Resurs conducts ongoing efforts to ensure that customers’ personal data is used in a safe, ethical and correct manner. Protecting customers’ personal data and safeguarding their privacy is critical for Resurs. Customer privacy is a natural part of a good customer relationship, and it is based on proper compliance with laws and internal rules that stipulate how customer data is to be protected and how it may be used.
Resurs processes personal data for various purposes, the main purpose of which is to administrate and perform contracts. We must also comply with obligations under law, other regulations or regulatory decision. This could be legal obligations that, for example, regulate accounting and anti-money laundering, market and customer analyses, systems development and marketing to, for example, improve Resurs’s products and services for the customers. When the legal basis for processing is consent, the purpose must be provided and the customer must submit explicit consent.
Resurs continually safeguards consumer protection and privacy. The business has been brought into full compliance with the GDPR and the PSD2 directive, legislation that has come into force in recent years. In so doing, consumer protection has been strengthened as important customer value has been added through increased transparency and self-control over how personal data may be shared between financial organisations.
The personal data about customers that Resurs gathers is managed responsibly with respect to customer privacy. When the legal basis for processing personal data has been provided with consent, the customer or authorised person may submit explicit consent that the personal data may be processed for the purposes stipulated in the consent.
An example of when consent for processing personal data is required is when the personal data that is submitted to Resurs contains sensitive data. Sensitive data refers to information that reveals, for example, ethnicity, political views, religious or philosophical beliefs, trade union membership, genetic or biometric information that identifies a physical person, health status as well as other information about a physical person’s sex life or sexual orientation. The customer has the right to withdraw consent at any time. Resurs does not subsequently have the right to process the data on the basis of consent, and as such the information can no longer be used as the basis of an application or contract. Customers receive information about their rights and how these can be used, for example, the right to receive information about which personal data is processed (register extract) or to object to processing, for example, that which is related to direct marketing.