Terms of use
In accordance with the provisions of article 6 III-1 of law no. 2004-575 of June 21, 2004 for confidence in the digital economy, CARDATA informs the User of the following:
1.1 Website publisher
The Website is published by CARDATA, a public limited company with capital of 744,259 Euros, whose registered office is located at 2, rue de Marly le roi, Le chesnay (78150). Cardata is registered with the Versailles Trade and Companies Registry under no. 500 942 990.
Phone number: 01 73 95 00 34
Email : bonjour@dataventure.com
1.2 Publishing director
The publication director of the Website is Mr Jérémy Lellouche.
1.3 Website host
This website is hosted by OVHcloud
SAS with capital of €10,174,560
RCS Lille Métropole 424 761 419
APE code 2620Z
VAT NO.: FR 22 424 761 419
Head office: 2 rue Kellermann - 59100 Roubaix - France
Data protection charter
Welcome to our Data Protection Charter! The purpose of this document is to inform you about the processing of your personal data on our website https://www.cardata.fr/ (the "Site").
Through our Charter, we want you to understand the nature of the personal information we collect, how we use it, with whom we share it, how we strive to protect it, how you can exercise your rights and how to contact us.
The purpose of this document is also to provide you with all the information required by Article 13 of Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ("GDPR").
Lastly, we draw your attention to the fact that we may be required to make changes to this document, in particular to bring it into line with any new regulations or to adapt it to our practices.
Article 1 - Data controller(s)
The Site is published by CARDATA, a public limited company with a Board of Directors and share capital of 744,259 euros, headquartered at 2, rue de Marly le roi, Le Chesnay - 78150 - France, registered in the Versailles Trade and Companies Register under no. 500 942 990 ("CARDATA").CARDATA", "we", "on").
The partner advertisers mentioned, where applicable, in the forms or on the Site, may also act as data processors if (i) you expressly accept that they receive your data so that they can send you their newsletters and/or commercial offers or (ii) if they receive your data following a request concerning them when you send a form (e.g.: credit application - sending of a credit proposal by our partners).
Article 2 - Personal data collected
Personal data" refers to any information relating to an identified or identifiable individual.
In accordance with the principle of minimization, we ensure that we only collect personal data that is strictly necessary for the purposes for which it is processed.
During your browsing on the Site and depending depending on your actionswe may collect personal data about you.
Action 1: When you browse the Site
The personal data collected is as follows: your browsing data such as your IP address and other technical information made available by your terminal or browser. This data may be collected as soon as you arrive on the Site or after obtaining your consent.
Statistical data may be collected during your visit to the Site (e.g.: number of pages consulted, number of visits to the Site, etc.).
For more information on the data collected through the use of cookies, please refer to the "Cookies" section of this Charter.
Action 2: When you use a personal data collection form on the Site
The Site provides you with various forms that you can use to book a test drive, obtain a discount on a vehicle, obtain credit offers, trade-in offers, etc., in a non-exhaustive manner.
To access the services offered by these forms, you will need to provide us with personal information and data. This information and data will be communicated directly by you and depends on the purpose of the form concerned.
They may be: identification data (last name, first name, title, date of birth, etc.), contact data (e-mail address, telephone number, postal address, etc.), personal data (family situation, dependent children, etc.), data on your project in relation to the form concerned (e.g. data on a vehicle you are interested in, etc.), data on your financial situation, if applicable (expenses, income, etc.).
The fields to be completed on the forms are compulsory for your request to be taken into account.
When you validate a form, you are likely to be called back by our teams and/or partners depending on the request you send us.
Action 3: When you agree to receive our commercial offers, those of the Dataventure Group or those of our advertising partners.
Some of our forms allow you to consent to, or refuse, the receipt of prospecting, offers and other commercial information from our partner advertisers, the Dataventure Group or ourselves.
In this context, the data collected will be that provided in the relevant form that you have completed.
Action 4: When you want to contact us
The Site allows you to use a contact form intended for our teams. By using our contact form, you will be asked to provide us with some of your personal data, such as identification data (surname, first name, title, etc.), contact data (email address) or data related to your contact request. This data is provided directly by you.
Action 5: When you wish to post a review on the Site
If the Site allows you to post a review, for example of a vehicle, you can publish your review online by filling in and validating a dedicated form.
In this context, you are likely to provide us with information and personal data concerning you, for example, identification data (title, surname, first name, zip code, etc.), contact data (email, etc.), data related to your review (subject of the review, content of the review, etc.). This data is provided directly by you.
