Privacy notice

Why and how do we process your personal data?

In order to provide you with a MobilePay profile, we process the following information:

• Information about you (name, phone number, e-mail, national identity number, gender, address and in some cases the address you provide) 
• Account and card details (account number, masked debit or credit card number and expiry date) 
• Usage data (views, time, frequency, duration of activities in the app, search history and sign in/log out data)
• Technical Data (CustomerID, IP address, mobile device, operating system, browser, settings in app and log of technical events)

Remember: As a MobilePay user, other users in Finland, Denmark and Norway will be able to see your name by searching for your phone number in the MobilePay app. For Denmark and Norway, you must be over 15 years old for other users to see your name by searching your phone number. In addition, we collect the following information from various registers to ensure that we have the correct information:

• Contact details (name, address, national identity number and life- and guardianship status from the Central Personal Registry
• Ownership and verification of bank account (national identity number, and partial card- and account details from your bank)
• Politically Exposed Persons

On what legal basis?

The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

Why and how do we process your personal data?

To send and receive money with MobilePay, we process the following information:

• Transaction data (sender and recipients full name, phone number, amount, transaction ID, masked card information, payment account, receiving account and attached payment text/message) 

However, the recipient will only have access to the following information:

• Transaction data (full name and phone number of sender, amount and attached payment text/message)

Remember: As a MobilePay user, other MobilePay users will be able to see your full name by searching your phone number in the MobilePay app.

On what legal basis?

The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

Why and how do we process your personal data?

To send and receive money and refunds with MobilePay, we process the following information:

• Transaction data (senders name and phone number, merchant information, used MobilePay product or service, amount, transaction ID, masked card information, payment account, receiving account and attached payment text/message) 

However, the merchant will have access to the following information:

• Transaction data (full name, masked phone number of sender, amount and attached payment text/message) 

On what legal basis?

• The contract we have with you. See MobilePay’s Terms and Conditions for private users here.

For donations to non-profit organizations

• When contributing with monetary donations to specific non-profit organizations, the organization will receive your full name and phone number.
• On what legal basis?
  • The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

Sharing national identity number

• You can consent to share your national identity number with specific organizations to receive tax deductions on your donations.
• On what legal basis?
  • Your consent.

Pre-selection of payment source

To facilitate an efficient payment process, we use information about your previous payments to pre-select a payment source. If you have paid the same merchant within the last 12 months, we pre-select the payment source you used most recently with that merchant. If you have not paid the merchant before, or have not done so within the last 12 months, we instead pre-select your most recently used payment source.

You can always review and change the pre-selected payment source before approving the payment.

What is our legal basis? Our legitimate interest.

Why and how do we process your personal data?

When purchasing products or services through an online merchant or within a merchant's app, we process the same data as outlined in section 1.3 When you send money to in-store merchants.

On what legal basis?

The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

Why and how do we process your personal data?

When using MobilePay Box, we process the following information:

• General information about your Box (Box-name, Box-number, full name and phone number of Box-participants)

Remember: As a MobilePay Box user, the owner of the Box can grant “viewing access” to other users (including users who are not contributors of the Box) making following information accessible to the viewers:

• Transaction data (full name, date, amount and attached payment text/message)

On what legal basis?

The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

When purchasing MobilePay Gift wrappings, we process the same information as stated in section 1.2 When you send and receive money.

On what legal basis?

The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

When you use our calculating tool for settlements, we process following information: When you use our calculating tool for settlements, we process following information:

• General information about your Settlement group (name and status of group, full name and phone number of participants, details on payments, including; amount, date and time.

On what legal basis? The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

When you use group chats, we process the following information:

• General information about your group (group name, group status, participants’ names and phone numbers, information about participants who are added to or leave the group, as well as the content of the group chat, including messages and other content that you share in the group).

When a new participant is added to an existing group, the participant can see the group’s entire chat history from the time the group was created. This means that messages and other content that you previously shared in the group may also become visible to participants who are added later.

