personal data for each service can also be found in the terms and conditions we have listed here.