Last updated: 29.07.2025

Website Privacy Policy for Kravia

‍

1. Introduction

Kravia is a debt collection company operating in Norway, Finland and Sweden. We are committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Website Privacy Policy outlines how we collect, use, disclose, and protect personal information when you interact with our website. The data controller for the processing of your personal data is the Kravia entity in your jurisdiction.

Where we process your personal data during our debt collection activities, please review our specified privacy policy describing such processing here. 

2. Collection of Personal Data

We may collect and process the following categories of personal data:

• Contact Information: Name, address, telephone number, email address, and other contact details.

• Communication Information: Correspondence, communications, other information exchanged with individuals or other information you provide us with.
• Recruitment Information: In connection with recruitment, we will process the personal data you provide us during the recruitment process, including your name, contact information, educational and work experience, current job title, etc. We will also process the names and contact information of any references you provide.

‍

3. Use of Personal Data

We use personal data for the following purposes:

• Communication and Support: To communicate with individuals, respond to inquiries, and provide customer support.
• Website performance: We may utilise your personal data for the purpose of website performance and improving our services. For more information about our use of cookies, see our cookie policy here. 
• Recruitment: If you apply to work with us at Kravia, we will process your personal data in order to be able to review your application. 

4. Legal Basis for Processing Personal Data

We process personal data on the following legal bases:

• Legitimate Interests: Processing is necessary for our legitimate interests in, for example, responding to your inquiry and providing you details about our services or being able to review your application to work with us. We carefully balance our interests against the rights and freedoms of the data subjects.

• Consent: Processing is based on the individual's explicit consent, which may be obtained in certain situations. For example, where we process personal data through the use of cookies. If we process your personal data based on your consent, you may withdraw this at any time.
• Legal obligations: Depending on the nature of your communications with us, we may process personal data as is necessary to comply with our legal obligations, such as those imposed by financial, bookkeeping, tax, and anti-money laundering laws. 

5. Disclosure of Personal Data

We may disclose personal data to the following recipients or categories of recipients, as permitted by law:

• Service Providers: To engage third-party service providers who assist us in operating our website and delivering our services, such as IT service providers and professional consultants. Such providers are always contractually obligated to maintain the confidentiality and security of your information.
• Successors and Acquirers: In the event of a merger, acquisition, or transfer of assets, personal data may be disclosed to potential or actual successors, acquirers, or assignees.

6. Social Media Use 

Kravia has corporate accounts on social media platforms such as LinkedIn, and the processing of personal data on these platforms is subject to the terms of use and privacy policies applicable to each platform. We use these accounts to promote and improve our products and services, and the legal basis for this legitimate interest is based on GDPR Art. 6(1)(f). If you contact us via one of these accounts or wish to share any of the content we publish, we will be able to see basic account information such as name and email address. We will respond to you on the same platform and process personal data in connection with such communication.

You are free to stop following our accounts or delete your comments and messages. Please note that even if you stop following our accounts, this does not result in the deletion of your personal data. Also, note that these providers have international data transfers to the USA. We encourage you to read their privacy policies to learn more about their processing of your personal data.

7. Data Retention and Anonymization

We prioritize data privacy and take steps to handle your personal information responsibly. 

We retain your data for as long as necessary to respond to your inquiry and handle your request. Once this period ends, we anonymize or delete the data to protect your privacy. Usually, this will not be longer than 6 months.

Data regarding your use of our website will be deleted after 6 months. 

Information about job applicants who are not hired will be deleted 6 months following the end of the recruitment process. If you provide your consent, we may process your personal data for a longer period to contact you regarding any future job openings.

8. Data Security Measures

Securing and maintaining the confidentiality of the data stored within our systems is a paramount concern at Kravia. We have implemented robust measures to protect your data, ensuring that only authorized personnel with job-related responsibilities can access and process it. 

We implement robust security measures to protect your data, including access control based on job duties, encrypted communications, and firewall-protected servers. Personal authorization controls and non-disclosure agreements ensure confidentiality, while continuous staff training keeps our team updated on best practices. Our premises are secured with restricted access, alarm systems, and locked storage for manual materials. Additionally, data is backed up daily and stored in multiple encrypted locations to prevent unauthorized access.

These security measures are in place to provide a high level of protection for your data. 

9. Your Rights

At Kravia, we respect your rights concerning your personal information. As an individual, you have the following rights:

• Right to Access: You can request to know what personal information we have stored about you in our systems.

• Right to Correction: If any of your personal information is inaccurate, incomplete, or outdated, you have the right to request corrections.

• Right to Erasure: You may ask us to erase your personal data, which request we will respect and comply with.
• Right to Restriction: If we are processing your personal information without a legal basis or if you believe we shouldn't use it for specific purposes, you can request restrictions on its processing.
• Right to Object: You are entitled to object to certain processing activities. You are furthermore, on grounds relating to your particular situation (for example, a specific need for protection of your identity), entitled to object to processing of personal data based on legitimate interests, which we will comply with, unless there exists compelling legitimate grounds for our processing which override your interest, or if our processing is necessary for the establishment, exercise or defence of legal claims.
• Data Portability: You may ask us to provide you or others with your personal data in a structured, commonly used and machine-readable format.

Please note that the above rights may be subject to further exceptions and limitations in accordance with the data protection legislation. To exercise these rights or for further information, please contact us as set out below in this Website Privacy Policy. Please note that we may request additional information from you if such information is necessary to confirm your identity.

10. International Data Transfers

We do not transfer personal data to foreign countries outside the European Economic Area, unless it is necessary for the purposes of providing our services, such as utilizing cloud services. We want to assure you that any data transfers made for these purposes will be conducted in compliance with applicable data protection laws and regulations. Such measures include the use of Standard Contractual Clauses to safeguard the transfer of data outside of the EEA or reliance on adequacy decisions as adopted by the European Commission. Our commitment is to uphold the highest standards of security and confidentiality to safeguard your information.

11. Contact Information 

If you have any questions about this Website Privacy Policy, including how we process personal data, or would like to submit a request to exercise your rights, please contact us at: compliance@kravia.ai.

‍

You may also lodge a complaint with the relevant supervisory authority if you believe that Kravia's processing of your personal data is not in accordance with the applicable data protection laws. The contact details for all EEA Supervisory Authorities can be found here.

12. Changes

We may update the Website Privacy Policy from time to time. The Website Privacy Policy will, for example, be updated to comply with any legislative amendments or if we make changes to our processing of personal data. 

The most recently updated version of the Website Privacy Policy will always be available here.

‍