Privacy Policy

PRIVACY POLICY.

This website/application is owned by [In case of PCD insert related NSC / in case of OV insert , insert name, address, etc.]. It is operated by [In case of PCD insert related NSC / in case of OV insert NSC and ]. The registered office of [In case of PCD insert related NSC / in case of OV insert is situated in [insert NSC legal entity country] at [insert NSC registered address]. This website/application is hosted in Europe by our IT-service provider [insert IT-service provider name and address].  

Please read this policy carefully before using this website/application because it explains how we will process personal data. Using this website/application indicates that you accept this policy.

1. Types of data being processed / Links to other websites/applications

We care about your privacy. We collect and process various types of personal data via this website/application. This includes:

 

  • Information you provide to us when requesting and using our services and our website/application, such as name, address, e-mail address
  • Information that we need when you report a problem with our website/application
  • Information collected with cookies
  • Information about your vehicle and specific contract data that we need for the individual performance of the website/application (e.g. purchase date, service dates) and to provide a positive usage experience with the best service for your vehicle
 

For further details, see section 2.

This website/application can also contain links to other or Groupe PSA websites/applications or to websites/applications of our partners, authorized workshops, other affiliated companies or social media websites. When you click on such a link to any of such other or third party websites/applications, please be aware that these websites/applications have their own Data Protection policies. Please check their privacy policies when using these websites/applications.

This website/application can also contain iFrames with content of other or Groupe PSA websites/applications or of websites/applications of third parties. is not responsible for third-party content presented in iFrames. The information presented therein is the sole responsibility of those website/application owners. has no control or responsibility for the content of independent websites/applications and provides this external content to its visitors for their convenience. As a result, when you visit a page containing such content, you may be presented with cookies from these third party websites/applications. does not control the distribution of these cookies. Please check the Cookies Policy  of or the third party's privacy policy for more information. 

Please be informed that cannot accept any responsibility or liability for third party websites/applications.

2. Information about the processing of personal data

Your personal data will be processed to administrate and fulfil your request and for general administration purposes by [insert name, address of controller(s) [In case of PCD insert related NSC / in case of OV insert NSC and ] as controllers, as follows.

We as controllers process your personal data as follows:

Data / Data Categories (mandatory data is marked with an *): Respective identification and contact details (name*, email address*; phone no., postal address (* if applicable)), model of interest details*, selected Partner*, leasing / financing interest, enquiry type (* if applicable), fleet specific data (* if applicable)

Purpose(s): Contacting, communication and request fulfilment

Data / Data Categories (mandatory data is marked with an *): Respective identification and contact details (name, email address*)

Purpose(s): Newsletter un-/subscription

Data / Data Categories (mandatory data is marked with an *): Respective identification and contact details (name*, email address*; phone no., postal address (* if applicable), contact preferences), vehicle identification data (e.g. vehicle identification number (VIN)*, registration number / license plate, first registration date), product and service specifications (e.g. model, trim, engine), service type*, odometer reading, vehicle drop off date/time, pickup date/time, courtesy car

Purpose(s): Service request fulfilment

Data / Data Categories (mandatory data is marked with an *): Respective identification and contact details*, vehicle identification data*, respective product specifications*, odometer reading

Purpose(s): Vehicle valuation request fulfilment

Data / Data Categories (mandatory data is marked with an *): Respective identification and contact details (name*, phone no.)

Purpose(s): Request fulfilment tracking

Data / Data Categories (mandatory data is marked with an *): Information collected via cookies

Purpose(s): please see Cookies Policy for detailed information

Data / Data Categories (mandatory data is marked with an *) Purpose(s)
Respective identification and contact details
(name*, email address*; phone no., postal address (* if applicable)), model of interest details*, selected Partner*, leasing / financing interest, enquiry type (* if applicable), fleet specific data (* if applicable)
Contacting, communication and request fulfilment
Respective identification and contact details
(name, email address*)
Newsletter un-/subscription
Respective identification and contact details
(name*, email address*; phone no., postal address (* if applicable), contact preferences),
vehicle identification data (e.g. vehicle identification number (VIN)*, registration number / license plate, first registration date), product and service specifications (e.g. model, trim, engine), service type*, odometer reading, vehicle drop off date/time, pickup date/time, courtesy car
Service request fulfilment
Respective identification and contact details*, vehicle identification data*, respective product specifications*, odometer reading Vehicle valuation request fulfilment
Respective identification and contact details
(name*, phone no.)
Request fulfilment tracking
Information collected via cookies please see Cookies Policy for detailed information

The data elements marked with an asterisk (*) are mandatory and a contractual requirement. You are therefore obliged to provide the personal data. In case you don’t provide the data, we cannot fulfil your request.

