Privacy Policy

Introduction

When you use our services for finding business loans, Krea Technology AB org. no. 559173-2895, Valhallavägen 60, 114 27 Stockholm, is responsible for managing your personal data. This means that Krea Technology is responsible for all personal data that we obtain from you. This information is then shared with selected lenders, which means that they also become responsible for your personal data.

Your privacy is important to us and the processing of your personal data must be done securely. Krea Technology processes your personal data in accordance with the European Parliament and the Councils Regulation (EU) 2016/679 of 27 April 2016, General Data Protection Regulation (GDPR) which constitute the protection of people with regard to the processing of personal data and on the free flow of such data and other applicable data protection regulations.

This Privacy Policy explains how Krea Technology collect and use your personal data. It also describes your rights and how you can assert your rights. In order for you to understand how your personal data is processed, we recommend that you read the Privacy Policy carefully before using our loan brokerage service. Remember that you are always welcome to contact us if you have any questions. You can reach us at kundservice@krea.se.

We especially want to draw your attention to the fact that Krea Technology records all telephone contact with you to ensure and document any agreements and consents in order to be able to fulfill our service in accordance with 6 1b of the Data Protection Regulation. The recordings are saved as long as they are necessary to be able to investigate errors or possible fraud, until the customer relationship ends or when we no longer have a legal obligation to keep the data.
At the very end of the policy, you can read more about your rights. Here is also information about where your personal data is stored geographically.

If you have questions or feel dissatisfied with something, we would like to help you. You can always contact our complaints officer at cf@krea.se. You can also contact the Swedish Data Protection Authority.

To those who are not yet a customer

Direct marketing

Why we process your personal data for this purpose

Like many other companies, we have an interest in marketing ourselves and our products to people who are or want to become our customer. Therefore, we process your personal data for the purpose of marketing our services. The personal data that is subject to processing is e.g. company name, postal address and telephone number of the person applying for a loan on behalf of the company. We also collect data from public sources such as the Swedish Tax Agency, the Swedish Companies Registration Office and from individual address providers.

The information in this document also applies to you if you've entered an e-mail address or telephone number in order to receive marketing from us through e.g. e-mail or SMS.

Our assessment is that we have what the law calls a "legitimate interest" when we use the personal data we have collected to market ourselves and our products. You always have the right to object to marketing from us.

With whom do we share your personal data?

We do not share the data with anyone other than those who help us with marketing, such as the post office.

If you do not want continued direct marketing from us, you can contact kundservice@krea.se or call us on 08-55108262 and ask for help with placing a block.

To our customers or those who want to become our customer

Enter into and fulfill agreements about the mediation of credit (loans)

Why we process your personal data for this purpose

In order to be able to fulfill the agreement with you or to be able to take the measures required for you to be able to become a customer with us, we must process some of your personal data. We do it for the purpose of being able to enter into and fulfill contracts and with the support of, what the law calls, fulfillment of contracts. For example, we need your social security number to be able to confirm your identity with BankID.

If you choose not to provide the information, we will not be able to help you with your loan application.

In addition to the information you provide to us in your application, we will also collect financial information from external parties such as a credit report or information about any current sanctions or other high-risk classification (PEP/RCA).

Automated decision making

When you choose to become a customer of Krea Technology and thus enter into an agreement on loan mediation, Krea Technology will perform an automatic filtering of you. This means that the information you have provided and the information we obtain through a credit report about your company and possibly you if you indicate yourself as a guarantor, is the basis for the assessment of which of our partners can give your company an offer of a credit. The filtering is thus necessary for us to be able to fulfill the agreement we have entered into with you.

Automated decision-making means that in some cases Krea Technology does not forward your application to certain creditors, for example when individual creditors does not grant the requested credit on the basis of the current documents. You have the right to request a manual decision process in certain cases, contact Krea Technology's customer service in such a case.

You can also contact the respective credit provider if you have questions about the credit provider's processing of personal data.

Who do we share your data with?

