Read full terms and conditions
Vipps may, in sign up, log in or payment situations, enable you to share the information registered in your Vipps profile with merchants, for the merchant to register you in their systems; i.e. to deliver the service or product to you. In such situations the merchant will request the information they require, then you can choose whether to consent to this sharing. Vipps will only share the information registered in your Vipps profile with merchants after you have consented to the information being shared. The information requested will be stated in the consent dialogue.
Merchants will be able to request the following personal data:
Only when necessary or based by law:
The merchant becomes an independent data controller of the personal data shared with it. This means that the merchant decides the purpose of the processing and becomes responsible for its subsequent processing of your personal data.
When you have consented to sharing information with a merchant, Vipps will provide the merchant with updated information when you use the merchant’s functionality which gave the merchant your information. Vipps will also store your consent to enable the merchant to get the same information using other Vipps services, without you having to consent for each individual service. This is done since the merchant already has this information. If a merchant asks for additional information, you will be asked for a new consent.
You can see which merchants you have shared information with, and you can withdraw your consent at any time under ‘Settings’ in the Vipps app. If you withdraw your consent you will be asked for a new consent if you would like to use the service at the merchant at a later time. It is important to note that the customer relationship between you and the merchant does not change when you withdraw your consent to sharing information in the Vipps app. This means that your name, address, email address or phone number as requested and given consent for, may be stored by the merchant for its own purposes as an independent data controller.