At SpareBank 1 Sør-Norge, we take your privacy seriously. It is important for us that you have confidence in us and in our services, and we continuously work to ensure that your personal data is secure with us. In this Privacy policy, we explain how we process your personal data, what rights you have, and how you can exercise them.
This Privacy policy was last updated 25.06.2026.
You can go directly to the section that is most relevant to you.
This Privacy policy applies to customers, prospective customers and other users of SpareBank 1’s services and websites. SpareBank 1 consists of several banks and companies. Where we refer to “SpareBank 1” or “we” in this policy, we mean the bank(s) and companies with which you have a customer relationship.
The relevant bank and/or company is the controller responsible for processing your personal data.
If you have any questions about how your personal data is processed, you may contact the Data Protection Officer at the relevant bank or company.
You can download our Privacy policy as a PDF here.
Her kan du laste ned personvernerklæringen som PDF (PDF in norwegian).
We need your personal data in order to establish and maintain your customer relationship so that you can use our banking and financial services. We also process personal data to provide you with information and offers, and to fulfil our legal obligations.
To register you as a customer and verify your identity.
To provide you with account and payment services.
To process loan applications and carry out credit assessments.
To establish and manage your savings accounts and to provide investment services.
To provide you with the best possible customer service and advisory services.
To provide you with pension and insurance services.
To provide you with relevant information, advice, and offers regarding our products and services.
To prevent, investigate, and report financial crime.
To ensure that your personal data is protected.
To ensure sound and responsible governance of our operations.
This section explains your rights when we process your personal data.
You have the right to request information about the personal data we process about you and to receive a copy of that data. You are also entitled to information about how we process your personal data. Most of this information is provided in this Privacy policy.
Information about your products, agreements, contact details, and transaction history is available through online banking. If you cannot find the information you are looking for, you may submit a request for access. We may ask you to specify which information you would like access to. If you do not have access to online banking or are otherwise unable to view electronic documents, we can provide the information in paper format.
There are some exceptions to the right of access. For example, we may be required by law to keep certain information confidential, or we may need to withhold information for the purposes of preventing, investigating, detecting, or prosecuting criminal offences. Access may also be restricted where information exists solely in documents prepared for internal case handling and an exemption is necessary to ensure proper processing. We may also refuse access if disclosure would reveal personal information about another individual or confidential business information.
You have the right to know what personal data we process about you. However, this does not necessarily include the names of employees who have accessed your personal data.
You can view and download the information you need directly from online banking without having to request all of your data at once.
You can find information such as your name, national identity number, email address, phone number, and registered addresses under the settings section of online banking. If you wish to share this information with another party, you are free to do so.
An overview of your accounts is available in online banking.
If you require a detailed record of your transactions, you can export a complete transaction history. The file is downloaded in CSV format and can be opened in spreadsheet software. Select an account, click Export, and choose the period for which you would like to view transactions.
If you would like access to your insurance information, you can complete a simple using BankID. Fremtind Forsikring will make the information available to you within 30 days.
It is important that the information we hold about you is accurate. We therefore verify our records against the Norwegian National Population Register and other relevant sources. We also ask you to confirm at regular intervals that the information we hold about you is correct.
If you believe that the information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented.
If we correct your personal data and the information has previously been shared with others, we will, where relevant and reasonably practicable, inform those recipients that the information has been updated.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and processed, and in accordance with applicable legal retention requirements. After that, the data will be deleted or anonymised. We have procedures in place to ensure that personal data is deleted when there is no longer a valid basis for retaining it.
You have the right to request that your personal data be deleted if
In many cases, we are required to retain information about you even if you request its deletion. This may apply while you are a customer and for a period after your relationship with us has ended. In practice, this means that you cannot always require us to delete your personal data. For example, we may be legally required to retain it, or we may need to do so to protect our legitimate interests. We may also need to retain personal data to establish, exercise, or defend legal claims.
You may request that we restrict the processing of your personal data in certain circumstances, for example if
We may continue to store the relevant personal data, but any other processing will be temporarily suspended. Processing may resume if necessary in connection with legal claims or to protect the rights of another individual.
You may ask us to stop processing your personal data where the processing is based on our legitimate interests. This right does not apply if we have compelling legitimate grounds that override your interests, rights, and freedoms, or if we need the data to establish, exercise, or defend legal claims.