Chat content may also be visible to a participant’s parents or guardians when parental access is enabled.

Please note: Authorised employees may access the content when necessary to investigate and resolve a specific technical issue, including when you contact our customer service. We may also process the content for legal and regulatory reasons as described in section 2.1. On what legal basis? The contract we have with you. See MobilePay’s Terms and Conditions for private users.

Why and how do we process your personal data?

When displaying your personal memberships and benefits you have with selected loyalty programs in the app, we process the following information:

• Phone number (shared with the merchant's data processor, to look up your memberships and benefits in loyalty programs) 
• General information (received by the merchants regarding your memberships and benefits in loyalty program) 

On what legal basis?

The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

Remember: The merchant is the data controller for loyalty programs and benefits, while we function as a data processor. For inquiries regarding these, please contact the respective merchant.

Why and how do we process your personal data?

When displaying receipt information connected to your purchases, we process the following information:

• Transaction Data (date, time, merchant number and name, payment source, receiving account, amount, product/service, text/messages)
• Receipt information (line items, amount, if relevant shipping price, tips and discount)

Why and how do we process your personal data?

To provide MobilePay Login, we process, with your consent, the following information:

• Your preference (websites/merchants where you use Login) 

You may choose to share the following information from your MobilePay profile, based on consent, to merchants:

• Information about you (name, telephone number, e-mail address, registered address in the National Registry and self-filled address, gender, national identity number) 

Did you know?

• The merchant becomes the data controller of the data you agree to share, as they will provide a separate service to you. The service entails that, the information you agree to share, is updated in our app, it will also be updated for the merchant.
• You can find an overview of businesses that you have consented to in the app: Profile > Personal information > Businesses with access in the app. Here you can withdraw your consent at any time.
• If you withdraw your consent or when it expires after one year, we will stop sharing your data with the merchant. Be aware that this does not end your agreement with the merchant. Take contact directly with the merchant if you want to end your agreement with them.

On what legal basis?

Your consent.

Remember: In Login Vipps MobilePay act as the data processor for collection of marketing and other communication consents. If you have any concerns or requests regarding this, please contact the merchant as the data controller.

You can turn on and off the following functionality under settings on your phone:

• Location (to find a merchant near you)
• Contact list (to select recipients from your contacts. If you prefer not to grant the app access to your contacts, you can manually enter the recipient's phone number)
• Pictures and camera (to add a profile picture that other users can see, to attach a picture to a Settlements group or to scan QR codes)
• Background updates
• Mobile data (to access MobilePay without a wireless internet connection)
• For Android (We request access to your phone status and ID for the purpose of saving the mobile identifier, managing content on the SD card, and allowing you to add a profile picture)

Remember: You have the option to enable or disable these functions in your phone settings.

On what legal basis?

Your consent.

When you use MobilePay you can consent to following features in the app:

• Profile picture (to add a profile picture that other users can see)
• Chosen name for accounts and cards (to differentiate between your added accounts and cards)
• Blocked users (to avoid interaction with users that can no longer send you messages or transactions)
• Remember: You have the option to enable or disable these functions in the MobilePay app.

What allows us to do this?

Your consent.

To comply with our obligations under anti-money laundering regulations, we process the following personal information relating to merchants: To comply with our obligations under anti-money laundering regulations, we process the following personal information relating to merchants:

Business roles (CEO, chairman, board members, deputy, accountant, auditor, etc.)

• Information about the person (name, phone number, e-mail address, date of birth and national identity number.
• Signatory rights

Beneficial owners

• Information about the person (name, date of birth, country, nationality, address)
• Information from public registers

Politically Exposed Persons (PEP) and sanction lists

• Information you provide as a PEP
• Information from registers

On what legal basis?

Our legal obligation.

