Privacy policy

How we process your personal data

1 Introduction

This Policy sets out how Karman Connect A/S collects and processes your personal data as part of the operation of our business and the activities described below in Section ‎3 below.
Responsible handling of this personal data is essential to our business aim and reputation. This Privacy Policy therefore sets out how and why we collect personal data about you, how the data is used, when the data is deleted, and how you may obtain access to your own personal data.

2 Data Controller

Karman Connect A/S (hereinafter “we”, “us” and “our”) is the controller in respect of the processing activities described in this Privacy Policy unless otherwise mentioned below in Section ‎3 below. If you have any questions to this Privacy Policy or our processing of your personal data as described in Section ‎3 below, please contact us here:

Karman Connect A/S
CVR-no.: 35662448
Dalgas Avenue 2F, 2.
8000 Aarhus C

3 How we process personal data as part of our activities

We collect and process personal data in many different situations, and the purposes of the collection, what the data is intended for and when it is erased will differ in each situation. The specific activities where we (as the data controller) may collect personal data about you are therefore individually described below.

We process data on several loan comparison services across Europe with the purpose of creating a general view over borrowing capacities. The primary process of your personal data, relation to application and disbursement of loans, is carried out by the lender, for example a bank. Our role is solely to compare and list various borrowing capacities to you. We will therefore not become acquainted with special circumstances about your financial circumstances, unless otherwise is stated below.

Our services are provided in two formats, respectively a loan comparison service, where we list the borrowing capacities, and refer to relevant lenders (Section ‎‎3.1), and an extended service, where you submit a number of data, after which you are presented with a list of borrowing capacities based on your submitted data (Section ‎3.2).

3.1 Loan comparison services without personal recommendation

3.1.1 Data to be processed and its origin

We collect and process data about your use of our services, when you visit our loan comparison services and websites. We use cookies in this connection, and the personal data we can collect directly from you or third parties, e.g. social media, websites and publicly available sources. You can read more about our cookies in our cookie policy, which you can find here: [INSERT LINK]. However, we expect to collect the following personal data about you:

  • Electronic identification data and activity logs (IP address, cookies, location data etc.)
  • User behavior on the website and visit history, e.g. number of clicks, time spent on the website, searches, etc.

3.1.2 Why we process the data

We process your personal data for the following purposes:

  • The personal data is processed with the purpose of providing our services in showcasing tailored borrowing facilities.
  • To improve the website’s usability and personalize the website for you
  • To analyze the use of our website and collect statistics about website visitors
  • To target advertising campaigns and marketing from us and third parties

3.1.3 Legal basis for the processing

The legal basis of our processing of non-sensitive personal data is:

  • We ask for your informed consent in connection with your first visit to the website to place cookies that are not functional cookies, according to the regulations regarding cookies. You have the right to withdraw your consent at any time. This legal basis is set out in Article 6(1), para (a), of the GDPR. You can withdraw your consent at any time by contacting us (see section 2 above).
  • Safeguarding our or third-party legitimate interests which override your fundamental rights and freedom. This legal basis is set out in Article 6(1), para. (f), of the GDPR. The legitimate interests in question are statistics, improvement of our services and website and tailoring our information to you. You have the right to object to this processing at any time by contacting us (see Section ‎2 above).

3.1.4 Sharing the data

Data is shared with our IT suppliers (data processors), who store the data for us and process the data in accordance with our instructions. This includes hosting and cloud providers, marketing platforms and advertising tools.

In connection with the processing, the personal data may be transferred to countries outside the EU/EEA (third countries), that do not have an equivalent level of protection as within the EU/EEA. We ensure that your rights are protected, and that the transfer takes place in accordance with Article 5 of the GDPR, for example through standard contracts approved by the European Commission cf. Article 46(2), para (c), of the GDPR. For a copy of these standard contracts, please contact us (see Section ‎2 above).

3.1.5 How long we retain the data

The personal data is retained for up to one year after it is collected.
Cookies are stored according to our cookie policy, which you can find here: [INSERT LINK].

3.2 Loan comparison services with adjusted borrowing capacities

3.2.1 Data to be processed and its origin

In addition to the data referred to and processed as mentioned above in Section 3.1, you can choose to provide additional data to us with the purpose of receiving information on tailored borrowing facilities based on the provided data, for example by email and/or SMS. This is available in certain of our platforms. You provide the data to us and decide the data you are willing to provide. However, we expect to collect the following personal data about you:

  • Contact information, including name, email address and telephone number
  • Data on the type of loan you are interested in, including loan amount, duration and whether it is a collective loan (to the extent that the data in the specific case qualifies as personal data)
  • If you fill in our application form on the website to see a loan directly from one or more of our partners (loanbroker or bank), we also process personal data about your address, social security number, employment, income before tax, information about housing conditions, the purpose of the loan and whether you have registered payment remarks. Our partners will then contact you directly.

