Data Protection Policy

Your privacy is important to us. We process all information about you in a gentle and responsible manner. The data controller is Santander Consumer Bank AS, registration number 983 521 592 (hereinafter the”Bank").


What information about you do we process?

We process the personal data provided to us in connection with:

(i) the use of the Development Portal;
(ii) competitions and events; and
(iii) user tests for the purpose of developing the Bank's products.

The personal data we process include contact information (e.g. name, address, telephone number and e-mail address) and identification information (e.g. social security number). We may also save e-mail communication or in other ways document your interaction and communication with the Bank.

Why do we process your information and what is the legal basis for the processing?

The information we ask you to provide in connection with the creation of a user account for our Development Portal is necessary for us to be able to administer the account, provide services and to send relevant information about the Development Portal to you. The legal basis for the processing is legitimate interest, where the Bank's interest in administering and providing a Development Portal is taken into account.

Personal data collected in connection with competitions and events is necessary for the Bank to be able to administer these competitions and events. The legal basis for the processing is legitimate interest, where the Bank's interest in providing competitions and events is taken into account.

The information, that we ask you to submit to us and which we collect from interviews and user tests are necessary in order for us to be able to develop relevant, digital experiences from a customer perspective. The legal basis for the processing is legitimate interest, where the Bank's interest in improving the Bank's products and services is taken into account.

Personal data can also be processed for marketing purposes (e.g. for marketing via letters, e-mail, Internet, telephone calls, text messages and other digital channels) and shared with the Bank's partners for this purpose. The legal basis for the processing is legitimate interest, where the Bank's interest in marketing relevant offers and its partners' interests for that is taken into account. The Bank and its partners will not use any direct marketing channel for this purpose (e.g. e-mail or SMS) if you have chosen to unsubscribe for such marketing.


Who has access to the personal data we process?

We have taken appropriate technical and organizational security measures to protect the personal data we process. The personal data may be processed, taken into account applicable rules on bank secrecy, by companies in the Group and by companies with which the Group cooperates in order to perform its services.

Transfers of personal data outside the EU/EEA take place in accordance with applicable personal data laws and for the purposes stated above. This type of transfer is normally based on the European Commission's standard model clauses. You may receive a copy of the relevant protection mechanism used for the transfer and information on which third countries the personal is transferred to by contacting us (contact details can be found at the end of this policy).



Profiling means an automatic processing of personal data to assess certain personal characteristics of you, for example to analyze or predict your personal preferences. Profiling is used by the Bank for, for example, market and customer analyzes, developing our services, system development and marketing. The legal basis for profiling is the Bank's legitimate interest.


How long do we save your personal data?

We save your information as long as it is needed to fulfill the purposes for which it was collected and until there are no legal obligations or rights for us to retain the information.


Your Rights

You have the right to know which personal data we are processing about you and to obtain a copy of these on request. You also have the right to get incorrect personal data about you corrected and in some cases deleted. You also have the right to object to certain personal data about you being processed and request that the processing should be limited. You also have the right to obtain personal information that you have provided about you in a machine-readable format and to have the information transferred to another data controller. If you are dissatisfied with how we process your personal data, you have the right to report this to the Data Inspection Board, which is the responsible supervisory authority for our processing of personal data.


Data Protection Office - Contact Information

The Bank has appointed a data protection officer to monitor that the Bank complies with data protection rules.

If you have any questions or comments with respect to our processing of your personal data, please contact us on +47 21 08 30 00. For complaints concerning the Bank's processing of personal data, please contact our Data Protection Officer, Karen Edle at