Based on your user behaviour by browsing on our website/application, a pop-in might be shown to you offering a test drive or a voucher for your model of interest.

Your personal data will be stored for ten years after the contractual relationship has been terminated. In case you have provided your consent for marketing purposes, your personal data will be stored for these purposes for three years after the last contact with us.

We disclose your personal data for the below listed purposes to the following recipients:  

 

A.    Purposes related to the performance of a contract or related to steps at the request of the data subject prior to entering into a contract according to Art. 6 (1) 1 b) General Data Protection Regulation (GDPR)

Data / Data Categories (mandatory data is marked with an *): Respective identification and contact details*, vehicle identification data*, respective product and service specifications*, enquiry details, selected Partner*, leasing / financing interest (* if applicable), fleet specific data (* if applicable)

Purpose(s): Contacting, communication and request fulfilment; newsletter un-/subscription

Recipient(s): [In case of PCD insert related NSC / in case of OV insert NSC and [Choose a Division]] and PSA Automobiles SA, 2-10 Boulevard de l’Europe, 78 300 Poissy, France and your selected Partner.


The above listed recipients disclose your personal data to the respective (IT-)service providers to support the administration of the named purposes, in particular: 

  • Capgemini (Capgemini Technology Services, 5/7 rue Frédéric Clavel – 92287 Suresnes Cedex - France) who engages other (sub-) processors who are located outside of the European Economic Area (EEA) and therefore in a country without adequate level of data protection. There is no adequacy decision of the European Commission, but there are appropriate safeguards in place, which are in this case respective Binding Corporate Rules (BCRs). In order to obtain a copy please follow this link:  https://www.capgemini.com/resources/capgemini-binding-corporate-rules/
  • Atos (Atos SE, River Ouest, 80 Quai Voltaire, 95877 Bezons cedex, France) who engages other (sub-) processors who are located outside of the European Economic Area (EEA) and therefore in a country without adequate level of data protection. There is no adequacy decision of the European Commission, but there are appropriate safeguards in place, which are in this case respective Binding Corporate Rules (BCRs). In order to obtain a copy please follow this link: https://atos.net/content/dam/global/documents/atos-binding-corporate-rules.pdf
  • Salesforce (Salesforce.com EMEA Limited, Village 9, Floor 26 Salesforce Tower, 110 Bishopsgate, London, EC2N 4AY, United Kingdom) who is located outside of the European Economic Area (EEA) and therefore in a country without adequate level of data protection. There is no adequacy decision of the European Commission, but there are appropriate safeguards in place, which are in this case respective Binding Corporate Rules (BCRs). In order to obtain a copy please follow this link: https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/misc/Salesforce-Processor-BCR.pdf
  • Fair Computer Systems, Ostendstr. 132, 90482 Nürnberg, Germany
  • IBM GBS France, 17 Avenue de l'Europe, 92275 Bois-Colombes, France
  • MRM McCann GmbH, Großer Hasenpfad 44, 60598 Frankfurt, Germany 
  • If the supplier/processor is located outside the European Economic Area (EEA) please name the supplier and add: [We also disclose your personal data to the respective (IT-) Service provider who is placed outside the European Economic Area (EEA) in [insert country] and therefore in a country without adequate level of data protection. [If there is an adequacy decision of the European Commission please insert: There is an adequacy decision of the European Commission for [insert country].] [If an adequacy decision is missing please insert: There is no adequacy decision of the European Commission but there are appropriate safeguards in place, which are in this case: [insert, e.g. EU Standard Contractual Clauses, Binding Corporate Rules]. [Insert the means by which to obtain a copy of the safeguards or where they have been made available: In order to obtain a copy please send an email to [please insert email address, e.g. email address of the Privacy Center].]] [If an adequacy decision or appropriate safeguards are missing, please insert: There is no adequacy decision of the European Commission but the derogation after [insert derogation after Art. 49 GDPR e.g. Art. 49 (1) a) GDPR] applies.]]

Data / Data Categories (mandatory data is marked with an *): Respective identification and contact details*, vehicle identification data*, respective product specifications*, odometer reading

Purpose(s): Vehicle valuation request fulfilment

Recipient(s): [Insert supplier name, address, etc.; e.g. autobiz SAS, 4, place des Vosges, Immeuble LAVOISIER, 92400 COURBEVOIE, France] and your selected Partner. Further recipients: See above mentioned IT service providers. [For further supplier please follow the instructions as described above.]

Data / Data Categories (mandatory data is marked with an *): Respective identification and contact details (Name*, Phone no.)