You should know that it is a requirement in order for us to enter into the agreement with you that you provide a number of the above-mentioned personal data. Failure to provide the data may result in us being unable to show the requested borrowing facilities.

3.2.2 Why we process the data

Personal data is processed with the aim of offering our services in the field of tailored loan options for you. This includes assessing which loans might be relevant for you and establishing contact with our partners (loan brokers or banks)

3.2.3 Legal basis for the processing

The legal basis of our processing of non-sensitive personal data is:

  • Conclusion of a contract with you or performance of a contract, which you have concluded. This legal basis is set out in Article 6(1), para. (b), of the GDPR.
  • Disclosure of personal data to a business associate in order to make you an offer, for example an unemployment insurance fund, or an insurance company, or a loan broker, or a bank in connection with an overview of loan options (see below), must be based on your consent. This legal basis is set out in Article 6(1), para. (a), of the GDPR. You have the right to withdraw your consent at any time by contacting us (see Section ‎2 above).

3.2.4 Sharing the data

In addition to the sharing as described in Section ‎‎3.1.4, we may share your data with our data processors within the marketing automation in respect of the additional processing.

Transfer of personal data to a third-party/business partner is based on your consent. Our business partners may, for example, include unemployment benefits office, insurance companies or loan brokers and banks, which will be clearly stated when you consent to such transfer.

In connection with the processing, the personal data may be transferred to countries outside the EU/EEA (third countries), that do not have an equivalent level of protection as within the EU/EEA. We ensure that your rights are protected, and that the transfer takes place in accordance with Article 5 of the GDPR, for example through standard contracts approved by the European Commission cf. Article 46(2), para (c), of the GDPR. For a copy of these standard contracts, please contact us (see Section 2 above).

3.2.5 How long we retain the data

The personal data is retained for up to two years after it is collected.

The information can be retained for a longer period if it is necessary according to the law, a specific dispute or if the personal data is anonymised.

3.3 Marketing and newsletters

3.3.1 Data to be processed and its origin

If you give your consent, we can process the following data for direct marketing purposes:

  • Contact information, including name, email address and telephone number
  • Your consent and date of consent
  • Areas of interest, e.g. private financial matters.

3.3.2 Why we process the data

We process your data for the purpose of sending targeted marketing, for example by sending newsletters by email or text message about general conditions in the loan market, personal finances, and updated lists of loans from lenders with whom we cooperate.

3.3.3 Legal basis for the processing

The legal basis of our processing of non-sensitive personal data is:

  • Your consent. This legal basis is set out in Article 6(1), para. (a), of the GDPR. You have the right to withdraw your consent at any time by contacting us (see Section ‎2 above).

3.3.4 Sharing the data

We may share the data with data processors, who assist us in the dissemination of marketing material. For example, this may include a provider of a platform for setting-up and sending email marketing.

In connection with the processing, the personal data may be transferred to countries outside the EU/EEA (third countries), that do not have an equivalent level of protection as within the EU/EEA. We ensure that your rights are protected, and that the transfer takes place in accordance with Article 5 of the GDPR, for example through standard contracts approved by the European Commission cf. Article 46(2), para (c), of the GDPR. For a copy of these standard contracts, please contact us (see Section ‎2 above).

3.3.5 How long we retain the data

The personal data is retained as long as we have a valid consent, and up to one year after the consent was last used to send you marketing. We retain your name and e-mail address for 2 years for documentation purposes and in accordance with the practice of the Consumer Ombudsman.

4 Your rights

You are entitled, at all times, to exercise your rights under the data protection legislation in force at the given time:

  • Access: You have the right to obtain access to the data we process about you and a number of additional data.
  • Objection: In certain cases, you have the right to object to our collection and further processing of your personal data
  • Rectification: You have the right to have personal data about you rectified.
  • Erasure: In special circumstances, you have the right to have personal data about you erased, before the time for our ordinary erasure.
  • Restriction: In certain cases, you have the right to restriction of processing of your personal data. If the right applies, we may then only process the data – except for retention – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another person or for reasons of important public interest.
  • Data portability: In certain cases, you have the right to receive a copy of the personal data you have provided in a structured commonly used and machine-readable format.

If you wish to exercise your rights, please contact us. Your request will be processed in accordance with the legislation in force at the given time. To the extent necessary, we will contact you and ask for additional information required to handle your request correctly.

If you would like to learn more about your rights, please visit the website of the Danish Data Protection Agency, www.datatilsynet.dk.

5 Lodging a complaint

If you would like to make a complaint about our processing of your personal data, you are welcome to contact us. Our contact details are listed in Section ‎2 above.

You also have a right to file a complaint to the Danish Data Protection Agency. A complaint may be filed by email to dt@datatilsynet.dk or through the website of the Danish Data Protection Agency www.datatilsynet.dk.

6 Updating our privacy policy

We may update this privacy policy on an ongoing basis when this is necessary to provide a fair description of our processing of personal data.

This privacy policy was last updated in January 2024.