Credit rating

When establishing a customer relationship and continuously afterwards, MobilePay conducts a credit check of the merchant you are part of. For some types of organizations e.g., where the merchants are personally financial responsible, we also carry out a credit assessment of persons with a role withing the merchant. When the credit assessment is completed, you will receive a copy of that information.

On what legal basis?

Our legitimate interest.

Onboarding and administration of the customer relationship

For onboarding, administration of customer relationships, communication, and security for your business, we process the following personal data: User and admin role the Merchant Portal and Merchant App

• Information about you (full name, phone number, e-mail address and national identity number) 
• Usage Data (views, time, frequency, and duration of activities in the app, search history and sign in/log out data) 
• Technical data (internal IDs, IP address, mobile operating system, mobile device, browser, in-app settings, history of technical events, etc.) 
• Electronic Identification (eID)

Remember: In an effort to enhance convenience and security for you, we may use the data from your private profile when granting admin rights.

Contact points at merchants

• Information about you (full name, phone number, e-mail address and national identity number)
• Any communication between MobilePay and the contact point

On what legal basis?

The contract we have with you. See MobilePay’s Terms and Conditions for Merchants here.

Why and how do we process your personal data?

When you create a wish list, we process the information you enter. If you add a link, we will display a picture of the content, name of the product and similar details from the link to provide you with a clear representation of the wish list item.

• Your first name and profile picture
• Wish list details (list name and description, item name, description, picture and price)

Remember: You can share your wish list with any user, including users in other countries. Please note that users can further share the link to other users potentially making the list public. Users you have blocked in the app cannot see your wish lists, even with the link. We discourage users from entering sensitive information in the wish list.

On what legal basis? The contract we have with you. See MobilePay’s Terms and Conditions for Private Users The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

Recommendations and Inspirational lists

Why and how do we process your personal data? Wish list is designed to help you find the content that fits your needs and interests. We therefore provide recommendations and inspirational lists in the Wish list space. For that purpose, we segment users based on basic demographics, or if you consent to it we may profile you to provide you with tailor-made recommendations and offers. See section 2.4 to find out how segmentation and profiling works. Wish list is designed to help you find the content that fits your needs and interests. We therefore provide recommendations and inspirational lists in the Wish list space. For that purpose, we segment users based on basic demographics, or if you consent to it we may profile you to provide you with tailor-made recommendations and offers. See section 2.4 to find out how segmentation and profiling works. Remember: The recommendations and inspirational lists may include sponsored content. You can read our terms for more information about sponsored links. If you click on a sponsored link and proceed to the third-party website, there might be further data collection and tracking in connection to your visit and purchases for the purposes defined in our terms and conditions section 25. Wish List. Vipps MobilePay will not be sharing any personal data with the affiliates or third parties for these purposes. Third-party data collection and tracking will, in some cases, be carried out by the site you visit and/or our partner Adtraction affiliate network, according to their terms and conditions that you can read here.

On what legal basis? Basic segmentation is based on our legitimate interest. You can opt out in the app under Me > Data and privacy. You can toggle off "To do basic segmentation" at any time. Basic segmentation is based on our legitimate interest. You can opt out in the app under Me > Data and privacy. You can toggle off "To do basic segmentation" at any time.

Profiling is based on your consent, and can be withdrawn anytime on the app under Me > Data and privacy.

In addition to the personal data described in sections 1.1 (When you have a MobilePay profile) and 1.2 (When you send and receive money), we process the following information:

Information about children

Your guardians (for most, this means your parents, but it may also include foster parents or other legal guardians) have an overview of everything you do and see in the app. For example, they can see who you send money to and receive money from, who you chat with, and your full conversations.

For more information, please visit our website. Remember that you can always contact us via chat, by email at privacy@vippsmobilepay.com, or by telephone at +358 30 644 7020 (local/mobile network rate).

We will not send you advertisements or offers.

Information about adults

We process information about legal guardianship from the applicable population register. If your case is processed manually, we also process documentation of registered legal guardianship.

