Privacy Policy
The company's privacy policy
We value the privacy of our customers and will therefore only collect and use your personal data in the manner described in this privacy policy.
1) Obtain information from you if necessary or in connection with the transaction.
2) Your data will be retained if required by law or in connection with the purpose of the collection.
You can browse the company's website without providing your personal data. If you visit our website without a logged-in user account, you browse anonymously and we cannot identify you.
We'd love to hear from you. If you have any comments or suggestions, please send the relevant information by email to allwelling.com.
Collection of personal data
The company does not sell, share, or trade customer data collected from third parties. Personal data collected online is only shared within the company group for internal use. When you create a company account, the basic profile we collect from you includes:
1) Name
2) Delivery address
3) Email Address
4) Contact phone number
5) Date of birth
6) Gender
The personal data we collect from you will be used for the following purposes:
1) Send the goods you purchased from the company.
2) Provide the latest news on product delivery status and customer support.
3) Provide information about the goods
4) Processing your order or providing services and information based on your request or via our website
Furthermore, we use the information you provide to manage your account, verify and process your online payment transactions, check information downloaded from our website, identify the website browser, compile website user statistics, research the relevant product or service, or send you information we deem appropriate. If you do not opt out of receiving the message, we may share your name and address with third parties (e.g., a shipping company or supplier) to facilitate delivery.
Note: The shipping company has the right to request that you enter the ID number to enable internal customs control and facilitate export.
We can store your order information, but for security reasons, we cannot directly access this information. You can log in to your account, access your order details, and review your individual order information. You can also manage your personal address, bank details, and any newsletter subscriptions you have. It is your responsibility to keep your personal information confidential and not to allow unauthorized third parties access to it. We are not liable for any misuse of your password.
Security of personal data
The company ensures that all collected data is handled securely and confidentially. We will protect your personal data in the following ways:
1) Restrict access to personal data
2) Maintenance of technology products to prevent unauthorized access to computer data
3) If the information is not reserved for green purposes, we will destroy your personal data in a secure environment.
The company uses 128-bit Secure Communications End-to-End Privacy Technology (SSL) to process your financial information. This technology would take at least one trillion years to crack and is a recognized high-level security measure.
Disclosure of personal data
The company does not share your personal data with organizations other than the companies that provide the company's website delivery services and related third parties.
Under exceptional circumstances, the company may be obliged to disclose personal data, for example: disclosure of personal data if there is reason to believe that this may help to prevent a threat to life or health or is used for law enforcement purposes.
If you believe the company is violating the privacy policy, please send an email to allwelling.com
Changes to the privacy policy
The company reserves the right to amend and modify the privacy policy at any time.
Complaint regarding a violation of data protection regulations
If you are dissatisfied with our data protection practices or complaints handling methods, please contact us at allwelling.com
Klarna's privacy policy
It is very important to us that you feel secure when you pay with Klarna or use any of our other services. Therefore, you will find all the information about the use of your personal data in this privacy policy.
To help you easily find the sections that interest you, we have divided the privacy policy into different headings. Simply click on the relevant heading in the list below to go directly to the corresponding section.
1. Who is responsible for your personal data?
Klarna Bank AB (publ), registered in the Swedish Commercial Register under company number 556737-0431 and headquartered at Sveavägen 46, 111 34 Stockholm, which also operates through its branches (“Klarna”, “we”, “our” or “us”), is responsible for processing your data in accordance with the EU General Data Protection Regulation (the “GDPR”). If you have any questions about the processing of your personal data, please contact our data protection team at allwelling.com.
2. Your data protection rights as a data subject
Under the GDPR, you have various rights regarding control over your personal data. You can obtain information directly from us about how we process your data. Below you can find information about your rights. If you would like to learn more or contact us, the easiest way is to send us an email to allwelling.com. If you would like information about the personal data Klarna holds about you or wish to have certain data deleted, you can submit a request by filling out this form, which is available on our homepage. For all other questions, please use the contact details provided in section 12.