We will share your information with the credit providers we work with.

For how long do we save your data?

We process the data as long as you are a customer and for a certain period thereafter (up to 60 months after our customer relationship has ended). Our customer relationship extends 60 days after you submit your application, taking into account lead times for the application process and any communication with you.

Direct marketing

Why we process your personal data for this purpose

Like many other companies, we have an interest in marketing ourselves and our products to people who are customers of ours or who we believe have an interest in becoming customers of ours. Therefore, we process your personal data for the purpose of direct marketing.

We also believe that you have an interest in receiving relevant offers from our partners, we will therefore convey offers that we consider to be relevant to you.

The data used in the preparations for and in the marketing itself are, for example, your name and organization number as well as your telephone number and your e-mail address.

Our assessment is that we have what the law calls a "legitimate interest" when we use the personal data we have collected to market ourselves and our products. You always have the right to object to marketing from us.

For how long do we save your data?

We store your data as long as you are a customer and for a certain period thereafter (up to 60 months after our customer relationship has ended). For those of you who have chosen to subscribe to our newsletters, we save your data until you choose to unsubscribe.

With whom do we share your personal data?

We only share the data with those who help us with marketing, such as the post office or with selected partners.

If you do not want continued direct marketing from us, you can contact kundservice@krea.se or call us on 0855108262 and ask for help with placing a block.

Advertising block

Why we process your personal data for this purpose

If you have announced that you do not want our marketing, we must be able to accommodate your request, and then we need to save your personal data in our blacklist (otherwise we cannot keep track of the fact that you do not want our advertising in the future).

Out of respect for your privacy, we will not check that the information is up to date, so you must remember to update the information yourself if you move, for example. We process the data based on the fact that we fulfill a legal obligation.

If you don't want to be on our blacklist, contact "NIX Adresserat" instead.

For how long do we save your data?

We save the data as long as it is relevant, i.e. as long as we have to ensure that we do not process your personal data for direct marketing purposes.

Data processors

Krea Technology uses data processors, such as Google Analytics, to analyse customer behavior and traffic acquisition in connection with marketing activities and campaigns. When you identify yourself with BankID, we submit a user ID, company ID and a loan application ID to Google Analytics that third parties cannot use to identify you or your company. We do this in order to enhance tracking between different devices and improve the customer's experience of our service. These data processors may use cookies and other technologies to collect data about users behavior and their devices. This includes, but is not limited to, device screen size, device type, browser information, geographic location, and URLs visited (on Krea's website only). Whether the user logs in with BankID on Krea's platform or not, information about the user's session is stored in a pseudonymized user profile. The data processor, or other third party, cannot identify the user using the information we collect on Krea's website.

If you have any questions regarding data processors on Krea's website, you can contact our customer service via kundservice@krea.se

Analysis and product development

Why we process your personal data for this purpose

In order for us to be able to develop our products and make them even more attractive to you as a customer, we need to analyze usage and results, among other things. For example, we want to be able to see if our service actually meant any improvement for you as a customer. In order to do that, we need to process some of your personal data.

After you submit an application, you can choose to enter information about your current credit. We process the information you provide with the aim of analyzing your loan situation after you have used Krea Technology's service. The basis for our processing is a balancing of interests, where we have made the assessment that we have a legitimate interest in using the data to investigate whether the service helped you as a customer or not. If you choose to share your data for this purpose, we have judged that our interest in analyzing the data outweighs the interest in not being subject to processing.

For how long do we save your data?

We store your data as long as we have a customer relationship and up to 60 months thereafter. Then they are removed.

With whom do we share your personal data?

We will share your information with the credit providers we work with.

Processing of personal data that we are legally obliged to carry out

Why we process your personal data for this purpose

Krea Technology is obliged by law to take certain measures when we have entered into an agreement with you. This means, for example, that we have to work to prevent money laundering or that we are obliged to have correct accounting. In order to do so, we must process some of your personal data and we do so to fulfill the respective legal obligation. If deemed necessary, certain information will be shared with the investigating authority.