We will not send marketing to your child in the app, and their personal data will not be processed for such purposes.

On what legal basis?

The contract we have with you and your parents/guardians.

Why and how do we process your personal data?

When you choose to add a receipt to a payment in the app by uploading an image, we process the following personal data to display and store your receipts:

• Image data (the image of the receipt that you upload)
• Receipt information (information derived from the image, such as purchased items, amounts, date, and other line item details)
• Link to payment (information about which payment the receipt is associated with)

We analyse the uploaded image to identify the receipt content and attempt to extract relevant information so that you can view and organise your receipts in the app.

Please note: If you delete the image or the receipt information in the app, it will be permanently deleted and cannot be restored.

What allows us to do this?

The contract we have with you. See the Terms and Conditions.

Why and how do we process your personal data?

When you use MobilePay Balance to receive, store, send or pay money, we process the following personal data:

• Balance information: the amount available in your MobilePay Balance and information about transfers into and out of your Balance.
• Transaction data: as described in section 1.2, When you send or receive money.
• Information about your use of MobilePay Balance: for example, whether you have selected MobilePay Balance to receive payments and when MobilePay Balance is used as a funding source for a payment.

We process this information to provide MobilePay Balance, display your current balance and transaction history and process payments and transfers related to MobilePay Balance.

What allows us to do this?

The contract we have with you. See the Terms and Conditions.

Why and how do we process your personal data? When you activate and use Age Verification in MobilePay, we process your personal data to create your Age Verification and enable you to prove that you have reached a certain age. We process the following information:

• Information about your age (information used to verify that you have reached the relevant age threshold)
• Information from your passport (passport photo, date of birth, national identification number, name and expiry date) when you scan your passport to create your Age Verification.

The information from your passport is used to verify the passport and ensure that it belongs to you. After the verification, we only retain the photo and expiry date from your passport. We retain this information until you deactivate your Age Proof or terminate your agreement with MobilePay. When you show your Age Verification, the person carrying out the age check can see your passport photo and your selected age threshold. On what legal basis? The contract we have with you. See MobilePay’s terms and conditions for private users.

Why and how do we process your personal data?

To fulfil our obligations according to laws and regulations, MobilePay are obliged to process some personal data, including the following:

• To comply with bookkeeping regulations: Accounting material, which may also contain personal information, are processed and stored in compliance with the regulations stipulated in the Bookkeeping Act
• To prevent and detect criminal activities: MobilePay are obliged to process some personal information for the purpose of preventing, detecting, investigating and handling fraud and other criminal activities. This includes the duty to examine and report suspicious activities and transactions under the Anti-Money Laundering Act. In addition, MobilePay obtains information from various registers to fulfil legal requirements, including politically exposed persons and sanctions. 
• Disclosure of personal information to public authorities: MobilePay are obliged to disclose personal information when there is a court order, law enforcement request or otherwise to fulfil legal requirements, such as The Penal Code, or acts related to statistics or taxation.
• Disclosure of personal information to banks and other financial institutions: MobilePay might be obliged to disclose personal information to banks or other financial institutions to comply with Anti-Money Laundering laws and regulations when it is part of conducting due diligence of suspicious activities or transactions, and regarding payments fraud following the Financial Institutions Act, or other applicable local rules and regulations.
• Security monitoring: To detect and resolve suspicious activities and security incidents, MobilePay processes personal information when logging and monitoring our services. Ensuring information security is, among other things, anchored in the Personal Data Act and Norway’s ICT Regulation. 

On what legal basis?

Our legal obligation.

Why and how do we process your personal data?

MobilePay processes personal data to assist you in case of any challenges or concerns related to our products or services, including:

• Information about you (full name, phone number, e-mail, registered address and national identity number) 
• Information about your issue
• Information about the customer relationship (which products and services you use, the duration of usage, etc.) 