Article 3 - Purposes and legal basis of processing
The purposes and legal bases for the processing of personal data carried out on the Site are as follows:
| Actions | Goals | Legal basis |
| Action 1: When you browse the Site |
|
Your consent or our legitimate interests, where applicable. |
| Action 2: When you use a personal data collection form on the Site |
|
Our legitimate interest in facilitating your access to certain services covered by our forms and in putting you in touch with our advertising partners.
Execution of pre-contractual measures with our advertising partners. |
| Action 3: When you agree to receive our commercial offers, those of the Dataventure Group or those of our advertising partners |
|
Your consent. |
| Action 4: When you want to contact us |
|
Our legitimate interest in providing you with an effective means of contact. |
| Action 5: When you wish to post a review on the Site |
|
Our legitimate interest in offering you the opportunity to publish notices related to the Site's activities that may be of interest to other Internet users. |
*Advertising by CARDATA, Dataventure Group and the sponsors of operations published on the Site may be carried out via the following channels: e-mail, post, telephone calls, SMS and/or MMS messages, or any similar means of communication.
Finally, your data may also be processed for the following purposes and legal bases:
| Goals | Legal basis |
|
Our legitimate interest in ensuring the proper operation and security of the Site |
|
Our legal obligations |
|
Article 4 - Categories of recipients of your personal data
CARDATA internal recipients - Your data is only accessed by teams whose functions require such access. Access rights are managed internally in accordance with the principle of least privilege.
Subcontractors - Your data may be transmitted or accessed, where applicable, to subcontractors when this is necessary for them to carry out their tasks. The categories of CARDATA subcontractors are as follows:
- Service provider(s) in charge of routing emailing or SMS campaigns.
- Provider(s) in charge of telemarketing operations, if any (e.g. call centers).
- Provider(s) hosting the Site or CARDATA's databases.
- Service provider(s) in charge of the Site's evolutionary and/or corrective maintenance.
- Outsourcing provider, if applicable.
External recipients - Depending on your actions on the Site, the forms you send or your consent to receive offers and other promotional content, your data may be transmitted to our advertising partners and/or our subsidiaries and/or our sister companies for the above-mentioned purposes.
Our subsidiaries and sister companies are members of the DATAVENTURE Group of which we are a part (the "Dataventure Group").Dataventure Group"The parent company is DATAVENTURE GROUP, a simplified joint stock company with capital of 3,746,032.20 euros, registered with the Nanterre Trade and Companies Register under number 913 824 462, headquartered at 134 rue Aristide Briand 92300 LEVALLOIS-PERRET.
Advertising partners are companies that are partners of CARDATA on the services offered by our Site (e.g. car dealer, car distributor, bank, retailer, etc.).
Advertising partners and members of the Dataventure Group are solely responsible for the processing of your data, in compliance with the above-mentioned purposes and applicable data protection regulations.
Advertising partners have their own data protection policies, which describe their data protection commitments. We recommend that you consult these policies.
Judicial, public or governmental authorities - Where applicable, we may be required to disclose some of your personal data, namely when necessary for :
- Comply with the law (or a subpoena or court order).
- Comply with legitimate requests from public and government authorities.
- Prevent a crime or carry out an investigation, for example in the case of fraud or identity theft.
- Protect the rights, property or safety of our company, Internet users or any third party.
Transferring data outside the European Union - If your data is transferred outside the European Union, we ensure that our service providers comply with their data protection obligations, in accordance with GDPR. In this context, the transfer may be governed by an adequacy decision published by the European Commission, certifying that the country of destination of your data provides a high level of protection (e.g. the United Kingdom).
If the country of destination does not have an adequacy decision, we ensure that data transfers are governed by the standard contractual clauses drawn up and published by the European Commission. These clauses set out the obligations and commitments of data recipients and ensure a high level of data protection.
Article 5 - Appointment of a Data Protection Officer ("DPO")
CARDATA has appointed a Data Protection Officer (DPO), whose contact details are given below:
Contact by post
Me Grégory MARGOLINE
6, Rue Halevy
75009 Paris
FRANCE
Contact by e-mail: gmargoline@forperspectives.com
Article 6 - Rights of data subjects
Rights relating to the protection of your personal data - You have the right to access, rectify, delete and port your personal data. You may also request that we restrict the processing of data concerning you, or object to such processing. You have the right to give us instructions concerning the fate of your personal data in the event of your death.
Once you have given your consent to the processing of your personal data, you may withdraw this consent at any time and free of charge.
You can exercise your rights by contacting us using one of the following methods:
Contact by post
CARDATA
Legal Department - DPO
2, rue de Marly Le Roi, 78150 Le Chesnay
France
Contact by e-mail: dpo@dataventure.com
To protect your privacy and ensure the security of your data, we may take reasonable steps to verify your identity before acting on your request to exercise your rights.