Your rights
• Right to erasure of personal data (“right to be forgotten”)
In some cases, you have the right to have your personal data deleted by us. This means, for example, that you can request that we delete personal data that we (i) no longer need to fulfill the purpose for which we collected it, or (ii) process based on your consent and have withdrawn that consent. There are situations where Klarna is unable to delete your data, such as when the data is still required for the purpose for which it was collected, when Klarna's interest in processing the data outweighs your interest in having the data deleted, or because we are subject to a legal obligation to retain it. You can learn more about our legal obligation to retain data in sections 4 and 9 of the Privacy Policy. The legal provisions mentioned there prevent us from deleting certain data immediately. You also have the right to object to the use of your personal data for certain purposes, such as direct marketing; you can find out more about this in this list of your rights.
•Right to information.
You have the right to be informed by us about how we process your personal data. This is done through this privacy policy, service-specific FAQs, and by answering your questions.
• Right to obtain information about your personal data (“right of access of the data subject”).
You have the right to know whether Klarna processes personal data concerning you and to receive a copy ("data extract") of this data, the so-called right of access of the data subject. The data extract will provide you with information about what personal data Klarna holds about you and how we process it.
•Right to information and to transfer your personal data to another recipient (“data portability”).
This right means that you can request a copy of the personal data concerning you that Klarna holds for the performance of a contract with you or processes based on your consent, in a machine-readable format. This will allow you to use the data elsewhere, for example, to transfer it to another controller/recipient.
• Right to rectification.
You have the right to request the correction of inaccurate information concerning you or the completion of information concerning you that you consider to be inaccurate or incomplete.
• Right to restriction of processing.
If you believe that data is inaccurate, that our processing of the data is unlawful, or that we do not need the data for a specific purpose, you can request a restriction of the processing of such personal data. You also have the right to request that we cease processing your personal data while we review your request. If you object to our processing in accordance with your right described below, you can also request that we restrict the processing of this personal data while we conduct our review.
• Right to object to the processing of your personal data
You have the right to object, on grounds relating to your particular circumstances, to the processing of your personal data based on our legitimate interest (Art. 6 para. 1 f) GDPR). Furthermore, you may object at any time to the use of your personal data for direct marketing purposes. If you inform us that you no longer wish to receive direct marketing information from us, we will cease marketing to you and will no longer send you any such material.
• Right to object to an automated decision that significantly affects you.
You have the right to object to an automated decision made by Klarna if the decision has legal effects on you or similarly significantly affects you. Section 6 explains how Klarna uses automated decision-making.
• Right to withdraw your consent.
As described in section 5 below, if we process your personal data based on your consent or explicit consent, you have the right to withdraw that consent at any time. If you withdraw your consent, we will cease processing your data for the relevant purposes.
• Right to file a complaint.
If you wish to complain about how Klarna processes your personal data, you have the right to file a complaint with Integritetsskyddsmyndigheten, the Swedish Data Protection Authority, which oversees Klarna's processing of personal data. You can contact Integritetsskyddsmyndigheten via the following link. You can also file a complaint with your national data protection authority, which you can find listed here.
Settings in the Klarna mobile app: In the Klarna mobile app, Klarna offers you the option to adjust your preferences for certain services, such as receiving up-to-date notifications or automatically filling in your information when making a purchase.
3. What types of personal data do we collect?
This section explains the different types of personal data we collect or create. Section 4 describes the purposes for which we use these types of personal data.
•Contact and identification data - name, date of birth, social security number, title, occupation, gender, billing and delivery address, email address, mobile phone number, nationality, age, audio recordings, photos and video recordings of you and your ID, etc.
• Information about goods/services - Data about the goods/services you have purchased or ordered, such as the type of item or the tracking number.
•Information about your financial situation - information such as your income, any loans, negative payment history and previous loan approvals.
•Payment information - Credit and debit card details (card number, expiry date and CVV code), account number, name of your bank.
• Information about your use of Klarna's services – which service(s) and features you have used and how you have used them. This includes information about outstanding and past debts, your repayment history, and your personal preferences.
