|1.1||Detailed privacy notice for personal information collected by Autorola.|
|2.1||The company collecting your data, known as the data controller, is:|
DK-5000 Odense C
Tel: +45 70 20 16 61
Your primary contact and the company processing your data, known as the data processor, is:
Tytherington Business Park
Macclesfield, Cheshire, SK10 2XA
Tel: 01625 507000
|2.2||If you have a complaint regarding the way we treat your information, which we cannot help you with, you should contact the data protection authority:|
The Information Commissioner's Office
Water Lane, Wycliffe House
Wilmslow - Cheshire SK9 5AF
Tel: +44 1625 545 745
|2.3||Your personal information is protected by law through the General Data Protection Regulation (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) |
|3||People who sign up to Autorola services |
|3.1||When signing up as a user of Autorola services you enter into an agreement to which Autorola requires your contact information to honour. Your information will be used for the performance of Autorola services to verify your identity and to provide you with access to relevant IT systems. |
Unless there is a legal claim we intend to delete, or anonymize, the data collected from you while browsing our sites 1 year after your last login or 5 years after you last purchased or sold any vehicle or goods. Please allow a margin of time as we do not check for information to delete every day.
|3.2||There are certain cases where we share your personal information, collected when signing up to Autorola services, with third parties in order to perform the agreed service. These cases include, but are not limited to, when you sell or purchase vehicles or goods, when you fail to pay legitimate invoices from Autorola, when we invoice, when we refund payment, when asked by the authorities in relation to crime investigations and more. |
The categories of recipients are:
- Financial auditors
- Buyer of vehicles or goods you sell
- Seller of vehicles or goods you buy
- Our bank
- Our debt collection company
- Our debt recovery company
- Digital contract signing company
- The authorities
- Our partners hosting our web sites and Internet services
- Our data backup partners
- SMS service providers
- Car parks where you retrieve or deliver vehicles or goods
- Transport companies transporting vehicles to or from you
|3.3||We will transfer the vehicle registration certificate to countries outside of the EU union in the cases where you sell vehicles or goods outside of the EU union. The buyer require the vehicle registration certificate to transfer the vehicle to a new owner and therefore we transfer the certificate to the new owner in order for the new owner to establish the legal claim over the vehicle. |
|4||People browsing our web sites |
|4.1||We collect information on which pages you visit, which vehicles you look at, which vehicles you add to your favourite list, which campaign brought you to our sites etc. This is used to recommend relevant vehicles to you, for marketing purposes and to optimize the user experience and flow with the goal of improving sales. We also use the information collected to suggest potential buyers to our sales team. |
|4.2||Unless there is a legal claim we intend to delete, or anonymize, the data collected from you while browsing our sites 1 year after your last login or 5 years after you last purchased or sold any vehicle or goods. Please allow a margin of time as we do not check for information to delete every day. |
We have a legal interest in optimizing our sales which we believe is a legal reason to collect and process your information based on your browsing our web sites.
|5||People using Autorola Service Desk or by other means asking for support |
|5.1||Autorola offers support and help in order to ensure you have a good experience when using our IT systems and services and to ensure you can get issues resolved in a timely manner. |
We are always happy to help when you have issues with our services. We have a legitimate interest in helping our customers to use our services.
We use third party systems for tracking our support requests and the personal information you provide for support purposes might be stored at an external partner.
In cases where you request support for a sub system we might have to share the personal information you provide for support purposes in order to get the required support from our partners.
We will delete, or anonymize, the personal information you provide for support purposes a maximum of two years after your request have been resolved.
|6||People who misbehave |
|6.1||We keep an internal record of users who severely misbehave. This can be that they refuse to pay justified buyers or sellers fee, repeatedly bullying the seller when picking up a car, trying to cheat and much more. |
This information will be used to assess if can continue to do business with the offending party.