As soon as CARDATA becomes aware of a User's death, and in the absence of any instructions from the User, CARDATA undertakes to destroy the User's data unless it is necessary to keep it for evidential purposes and/or to comply with a legal obligation.
Rights relating to telephone prospecting - You may authorize the advertising partners listed on the Site, or our teams, to call you by telephone to respond to your request sent through one of our forms. To this end, you are informed of the existence of the "Bloctel" telephone anti-solicitation list, on which you can register here: https://conso.bloctel.fr/.
Rights regarding receipt of e-mail communications - You may, at any time, object to receiving electronic communications from us and/or our advertising partners:
- By clicking on the unsubscribe link at the bottom of each communication received.
- By contacting us using one of the above methods.
Rights relating to the receipt of SMS communications - You may, at any time, refuse to receive SMS messages from us and/or our advertising partners:
- By clicking on the "STOP" link in every SMS sent, or by sending "STOP" to the number indicated in the SMS.
- By contacting us using one of the above methods.
In any case, if your rights are not respected, you can lodge a complaint with the CNIL.
Article 7 - Data security and confidentiality
We implement organizational and technical measures to guarantee the security, confidentiality, integrity and availability of your personal data. In this respect, the precautions and measures implemented are designed to protect your data from loss, theft, unauthorized access or transmission, and any unlawful or unwanted modification or destruction.
The measures and precautions implemented are adapted to the nature of the data we collect and the processing we undertake.
The data collected is stored confidentially and protected at a very high level of security. The servers on which data is stored comply with current security standards. They are protected against both digital and physical attacks.
All pages on the Site that collect personal data are HTTPS and therefore secure.
Article 8 - Data retention periods
We take steps to ensure that your personal data is kept to a limited extent, in line with the nature and purposes of the processing we carry out, and in compliance with current regulations.
In general, and depending on your situation, the following retention periods may apply:
| You... | Data categories | Shelf life |
| Navigate the Site |
|
See the "Cookies" section of this Charter.
Data collected through the use of cookies is kept for no longer than 25 months. |
| Fill in a personal data collection form on the Site |
|
Duration necessary for the processing and follow-up of your request by our teams and/or our advertising partners. |
| Have agreed to receive our commercial offers and/or those of our advertising partners |
|
3 years from the date of your consent OR the last contact from you (e.g. click within an email) and unless your consent is withdrawn. |
| Contact us |
|
Time required to process and follow up your request. |
| Write a review on the Site |
|
Duration of publication of the notice on the Site (unless the author requests its deletion). |
Certain personal data or documents may be kept for additional periods to manage claims and/or disputes, to meet our legal or regulatory obligations, or to respond to requests from authorized authorities.
In this context, personal data will be stored in an intermediate archive and will benefit from restricted access for the above-mentioned purposes only.
Article 9 - Links to third-party sites and services
The Site may contain links redirecting you to third-party sites or services (e.g. social networks, partner sites, etc.).
This Privacy Policy only applies to processing carried out on the Site. CARDATA has no control over the way in which third-party sites or services may use your personal data.
In this respect, CARDATA is not responsible for the privacy practices of third parties. We therefore invite you to consult the data protection policies of third-party sites or services to learn about their commitments regarding the use of your data.
Article 10 - Cookies
What is a cookie?
A cookie is a small text file saved in a dedicated space on your terminal's hard disk when you consult an online service using your browser. It enables its publisher to identify the terminal in which it is stored, for the duration of the cookie's validity or storage.
How can cookies be used on the Site?
The cookies used on the Site are used for the purposes defined within our consent management solution (or "CMP"). To consult these purposes, go to the "Cookies" module at the bottom of the Site page.
The Site also uses "functional" cookies, necessary for its proper operation. These cookies are deposited automatically as soon as you enter the site.
For all other types of cookies not exempt from consent, they may only be deposited after we have obtained your consent for their use via our CMP.
How to use our CMP?
On your first visit to the Site, our CMP appears to inform you about the various cookies used, their purpose and their publishers.
CMP gives you the opportunity to :
- Accept all cookies - "Accept & Close".
- Choose which cookies can be used, purpose by purpose or partner by partner - "To find out more".
- To refuse the use of all cookies, with the exception of those necessary for the proper functioning of the site - " ".Refuse".
Once your initial choice has been made, it will be retained and applied for 6 months on our Site. You will be able to modify your choice and/or withdraw your consent at any time from the "Cookie management"at the bottom of the page.