We care about protecting your personal data.
This document provides information about how your data is processed by us, as well as your rights in accordance with the data protection legislation. It clarifies the type, scope and purpose of processing personal data as part of our website (hereafter referred to as the “website”). It applies independent of the domain and devices that are used (e.g. desktop, mobile etc.).
When we talk about data, we are referring to your personal data. This includes all information that can be used to identify you as a person, either directly or indirectly.
The type of data that is processed, and the manner in which it is processed, will mainly depend on the type of service that is used.
Therefore please read the following information carefully.
Information regarding your transfer of third-party data: If you transmit personal data about your spouse, life partner, relatives or other third parties (e.g. guarantors), you are responsible for complying with the applicable data protection provisions. This may require obtaining the consent of these persons for the transmission of this data.
Who we are
The entity responsible for data processing as described in this document is Vauxhall Finance plc, Heol-Y-Gamlas, Parc Nantgarw, Treforest, Cardiff, CF15 7QU (hereafter “Vauxhall Finance”). We are part of the Opel Bank S.A. group of companies.
Our data protection officer
Our data protection officer can be reached at: Data Protection Officer, Vauxhall Finance plc, Heol-Y-Gamlas, Parc Nantgarw, Treforest, Cardiff, CF15 7QU.
You can also contact the data protection officer by phone on 0344 871 2222, or by email at firstname.lastname@example.org
Where your data is obtained, and how it is used
If you are only using the website for information purposes, i.e. you do not register or otherwise transmit information to us, we will only gather the personal data that is forwarded to our server by your browser. Before you visit our website solely for information purposes, we will gather the following access data that we require for technical reasons to be able to display our website and warrant the stability and security of the same. This access data includes the IP address, date and time of the request, content of the request (e.g. name of the specifically accessed website), access status/HTTP status code, the referrer URL (previously visited page), browser type and version, operating system.
In addition, we will also receive your personal data if you contact us using CS Link or e-mail. Personal data in this context includes (for example) name, address, e-mail, telephone number, or any other personal information you choose to share with us. This data may be used to respond to the query you submit to us, or in the context of managing your account if you are a customer of Vauxhall Finance. For full details of how we process the data of our customers, please refer to our customer data protection notice.
For what purpose is your data processed?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) for the following purposes and pursuant to the following legal basis:
Where required, we process your data to protect our legitimate interests or those of third parties. A legitimate interest is where we have a business or commercial reason to process your data, without it being unfair to your rights or best interests. To this end, we pursue the following legitimate interests in particular:
- To test and optimise processes for the needs analysis and direct customer contact, and measures pertaining to customer loyalty and increased service quality;
- To warrant Vauxhall Finance’s IT security and IT operations, particularly the security of the website (see above under “Where your data is obtained, and how it is used”).
When you contact us (using CS Link or by e-mail), the information you provided will be processed for the purpose of processing and completing the contact request. Depending on the content of your communication, we may also have a legal, regulatory or contractual duty to process this information.
Who your data is shared with (recipient), and where the recipients are located
Within Vauxhall Finance, and in compliance with the applicable data protection laws, access to your data will be provided only to those employees that require this information to fulfil our contractual and statutory obligations. Processors engaged by us may also obtain data for this purpose. They are companies in the customer service, IT services, telecommunications, advisory and consulting and sales and marketing categories. This data will be processed within the European Union.
Outside of Vauxhall Finance, information about you will only be forwarded to third parties when a legal basis noted under “For what purpose is your data processed?” applies, or if you have consented to the data transfer, or if we are legally required to forward the data. If your inquiry (via CS Link or e-mail) relates to a contract for auto insurance, we will share your data with our cooperation partners for insurance products.
How long your data is stored
Where required, we will process and store your personal data if necessary in the context of your enquiry (via CS Link or e-mail). We may keep your personal data for as long as necessary to comply with our legal, regulatory or contractual obligations. The retention period may be up to ten years depending on the nature of your communication.
For security reasons (e.g. to address improper or fraudulent actions), logfile information is stored for a maximum period of 14 days and subsequently deleted (see above “Where your data is obtained, and how it is used”). Data that must be stored for evidence purposes is exempt from the deletion requirement until the respective incident has been conclusively clarified.
With regard to your data and the processing of your data, you are entitled to the following rights:
- Right of access - you have a right to request access to your personal data and to certain information about the processing of that personal data. This information must usually be provided to you free of charge within a month of receiving your request.
- Right of rectification (correction) - you have the right to ask for your personal data to be corrected if it is inaccurate, and completed if it is incomplete.
- Right to be forgotten - in certain circumstances you can ask us to erase your personal data. It’s unlikely to be possible to accept your request if, for example, we have a contractual or other legal duty to retain your information.
- Right to restriction of processing - in certain circumstances you have a right to restrict the processing of your personal data. This may include when you dispute its accuracy (until the accuracy is proved); if you have objected to the processing (when it was necessary for our legitimate interests) and we are considering whether our legitimate interests override your own; or if we no longer need the data but you need us to keep it in order to establish, exercise or defend a legal claim.
- Right of portability - in certain circumstances, you have the right to move, copy or transfer your data to another data controller or to yourself. This right is only relevant if the data is being processed on the basis of consent or for the performance of a contract, and the processing is carried out by automatic means. This right is different from the right of access, and the types of information you can get under the two separate rights may be different.
Right to object
In certain circumstances, you have the right to object to the processing of your data when we are doing so on the basis of our legitimate interests. We must stop processing the data unless we can show that our legitimate interests override your own, or if the processing is necessary for legal reasons.
In some cases, we process your personal data for direct marketing purposes. You have an absolute right to object to the processing of your data for direct marketing purposes (including profiling relevant to direct marketing). If you object to us processing your data for direct marketing purposes, you will need to notify us, and we must accept your request and stop the processing as soon as we receive your objection.
In order to assert any of the above rights, please feel free to contact us directly using the contact details specified above (see section "Our data protection officer” above).
In addition, you have the right to lodge a complaint in relation to our processing of your data with the supervisory authority, the Information Commissioner (ico.org.uk).
Do I have an obligation to provide data?
In the context of our website, you must provide the personal data that is required for the use of our website for technical or IT security reasons. If you do not provide this data, you will not be able to use our website.
In the context of contacting us by CS Link or by e-mail, you are only required to provide the personal data that is required to process your enquiry. Otherwise your enquiry cannot be processed.
Will my data be used for automated decision-making including profiling (scoring)?
As a rule, we do not use fully-automated decision-making or profiling in the context of accessing our website, or if you contact us by CS Link or e-mail. If such processes are used in isolated cases, you will be informed separately, if this is required by law.
Cookies are small pieces of data sent from a website and stored on the user’s computer or mobile device by the user’s web browser while the user is browsing. They are used to record interaction with a site. They provide anonymous data that is not harmful to your computer or mobile device.
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computer’s hard drive they should take necessary steps within their web browser’s security settings to block all cookies from this website and its external serving vendors.
Our website uses "session" cookies to identify and to remember the device height and width. These cookies are deleted from your computer when you close your browser.
Objection: Google Tracking, Google Inc. (https://www.google.com/settings/ads/onweb/?hl=de#display_optout)
An opt-out cookie will be set if you click on the above objection links. Please do not delete this cookie, as it informs us of your objection. If you use different browsers or PCs, please click on the links with each browser.