•Technical information generated by your use of Klarna's services - Technical data such as website response time, download errors, date and time when you used the service.
•Information about your contacts with Klarna customer service - Recorded telephone calls, chat conversations and email correspondence.
•Your contacts with the retailers you shop at or visit - information about how you interact with retailers, e.g., whether you have received goods and the type of retailers you shop at.
•Device information - Device ID, IP address, language settings, browser settings, time zone, operating system, platform, screen resolution and similar data about your devices and device settings/usage.
•Information from external sanctions lists and PEP lists - Sanctions lists and lists of politically exposed persons (“PEP”) contain information such as name, date of birth, place of birth, occupation or position and the reason why the person is on the respective list.
•Sensitive personal data - Sensitive personal data includes data revealing religious beliefs, political or philosophical views, or trade union membership, information about health, sex life or sexual orientation, and biometric data.
• Service-specific personal data - As part of our Klarna Shopping Service, as well as in connection with Klarna savings and payment accounts, Auto Import/Magic Import, and Personal Finance, we use additional personal data that does not fall under the categories listed above. Information on the individual services is listed here: The Klarna mobile app and browser extension (as part of the Klarna Shopping Service): All content you upload or provide (e.g., photos, receipts, or product and shop reviews), location information, geolocation information, information about browser usage, and the websites you visit in the app's browser or with the installed extension; Klarna savings and payment accounts: Information about your transactions and deposits, as well as information about where your money comes from and what it is used for. For this service, Klarna also processes data about third parties (such as payment recipients or payers); Auto-import/Magic import: information from the connected email account about your completed purchases, product, price and quantity information, tracking numbers and merchant information, which we share with the Klarna mobile app; and Personal Finance: data from your other bank accounts and other types of accounts (e.g., card accounts) that you connect to the service, as well as data such as account number, bank, historical transactions from your connected accounts, and balances and assets; Membership Connect Service: information from your added third-party membership or loyalty card account, such as membership points, status, level and balance history.
•Registration for events via social media: Information about your profile from your social media account and business data such as name, address and company type of your employer.
Detailed information on the relevant personal data for each social media service can also be found here.
4. Which personal data are used, for what purposes, and on what legal basis?
The following tables provide more information about this,
1. what we use your personal data for,
2. Which types of personal data we use for the respective purpose and whether the personal data comes directly from you or from another source. If we have received personal data about you from another source, we indicate the source in parentheses.
3. What rights we have under applicable data protection laws, such as the GDPR, to process data about you, which is referred to as our "legal basis", and
4. when Klarna ceases using the personal data for the respective purpose.
4.1 Purposes for which your personal data will be used in all cases, regardless of which service you use.
Purpose of processing – what we do and why. Types of personal data used for this purpose and where they come from (source). See section 3 for more information on the different types of personal data. Legal basis for processing in accordance with the GDPR. When the purpose for using the personal data no longer applies. See section 9 for more information on when Klarna deletes data.
To manage our customer relationship with you for each service you use, in accordance with our agreements. This includes creating and electronically sending you information (not marketing). From you: Contact and identification data. Payment information. Sensitive personal data. From other sources: Information about goods/services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Technical information generated by your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchants). Device information (your device). Service-specific personal data (see section 3). This processing is necessary for Klarna to enter into a contract with you (Art. 6 para. 1 b) GDPR). If the service processes information that constitutes sensitive personal data (e.g., from files you upload), our processing is based on your explicit consent (Art. 9 para. 2 a) GDPR). This applies when the contract between you and Klarna ends.
To conduct customer satisfaction surveys and market research, carry out consumer research, and request feedback from you via email, text messages, telephone calls, or other communication channels. If you do not wish for your data to be processed in this way, please contact us to inform us. See Section 2 for further information about your rights. Our contact information can be found in Section 12. From you: Contact and identification data. Information about your use of Klarna's services. From other sources: Information about goods/services (merchants). Information about your use of Klarna's services (Klarna). Technical information generated by your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchants). This processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of the balancing of interests, Klarna concluded that we have a legitimate interest in conducting such surveys, that the processing is necessary to achieve this purpose, and that our interest outweighs your right not to have your data processed for this purpose. You can contact us for further information on how this balancing was carried out. Our contact information can be found in section 12. For telephone calls, the processing is based on your explicit consent (Art. 6 para. 1 a) GDPR). This also applies when the contract between you and Klarna ends.