You may also object to the use of your personal data for direct marketing purposes.
If you wish to opt out of all direct marketing communications, you may contact customer service.
In certain situations, we use automated processing and profiling, including for credit risk assessments, fraud prevention, and compliance with anti-money laundering regulations.
Profiling involves analysing personal data to evaluate certain characteristics or circumstances relating to an individual, such as financial situation or risk factors.
Such assessments may be used to support decision-making or, depending on the type of processing, may be fully automated.
This means that decisions may, in some cases, be made without human involvement.
Where a decision is based solely on automated processing and produces legal effects or similarly significant consequences for you, you have the right to:
You may contact us to exercise these rights.
If you wish to exercise any of your rights, you may contact the Data Protection Officer or customer service at the bank with which you have a customer relationship.
We recommend sending your request through online banking. Email is considered an unsecured communication channel, and we therefore ask that you do not send confidential information by email.
We will respond to your request as soon as possible and no later than 30 days after receiving it. If we expect the response time to exceed 30 days, we will inform you accordingly.
If you have given consent to receive marketing communications, you may withdraw or update your consent at any time through online or mobile banking.
To provide our services and fulfil our legal obligations, we process personal data as described in this Privacy policy. This Privacy policy explains where we obtain personal data, why we process it, and how we safeguard your privacy.
We are required to comply with the privacy rules set out in the General Data Protection Regulation (GDPR) and applicable data protection legislation. These requirements are designed to ensure that your personal data is processed in a secure, lawful, and transparent manner.
In addition, financial services legislation, including anti-money laundering regulations, financial institutions legislation, and international tax reporting requirements, imposes specific obligations on how banks collect, use, and share personal data. Banks are also subject to additional requirements imposed by Norwegian authorities. This means that we must maintain robust procedures to protect your personal data and be transparent about why and how it is used.
This Privacy policy explains why and how personal data is processed and how we comply with key privacy principles. The principle of lawfulness means that we always have a valid legal basis for processing your personal data. The principle of purpose limitation means that we only use your data for specified and legitimate purposes. We follow the principle of data minimisation, which means that we only collect the information necessary to provide the products and services you use. When we no longer need the information, we ensure that it is deleted or anonymised. We also protect your personal data against unauthorised access, loss, and misuse through appropriate technical and organisational measures.
Personal data includes any information and assessments that can be linked directly or indirectly to you as an individual.
The types of personal data we process depend on the products and services you have with us.
As a general rule, we collect personal data directly from you, for example when you open an account, apply for a loan, or use our products and services.
We may also obtain information from other sources where necessary to provide services, ensure data quality and accuracy, or comply with legal obligations. Such sources may include public registers and private organisations.
We collect information about how you use our websites, digital platforms, and applications, including traffic data, location data, and other communication data. You can read more about our use of cookies in the Cookies section below.
We must have a lawful basis for processing your personal data. The legal bases most relevant to our activities are described below.
We process personal data where necessary to perform agreements you have entered into with us. We may also process personal data prior to entering into an agreement, for example when handling applications or providing offers.
The relevant agreements describe which personal data is processed and for what purposes.
The financial sector is subject to extensive legal and regulatory requirements. As a result, we process personal data to comply with obligations under legislation such as anti-money laundering laws, accounting requirements, payment services regulations, and other product-specific legal requirements relating to areas such as lending and savings products.
We are also required to report certain information to public authorities, including the Financial Supervisory Authority of Norway and other relevant regulatory bodies.
We may process personal data where we have a legitimate interest that is necessary and not overridden by your rights and freedoms. We are required to assess and document this balancing of interests before relying on this legal basis.
You have the right to object to processing based on legitimate interests. For more information, please see the section 'Right to Object' under Your Rights.
Certain processing activities are based on your consent.
Where processing is based on consent, we will explain the purpose of the processing. You may withdraw or update your consent at any time through online banking or mobile banking. You can also change your consents here.
We have a duty of non-disclosure regarding customer information. However, in some cases, we are legally required to disclose information about you to, for example, public authorities. We may also be permitted to share it with payment service providers, companies in SpareBank 1, or other parties. We always ensure compliance with the duty of non-disclosure no matter what.