The information we process has been provided by you yourself, e.g. contact details, desired loan amount and purpose of loan. We will also collect data from external parties, for example the EU's sanctions list and PEP register, something we are obliged to do by law.

For how long do we save your data?

The data is stored as long as the legal obligation requires it, but we may not use it for any other purpose.

Security in connection with the agreement

Why we process your personal data for this purpose

For your and our safety in connection with the service, we are required to take certain measures. This is, for example, to prevent someone from taking out a loan in your name, to be able to prevent or investigate possible fraud or prevent other violations of the law or abuse of the service.

If deemed necessary, certain information will be shared with the investigating authority. Our assessment is that we have what the law calls a "legitimate interest" when we handle the personal data we have collected to ensure your and our safety in connection with the agreement.

For how long do we save your data?

The data is stored as long as necessary to investigate possible fraud, other violations of the law or abuse of the service, but we may not use it for any other purpose.

Where we store your data

Krea Technology always strives to store and process your personal data within the EU/EEA. In exceptional cases, however, your Personal Data may be transferred to, and processed in, countries outside the EU/EEA through our suppliers or partners. In these cases, Krea Technology has ensured that there are sufficient guarantees that your personal data is protected through what the Swedish Data Protection Authority describes as "adequate protective measures". This means that such a supplier must live up to the requirements of the GDPR.

Your rights

As a registrant, you have a number of rights according to GDPR which are listed below. As a rule, Krea Technology has an obligation to respond to your request within 30 days of the request being received. In the event that a request takes longer to assist, Krea Technology must inform you of the reason for this.

Right to register extracts

You can contact Krea Technology (kundservice@krea.se) at any time to request an extract of your personal data that Krea Technology has saved and for what purpose it is processed.

Right to rectification

You can contact Krea Technology at any time and request to have incorrect personal data corrected or to supplement incomplete personal data.

Right to be forgotten

You have the right to ask us to delete your personal data. Even if you ask us to delete your personal data, we may sometimes need to save certain personal data, e.g. when the law requires us to do so or if the processing is required to defend or assert our legal interests. In such cases, Krea Technology will block the use of your personal data for the purposes for which you wish to be forgotten.

Right to limitation of processing

You have the right to request that the processing of your personal data be restricted, for example while waiting for incorrect information to be checked and possibly corrected. Note that a restriction or deletion of your personal data may mean that we are unable to fulfill our obligations towards you.

Krea Technology must also inform you when the restriction on the processing of your personal data ends.

Right to object

You can object at any time to Krea Technology's processing of your personal data, for example for direct marketing. If you object to your personal data being processed for direct marketing, Krea Technology must immediately cease that processing. Note that if you are the one contacting Krea Technology to get more information about our services, it is not an example of direct marketing.

Right to data portability

You have the right to obtain your personal data in a machine-readable format and transfer them to another personal data controller, so-called data portability. This only applies to personal data that you yourself have given us, which is processed automatically by us and which we process in order to be able to fulfill the agreement with you or because you have given your consent.

Complaints

If you have comments or complaints regarding Krea Technology's processing of your personal data, you are welcome to contact the complaints officer at cf@krea.se. We are happy to help you. If, against all odds, we should not succeed in finding a solution together, you can turn to the Data Inspectorate, which is the supervisory authority for the processing of personal data.

The Swedish Data Protection Authority can be reached at:

The Swedish Data Protection Authority

Box 8114

104 20 Stockholm

E-mail: datainspektionen@datainspektionen.se

Exchange: 08-657 61 00

https://www.datainspektionen.se/

Changes to our Privacy Policy

Ongoing minor changes to our Privacy Policy are communicated through the website. Substantial changes in how your data is handled take place by e-mail (if we have access to your e-mail address), SMS or letter. If you have comments on Krea Technology's handling of personal data as a result of the change, you are welcome to contact our Customer Service at kundservice@krea.se.