Ensuring network and information security for Klarna's services. From you: Contact and identification data. From other sources: Information about your use of Klarna's services. (Klarna) Technical information generated by your use of Klarna's services. (Klarna) Your interactions with the merchants you shop at or visit. (Merchants) Device information. (Your device) This processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). In this balancing of interests, Klarna concluded that we have a legitimate interest in ensuring network and information security, that the processing is necessary to achieve this purpose, and that our interest outweighs your right not to have your data processed for this purpose. It is also in your interest as a customer that we ensure good information security. You can contact us for more information on how this balancing was carried out. Our contact information can be found in section 12. Your data will be processed for as long as you use a service.
To support you as a vulnerable customer (i.e., if you require additional assistance contacting us due to special circumstances). This means we can offer you specific support, for example, when you contact customer service. From you: Contact and identification data. Sensitive personal data (information about your health). From other sources: Information about your use of Klarna's services. (Klarna) Based on your consent (Art. 6 para. 1 a) and Art. 9 para. 2 a) GDPR). We will cease this processing if and when you inform us that you no longer qualify as a vulnerable customer or withdraw your consent.
To conduct risk analyses, prevent fraud, and manage risk. We process your data to confirm your identity, ensure the accuracy of the information you provide, and prevent crime. This processing involves profiling and automated decision-making. We use automated decision-making to determine whether you pose a fraud risk. For more information on profiling and automated decision-making, please see Section 6. From you: Contact and identification data. Payment information. From other sources: Information about goods/services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Technical information generated by your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchants). Device information. (Your device) Sensitive personal data. Processing is necessary for Klarna to fulfill a contract with you (Art. 6 para. 1 b) GDPR). We are also legally obliged to verify the identity of our customers (Art. 6 para. 1 c) GDPR), (Swedish Act (2017:630) on Measures Against Money Laundering and Terrorist Financing). Sensitive personal data is processed based on your explicit consent. This processing takes place for the duration of your use of a Klarna service. If Klarna has identified a risk in the way you use Klarna, we will continue to use your data for this purpose and – should a risk of fraud exist – continuously update our risk assessment. We process your data for as long as we are legally obliged to retain it. Further information on our legal retention obligations and rights can be found in Section 9.
To anonymize your personal data and, based on this, improve our services and products and analyze customer behavior. From you: Contact and identification data. Payment information. From other sources: Information about goods/services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Technical information generated by your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchants). Device information (your device). Service-specific personal data (see section 3). This processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of this balancing of interests, Klarna concluded that we have a legitimate interest in anonymizing your personal data for product development purposes and analyzing customer behavior to improve our service and customer experience. We guarantee that the associated processing is necessary to achieve the purpose of the processing and that our interest outweighs your right not to have your data processed for this purpose. By anonymizing data concerning you, we ensure that we use personal data as little as possible. You can contact us for more information on how this balancing of interests was carried out. Our contact information can be found in Section 12. This processing takes place for the entire period that Klarna needs to retain the data in its systems, for example, to fulfill the contract concluded with you or to comply with applicable law. Further information on our legal retention obligations and rights can be found in Section 9.