We have a legal interest in keeping our services professional, which very much means that we try to ensure that our buyers and sellers are acting professional.
|6.2||In cases where a law has been broken or there is a legal claim, we will share this information with relevant parties like: |
This information can also be relevant for financial auditing as it might be used as documentation for loss of profit. In this case the information will be shared with:
|6.3||Unless there is a legal claim, or the offence is so severe that there is legal justification for a longer retention period, we intend to delete or anonymize this information 5 years after you last purchased or sold any vehicle or goods. Please allow a margin of time as we do not check for information to delete every day. |
|7||People buying and selling vehicles |
|7.1||In order to facilitate a sale the buyer and seller must exchange personal information and Autorola is providing this information to both parties as part of the agreement made when signing up to Autorola services. Some trades are done with a middleman where the buyer and seller do not share personal information. When an auction ends, Autorola will try to contact potential buyers as well as the seller and try to negotiate the sale. |
|7.2||We will transfer your contact information to countries outside of the EU union in the cases where you purchase or sell vehicles or goods outside of the EU union. |
Autorola uses a standard contractual clause to ensure proper protection of your personal information in absence of an adequate decision pursuant to Article 45(3) of the GDPR.
|7.3||Unless there is a legal claim we intend to delete, or anonymize, the data collected from you after 5 years after you last purchased or sold any vehicle or goods. Please allow a margin of time as we do not check for information to delete every day. |
|7.4||Autorola is legally obligated to report imported and exported goods to INTRASTAT in which case provide them with the, by law, required personal information. |
Autorola is legally obligated to deregister vehicles before export or document that it has been done. When deregistering, your personal information will be shared with the relevant authorities.
|8||People who get a refund |
|8.1||If we need to refund a payment, we need your bank account information in order to transfer money back to you. You can refuse this if you prefer, but it will mean longer expedition time and that we cannot make a direct transfer. We refund money based on the contractual agreement between you and us, in pursuit of treating you and other customers fair in order to promote future trade and cooperation. |
We will share your account information with:
- Our bank
- Financial auditors
Your bank account information will be deleted 5 years after the last refund. Please allow a margin of time as we do not check for information to delete every day.
|9||People who refuse to pay |
|9.1||Under the contractual agreement between our customers and Autorola, Autorola will try to collect overdue payments. |
When Autorola and the customer cannot agree on a way of payment, Autorola will use a third party to recover the money and in that case share relevant personal information with the debt recovery company.
Autorola is not a debt collecting company and the purpose of using a third party is to ensure fair treatment of all parties.
|9.2||Unless there is a legal claim we intend to delete, or anonymize, the data collected from you 5 years after the last overdue amount was cleared or cancelled. Please allow a margin of time as we do not check for information to delete every day. |
|10||Your rights |
|10.1||In accordance with the law you have the following rights in relation to your personal data used by Autorola:|
|10.2||Right to erasure (“right to be forgotten”) |
Autorola will delete or anonymize your personal information when requested. The deletion of your personal data will be done as soon as possible within one month of receiving your request.
Autorola is only obligated to delete your data if Autorola is not obligated by law to keep the information and one of the following applies:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- You withdraw the consent given for the collection and processing, and where there is no other legal ground for the processing;
- You object to the processing for direct marketing purposes;
- Your personal data have been unlawfully processed;
- Your personal data have to be erased for compliance with a legal obligation in law to which Autorola is subject;
|10.3||Right to restriction of processing |
Autorola will stop processing your personal data on your request.
Autorola is only obligated to stop processing your data while one of the following applies:
- The accuracy of the personal data is contested by you, for a period enabling Autorola to verify the accuracy of the personal data;
- The processing is unlawful and you oppose the erasure of the personal data and requests the restriction of their use instead;
- Autorola no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- You have informed Autorola of infringement on your interests, rights and freedoms pending the verification whether the legitimate grounds of Autorola override yours.
|10.4||Right to rectification |
If you find that we have wrong personal information let us know and we will correct the information.
|10.5||Right of access by the data subject |
It is your right to have a copy of the personal data Autorola has on you. We will provide it digitally unless requested otherwise. More rules apply for visibility into your personal data but all the required information should be covered above. The copy of your personal data will be delivered as soon as possible within one month of receiving your request.
|10.6||Right to withdraw consent |
Where our collection and use of your personal data is based on your consent you can withdraw that consent at any time by contacting Autorola.
|10.7||Right to data portability |
You are entitled to get a copy of your personal data in a machine readable format. Autorola can also send it directly to another company on your request.
Autorola is only obligated to provide your personal data where:
- The data is provided to Autorola by you,
- The data collection is based on your consent or a contract in which you are a party and
- The processing is carried out by automated means (meaning no information on paper).
|10.8||Right to objection |
You have the right to object to any processing in relation to direct marketing and where you believe your rights are being violated or there is threat to your freedom.
Autorola can continue to process your personal information where one of the following applies:
- Autorola demonstrates compelling legitimate grounds for continued processing.
- Autorola must process your personal information to establish, exercise or defend a legal claim.
- The legal basis for the processing is not based on a legitimate interest or done in public interest.