Privacy policy

Who is responsible for your data

Banknorden is run by Seofy ApS, CVR 38069187, Tjørnestræde 9, DK-7100 Vejle, Denmark. Seofy ApS is the data controller for the personal data described on this page. You can contact us about anything in this policy at [email protected].

This policy covers banknorden.com and all its country sections (English, Finnish, Spanish, Norwegian, Danish and Swedish). Banknorden is a comparison service: we do not lend money, we do not take loan applications and we do not ask for your income, your identity number or your bank details.

What we process and why

When you visit the site

Like any website, our servers receive technical information with each request: your IP address, the page you ask for, the time, and what your browser reports about itself (browser type, operating system, language). We use it to deliver the pages, to keep the site secure and stable, and to find and fix errors. The legal basis is our legitimate interest in running a secure website (GDPR art. 6(1)(f)).

Cookies and browser storage

We set two cookies, and both are strictly necessary for the site to work: thb-session (keeps your session together) and XSRF-TOKEN (protects forms against cross-site request forgery). Both expire after two hours. The site also stores your answer to the cookie notice in your browser's local storage, so that we do not ask again. We do not use analytics cookies, advertising cookies or tracking pixels.

When you click an offer

The offers on our pages come from partners. When you click one, your browser goes through our click-out link to our tracking service (tracking.seofy.dk, operated by Seofy ApS), which records the click and forwards you to the partner. The record contains the offer you clicked, the page you came from, the type of device, browser and operating system, and your IP address. We use it to attribute the click to the right partner, to settle commissions and to detect fraudulent clicks. The legal basis is our legitimate interest in being paid for our service and preventing abuse (art. 6(1)(f)). We do not place a cookie on your device for this.

When you email us

If you write to us, we process your email address, your name if you give it, and what you write, in order to answer you and to follow up if needed (art. 6(1)(f), or art. 6(1)(b) where you ask us to do something). Please do not send us identity numbers, bank details or information about your health or finances that we do not need.

What we do not do

We do not sell personal data. We do not build profiles of you, we do not make automated decisions about you, and we do not pass your data to lenders. When you leave Banknorden for a partner's site, that partner, the affiliate network it uses and the lender you apply to process your data under their own privacy policies, and they may set their own cookies. Read their policies before you apply.

Who receives the data

• Our hosting provider in Denmark, which runs the servers for us as a data processor.
• Our email provider, which receives and stores the emails you send us, as a data processor.
• Cloudflare, which delivers and protects the site (content delivery and protection against attacks) as a data processor. Cloudflare, Inc. is based in the United States; for transfers there it relies on the EU-U.S. Data Privacy Framework and, as a fallback, the EU standard contractual clauses.
• Public authorities, only if the law requires it.

How long we keep it

• Server logs: only as long as needed for security and error-finding, after which they are deleted or overwritten in the normal rotation.
• Click records: as long as needed to settle commissions with partners and handle disputes, and no longer than 13 months.
• Emails: as long as needed to deal with your request and any follow-up, then deleted.
• Session cookies: two hours. The cookie-notice choice stays in your browser until you clear it.

Your rights

You have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict its processing, to object to processing based on our legitimate interest, and to receive data you gave us in a portable format. To use these rights, email [email protected]. We may ask you to confirm your identity before we act on a request.

If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency (Datatilsynet), which supervises Seofy ApS, or to the data protection authority in the country where you live. We would appreciate the chance to put things right first.

Changes

We update this policy when what we do changes. The date of the last update is shown on this page. This policy was last revised in October 2026.