The duty of confidentiality applies between the banks and companies within the SpareBank 1 Alliance. However, to ensure accurate and consistent customer information, we may share the following basic information between banks, subsidiaries, and product companies:
If you would like to receive more relevant advice and offers, you may consent to additional sharing of personal data.
We only disclose information where required by law, including to tax authorities, welfare authorities, law enforcement agencies, courts, and supervisory authorities.
Under international regulations such as CRS (Common Reporting Standard) and FATCA (Foreign Account Tax Compliance Act), we are also required to report information about customers who are tax residents in other countries. You can get more information about CRS and FATCA from the Norwegian Tax Administration.
Where permitted by law or based on your consent, we may share information with other banks, financial institutions, insurance companies, or business partners. For example, this may be necessary if you wish to view accounts held with other banks or insurance products through our mobile banking services.
For international payments, necessary information may be shared with participating banks in accordance with applicable regulations in the recipient country.
If you default on a loan or credit agreement, we may share relevant information with debt collection agencies for the purpose of recovering the outstanding debt.
We use external service providers to support the delivery of our services.
Where these providers process personal data on our behalf, they act as data processors. We sign data processing agreements with all providers that process personal data on our behalf. Such agreements regulate how a data processor can use personal data to which it gains access. We will only use data processors that guarantee compliance with the Norwegian Personal Data Act and GDPR.
We aim to use suppliers located within the European Union (EU) and European Economic Area (EEA).
Where personal data must be transferred to a country outside the EU/EEA, we ensure that an appropriate transfer mechanism is in place, such as:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by law.
When retention is no longer necessary, the information will be deleted or anonymised.
Where processing is based solely on your consent and you withdraw that consent, we will stop collecting the information and delete it as soon as reasonably possible.
We want you to feel safe when visiting our websites while also enabling us to provide the best possible user experience.
We use cookies in our digital channels, including our websites, mobile banking services, and online banking services.
Cookies are small data files stored by your browser or app on your computer, tablet, or mobile device. A cookie belongs to a specific website and cannot be read by other websites.
If you use our websites without identifying yourself, your cookie preferences apply only to the device you are using. When you log in to online or mobile banking, you may choose whether your preferences should be linked to you as a customer.
You can choose which categories of cookies we may use.
These cookies are essential for the operation of our websites and cannot be disabled.
Functional cookies allow us to remember your preferences and settings so that you do not need to make the same selections every time you visit our websites.
Analytics cookies help us understand how our websites are used. The information collected allows us to improve functionality, performance, and user experience.
Marketing cookies collect information about your interests and browsing behaviour. This enables us and our partners to provide more relevant and personalised advertising across various channels, including our websites and social media platforms.
In addition to cookies, we use pixels and scripts provided by third parties. These technologies help us analyse user activity across our websites, social media platforms, and other digital channels. We use this information to improve our services and provide more relevant marketing.
You can choose which categories of cookies we may use.
If you believe that we have breached applicable data protection laws, or if you are dissatisfied with how we have handled your request, we encourage you to contact us first so that we can address your concerns and clarify any misunderstandings.
If you have questions about this Privacy policy or how your personal data is processed, you may contact the Data Protection Officer at the bank or company with which you have a customer relationship.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). More information is available on the Datatilsynet website.
The following provides an overview of changes made to the privacy policy.
| Changes | Date |
| Updated the Privacy Policy to better reflect our services and revised the structure and layout to provide greater clarity regarding the purposes of our personal data processing. | 25 June 2026 |
| Describe the purposes such that it is easier for you to understand how we process your personal data. Simplified language. | 12 June 2025 |
| Adjustments to wording in section for disclosure of personal information. | 1 October 2024 |
| Adjustments to wording, changes to the layout of information, and addition of individual purposes and areas of use for personal data in line with business development. | 16 May 2024 |
| Necessary adjustments and clarifications in line with the development of our services, products and websites, as well as judicial changes in privacy. | 29 August 2023 |
| Necessary adjustments and clarifications in line with the development of our services, products and websites. | 28 March 2023 |
| Necessary adjustments and clarifications in the section regarding cookies. | 17 June 2022 |
| Necessary adjustments and clarifications in line with the development of our services, products and websites. | 8 March 2021 |