Purpose(s): Fulfilment tracking

Recipient(s): TrackBack,, 10ACT Limited, 8 Waldegrave Road, Teddington, Middlesex TW11 8HT, United Kingdom

Data / Data Categories (mandatory data is marked with an *): [insert data / category]

Purpose(s): [insert purpose]

Recipient(s): [Insert name, address, etc.] and your selected Partner Further recipients: See above mentioned IT service providers. [For further supplier please follow the instructions as described above.]

Data/Data Categories Purpose(s) Recipient(s)
Respective identification and contact details*, vehicle identification data*, respective product and service specifications*, enquiry details, selected Partner*, leasing / financing interest (* if applicable), fleet specific data (* if applicable) Contacting, communication and request fulfilment; newsletter un-/subscription

NSC / in case of OV insert NSC and ]] and PSA Automobiles SA, 2-10 Boulevard de l’Europe, 78 300 Poissy, France and your selected Partner.

The above listed recipients disclose your personal data to the respective (IT-)service providers to support the administration of the named purposes, in particular: 

- Capgemini (Capgemini Technology Services, 5/7 rue Frédéric Clavel – 92287 Suresnes Cedex - France) who engages other (sub-) processors who are located outside of the European Economic Area (EEA) and therefore in a country without adequate level of data protection. There is no adequacy decision of the European Commission, but there are appropriate safeguards in place, which are in this case respective Binding Corporate Rules (BCRs). In order to obtain a copy please follow this link:  https://www.capgemini.com/resources/capgemini-binding-corporate-rules/

- Atos (Atos SE, River Ouest, 80 Quai Voltaire, 95877 Bezons cedex, France) who engages other (sub-) processors who are located outside of the European Economic Area (EEA) and therefore in a country without adequate level of data protection. There is no adequacy decision of the European Commission, but there are appropriate safeguards in place, which are in this case respective Binding Corporate Rules (BCRs). In order to obtain a copy please follow this link: https://atos.net/content/dam/global/documents/atos-binding-corporate-rules.pdf

- Salesforce (Salesforce.com EMEA Limited, Village 9, Floor 26 Salesforce Tower, 110 Bishopsgate, London, EC2N 4AY, United Kingdom) who is located outside of the European Economic Area (EEA) and therefore in a country without adequate level of data protection. There is no adequacy decision of the European Commission, but there are appropriate safeguards in place, which are in this case respective Binding Corporate Rules (BCRs). In order to obtain a copy please follow this link: https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/misc/Salesforce-Processor-BCR.pdf

- Fair Computer Systems, Ostendstr. 132, 90482 Nürnberg, Germany

- IBM GBS France, 17 Avenue de l'Europe, 92275 Bois-Colombes, France

- MRM McCann GmbH, Großer Hasenpfad 44, 60598 Frankfurt, Germany 

[For further supplier/processor: [insert name, address, etc.]

If the supplier/processor is located outside the European Economic Area (EEA) please name the supplier and add: [We also disclose your personal data to the respective (IT-) Service provider who is placed outside the European Economic Area (EEA) in [insert country] and therefore in a country without adequate level of data protection.

[If there is an adequacy decision of the European Commission please insert: There is an adequacy decision of the European Commission for [insert country].]

[If an adequacy decision is missing please insert: There is no adequacy decision of the European Commission but there are appropriate safeguards in place, which are in this case: [insert, e.g. EU Standard Contractual Clauses, Binding Corporate Rules]. [Insert the means by which to obtain a copy of the safeguards or where they have been made available: In order to obtain a copy please send an email to [please insert email address, e.g. email address of the Privacy Center].]]

[If an adequacy decision or appropriate safeguards are missing, please insert: There is no adequacy decision of the European Commission but the derogation after [insert derogation after Art. 49 GDPR e.g. Art. 49 (1) a) GDPR] applies.]]

Respective identification and contact details*, vehicle identification data*, respective product specifications*, odometer reading Vehicle valuation request fulfilment

[Insert supplier name, address, etc.; e.g. autobiz SAS, 4, place des Vosges, Immeuble LAVOISIER, 92400 COURBEVOIE, France] and your selected Partner.

Further recipients: See above mentioned IT service providers.

[For further supplier please follow the instructions as described above.]

Respective identification and contact details
(Name*, Phone no.)
Fulfilment tracking TrackBack,, 10ACT Limited, 8 Waldegrave Road, Teddington, Middlesex TW11 8HT, United Kingdom
[insert data / category] [insert purpose]

[Insert name, address, etc.] and your selected Partner

Further recipients: See above mentioned IT service providers.

