1. Introduction
As part of its operations, GROUPE AUTO PRESTIGE, operating under the legal responsibility of HD Services (hereinafter “the Company”), may collect and process information about you. Some of this information may directly or indirectly identify you and is therefore classified as “personal data.”
This privacy policy aims to inform you about how we collect, process, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR). We encourage you to read it carefully.
2. Identity and Contact Details of the Data Controller
The data controller for your personal data is the company GROUPE AUTO PRESTIGE, a limited liability company (SARL), registered under SIREN number 900 220 922, with its registered office located at 8 AVENUE HENRI BARBUSSE, 93000 BOBIGNY, France.
- Legal representative: Jean ADOU LEGRE
- Intracommunity VAT number: FR30900220922
- Contact email: [Insert general contact email, e.g., contact@groupe-autoprestige.com]
- Telephone: [Insert contact telephone number]
The Data Protection Officer (DPO) is your point of contact for any questions regarding your personal data. You can reach them at: dpo@groupe-autoprestige.com.
3. Purposes and Legal Bases for Processing
We process your personal data exclusively for specific purposes and on clear legal bases, as required by the GDPR.
A. Data Collected via the Contact Form
- Purpose: To respond to your inquiries or contact requests.
- Data collected: Title, last name, first name, email address, and telephone number.
- Legal basis: Your consent (Article 6(1)(a) of the GDPR). You may withdraw this consent at any time.
B. Data Collected via Cookies
- Purpose: To measure website traffic and usage to improve user experience and performance.
- Data collected: IP address, operating system, browser type, date and time of visit, pages viewed. These data are anonymized as much as possible.
- Legal basis: Our legitimate interest (Article 6(1)(f) of the GDPR) in analyzing website traffic. Your consent will also be requested via a cookie banner for non-essential cookies.
We are committed to never using your data for commercial purposes against your will.
4. Categories of Data Recipients
Your personal data is shared only in the following cases:
- Internally: Within our company, only authorized personnel (sales department, customer service, etc.) have access to your data, solely for the purposes mentioned above.
- External providers: Data collected via cookies is transmitted to Google Analytics for traffic analysis. Google is committed to complying with privacy standards as a data processor.
5. Data Transfers Outside the EU
Data collected directly via our forms is stored in France on OVH servers.
Anonymized data collected via Google Analytics may be transferred and stored on Google servers, including outside the European Union. In such cases, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to guarantee a level of protection equivalent to that of the EU, in accordance with the GDPR.
6. Data Retention Period
We retain your data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact data: Retained for a maximum period of three (3) years from our last contact.
- Navigation data (cookies): Retained for a limited period, typically 24 months.
7. Your Rights Under the GDPR
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of access: To know what data we hold about you.
- Right to rectification: To request correction of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”): To request the complete and permanent deletion of your data from our systems.
- Right to restriction of processing: To request temporary suspension of the use of your data.
- Right to data portability: To receive your data in a structured format and transmit it to another data controller.
- Right to object: To object to the processing of your data for reasons related to your particular situation.
- Right to withdraw consent: To withdraw your consent at any time.
To exercise any of these rights, please address your request to the Data Protection Officer (DPO) at dpo@groupe-autoprestige.com. We will require proof of your identity for security reasons.
8. Data Security
We have implemented technical and organizational security measures to protect your data:
- All exchanges with our website are encrypted using an SSL certificate.
- Access to data is restricted to authorized personnel via secure login and encrypted passwords.
9. Right to Lodge a Complaint
If you believe that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) in France.