For conducting data analyses for product development and testing to improve our risk and credit models and to design our services (where possible, the data is anonymized in the first step, meaning no further processing of personal data takes place). From you: Contact and identification data. Payment information. From other sources: Information about goods/services. (Merchants) Information about your financial situation. (Klarna and credit reference agencies) Information about your use of Klarna's services. (Klarna) Technical information generated by your use of Klarna's services. (Klarna) Your interactions with the merchants you shop at or visit. (Merchants) Device information. (Your device) Service-specific personal data (see section 3). The processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of the balancing of interests, Klarna concluded that we have a legitimate interest in conducting data analyses for product development and testing purposes. We guarantee that the associated processing is necessary to achieve the purpose of the processing and that our legitimate interest outweighs your right not to have your data processed for this purpose. Furthermore, our customers benefit from this processing, as it helps us provide error-free and sustainable services. You can contact us for more information on how this balancing of interests was carried out. Our contact information can be found in Section 12. This processing takes place for the entire period that Klarna needs to retain the data in its systems, for example, to fulfill the contract concluded with you or to comply with applicable law. Further information on our legal retention obligations and rights can be found in Section 9.
For calculating payment commissions to suppliers (where possible, we anonymize the data first, meaning that no further processing of personal data takes place). From other sources: Information about goods/services. (Klarna) Information about your use of Klarna's services. (Klarna) Technical information generated by your use of Klarna's services. (Klarna) The processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of the balancing of interests, Klarna concluded that we have a legitimate interest in calculating payment commissions. We guarantee that the associated processing is necessary to achieve the purpose of the processing and that our interest outweighs your right not to have your data processed for this purpose. You can contact us for further information on how this balancing was carried out. Our contact information can be found in section 12. This processing takes place for up to 90 days after use of a service.
For the creation of statistics and reports for economic analyses or analyses of payment trends or payment volumes in specific regions or industries (where possible, the data is anonymized in the first step, meaning that no further processing of personal data takes place). From you: Contact and identification data. Payment information. From other sources: Information about goods/services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Your contacts with the merchants you shop at or visit (merchants). Service-specific personal data (see section 3). The processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of the balancing of interests, Klarna concluded that we have a legitimate interest in creating statistical data and reports for this purpose. We guarantee that the associated processing is necessary to achieve the purpose of the processing and that our legitimate interest outweighs your right not to have your data processed for this purpose. You can contact us for more information on how this balancing of interests was carried out. Our contact information can be found in Section 12. This processing will continue for the entire period that Klarna needs to retain the data in its systems, for example, to fulfill the contract concluded with you or to comply with applicable law. Further information on our legal retention obligations and rights can be found in Section 9.
To verify your identity. From you: contact and identification data. This processing is necessary for Klarna to fulfill a contract with you (Art. 6 para. 1 b) GDPR). As long as you use one of Klarna's services.
To share your personal data with the categories of recipients described in Section 7.1 (suppliers and subcontractors, Klarna Group companies, persons with authority over your financial transactions, authorities, and purchasers of receivables, businesses, or assets). All types mentioned in Section 3. Varys depending on the recipient (see Section 7.1). This processing takes place for the entire period that Klarna needs to retain the data in its systems, e.g., to fulfill the contract concluded with you or to comply with applicable law. For more information about our legal retention obligations and rights, please see Section 9.
To decide what kind of marketing we will offer you. If you do not wish to be processed in this way, please contact us to inform us. We will then cease using your data for marketing purposes. Our contact information can be found in Section 12. This processing may constitute profiling. See Section 6 for further information about your rights. From you: Contact and identification data. From other sources: Information about goods/services. (Merchant) Information about your use of Klarna's services. (Klarna) Technical information generated by your use of Klarna's services. (Klarna) Your interactions with the merchants you shop at or visit. (Merchant) Device information. (Your device) Service-specific personal data (see Section 3). This processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of this balancing of interests, Klarna concluded that we have a legitimate interest in determining what kind of marketing we should offer you. We guarantee that the associated processing is necessary for pursuing this interest and that our interest outweighs your right not to have your data processed for this purpose. This is done taking into account the fact that marketing is listed in the GDPR as an example of a legitimate interest. You can contact us for more information on how this balancing was carried out. Our contact information can be found in section 12. This will also apply if the contract between you and Klarna ends, or if you inform us that you are no longer interested in this processing.
