Privacy policy

(Use, collection and processing of personal data)

This privacy policy applies to the one who uses this service and Match Finans AS, registration number 931 238 493, which is responsible for processing.

Match Finans AS is concerned about your privacy, and here we will explain to you how we collect, use and protect your data. In addition, we inform you about your rights and how you can make use of them.

Questions can be directed to kunde@matchfinans.no

Definitions

Personal information:

According to the EU’s General Data Protection Regulation (GDPR), personal data is defined as “all information about an identified or identifiable natural person”. This may include, but is not limited to, name, identification number, location data, an electronic identifier or one or more particular characteristics of the physical, physiological, genetic, psychological, economic, cultural or social identity of that person.

Data processor responsible: This is a legal term from the GDPR that refers to the entity that determines the purposes and means of processing personal data. The data controller is responsible for ensuring that the processing of personal data is in compliance with the GDPR and other relevant privacy laws.

Data processing: This is any operation or set of operations performed on personal data, whether automated or not. This may include collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, publication by transmission, dissemination or otherwise making available, adjustment or combination, restriction, deletion or destruction.

Data processor: A data processor is a person, public authority, agency or other entity that processes personal data on behalf of the data processor. Data processors can be third-party companies with which the data processor has a contract to perform specific tasks, such as e.g. IT services, cloud storage services, marketing agencies, etc.

Your rights (as a user of this service)

When a user of our services submits a loan application, they have several rights in relation to the personal data they provide, in accordance with the GDPR and Norwegian privacy legislation.

Right to access:

Loan applicants have the right to know what personal data is collected, and how it is used, stored and possibly shared.

Right to rectification:

If the information collected is incorrect, the loan applicant has the right to have it corrected. In certain cases, the loan applicant has the right to have his personal data deleted, for example if the data is no longer necessary for the purpose for which it was collected.

Right to restriction of processing:

The loan applicant can demand that the processing of the personal data be restricted, for example if they dispute the correctness of the data. Right to data portability: The loan applicant has the right to receive the personal information about himself in a machine-readable format, and has the right to transfer this information to another data processor.

Right to protest:

The loan applicant has the right to object to the processing of personal data if the processing is based on legitimate interest or takes place in connection with direct marketing.

Rights in connection with automated individual decision-making, including profiling:

The loan applicant has the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect for or significantly affects them.

The purpose of collecting personal data

Assess the loan applicant’s qualification:

In order to provide an accurate and personal comparison of loans, a business must collect certain information about the loan applicant.

To deliver personal service:

By collecting personal data, a business can deliver a more personal service. For example, by understanding the loan applicant’s financial situation and goals, a business can provide tailored advice and recommendations.

To comply with legal requirements:

Businesses are often required by law to collect and verify certain information when they offer financial services.

What personal data do we use?

  1. Name
  2. Social security number (11 digits)
  3. Contact information
  4. Information about existing debts
  5. Marital status
  6. Number of children
  7. Living conditions
  8. Working conditions
  9. Income
  10. Costs related to living conditions
  11. Information on creditworthiness
  12. Information on payment notes
  13. Information with the applicant

What do we do with the personal data?

  1. Performs credit check.
  2. Performs registration of loan application.
  3. Transfers the loan application to the banks we work with in accordance with the bank’s requirements and needs.
  4. Transfers information between the customer and the bank to assess the application.
  5. Use it to contact you with any questions, either via email, phone or SMS.
  6. Verify that you are you.
  7. Collection of debt data from the debt register if necessary.
  8. Using data to optimize the internal system to provide a better customer experience.

Where do we find and where do we collect personal data?

As a customer, you provide us with the necessary information in the application. In addition, we obtain the necessary information from the debt register.

In addition, we carry out a credit check with a third party to obtain income information.

Collection of data from the Debt Register

The debt information we use is obtained from Gjeldsregisteret AS (Gjeldsregisteret.com)

In order to process the loan application, we need your consent to search the debt register and retrieve the necessary information. The purpose is to retrieve existing information about debt in order to process the application at the bank.

You can safely use our 2FA to give access to your debt information.

You, as a user of the service, can at any time delete our access to your information via the debt register.

For more information visit https://www.gjeldsregisteret.com/pages/innsyn-i-egne-opplysninger-og-administrasjon-av-samtykke

Who else gets access to personal data?

After an application has been completed, we forward the personal data to our partners who are banks. An overview of the banks is on our website, and is regularly updated if there are any changes.

Each bank we work with also has a privacy policy between itself and Match Finans AS.

In addition, the information will be used in the customer service process, and data will be processed through our CRM system Nextcom Evolution.

In the event of an order from public authorities, we may be required to hand over data in accordance with Norwegian law.

Dispute the use of privacy data

If you as a user dispute the use of your data after submitting an application, we cannot assist you with the application process and the data will be deleted.

Storage of data

All data is securely stored on a closed system.

Anonymization and deletion occurs automatically (unless the customer has actively requested it)

  • Customer service dialogue is deleted after 12 months.
  • Information on credit assessment is deleted after 3 months
  • Information on the debt register is deleted after 6 months.