Depending on different situations, whether you are an end customer, customer, supplier or perhaps a job seeker, we may process your personal data in different ways.

We may also process personal data about visitors to our websites, depending on whether you leave personal data with us, for example if you fill in a contact form or subscribe to a newsletter. Regardless of the situation, we promise never to sell, commercialize or use your personal data in a way that would be considered a breach of applicable privacy legislation.

Kravia AS is part of Kraviagruppen AS with several departments in Norway. Kravia processes your personal data and is responsible for protecting your personal data.

Kravia will safeguard your privacy, regardless of whether we process your personal data on behalf of us or other parties. It is important to us that you understand what personal data we process about you, why we do this and what rights you have. Therefore, we ask you to read this privacy policy to get more information about our processing of your personal data.

Why do we process your personal data?

Kravia AS with subsidiaries and departments processes your personal data because we have been commissioned to collect an overdue claim on behalf of our client.

Debt collection is a task of public interest, and is regulated in the Debt Collection Act of 13 May 1988. We thus have a valid legal basis for processing your personal data. Processing of personal data is necessary for dunning/collection, even if you have not consented to this. Nor is such consent required by law. In accordance with our purpose, we may also carry out credit assessments to comply with good debt collection practice, use data from various sources, for example, credit reference agencies, historical records we hold about you, use public records to verify whether the information we hold about you is correct , as well as share your personal data with approved third parties, e.g. credit reporting agencies. In accordance with the privacy legislation, your personal data is stored confidentially.

In order for us to be able to communicate with you and at the same time ensure safe and correct identification, we need your name, social security number, date of birth and contact information, such as address, telephone number and e-mail address.

In order for us to be able to assess your ability to pay, perform risk analysis and risk management, create payment arrangements and monitor debt, we hold financial information such as payment history, standard information, credit history, information on debt, income, assets/values, credit, and credit assessments.

In order to get a better understanding of your situation, and to make decisions about how we should best handle your case, we also hold information about the reasons for non-payment, depending on the information you give us, e.g. personal or family relationships, work-related problems, etc.

Personopplysningene vi sitter på er nødvendige for å forsvare oss mot rettslige krav eller annen form for fullbyrdelse. Vi bruker også dine personopplysninger til å oppfylle god inkassoskikk, blant annet gjennom historiske kredittvurderinger og resultater.

We may share your personal data with our suppliers who facilitate and/or deliver parts of our services, e.g. printing and postal services, searches in land registry registers, customer centres, debt collection networks, legal representatives, etc. We may also share your personal data with our customer (your contracting party), credit reference agencies, settlement councils, bailiffs and other public authorities.

In order to process your case, our employees will have access to your personal data when necessary. In such cases, access will only be granted as needed and for the purposes described and only if the employee is bound by a duty of confidentiality. The information we hold about you may be anonymised and used to develop our business. Where it is necessary to secure your personal data, we carry out the necessary testing when changes are made to our IT systems, and your personal data is then used as it appears.

Unless otherwise agreed with you or where it is necessary to establish, exercise or defend against legal claims, we will not include special categories of personal data (see below).

Unless otherwise agreed with you, or where it is necessary for the establishment, exercise or defense of legal claims, we will not include special categories of personal data. This is often called "sensitive personal data" and is information such as ethnic origin, political opinions, religious or philosophical beliefs, membership in trade unions as well as personal data about health or sexual orientation.

However, it may be to your advantage to notify us of your state of health, disability and/or personal information related to your private life that may affect your ability to repay claims. This enables us to carry out measures adapted to your needs or requirements, such as payment deferrals, debt advice or adjusting your payment arrangement.

This information will be used by us to assist you and will be stored for as long as is necessary for this purpose. You can also later notify us that you no longer want us to have this type of information about you, as long as this is not necessary for establishing, exercising or defending legal claims.

‍No, you do not need to send us your personal data. In fact, most (or all) personal data about you comes from other sources, such as our clients (your contracting party), the National Register of Citizens, credit reporting agencies, etc.

You can choose whether you want to give us more personal data. This can help us with the processing of your individual case, and can be to your advantage. For example, you may have a valid reason why you have not paid off a debt, or you wish to send us information in connection with the establishment of a payment arrangement that takes into account your situation and your needs.

We store your personal data as long as this is permitted by law, and as long as we have a legal basis for storing such information. Such a basis could, for example, be to ensure good debt collection practices, or to defend ourselves against legal claims until the limitation period expires.

We will also store personal data as long as we are obliged to do so in accordance with Norwegian law. In the case of backups, we also delete your personal data in our backups, but only when these are restored in accordance with our backup policies.

In connection with our debt collection activities, we may assign a score to you/the case in certain cases. Based on our information about you, we then score your debt collection case. This is necessary to optimize our business and the processing of your case in an efficient manner and at the right time.

The score indicates how the case will be processed. A score is automatically given where we use this, and the score determines, for example, how likely it is that you will pay your debt or whether we will forward your case to enforcement. We do not consider that the automated decision-making has legal effects or affects you in other ways, as this process does not affect your rights and obligations.

It is important that you understand that it is your personal data that we process and we want you to feel comfortable with this. Although we do not need your permission to process your personal data, you still have many rights in connection with the processing of such information.

All information is available in this privacy policy.

If you believe that we have registered incorrect information about you, you have the right to inform us of this, if there is something wrong, it is important that we receive this information.

If we process your personal data in an illegal way, for example if we process your personal data longer than necessary, or without reason, you can ask us to delete such information.

You can demand this in certain cases, such as:
- Objections to the correctness of the personal data
- Unlawful processing
- The processing of personal data is no longer necessary for the purpose
- Objections to the processing

The processing will be limited from the time the objection is submitted and during the period it takes us to assess the objection. This means that we (with the exception of the storage of personal data) can process your personal data only with your consent, as long as processing takes place in connection with legal matters, to protect the rights of others or if the public has an interest in the processing.

If you believe that we do not have the right to process your personal data, you can object to our processing. In such cases, we can only continue the processing if we can justify reasons that outweigh your interests, rights and freedoms. But we can always process your personal data if this is required to determine, exercise or defend legal claims.

You can request that personal data you have handed over to us for processing based on consent or to fulfill a contract, be sent to you in a structured, common and machine-readable format. You also have the right to request the transfer of such information to another data controller.

We do not base our processing of personal data on consent, but given that certain processing activities may be based on consent, you have the right to withdraw this consent. In such cases, we will stop the processing activities based on this legal basis.

We will also notify others with whom we have shared your personal data that you have withdrawn your consent.

If you, as a private individual, are not satisfied with the answer or believe that we are processing your personal data in an illegal manner, you can complain to the Norwegian Data Protection Authority. You can find more information about the Norwegian Data Protection Authority and their complaints procedure at www.datatilsynet.no.