To send you marketing materials and offers about our other products and services similar to those you have already used and which are part of Klarna as a shopping platform. If you do not wish to receive marketing from us, please contact us to let us know. We will then cease processing your personal data for sending marketing materials. Our contact information can be found in Section 12. From you: Contact and identification data. From other sources: Information about your use of Klarna's services. (Klarna) Your interactions with the merchants you shop at or visit. (Merchants) The processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of the balancing of interests, Klarna concluded that we have a legitimate interest in sending you marketing communications about our services and offers. We guarantee that the associated processing is necessary to pursue this interest and that our interest outweighs your right to have your data not processed for this purpose. This is done taking into account the fact that marketing is listed in the GDPR as an example of a legitimate interest. You can contact us for more information on how this balancing of interests was carried out. Our contact details can be found in section 12. This will also apply if the contract between you and Klarna ends, or if you inform us that you are no longer interested in this processing.
To provide you with direct marketing about offers, products, or services from Klarna and our stores/partners. From you: Contact and identification data. From other sources: Information about your use of Klarna's services. (Klarna) Your interactions with the merchants you shop at or visit. (Merchants) This processing is based on your consent (Art. 6 para. 1 a) GDPR). You can withdraw your consent or opt out of this processing by informing us that you are not interested in it.
To protect Klarna from legal claims and to safeguard Klarna's legal interests. All types mentioned in Section 3. In the event of legal proceedings, Klarna may also collect other types of personal data about you if we need them to exercise our rights. The processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of this balancing of interests, Klarna concluded that we have a legitimate interest in being able to protect ourselves from legal claims. We guarantee that the associated processing is necessary to achieve the purpose of the processing and that our interest outweighs your right not to have your data processed for this purpose. You can contact us for more information on how this balancing was carried out. Our contact information can be found in Section 12. This processing takes place for the entire period that Klarna needs to retain the information in its systems, for example, to fulfill the contract concluded with you or to comply with applicable law. Further information on our legal retention obligations and rights can be found in section 9.
4.2 Purposes for which your personal data will be used when you use one of Klarna's payment methods, use Klarna with a merchant, or choose to pay by debit or credit card during the payment process in Klarna's checkout with a merchant.
Purpose of processing – what we do and why. Types of personal data used for the purpose and where they come from (the source). See section 3 for more information on the different types of personal data. Legal basis for processing in accordance with the GDPR. When the purpose for using the personal data no longer applies. See section 9 for more information on when Klarna deletes data.
To transfer the merchant's right to payment for your purchase to Klarna ("factoring"). From you: Contact and identification data. Payment information. From other sources: Information about goods/services (merchant). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Technical information generated by your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchant). Device information (your device). This processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of this balancing of interests, Klarna concluded that we (and the merchant) have a legitimate interest in selling or buying your outstanding receivables. We guarantee that the associated processing is necessary to achieve the purpose of the processing and that our interest outweighs your right not to have your data processed for this purpose. You can contact us for further information on how this assessment was carried out. Our contact details can be found in section 12, "At the time of purchase".
To share your personal data with the categories of recipients described in Section 7.2 (merchants, payment service providers and financial institutions, fraud prevention agencies, companies that provide identity information, and Google). From you: Contact and identification data. Payment information. From other sources: Information about goods/services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Technical information generated by your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchants). Device information (your device). Varies depending on the recipient (see Section 7.2). Primarily during the purchase, but also for the entire period that Klarna retains the data in its systems, i.e., until the data is deleted. For more information about our legal retention obligations and rights, please see Section 9.
