Privacy policy
Kraft Finans AS ("Kraft Finans") takes your privacy seriously. We are the data controller and are responsible for ensuring that the information we hold about you is used in accordance with data protection legislation.
In this privacy policy, we provide you with information about how we use and protect your personal data and what rights you have. Personal data is any information that can be linked to you as an individual.
What information we have about you
Information provided by you. When you use our services, we typically collect the following information about you:
Contact information, such as name, residential address, email address and telephone number.
Identity information, such as national identity number, age and identification documents.
Family relationships, such as marital status and family situation.
Related parties, such as property managers.
Work situation and education, such as work experience, current employer, education, investment knowledge and investment experience.
Financial information, such as information about assets, debts, annual income, and information about the origin of the funds.
Investment objectives, such as information about the purpose of the investment, investment horizon, risk tolerance and risk profile.
Communication, such as when you contact us and have a dialogue with us.
Information that is collected about you.
When you use our services, we typically collect the following information:
Technical information, such as type of PC/mobile, internet connection, operating system, browser and IP address. We collect this information through the use of cookies (see our cookie policy).
Warnings, i.e. warnings given to you that the investment service or product purchase is considered unsuitable or warnings that insufficient information has been provided to conduct a suitability assessment. We collect this information by having our employees prepare warnings.
Investment history, i.e. information about which investments we have made on your behalf. We create such history in the company.
Credit information, such as information about income, tax assessment, ownership, business interests and payment remarks. We collect this information from credit bureaus.
Anti-money laundering information, i.e. information on political exposure and sanctions that we collect from PEP (Politically Exposed Person) and sanctions lists as well as from other financial institutions and banks.
Audio recordings, i.e. recordings of conversations you have with our employees.
User activity, your activities on a website, e.g. that you visit it, publish content (text, images, videos, etc.) and that you react to content (like, comment, etc.).
How we use the data
Here are the main purposes for which we use the data:
- To verify your identity. For this purpose, we use contact information and identity information.
- For anti-money laundering and prevention of criminal offences. We will process personal data for the purpose of preventing, detecting, solving and dealing with fraud and other criminal offences and to fulfil the obligation to investigate and report suspicious transactions. For this purpose, we use identity information and anti-money laundering information.
- To conduct suitability tests and risk classification. For this purpose, we use identity information, employment status and education, financial information, investment objectives and credit information.
- To provide investment and other services. For this purpose, we use contact information, identity information, warnings, family relationships, financial information, investment objectives and investment history.
- To manage your customer relationship. For this purpose, we use contact information, financial information, investment objectives, investment history, warnings, family relationships and related parties.
- To manage asset manager rights. For this purpose, we use contact information and associated parties.
- To document our investment services and fund management. For this purpose, we use communication and audio recordings.
- For accounting purposes. For this purpose, we use investment history.
- To improve your user experience on our platforms and as a customer. For this purpose, we use technical and usage information. We also use third parties in connection with marketing activities. A separate GDPR agreement is entered into with third parties in connection with marketing activities.
- Prospecting. We will collect information about potential customers, for example in connection with documentation of meetings we have had. For this purpose, we use contact information, financial information, work situation and education and investment history.
- Customised marketing and information. For this purpose, we use contact information, financial information, work situation and education and investment history.
The legal basis for purposes 1, 2, 3, 4, 5 and 8 is that it is necessary to fulfil our agreement with you and to fulfil our legal obligations (such as the AIF Act, the Securities Trading Act, the Money Laundering Act and the Bookkeeping Act). The legal basis for purpose 7 is to comply with our obligations related to investment services in the Securities Trading Act.
The legal basis for purpose 6 is our legitimate interest in administering and fulfilling the rights of asset managers.
The legal basis for purpose 9 is our legitimate interest in conducting product development.
The legal basis for purpose 10 is our legitimate interest in business development. The legal basis for purpose 11 is to be able to offer you customised offers and information. We are entitled to send you marketing about our services corresponding to the services on which the customer relationship is based if we have an existing customer relationship with you. If we do not have an existing customer relationship with you, the legal basis for the marketing will be your consent, if you have given us this.
You can withdraw your consent at any time. You can also let us know that you do not want us to use information about you for prospecting/profiling and choose to receive general marketing and information instead.
Social media
For our social media pages, e.g. our page on Facebook, we will be the data controller (alone or together with the social media provider). For the social media provider's use of information about you, we encourage you to read their privacy notice.
