Privacy Policy

We process your personal data for the following purposes:

• Establishment, execution and termination of a contract with you (e.g. orders, rental and purchase of vehicles and spare parts, agreement of test drives, provision of repair, maintenance, service and warranty services, etc.); this also includes processing inquiries transmitted to us by vehicle manufacturers, if you expressed your interest in a vehicle via their platforms.
• We receive personal data (e.g. name, address, purchase contract details) from car dealers as part of vehicle subsidy programs, when they report the sale of a vehicle. The data is processed for the purpose of verifying and administering potential subsidy payments.
• Implementation of customer loyalty and marketing measures (including participation in events)
• Legal and regulatory requirements
• for the assertion of any legal claims and for defense in legal disputes
• internal administration, controlling, accounting
• for the implementation of communication
• for the purpose of sending out our newsletter

We process your personal data

• on the basis of your consent (Art. 6 (1) (a) GDPR)
• for the performance of a contract with you (Art. 6 (1) (b) GDPR)
• to fulfill legal obligations (Art. 6 para. 1 letter c GDPR), e.g. accounting and tax obligations
• to safeguard our legitimate interests (Art. 6 para. 1 letter f GDPR), to be able to advise you to enable communication and to administer subsidy payments and prevent fraud. You have the right to object to this data processing. There must be legitimate grounds for this arising from your particular situation.

We process the following data about you:

• Title, surname and first name
• Contact details (e.g. address, e-mail address, telephone number, cell phone number, fax)
• Previous communication (e.g. e-mails, conversation notes)
• Vehicle data (e.g. license plate number, vehicle identification number (VIN))
• Contract and payment data (e.g. bank account details)

We forward your data to the following parties where necessary:

• Service providers who support us in the execution of the contract (e.g. IT service providers, call centers, cloud service providers, shipping and collection companies, group companies, manufacturers)
• Service providers we use to send out newsletters
• for the processing of payment transactions (banks)
• to comply with legal requirements or assert legal interests (tax consultants, auditors, lawyers)
• to other companies within the Hedin Group to ensure customer service

We do not share your data with other recipients unless you consent to this or there is another suitable legal basis.

We use cloud service providers in the USA. The legal basis for the transfer to this third country is EU standard contractual clauses or an adequacy decision by the EU Commission in accordance with Art. 45 GDPR.

Personal data is stored for as long as it is required for the above-mentioned purposes and for as long as statutory retention periods require. As a rule, the retention period is 10 years due to accounting and tax requirements.

As a data subject, you are entitled to the following rights, provided that the legal requirements are met:

• Right of access, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure, Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Right to data portability, Art. 20 GDPR
• Right to object, Art. 21 GDPR

If the processing is based on your consent, you have the right to withdraw your consent to the processing of the data at any time with effect for the future. You also have the right to complain to the data protection supervisory authority about data processing.

You must provide us with the personal data that is necessary for us to perform the contract with you and that we are legally obliged to collect. If you do not provide this mandatory information, we may not be able to conclude a contract with you. The provision of data is necessary for both contractual and legal reasons. Voluntary information is marked accordingly on forms.

Responsible for data processing is