When you shop at a merchant that offers Klarna as a payment method or uses Klarna's Checkout, we determine the order in which different payment methods are offered to you during the merchant's checkout process. This processing does not affect which of Klarna's payment methods are available to you. If you do not wish for this processing to occur, please contact us to inform us. Our contact information can be found in Section 12. This processing constitutes profiling. See Section 6 for more information about your rights. From you: Contact and identification data. From other sources: Information about goods/services (merchant); Information about your use of Klarna's services (Klarna); Technical information generated by your use of Klarna's services (Klarna); Your interactions with the merchants you shop at or visit. (Merchant) If you have accepted and are using the Klarna service called "Shopping Service," which is described in more detail in the service's Terms and Conditions (available here), your data will be processed on the legal basis of fulfilling the contract between you and Klarna in accordance with Article 6(1)(b) GDPR. If you have not entered into the "Shopping Service" contract, the processing will instead be based on a balancing of interests (Article 6(1)(f) GDPR). As part of this balancing of interests, Klarna concluded that we have a legitimate interest in checking the order in which you are offered different payment options during the merchant's checkout process. We guarantee that the associated processing is necessary to achieve the purpose of the processing and that our interest outweighs your right not to have your data processed for this purpose. You can contact us for more information on how this balancing was carried out. Our contact information can be found in Section 12. When displaying payment methods at checkout.
To prevent Klarna's products and services from being used for money laundering or terrorist financing, transactions are monitored and verified. Klarna also conducts ongoing risk assessments and creates risk models to combat money laundering and terrorist financing. This processing constitutes profiling and automated decision-making. For more information on profiling and automated decision-making, please see Section 6. From you: Contact and identification data. Payment information. Sensitive personal data. From other sources: Information about goods/services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Technical information generated by your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchants). Device information (your device). Information from external sanctions lists and PEP lists. (Sanctions lists and PEP lists) Sensitive personal data (information about political opinions, religious beliefs, and/or health information included in the PEP lists). Service-specific personal data (see Section 3 for information about Klarna savings and payment accounts). To comply with laws (Art. 6 para. 1 c) GDPR), (Swedish Act (2017:630) on Measures Against Money Laundering and Terrorist Financing). For sensitive personal data, the basis is that processing is necessary for reasons of public interest (Art. 9 para. 2 g) GDPR). However, if you have provided us with sensitive personal data, it will be processed based on your explicit consent. Once the contract between you and Klarna ends. See Section 9 for further information about our obligations and our right to retain information in accordance with legal requirements.
To conduct a fraud prevention check before accepting a purchase. This processing involves profiling and automated decision-making. We use automated decision-making for this purpose to determine whether you pose a fraud risk. For more information on profiling and automated decision-making, see section 6. See also section 7.2.3 about our use of fraud prevention agencies and companies to which your data may be disclosed, and our legal basis for this disclosure. From you: Contact and identification details. Payment information. From other sources: Information about goods/services. (Merchant) Information about your use of Klarna's services. (Klarna) Technical information generated by your use of Klarna's services. (Klarna) Your interactions with the merchants you shop at or visit. (Merchant) Device information (your device) In addition, Klarna receives information from fraud prevention agencies and companies about whether your information indicates an attempted fraud. This processing is necessary for Klarna to fulfill a contract with you (Art. 6 para. 1 b) GDPR). When carrying out fraud checks.
For accounting and bookkeeping purposes in accordance with applicable accounting regulations, and for the retention of information within the framework of accounting and bookkeeping in accordance with applicable laws. From you: Contact and identification data. Payment information. From other sources: Information about goods/services. (Merchant) Information about your use of Klarna's services. (Klarna) Your interactions with the merchants you shop at or visit. (Merchant) For compliance with laws (Art. 6 para. 1 c) GDPR), (Swedish Accounting Act (1999:1078)). During the accounting period and for 7 years after the end of the year in which the data were collected. Further information on our legal retention obligations and rights can be found in Section 9.
Performing calculations in accordance with capital adequacy regulations. From you: Contact and identification details. Payment information. From other sources: Information about goods/services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Service-specific personal data (see Section 3 for information about Klarna savings and payment accounts). To comply with laws (Article 6(1)(c) GDPR), (Capital Adequacy Regulation 575/2013 and Capital Adequacy Directive 2013/36). Seven years after the end of the year in which the data were collected. For further information about our legal retention obligations and rights, please see Section 9.
4.3 Purposes for which your personal data will be used when you use one of Klarna's payment methods that grant you credit, or when you use the Klarna Card or the Shopping Service one-time card.
