Data Privacy Notice for the use of the Car Market platform (ALD Car Market)
Status: February 2024
Gender note: For reasons of better readability, the simultaneous use of the language forms male, female and diverse (m/f/d) is dispensed with. Therefore, all personal designations apply equally to all genders.
Below we explain how information that can be individually assigned to you as a person (the "personal data") is processed and used when you use and register and for the provision of the Car Market platform (website). We also inform you about:
We are jointly responsible under data protection law within the meaning of Art. 26 GDPR for the processing of personal data in the context of the use of the CarMarket platform:
Nedderfeld 95, 22529 Hamburg
and
ALD SA
1-3 Rue Eugène et Armand PEUGEOT 92500 Rueil Malmaison
If you have any questions about data protection, you can contact the data protection officer at the following e-mail addresses:
datenschutz@aldautomotive.com
and
dpo@aldautomotive.com
The technical operation of the Car Market platform and the associated processing of personal data in accordance with this data protection notice is carried out by ALD.
When using our website and our app, cookies and similar technologies (hereinafter uniformly referred to as "cookies") are used. Cookies are small text files that are stored on your end device by us or by another body and through which certain information flows to the body that sets the cookie. By using cookies, it is not possible to execute programs or transfer viruses to your end device.
Cookies are set and analyzed if you have given your consent (Art. 6 (1) a) GDPR).
If you do not wish to use cookies or similar technologies, you can deactivate non-essential cookies in the settings. You can find more information on the scope and purpose of data processing, the respective legal basis, the specific storage period and the objection and removal options with regard to third-party cookies in our cookie policy or if you call up the "Manage consents" option.
In cases where reports on sales are created on the platform, this is done by ALD SA. The report itself is not personal and does not contain any direct reference to the specific retailer as a buyer.
|
Whose personal data is processed? (Categories of data subjects) |
Users of the Car Market platform (dealers) |
|
What categories of personal data are processed? |
|
|
Why is the data processed? (Purposes of the processing) |
We use the data to create an individual user account with which you can use our services. In addition, your data is collected for legally required identification in accordance with the Money Laundering Act. Your data will also be processed for contract processing and to send you any contract-relevant documents, such as tariff and cost changes, amendments to terms and conditions and data protection or vehicle documents. |
|
What is the legal basis? |
The processing of data in the context of an auction and contract processing is carried out for the (also pre-contractual) fulfillment of a contract (Art. 6 para. 1 b) GDPR)
|
|
Is there an obligation to provide this personal data and what are the consequences if the data is not provided? |
If the required data is not provided, a user account cannot be created. |
|
How long will the personal data be stored? |
We store your data for as long as it is required to enable you to participate in auctions on our platform and to process any contractual relationship. Even after termination of the contract, it may be necessary to continue to store certain personal data in order to comply with legal obligations. These include the following statutory retention obligations, in particular tax and commercial law regulations. We therefore continue to store order, customer and contract data for up to 10 years after termination of the contract. If tax-relevant customer communication is also affected, this will also be deleted after 10 years. Your data will then be stored and used exclusively for these purposes (fulfillment of retention obligations). |
The collection of your data for the purpose of the mandatory money laundering check is based on our legal obligation to do so (Art. 6 (1) (c) GDPR).
If you provide data via the platform for the purpose of identification in accordance with the Money Laundering Act, this data will also be processed by us:
We also process your data to inform you about our service or new products if you have given us your consent to do so or if this falls under our legitimate interest in offering you comparable products. The legal basis is consent (Art. 6 para. 1 b) GDPR) or legitimate interest (Art. 6 para. 1 f) GDPR). You can revoke your consent at any time with effect for the future.
Any person whose personal data is processed may, as the data subject, exercise the right to object to any of the controllers pursuant to section 1 the rights listed below.
In accordance with Art. 15 GDPR, data subjects can request information from the controller as to whether personal data concerning them is being processed. If this is the case, data subjects may request the information on data processing specified in Art. 15 GDPR. At the request of the data subject, the controller will provide a copy of the processed personal data.
Pursuant to Art. 16 GDPR, data subjects may request that the controller rectify any inaccurate personal data concerning them or complete any incomplete personal data.
Pursuant to Art. 17 GDPR, data subjects may request that the controller erase personal data concerning them, provided that the conditions set out in Art. 17 GDPR are met.
Pursuant to Art. 18 GDPR, data subjects may request that the processing of personal data concerning them be restricted, provided that the conditions set out in Art. 18 GDPR are met.
Pursuant to Art. 20 GDPR, data subjects may receive the personal data concerning them in a structured, commonly used and machine-readable format and have this data transmitted to another controller, provided that the requirements set out in Art. 20 GDPR are met.
Data subjects may, for reasons arising from their particular situation, object to the processing of personal data concerning them, e.g. on the legal basis of Art. 6 para. 1 sentence 1 lit. f) GDPR, by any controller in accordance with Art. 21 GDPR.
The controller(s) will then no longer process the personal data unless they can demonstrate and, where applicable, prove that the conditions for continuing to process this data in accordance with Art. 21 GDPR are met.
Data subjects may also object to the processing of personal data for direct marketing purposes at any time. The controller(s) will then no longer process the personal data for this purpose.
Data subjects can withdraw consent they have given for the processing of personal data concerning them at any time in accordance with Art. 7 (3) GDPR. The withdrawal of consent is only effective for the future; the processing of personal data that has already taken place on the basis of the consent is not affected by the withdrawal.
Pursuant to Art. 77 (1) GDPR, data subjects may lodge a complaint about the processing of personal data concerning them at any time. Such a complaint must be submitted to the competent data protection supervisory authority.
The competent data protection authorities are
For ALD AutoLeasing D GmbH:
The Hamburg Commissioner for Data Protection and Freedom of Information of the Free and Hanseatic City of Hamburg
Ludwig-Erhard-Str 22, 7th floor
20459 Hamburg
Phone: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
E-mail: mailbox@datenschutz.hamburg.de
and
for ALD SA:
CNIL - Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy
TSA 80715
F - 75334 Paris cedex 07
Tel.: + 33 (0)1 53 73 22 22
E-mail: webmaster@cnil.fr
Homepage: https://www.cnil.fr