Privacy Statement

Cars24 considers the protection of personal data to be of utmost importance. Therefore, we process your data with the greatest care.

With this privacy statement, we inform you about how we handle personal data.

1. Who is responsible for processing your data? 
   In this privacy statement, Cars24 describes how it, as the data controller, handles your personal data.
2. What is personal data? 
   Information about an identified or identifiable natural person is personal data. Whether certain information should be classified as personal data also depends on whether Cars24 has lawful means that can reasonably be assumed to be used to identify a data subject. For example, we consider your license plate and chassis number to be personal data.
3. Personal data we process 
   We process personal data about you because you provide us with data when entering into an agreement with us, but also when you use our services and thus provide us with data, or enable us to record data about your interests and preferences.

Data you provide to us 
When you enter into an agreement with Cars24, depending on the type of agreement, we require the following personal data from you:

• name and address; 
• contact details (phone numbers, email addresses);
• financial data (bank account information, quotes, invoices); 
• registration Chamber of Commerce number.

Data about your use of our services and/or products 
When you use Cars24 services or otherwise contact us, we process, depending on your precise use, the following data that may be considered personal data:

• data related to your peripherals, such as a MAC address, IP address, or other number; 
• your communication preferences and settings; 
• data we associate with certain patterns, such as a status in the profile we create about you based on your consumption behavior (e.g., the frequency with which you make a purchase or use a service); browsing behavior, determined by our own observations or cookies (see also Article 9 of this privacy statement);
• payment history.

4. No processing of data from individuals under 16 years old We do not intend to collect data from website visitors under 16 years of age. We encourage parents to be involved in their children's online activities to prevent Cars24 from processing their personal data.

5. Processing: legal grounds and legitimate interests 
The processing of personal data takes place based on the following grounds from Article 6 of the General Data Protection Regulation:

• Consent. 
• Performance of an agreement with you. 
• Legal obligation. 
• Fulfillment of a task of public interest. 
• Legitimate interest of Cars24 or a third party.

Legitimate interests include marketing, advertising, security, (crime) prevention, IT management, research and analysis of our products or services, corporate administration, legal matters, internal management.

6. Purposes for processing personal data 
Cars24 processes your personal data for the purposes mentioned below. The number behind each purpose corresponds to the legal basis mentioned in Article 5 of this privacy statement.

• Building and maintaining the customer relationship, including maintaining a direct relationship between the responsible business units and affiliated financial service providers, among other things for commercial purposes [legal basis: 2, 5]. 
• Handling orders (including invoicing and payment follow-up), processing in financial administrations, and logistical handling [legal basis: 2, 5]. 
• Conducting market research to improve our business operations, brands, services, and products [legal basis: 5]. 
• Approaching you with offers or other commercial information. You always have the option to opt-out by objecting. All communications indicate how you can do this [legal basis: 1 or 5]. 
• Improving the content of our communication by aligning it with your personal preferences [legal basis: 5]. 
• (Further) developing and improving new and existing products and services [legal basis: 5]. 
• Measuring customer satisfaction, providing management information, and determining overall corporate strategy [legal basis: 1 or 5]. 
• Complying with legal obligations, resolving disputes, and enforcing our rights and agreements [legal basis: 3, 4, or 5]. 
• Improving data quality using address validation techniques [legal basis: 5]. 
• Linking and analyzing cookies from our websites to known customer data. We do this to align the content of our communication as closely as possible with your personal preferences [legal basis: 1 or 5].

7. Sharing with third parties 
Cars24 shares your personal data with third parties in certain cases and for the following reasons. The number behind each purpose corresponds to the legal basis mentioned in Article 5 of this privacy statement:

• with affiliated financial service providers to offer complementary financial services [legal basis: 2]; 
• if we are legally required or authorized to provide personal data to third parties [legal basis: 3]; 
• if we suspect a violation of third-party rights, criminal offenses, or abuse, we may provide personal data to third parties with a legitimate interest in the matter or to authorities serving the public interest, such as law enforcement agencies or regulators [legal basis: 3, 4, or 5]; 
• Cars24 may also share your data with other business units for the performance of an agreement with you or due to legitimate business interests, such as maintaining a central administration or customer service, and analyzing our services to you [legal basis: 5]. 
• With parties assisting Cars24 in its services and not being processors (e.g., accountants and legal advisors) [legal basis: 5]; 
• For business economic purposes (such as the sale of business activities or shares or a reorganization) [legal basis: 5]. 
• Cars24 also uses third-party services acting as 'processors' (e.g., hosting service providers, mobility service providers, and research firms) for the purpose of conducting market research or customer satisfaction surveys. These service providers will only process personal data in accordance with the instructions and under the control of Cars24
• If personal data is transferred to a recipient abroad, this usually only occurs to a recipient in a country that the European Commission considers to offer an adequate level of protection for personal data. If personal data is transferred to a recipient in a country that does not offer an adequate level of protection, Cars24 will ensure that the legally required safeguards are taken. If you would like to receive more information about the transfer of your personal data to countries outside the European Economic Area, you can contact us (see Article 12).

8. How long we retain data 
We retain personal data in accordance with our internal data retention policy and/or for as long as (i) you are a customer of Cars24 or continue to show interest in Cars24's services, (ii) we are legally required to retain data, or (iii) we have valid reasons to retain data as necessary.

9. Monitoring website visits 
When you visit or use our websites, services, applications, communication services (such as email), and tools, we may use cookies and other similar technologies to store information for the purpose of personalizing advertisements and providing you with a better, faster, and safer customer experience. If you do not wish to receive cookies, you can refuse them.

10. Your rights, including the right to object 
You have the right to know what personal data we have recorded about you and to whom we have provided your personal data. To do this, you can contact our customer service. Cars24 will make every effort to respond within the legal timeframe. Excessive requests may not be processed.

In addition to the right of access, you have the following rights regarding our processing of your personal data:

• the right to withdraw your consent, to the extent that our processing of your personal data is based on it; 
• the right to lodge a complaint with the Data Protection Authority; 
• the right to rectify/correct your personal data; the right to erase your personal data; 
• the right to restrict processing; 
• the right to data portability; 
• the absolute right to object to direct marketing; the right to object to processing based on the legitimate interests of Cars24 or a third party (depending on your personal circumstances).

You can exercise your rights only to the extent the law grants you these rights. To ensure that the request for access was made by you, we ask you to send a copy of your ID with this request. We also ask that you make your photo, MRZ (machine readable zone; the strip with numbers at the bottom of the passport), passport number, and citizen service number (BSN) unrecognizable on this copy.

11. Data security and protection 
Cars24 applies appropriate security measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration as much as possible. Cars24 has taken both technical and organizational measures to secure your personal data. These security measures are periodically reviewed based on threats.

12. Contact 
For questions and/or comments regarding this privacy statement, you can contact:

Cars24 
Attn: Jessie Overbeek 
Phone: 0527 63 66 00 
info@cars24.nl

13. Changes 
The way we process personal data, and the composition or amount of data we process, may change. Therefore, we reserve the right to amend this privacy statement. You will be notified of any change if necessary. This Privacy Statement always indicates the date of the last revision.

This statement was last revised on April 25, 2024