Depending on the issue, it may also include:

• Transaction data
• Account and card details (bank account number, masked debit or credit card number and expiry date) 
• Usage data (views in the app, time and clicks in our surfaces, searches, logins and logouts) 
• Technical data (internal ID’s, IP address, operating system, mobile device, browser, settings in app, log of technical events, etc.)

What allows us to do this?

The contract we have with you. See MobilePay’s Terms and Conditions for Private Users here.

Chat with Customer Service

When you interact with our AI-supported chatbot or a customer support representative via our website, portal, or the MobilePay/Vipps app, we process certain information to provide effective customer service and ensure appropriate follow-up.

Please note that the answers provided by chatbot might be not totally accurate and they are only informative in nature.

We process the following information:

• Information about you (name and phone number)
• Information about your issue (content of the chat)
• Authentication data (if you need to receive certain types of data from us, we require E-ID identification)

Remember: Customer chat information will as a rule be stored for 30 days, but this can be extended if a case requires it.

Recording of phone conversations

Telephone conversations are recorded based on consent; for the purpose of quality assurance and the training of our employees.

How long the data will be stored? The call records will be kept for 30 days. You can always withdraw your consent by sending an email to privacy@vippsmobilepay.com. Upon the withdrawal of consent the recording will be deleted permanently. If a recording is relevant for legal dispute(s) or security incident(s), the recording will not be deleted until the case(s) or incident(s) has been finally settled in accordance with the applicable statute of limitation, c.f. Article 6(1)(f) “legitimate interest” of the GDPR.

Your rights You can always enforce your rights that are defined in section “3. Your Rights“ and get informed about the recording, have access to copy of your data, request your data to be deleted or object to the processing activities based on legitimate interest. If you or the corresponding party (the employee) exercise their rights under GDPR, e.g. by requesting access to a recorded conversation (before it is automatically deleted), then we will review and store the recording to the extent necessary for the documentation of compliance with our obligations and/or to address any related complaints.

On what legal basis? Your consent.

Marketing communication

We want to keep you informed about updates, benefits, and recommendations, and tell you about our services and products, including those we offer with partners. We want to reassure you that:

• We do not share your personal data with our partners.
• All users under the age of 15 are excluded from all forms of marketing activities, and their personal data is not processed for such purposes.

2.3.1 Basic segmentation We use some basic profile data to give you more relevant marketing, recommendations and offers. For this purpose, we process the following data:

• Age (year and month)
• Gender
• Geographic area (based on postal code)
• Use of our products and services (e.g. if you have certain products activated or not, or the items you added to your wish list)

What allows us to do this? Our legitimate interest. You have right to object to it, see section 3.6

Remember: You can opt out in the app under Me > Data and privacy. You can toggle off "To do basic segmentation" at any time.

2.3.2 Personalised marketing communications from MobilePay

If you consent to personalisation, we will tailor-make our communication to you across our app and other channels you may have consented to such as push messages. The purpose is to provide you with the more relevant and tailor-made insights and communications about MobilePay features and services. Examples can be personalised news and offers about new features or insights about how you are using our services.

To be able to do that MobilePay will be processing following data:

• Payments and purchases : Your purchases and person-to-person payments, including receipts and basket information, if available.
• Profile information: Like your name, legal gender, postal code/city, how many cards you have.
• Use of features and services: like how many boxes you have or if you activated tap-2-pay.

What allows us to do this? Your consent.

Remember: Your consent will last for 3 years. You can see an overview of your consents in the app under Me > Data and privacy. You can withdraw your consent at any time. Please note that it may take some time to technically implement consent withdrawal due to the frequency of system updates.

2.3.3 Marketing via push Messages If you consent, we may send you suggestions and offers via Push Messages. For this, we process:

Contact information (name, customer ID and phone number)

What allows us to do this? Your consent.

Remember: You can see an overview of your consents to marketing activities in the app under Me > Data and privacy. You can withdraw your consent at any time. Please note that it may take some time to technically implement consent withdrawal due to the frequency of system updates.