The following services involve being granted credit: “Pay Later” (invoice), “Pay Now” (direct debit), “Financing” (installment purchase), the Klarna Card, the one-time Shopping Service card, and depositing money by topping up your Klarna account (all available in the Klarna mobile app).
Purpose of processing – what we do and why. Types of personal data used for this purpose and where they come from (source). See section 3 for more information on the different types of personal data. Legal basis for processing in accordance with the GDPR. When the purpose for using the personal data no longer applies. See section 9 for more information on when Klarna deletes data.
To conduct a credit check before granting a loan. This constitutes profiling, and the decision to approve or reject the loan is an "automated decision." See Section 6 for more information on profiling and automated decisions. See also Section 7.3.1 about our use of credit reference agencies, to which your data may be disclosed, and our legal basis for this disclosure. From you: Contact and identification details. From other sources: Information about your financial situation (Klarna and credit reference agencies); information about your use of Klarna's services (Klarna); technical information generated by your use of Klarna's services (Klarna). To conclude and perform the loan agreement (Art. 6 para. 1 b) GDPR). Once the credit check is complete.
To share your personal data with the types of recipients described in Section 7.3 (credit reference agencies, debt collection agencies and other buyers of outstanding receivables, as well as VISA, debt purchasers and digital wallet providers). From you: Contact and identification details. Payment information. From other sources: Information about goods and services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchants). Device information (your device). Varies depending on the recipient (see Section 7.2). Primarily during the purchase, but also for the entire period that Klarna retains the data in its systems, i.e., until it is deleted. For further information about our legal retention obligations and rights, please see Section 9.
To transfer Klarna's right to payment for your purchase to a new creditor. From you: Contact and identification data. From other sources: Information about goods/services (merchants), information about your financial situation (Klarna and credit reference agencies), information about your use of Klarna's services (Klarna), your interactions with the merchants you shop at or visit (merchants). This processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of this balancing of interests, Klarna concluded that we have a legitimate interest in selling outstanding loans as part of our business activities. We guarantee that the processing is necessary to pursue this interest and that our interest outweighs your right not to have your data processed for this purpose. You can contact us for more information on how this balancing was carried out. Our contact information can be found in section 12. Processing can take place as long as the claim remains unpaid (you will be notified when the claim is transferred).
To provide debt collection services, i.e., to collect and sell overdue receivables. From you: Contact and identification data. From other sources: Information about goods/services (merchants), information about your financial situation (Klarna and credit reference agencies), information about your use of Klarna's services (Klarna), your interactions with the merchants you shop at or visit (merchants). This processing is based on a balancing of interests (Art. 6 para. 1 f) GDPR). As part of this balancing of interests, Klarna concluded that we have a legitimate interest in collecting and selling receivables. We guarantee that the associated processing is necessary to achieve the purpose of the processing and that our interest outweighs your right not to have your data processed for this purpose. You can contact us for more information on how this balancing was carried out. Our contact information can be found in section 12. Once the receivables have been settled.
To prevent Klarna's products and services from being used for money laundering or terrorist financing, transactions are monitored and reviewed, risk assessments are conducted, and risk models are created. This processing constitutes profiling, and if it is determined that you pose a money laundering risk, this constitutes an automated decision. Further information on profiling and automated decision-making can be found in Section 6. From you: Contact and identification data. Payment information. From other sources: Information about goods/services (merchants). Information about your financial situation (Klarna and credit reference agencies). Information about your use of Klarna's services (Klarna). Technical information generated by your use of Klarna's services (Klarna). Your interactions with the merchants you shop at or visit (merchants). Device information (your device). Information from external sanctions lists and PEP lists. (Sanctions lists and PEP lists) Sensitive personal data (information on political opinions, religious beliefs and/or health information included in the PEP lists). For compliance with laws (Art. 6 para. 1 c) GDPR), (Swedish Act (2017:630) on Measures Against Money Laundering and Terrorist Financing). With regard to sensitive personal data, the condition is that the processing is necessary in the public interest (Art. 9 para. 2 g) GDPR). Up to five years after termination.