We use user activity and technical information to administer our social media pages. The legal basis for our use of data for this purpose is our legitimate interest in showcasing our business and making our content available on social media.
We also use information we collect through the pages for analysis. For analytical purposes, we only use anonymous and aggregated information that cannot be linked to individuals.
Who we share the data with
We share the data with our suppliers, such as IT suppliers and platforms for the distribution of products, to the extent necessary to provide service to you.
Kraft Finans brokers shares and mutual funds on behalf of Nordnet Bank AS, foreign exchange, bonds, pensions and insurance savings products from Nordnet Livsforsikring ASA. In this connection, information will be exchanged between Kraft Finans and the aforementioned companies. These companies are responsible for the management of the products offered by Kraft, and the processing of personal data that takes place in this connection.
If we suspect criminal offences, such as money laundering, we may disclose personal data to the police and other financial institutions and banks.
We transfer data out of the European Economic Area (EEA), partly because some of our suppliers are located there. We ensure that information about you is secured in a proper manner, either through agreements with the recipients, or by the recipients being subject to certification schemes approved in the EU. You can get more information about such agreements and schemes by contacting us.
We may disclose personal data to public authorities, the Norwegian Securities Dealers Association and other third parties if we are required to do so.
How long do we store the data
We only store the data for as long as it is necessary.
As a starting point, we will store your contact information, identity information, family circumstances, work situation and education, financial information, investment goals, warnings, investment history and credit information for at least five years or as long as we have a customer relationship with you.
We will store communications related to the provision of investment services or investment activities for five years, unless the FSA has imposed a longer retention period. Other communications are stored for three years.
We store technical information and user activity for 6 months.
We store anti-money laundering information for five years after the customer relationship has ended or the transaction has been completed.
We store audio recordings for at least five years if the recordings relate to the provision of investment services or investment activities, unless the Financial Supervisory Authority of Norway has imposed a longer retention period.
In any case, we will store data for as long as it is required by law and where there is a particular need, e.g. in the event of complaints or claims made against us or by us.
Your privacy rights
You have a number of privacy rights. You can exercise these by logging in to your user account with us, if you have one, or by contacting us. Your rights include:
Information. Further information about how we process data about you.
Transparency. Copy of information we have about you. When requesting access to audio recordings, you must state the time when the call was made and from which telephone number.
Correction. Correct and supplement information about you.
Sletting. Request the deletion of data that we no longer have a basis for storing.
Restriction. Request that we restrict the use of your data.
Data portability. Request that your data be transferred to you or to another organisation in a structured, commonly used and machine-readable format.
Objection. Request to object to our use of your data for direct marketing purposes, including profiling. You can also object to being the subject of individual decisions of a legal nature that are exclusively automated.
Please note that these rights are subject to limitations imposed by law. We will respond to your enquiry as soon as possible, and typically within one month at the latest.
If you believe that we are processing personal data unlawfully, you have the right to complain to the Norwegian Data Protection Authority. We hope that you will first contact us so that we can consider your objections and clear up any misunderstandings.
Cookies
When you visit our website, we use cookies. A cookie is a small file that is stored locally with you. It is not harmful and cannot contain viruses or programmes. What it does is store information from our website, such as when you last visited us or data you have entered in an order form. It is a cookie that allows websites to remember, for example, your preferred language or how you last logged in.
Through cookies, we collect data such as your IP address, device information, internet connection, operating system and browser, web behaviour (such as which pages you visit and how often) and which products you order. By using the IP address, we will be able to obtain information about which county/city you are in. At the moment, we do not use cookies for anything other than measuring the number of visitors and improving the user experience on our platforms. However, we may use cookies for the following purposes in the future:
- Analytical purposes
- Technical purposes
- Personalised adaptations
- Marketing and commercialisation
Settings for the use of cookies in browsers
The use of cookies allows you to get a more relevant user experience of websites you visit. This can be changed by making changes to your browser settings. On nettvett.no you will find descriptions of how you can delete cookies or reject cookies.
Changes to the privacy policy
We may update this privacy policy from time to time. You will be notified of any significant changes. You will always find the latest version of our privacy policy on our website.
Contact information
Please feel free to contact us if you have any questions, comments or wish to exercise your rights. You can use the following contact information:
Contact person: Ann Dorte Vormestrand
Telephone number: 51 97 74 40
E-mail address: adv@kraftfinans.no
Address: PO Box 1063, 4391 Sandnes
