At Bambora, we take pride in security and data privacy. When you visit Bambora’s websites, you can therefore normally come and go as you would like without us being able to identify you. However, if you submit your personal data (for example your name, e-mail address or phone number) we will be able to identify you and process your personal data. Such processing is governed by certain legislation, which within the European Union mainly is the General Data Protection Regulation (the “GDPR”). Bambora naturally complies with the GDPR and any other data protection legislation that applies to Bambora. We are also keen on being transparent regarding how we process our web page visitors’ personal data and have for these purposes drafted this document, in which you will find information on what kind of personal data we process, why we do it, what we use it for and how we may share it. The information below also contains information on a few other personal data processing activities that we carry out within the scope of our business, all in order to ensure that you know what we might do with your personal data.
The data processing carried out on this web site is conducted by Bambora AB, reg. no. 556233-9423, as data controller.
When we collect data and what data we collect
We collect personal data when you (i) sign up for our newsletter or ask to be contacted, (ii) request support and (iii) are browsing our website. Such personal data will in general include your name, e-mail address, telephone, delivery address, payment details, company, IP address, behavior on the website and other information that you voluntarily provide us. As a payment institution with a license to provide payment services under the supervision of the Swedish Financial Supervisory Authority (Sw. Finansinspektionen), Bambora will also collect your credit/debit card information when you make a purchase at a Bambora merchant.
Why we process data, our legal basis for the processing and for how long we process data.
When processing personal data, a specific purpose and an applicable legal basis is always required. Also, the personal data may only be used for a limited period of time. Bambora will only use your personal data for the purposes set out below. We will not use your personal data for any purpose that is incompatible with the below purposes. Further, we will only use your personal data during the period as set out in the right column. Please note that the storage periods below may not apply if Bambora is required to retain your personal data (partly or in full) under applicable mandatory law (e.g. accounting laws).