2.3.4 Marketing via email If you consent, we may send you marketing, recommendations and offers via email. For this purpose, we process: • Contact information (name, customer ID and email address)

What allows us to do this? Your consent.

You may withdraw your consents at any time.

• Information share with companies: in the Mobilepay app > Me > Personal information > Companies with access and Browsers that remember you
• Personalised marketing: in the Mobilepay app > Me > Data and privacy
• Digital receipts: in the Mobilepay app > Me > Settings
• App permissions: your phone settings

Internal development of our services and testing

MobilePay process personal data for service development, maintenance and to improve customer experience. To do this, we analyse how our products and services are used. For this type of processing, we do not identify the end users, but use aggregated, pseudonymized or anonymized data. The following information may be processed to generate such analyses:

• Demographic data (age, gender, geographic area) 
• Which MobilePay services/products you use
• Technical data (Customer ID, Cookies, user agent, etc.) 
• Usage data (views in the app, time and clicks in our platforms, search history, logins, and logouts) 
• Aggregated or pseudonymised Transaction Data
• Profile information (number of payment cards and bank accounts)
• Usage of accessibility features

On what legal basis?

Our legitimate interest.

Statistics

We further process this information to develop user surveys, user analyses, market analyses, and reports based on usage patterns and demographics. We use statistical data to group users into similar usage patterns and this helps us understand how our services are used. The results cannot be linked back to you as we use aggregated data for this purpose, unless you give your consent. In some situations, we forward the results of the analyses to merchants that use MobilePay. This information cannot be linked back to you.

On what legal basis?

Our legitimate interest.

Sharing statistics with public authorities

MobilePay shares aggregated statistics with certain partners, such as banks, Statistics Denmark and the Ministry of Finance.

On what legal basis?

Our legitimate interest. The legal basis for Statistics Finland and Ministry of Finance is legal obligation.

MobilePay uses several suppliers who process personal data on our behalf (“Data Processors”). In these cases, MobilePay enters into a Data Processing Agreement with the supplier to ensure that the processing is carried out in accordance with GDPR. Relevant data processors we use are: MobilePay uses several suppliers who process personal data on our behalf (“Data Processors”). In these cases, MobilePay enters into a Data Processing Agreement with the supplier to ensure that the processing is carried out in accordance with GDPR. Relevant data processors we use are:

• Cloud service providers
• Payment service providers
• Software providers
• AI system providers
• Consulting firms
• Banks

When we transfer personal data outside the European Union (EU) or the European Economic Area (EEA)

As a main principle, MobilePay processes and stores personal data within the EU/EEA. MobilePay seeks to use suppliers that process and store personal data there where possible.

In some cases, personal data may be transferred or made accessible outside the EU/EEA. This may be the case, for example, where a supplier provides technical support, maintenance or troubleshooting from a country outside the EU/EEA.

Where personal data is transferred outside the EU/EEA, MobilePay ensures that appropriate safeguards are in place and that transfer of personal data is limited to what is necessary for the relevant service to be provided. Appropriate safeguards is based on a valid transfer mechanisms under applicable data protection legislation, such as an adequacy decision adopted by the European Commission, the European Commission's Standard Contractual Clauses, or Binding Corporate Rules. In special situations, another valid transfer basis, such as agreement or consent, may be used if the level of protection corresponds to the level in the EEA.

Information security is fundamental to delivering safe and simple solutions. Through effective security measures and processes, MobilePay ensure that your personal data is protected against unauthorized access and alterations and is available when needed. For this, we have implemented measures such as: Information security is fundamental to delivering safe and simple solutions. Through effective security measures and processes, MobilePay ensure that your personal data is protected against unauthorized access and alterations and is available when needed. For this, we have implemented measures such as:

• Identity and access management
• Secure software development and security testing
• Encryption
• Network security
• Security monitoring and incident management
• Safety training and knowledge sharing among employees
• Security requirements and follow-up of Data Processor and suppliers

Security measures are implemented, monitored, and continuously improved based on a risk-based approach to ensure that personal data is adequately protected over time.

