Privacy policy
01. Who we are
0TO9 AB (reg. no. 556976-4110), founded in 2016 with its head office in Stockholm, is a credit market company (kreditmarknadsbolag) licensed to conduct financing operations under the Swedish Banking and Financing Business Act (2004:297). 0TO9 AB is the parent company of a group with several subsidiaries operating in different niches and — unless otherwise stated — is the data controller for the personal data described in this notice.
02. When you borrow from us
When you apply for or hold a loan with a 0TO9 group company, we process contact and identity data (name, personal number, BankID identification), personal details you provide (family situation, employment), correspondence (written and recorded calls), financial data (bank accounts, transactions, income, existing debts, credit reports), and account information used for credit assessment. This is used to provide and administer lending services, communicate about your loan, carry out credit monitoring, run customer due diligence under anti-money laundering law, and protect or pursue legal claims. Legal bases include contract performance, legal obligation and, for account-based credit checks, consent.
03. When you save with us
When you apply for or hold a savings account with us, we process the same broad categories — contact and identity data, account information, correspondence and customer due diligence data — to provide the savings product, communicate with you, meet customer due diligence obligations, and protect our legal position. Legal bases are contract performance and legal obligation.
04. Marketing
We process your contact details, survey responses and customer history to send newsletters and relevant marketing, based on our legitimate interest. Where we use social platforms such as Meta, TikTok or Google for marketing — including profiling for personalised advertising, e.g. via Google Signals — this relies on your consent.
05. Improving our services
We use data such as your contact details, correspondence, customer history and survey responses for market and customer analysis, business follow-up, risk management and product development, based on our legitimate interest.
07. Automated decision-making
Credit assessments and customer due diligence checks may be carried out automatically. You have the right to object and request manual review of any automated decision.
08. Cookies
We use cookies, including web beacons and pixel tags, to improve your experience, ensure functionality and analyse how our site is used. See our Cookie policy for the categories we use and how to manage your preferences. You can also block or delete cookies in your browser, though this may affect site functionality.
09. Data retention
We retain data in line with Swedish law: accounting records for 7 years (Bokföringslagen), anti-money-laundering records for 5–10 years (Penningtvättslagen), rejected applications for 90 days, customer relationship data for up to 10 years after the relationship ends, and data relating to legal claims for up to 10 years.
10. Security
We apply a high level of protection to sensitive data such as loan, savings and transaction information, restrict access to caseworkers on a need-to-know basis, run continuous backups, and store data within the EU/EEA. Where data is transferred outside the EU/EEA, we apply safeguards such as the EU's Standard Contractual Clauses.
11. Your rights
You have the right to information and a register extract, to withdraw consent where processing relies on it, to have inaccurate data corrected or completed, to object to processing — including automated decisions, profiling and marketing — and, in certain cases, to data portability.
12. Data Protection Officer
0TO9's Data Protection Officer is responsible for ensuring your personal data is handled correctly. Contact: dpo@plus1.com. Please include your name, personal number, contact details, your relationship to 0TO9, and what your request concerns.