Privacy policy for Additional Information:
1. Additional Information is an optional additional service for BankID
Additional Information is an optional additional service that can be used together with BankID. You can use Additional Information to fill in forms on merchants’ websites.
Using Additional Information is voluntary for you. The service only works together with BankID.
BankID will work without Additional Information. The privacy policies for BankID will apply to the use of these services.
The privacy statement for Additional Information describes the processing of your personal data that is unique to Additional Information.
2. Merchants
Merchants can be websites, web shops, public or private web services, apps or other sites that have entered into an agreement with BankID BankAxept to allow you to use Additional Information to fill in a form.
3. Data controller
BankID BankAxept AS, org. nr. 927 611 929, Dronning Eufemias gate 11, 0150 Oslo, is the data controller for the processing of your personal data in Additional Information.
You can request access to the personal data we have stored about you. Requests for access, correction and deletion can be addressed to personvern@bidbax.no.
4. What personal data does Additional Information process and where are they collected from?
When you agree to use Additional Information, we request you to provide the following personal data:
- Your email address
- Your postal address
- Your phone number
You can provide these data through a form. You can also choose to import your address and phone number directly from 1881 into the form.
We will also store your Norwegian national identity number. We collect this from BankID, and it cannot be changed.
We retrieve and store your personal data to be able to fulfil our agreement with you on the delivery of the Additional Information service.
Your phone number and/or email address can also be used by BankID BankAxept to contact you about important matters relating to BankID or Additional Information, for example to fulfil the duty of notification in the event of a data breach.
5. Transfer of personal data to merchants
Additional Information is designed to help you to give relevant information about yourself to merchants. Our service simplifies registration and the filling in of forms on merchants’ websites.
You will be asked via dialogue boxes for each transfer of such data. If you answer ‘yes’ to these questions, Additional Information will transfer the data to the merchant that has requested it.
The legal grounds for the transfer will be your consent. You decide yourself what data should be disclosed, and to which merchants.
Your consent is voluntary.
The alternative to consenting to the transfer of information from Additional Information is for you to manually enter the data in a field on the merchant’s website. We have created Additional Information to save you this trouble.
6. Your overview of and verification that your personal data are correct
You will have access to the information registered about you in Additional Information through the BankID website, and will be able to change, correct and update your postal address, phone number and email address there. Your Norwegian national identity number number cannot be changed.
You can also, through these websites, choose to terminate the service, if you so wish.
Every time you are asked to share personal data with a merchant, you will also see what information is stored in Additional Information and be given an opportunity to change it.
7. Time period for processing of your personal data. Deletion.
Your personal data will be processed in Additional Information from the time you actively request to receive the service.
Your personal data will be processed until you terminate the service, or until BankID BankAxept terminates the delivery of Additional Information to you. When the service is terminated, your personal data will immediately be deleted from Additional Information.
Data you have chosen to share with merchants will still be stored by these merchants. You can contact the individual merchants if you want the data to be deleted.
8. Use of subcontractors and disclosure to others
Your personal data may be processed by a data processor who processes your personal data as a subcontractor for us. We always enter into a data processing agreements with our data processors, and any data processors will only process the information in accordance with the GDPR, our instructions and for the purposes for which your personal data has been collected.
Personal data may be disclosed to authorities or other parties if there is a legal basis for doing so.