Personal data will not be stored for longer than necessary and according to the following rules:

• The main rule is that we store personal data for as long as you have an active customer relationship. This means that you will have an overview of your history in the app.
• When you terminate your customer relationship, certain information will be stored by MobilePay for another 5 or 10 years in accordance with Money Laundering Act or Accounting Act.
• Personal data that we process based upon your consent will be deleted when you withdraw your consent, unless there is another legal basis for further processing.
• In some situations, we may have a legitimate interest in retaining the information for a longer period e.g. for back-up purposes.

MobilePay and merchants are independent data controller for most of our services. MobilePay has an agreement with all our end users. This means that MobilePay is responsible for its own processing activities of personal data that are necessary to provide the payment solutions. Similarly, merchants have their own agreements with their customers, and are themselves responsible for their own processing activities of personal data in order to provide their services e.g. being able to carry out a sale. We do not enter into data processor agreements in the situations where MobilePay and the merchant are independent data controllers.

Detection and prevention of fraud may involve automated decision-making, including profiling, meaning that certain decisions (such as temporarily blocking or declining a transaction) may be taken automatically without prior human involvement. The automated systems (that includes Artifical Intelligance Systems) assess whether a transaction or activity deviates from normal usage patterns or shows characteristics commonly associated with fraudulent behaviour. This assessment is based on predefined risk indicators and statistical patterns derived from previous fraud cases.

Why and how do we process your personal data?

When you report potentially illegal content in MobilePay, we process your personal data to receive, assess, investigate and document your report and to follow up on it in accordance with the Digital Services Act.

We process the following information:

• Information about you (customer ID and phone number)
• Information about the reported user (information you provide to help us identify the reported user, which may include their phone number)
• Information about the report (your description of what happened, the selected category, where in the app the incident occurred, and any evidence or attachments you submit with the report)

We use this information to assess your report and determine whether further action is necessary. Where relevant, the information may be shared internally with the relevant teams within Vipps MobilePay or disclosed to competent authorities. On what legal basis? Our legal obligation.

Participation in our competitions and prize draws is voluntary. When you participate, we process personal data to administer the competition, assess entries, select and contact winners and distribute prizes. The personal data we process depends on the competition and may include your name, contact details, competition entry and other information necessary to administer the competition or provide the prize.

Further information about how we process your personal data, including the applicable legal basis and any additional information, is provided in the terms and conditions of each competition.

You have the right to access the information stored about you. Remember that you can find most of this information about you in your profile and in your activity list in the MobilePay app.

You have the right to demand that incorrect information about you be corrected. You can change your e-mail, address, picture, account, and card information in the app. In other cases, you can send us an e-mail.

You have the right to demand to delete information about you if MobilePay does not have a legal basis for storing it further.

You may withdraw your consents at any time.

• If you have shared your information in MobilePay with companies, you can withdraw this consent: under Profile > Personal information > Companies with access and Browsers that remember you
• Marketing: under Profile > Settings
• Settings on your phone: under settings on your phone
• Settings in the app: e.g. under Profile > Settings or Profile > Accounts and cards

You have the right to be informed about how we process your personal data. We do this in this Privacy Notice, in our Terms and Conditions, and when obtaining consent.

If we process information about you based on our legitimate interest, you have the right to object to our processing of information about you. This can be for example for analysis purposes or for compiling personal data across our services.

In special situations, you have the right to request a restriction of the processing of personal data.

You have the right to have your data transferred in a machine-readable format to a new Data Controller.

You also have the right to complain to the Norwegian Data Protection Authority at P.O. Box 458 Sentrum NO-0105 Oslo or to the Finnish Data Protection at PL 800, 00531 Helsinki.