Privacy statement

1. Who we are

Audun Collection AS, organisation number 937 848 293, Møllergata 6, 0179 Oslo (“Audun”, “we”), is the controller of personal data used in our business. This means we determine the purposes and means of processing. You can contact us about privacy at [email protected].

2. Who this statement applies to

This statement applies when you visit our website, receive a claim from us, use My Page or represent a business that is or is considering becoming an Audun customer. It also applies when you send us an enquiry.

3. Personal data we process

The data we process depends on your relationship with us. It may include:

• your name, address, telephone number, email address and information needed to identify you,
• information about claims, invoices, payments and payment agreements,
• messages, correspondence and notes from conversations with us,
• your employer, role and contact details when you represent a business, and
• technical information, such as IP addresses and login events, to operate and secure our services.

If a case contains sensitive data, we limit processing to what is necessary and has a specific legal basis. Information needed for secure identification or processing a claim may be necessary for us to follow up the case or give you access to the service.

4. Where the data comes from

We receive information from you when you use our services or contact us. In collection cases, we also receive information from the creditor that referred the claim. Where necessary, we obtain information from public registers, address services and credit reference agencies. We also record information arising during case handling, such as payment status and conversation notes.

5. Why we use the data

We use personal data to check and follow up claims, contact the right person, process payments, suggest payment plans and respond to enquiries. We also use data to manage customer relationships and access, secure our services and document our work.

Collection activity normally relies on our and the creditor’s legitimate interest in pursuing a lawful overdue claim. Other legitimate interests include preventing errors and misuse, protecting data and establishing or defending legal claims. Statutory documentation is processed to meet legal obligations. If you are personally a party to a contract with us, processing may also be necessary to perform that contract.

Where processing requires consent, we ask for it separately. Consent can be withdrawn. Debt collection does not rely on consent and therefore does not stop when consent for another purpose is withdrawn.

6. Technology and human involvement

Audun uses automation and AI for tasks such as drafting messages, categorising replies, summarising information and suggesting follow-up. Technology helps us tailor communication and follow up cases. Objections and situations requiring judgement or personal support are handled by a case manager. See the detailed privacy statement for debtors (in Norwegian) for information about automation and assessments in collection cases.

7. Who we share data with

We share data where necessary to carry out the assignment or meet legal obligations. Recipients may include the creditor, hosting and communication providers, payment and identification services, public registers, legal partners and relevant authorities. We limit sharing to what the recipient needs.

Providers processing data on our behalf are subject to data processing agreements. Other recipients, such as banks and public authorities, may be independent controllers. We do not sell personal data. See our list of providers and recipients (in Norwegian) for details.

8. Retention and security

We use access controls, encryption and logging to protect personal data. Access is limited to people who need the information for their work.

Data is kept for as long as necessary for its purpose, or as required by legal obligations and the need to establish or defend legal claims. Retention depends on whether the case is ongoing, the documentation involved and applicable accounting and documentation requirements. Detailed retention periods are described in the statements for debtors and businesses (in Norwegian).

Some providers may process data outside the EEA. Such transfers require a valid transfer mechanism, such as an adequacy decision or standard contractual clauses. Contact us for information about the applicable mechanism and safeguards.

9. Cookies

Our website and login services use cookies and similar technologies. Read about their purposes and your choices in our cookie information (in Norwegian).

10. Your rights

You can request access to your personal data and ask for correction, erasure or restriction where the conditions are met. You can object to processing based on legitimate interests. In some cases, you can receive your data in a format that can be transferred to another service.

The right to erasure is not absolute. For example, we may have to retain documentation. Contact [email protected] to exercise your rights. We may ask for information to verify your identity before granting access or making changes.

11. Complaints and questions

Please contact us if you believe we have processed your personal data incorrectly. You also have the right to complain to Datatilsynet, the Norwegian Data Protection Authority.

12. Changes and further information

We update this statement when our processing or the rules change. The date at the top shows when it was last updated. Further information about specific processing is available in the statements for debtors and businesses (in Norwegian).

13. Contact

Audun Collection AS
Organisation number 937 848 293
Møllergata 6, 0179 Oslo
[email protected]