Data Privacy Policy.

Your privacy is important to us and to Societe Generale group to which ALD SA belongs. We have been placing this matter as a priority for long and we have implemented strong principles in that respect, especially in regards of the General Data Protection Regulation (the “GDPR”).

Indeed, The European Regulation (EU) 2016/679 on the protection of individuals regarding the processing of personal data and on the free movement of such data has been applicable since May 25, 2018 (hereinafter the "GDPR"). The RGPD raises awareness of all actors in the European Union and more, on a multitude of issues related to the management, use and retention of personal data. In this order, ALD SA Data Privacy Policy aims to explain how we, as a data controller, collect, store, use and disclose your personal information whenever you use our products and services, our websites or interact with ALD SA. This Policy is intended to explain our privacy practices.

1. General principles.

ALD SA understands your concerns regarding the confidentiality of your personal information. Below we describe how we acquire and use that information and outline your rights. Please read this carefully, so that the process is as fair, transparent and secure as possible.

The following principles are central to how we process your personal information:

2. About us.

ALD SA is organized and existing under the laws of France, whose registered offices are: 1-3 Rue Eugène et Armand PEUGEOT 92500 Rueil Malmaison, France, with registered number 417689395 (R.C.S Nanterre).

This Privacy Policy only relates to processing undertaken by or on behalf of ALD. Whilst our websites may contain links to other third party websites, we do not accept any responsibility or liability for those third parties' policies in relation to any personal data or their collection or processing of any personal data.

2. About us.

ALD SA is organized and existing under the laws of France, whose registered offices are: 1-3 Rue Eugène et Armand PEUGEOT 92500 Rueil Malmaison, France, with registered number 417689395 (R.C.S Nanterre).

This Privacy Policy only relates to processing undertaken by or on behalf of ALD. Whilst our websites may contain links to other third party websites, we do not accept any responsibility or liability for those third parties' policies in relation to any personal data or their collection or processing of any personal data.

5. Who ALD SA may share your personal data with.

ALD understand that you do not want us to provide your personal information directly to third parties for their own marketing purposes without your consent. However, ALD occasionally need to use partners or processors to provide you with the requested services and a better experience, for the purposes described above. We therefore limit our sharing of your personal information on a need-to-know basis as follows:

6. Export of personal data outside of the EEA.

In general, all of the ALD databases are located inside the European Union. However, ALD may transfer your personal data from the Europe to countries within or outside the European Economic Area. The countries outside of the EEA may not provide the same level of protection as is available in the EEA. If we transfer your personal data outside the EEA, we will ensure that adequate levels of protection are in place in relation to the processing of your personal data. Hence, ALD will before transferring your personal data outside Europe make sure to implement a Binding Corporate Rules (BCR) or a Standard Contractual Clauses (SCC).

However, certain countries outside the EEA have been approved by the European Commission as providing essentially equivalent protections to EEA data protection laws and therefore no additional safeguards are required to export personal data to these jurisdictions. These countries are listed online at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en.

7. Your rights.

In order to protect data subjects concerned by the processing of personel data, the GDPR has implemented rights. The rights in question are as follows:

Data subject right Right of acces.

Description of the right You can obtain information realting to the processing of your personal data, and a copy of such personal data.

GDPR Article Article 15

Data subject right Right to rectification.

Description of the right When you consider that your personal data are inaccurate or incomplete, you can require that such personal data be modified accordingly.

GDPR Article Article 16

Data subject right Right to erasure (right to be forgotten).

Description of the right You can require the deletion of your personal data, to the extent permitted by the law.

GDPR Article Article 17

Data subject right Right to restriction of processing.

Description of the right You can request a restriction on the use of your personal information.

GDPR Article Article 18

Data subject right Right to data portability.

Description of the right Where legally applicable, you have the right to have the personal data you have provided to us be returned to you in an intelligible format.

GDPR Article Article 20

Data subject right Right to object.

Description of the right You can object to the processing of your personal data, on grounds relating to your particular situation.

GDPR Article Article 21

Please note that at any time you have the right to lodge a complaint to the competent local supervisory authority, the CNIL in France.

If you wish to exercise the rights listed above, you will find the privacy policy of each ALD entities in their resopective corporate websites:

Country + URL

8. Security and data storage.

ALD SA protects your data through technical and organizational security measures (including education and training of relevant personnel) against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing.

Only those teams and employees who need to know your information within our company can access it. ALD SA make sure to implement administration rights and policies within our company, and we take all measures to ensure that employees, advisers and service providers keep your files confidential.

9. Cookies policy and websites.

ALD SA may collect data via cookies to improve the user's browsing experience. Cookies are used, among other tracers, to store preferences and settings in order to save time, enable login, combat fraud, analyze the performance of the website and the services provided by the renter, and compile visit statistics.

For more details you can consult our Cookie policy by following this link: Cookie policy (aldautomotive.com)

10. Updates of this Privacy Policy.

We may modify this Privacy Policy periodically to be compliant with any new regulations, so please review it regularly. If we change this Privacy Policy, we shall notify you by means of providing a notice on our website homepage. This Notice was last amended on 10 May 2022.

11. How to contact us.

To exercise the rights set out in the article 10 at any time, please send us a letter or an email to the following address ALD SA, 1-3 rue Eugène et Armand Peugeot, 92500 Rueil Malmaison, France or contact ALD Automotive’s Data Protection Officer through dpo.ald@aldautomotive.com, and we will handle your request.

11. How to contact us.

To exercise the rights set out in the article 10 at any time, please send us a letter or an email to the following address ALD SA, 1-3 rue Eugène et Armand Peugeot, 92500 Rueil Malmaison, France or contact ALD Automotive’s Data Protection Officer through dpo.ald@aldautomotive.com, and we will handle your request.

11. How to contact us.

To exercise the rights set out in the article 10 at any time, please send us a letter or an email to the following address ALD SA, 1-3 rue Eugène et Armand Peugeot, 92500 Rueil Malmaison, France or contact ALD Automotive’s Data Protection Officer through dpo.ald@aldautomotive.com, and we will handle your request.