B: Purposes related to the legitimate interests pursued by the controller or by a third party according to Art. 6 (1) 1 f) GDPR unless you have exercised your right to object (Art. 21 (1) GDPR):

Data / Data Categories: Respective identification and contact details*, product and service specifications*

Purpose(s): Market research and consumer surveys to receive feedback related to products and services (e.g. customer satisfaction surveys) only in case the customer can be contacted via the respective communication channel(s) for these purposes without customer’s prior consent

Recipient(s):  [In case of PCD insert related <Brand> NSC / in case of OV insert <Brand> NSC and [Choose a Division]] and PSA Automobiles SA, 2-10 Boulevard de l’Europe, 78 300 Poissy, France

The above listed recipients disclose your personal data to the respective engaged processors to support the administration of the named purposes. [For further supplier please follow the instructions as described above.]

Data/Data Categories Purpose(s) Recipient(s)
Respective identification and contact details*, product and service specifications* Market research and consumer surveys to receive feedback related to products and services (e.g. customer satisfaction surveys) only in case the customer can be contacted via the respective communication channel(s) for these purposes without customer’s prior consent

NSC / in case of OV insert NSC and ]and PSA Automobiles SA, 2-10 Boulevard de l’Europe, 78 300 Poissy, France

The above listed recipients disclose your personal data to the respective engaged processors to support the administration of the named purposes.

[For further supplier please follow the instructions as described above.]

3. Interaction with social networks

3.1. Customer care and assistance via Social Media

You may contact us also via our Social Media Channels. E.g., if you send us a message or post something on our Social Media Channels, we may use the information in your message or post to follow-up with you on the issue you contacted us for via the Social Media Channel which you used. In order to give you the assistance you requested, we may ask you to provide via direct or private message further information such as details on the issue, name, email, VIN, phone, location (city/state) and/or make, model and year of the vehicle. The information you provide will not be used for direct marketing; market research for service and product improvement will only be carried out on bases of aggregated (anonymized) data.

Please note that you should not include any sensitive data (such as information on racial or ethnic origin, political opinions, religious or philosophical convictions, or health) into you post or message. Be aware that if you post something on a public Social Media Channel, anyone might be able to read it.

3.2. Links to social networks / social media plug-ins

Our website/application includes links to social networks.

In order to protect your personal data while visiting our website/application we do not use social plugins. Instead HTML-links are embedded onto the website/application, enabling easy sharing onto social media platforms. Embedding the link prevents a direct connection with various social media network servers when opening a page from our website/application. When clicking on one of the buttons, a browser window opens and directs the user to the respective service provider website/application on which (after having logged in) for example, the “Like” or “Share” button can be used. 

For more information on the purpose and scope of data processing and further use of your personal data by the provider and their websites as well as your rights and possible settings to protect your privacy, please refer to the data protection information of the respective service provider.

 

Facebook:   http://www.facebook.com/policy.php

Twitter:        https://twitter.com/privacy

Instagram:   https://help.instagram.com/155833707900388

You Tube:    https://www.google.de/intl/de/policies/privacy/

LinkedIn:      https://www.linkedin.com/legal/privacy-policy

Spootnik:     [insert privacy link to spootnik’s privacy policy]

4. Your Rights

As data subject, you have the right of access, right to rectification, right to erasure (right to be forgotten), right to restriction of processing, right to data portability, right to object to processing of personal data concerning you which is based on Art. 6 (1) 1 e) or f) GDPR or where the personal data are processed for direct marketing purposes in accordance with the applicable law.

Please note that your above-mentioned rights are restricted by law and must be fulfilled by us possibly only under certain conditions.

If you want to claim your above-mentioned rights please [insert contact channels and details, e.g. contact us per email [insert email-address e.g. ] or send us a letter to: ].

Your personal data can be updated by us as the responsible controller[s] at any time (e.g. change your address) [in case the system offers this functionality please insert: or the update can be performed by yourself at any time, as far as our systems or applications offer this functionality].

To exercise your right to lodge a complaint (Art. 77 GDPR) please contact [insert name, address and website URL of local data protection supervisory authority].

5. Changes to the Privacy Policy

All future changes to our Privacy Policy will be posted on this website/application. You should therefore periodically review these for changes to our Privacy Policy.

6. Contacting us

[Insert identity and contact details of the controller[s] and, where applicable, the controller’s representative [either list the management members with full name or insert link to imprint on website/application], e.g. Opel Automobile GmbH, Bahnhofsplatz, 65423 Rüsselsheim am Main, Germany, phone: +49 (0)6142 - 911 9800, e-mail: kontakt@opel-infoservice.de, the names of the members of the management can be found here: http://www.opel.de/tools/impressum.html]

Contact details of the Data Protection Officerinsert contact details

[insert contact details [please insert at least one valid contact channel, e.g. post address or e-mail address] of the Data Protection Officer], e.g. Opel Automobile GmbH, Data Protection Officer, Bahnhofsplatz, 65423 Rüsselsheim am Main, Germany, e-mail: Datenschutz@opel.com]

See our Legal Notice for the full company details.