Privacy policy

1. PROCESSING OF PERSONAL DATA

1.1 THE DATA CONTROLLER

Nellemann Luxury Cars A/S is the data controller in connection with the collection and processing of your personal data.

You can contact us here:

Nellemann Luxury Cars A/S
CVR no.: 13644705
Bryggervangen 39
2100 Copenhagen Ø
Tlf.: 39272211
E-mail: persondata@nellemann.dk

1.2 PURPOSE AND LEGAL BASIS OF THE PROCESSING

We may process your personal data for a number of different purposes, depending on the context in which you are in contact with us.

We process your data for the following main purposes:

• Signing and managing one or more bills of sale and workshop visits
• Customer relationship management, including correspondence with you
• When test driving
• Drawing up a service agreement
• Drafting a rental contract for loaner/rental cars
• Marketing of our services (in some cases this requires that you have given us consent)
• Compliance with our legal obligations as data controller
• Looking after our interests as the supplier of the vehicle
• Administrative purposes
• Statistics and business development

We only register and process your personal data if we have a legal basis for doing so.

Our legal basis for processing the data for the purposes mentioned above is:

1.3 CATEGORIES OF PERSONAL DATA

We usually process the following types of personal data:

• Name, address, email address, phone number
• CPR/CVR number
• Driving license
• Information from CPR, DMR and other publicly available sources
• Vehicle information (car model and master data as well as registration number, chassis number and CO2 emission data)
• Car insurance information
• Information about opening, reading, etc. of electronic marketing.

We do not generally collect sensitive data about you, but we may – depending on the course of the contractual relationship – receive and process sensitive data, including data concerning health or criminal offenses. If this is the case, we process data on the basis of Article 9(2)(e) and (f) of the General Data Protection Regulation and Section 8(3) of the Danish Data Protection Act.

1.4 HOW DO WE COLLECT YOUR PERSONAL DATA?

We mainly collect the data from you as the data subject.

In addition, we also collect information about you from other sources. This includes, for example, a business partner that we deliver the car on behalf of.

1.5 DISCLOSURE OF YOUR PERSONAL DATA

We only disclose data to the extent that we are entitled or obliged to do so. Your data may be disclosed to our business partners to the extent necessary in connection with the conclusion, fulfillment and administration of an agreement.

This includes Aston Martin Lagonda Ltd who is the supplier of the vehicle: Privacy Policy | Aston Martin Lagonda | Aston Martin Lagonda. In addition, we may disclose information on the vehicle to finance or leasing companies at your request if you wish the vehicle to be financed or leased through a party selected by you. Disclosure of the information will only be made on the basis of your request.

We may also disclose data to third parties, including public authorities such as the tax authorities or the police, if we are legally obliged to do so, or if this is necessary to fulfill the agreement, for example in connection with the registration of the car, or for us or a third party to pursue a legitimate interest, unless your interests or fundamental rights and freedoms, as registered, override this.

In the event of a breach of or dispute regarding the contract, the information may also be disclosed to our advisors or business partners who are to safeguard our interests in the case, including in connection with the initiation of reminder and collection procedures on our behalf.

We use service providers and partners who perform work on our behalf (“data processors”). This may be, for example, hosting of servers, system maintenance, etc. These partners may have access to data to the extent necessary for them to provide their services and services. The partners will be obliged to treat all data strictly confidentially and are therefore not permitted to use data for anything other than what is covered by their contractual obligation to us.

1.5.1 Transferring data to importers and manufacturers

When your vehicle is manufactured, it will be given a unique VIN number. From this VIN, various information about your vehicle can be derived.

In connection with the sale of the car, your name, contact details and information about the car’s frame number, model, registration date and registration number will be passed on to the importer for administration of the car’s warranty.

During workshop visits, including repairs, servicing, inspections, etc. the technician needs to collect the VIN so that the technician(s) working on your vehicle can gain insight into vehicle-specific repair, maintenance, diagnostic information, etc.

To ensure a complete diagnostic record of your vehicle, the work performed on your vehicle when it is being serviced or repaired is recorded under the vehicle’s VIN. This information is transferred to the system and stored so that information about previous repairs or servicing can be made available to dealers and workshops around the world when repairing or servicing your vehicle.

The information stored in the system is used for the purposes of diagnosis or repair of your vehicle, administration of warranties and similar products and services, for purposes related to product safety, research and development and to comply with our legal obligations.

We are obliged to pass on information about your vehicle, including the car’s VIN and CO2 emission data to the European Commission and the European Environment Agency. This is done to fulfill our legal obligation under Article 9(2) of the Regulation. Your vehicle emission data will be collected via your vehicle’s modem (if the vehicle is connected) and/or every time your vehicle is in the workshop throughout the vehicle’s lifetime. Your vehicle emission data will be transmitted directly to the manufacturer or via the importer, depending on the vehicle you have.

1.6 TRANSFER TO THIRD COUNTRIES

If we disclose your data to a service provider/data processor outside the EU, we ensure that this will only be done in compliance with the applicable legislation.

1.7 WHETHER COLLECTION IS VOLUNTARY OR MANDATORY

When the collection and processing of personal data is carried out for the purpose of fulfilling and administering a contract, the collection of the listed personal data is mandatory. Thus, the consequence of not providing the information is that it is not possible to conclude or fulfill the contract.

When we collect and process your data for marketing purposes, providing the data is voluntary. The consequence of not providing the information is that you cannot receive information about offers, benefits, partners, etc.

1.8 RETENTION PERIOD FOR YOUR PERSONAL DATA

We only process and store your personal data for the period of time necessary for the above purposes.

When a business relationship has ended, we store the information for a period of time determined in accordance with the applicable legislation on limitation of civil claims, the Bookkeeping Act, etc. See section 1.2 for further details.

1.9 REVOCATION OF CONSENT

If the processing of your personal data is based on your consent, you can withdraw this consent at any time. You can do this by contacting us at the contact details provided above.

As a general rule, your withdrawal of consent means that we will cease to process your personal data. However, this is not the case if we are entitled to continue processing your data on another basis.

If you choose to withdraw your consent, it will not affect the lawfulness of our processing of your personal data based on your previously given consent and up to the time of withdrawal.

1.10 YOUR RIGHTS

You have a number of rights under the General Data Protection Regulation in relation to our processing of data about you.

If you want to exercise your rights, please contact us using the contact details provided above.

You have the right, upon request, to know what data we process about you (right of access).

If the data we process about you is incorrect, you have the right to have it corrected (right to rectification).

In special cases, you have the right to have data about you deleted before the time of our general deletion occurs.

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the data – except for storage – with your consent, or for the establishment, exercise or defense of legal claims, or to protect a person or important public interests.

In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You also have the right to object to the processing of your data for direct marketing purposes.

In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one controller to another without hindrance (data portability).

You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, available on the Danish Data Protection Agency website.

2. COMPLAINT

You can contact us at any time if you believe that we are processing your personal data in violation of applicable law.

However, you also have the right to complain to:

Data Protection Authority

Borgergade 28, 5.

1300 Copenhagen K, Denmark

Tel. 33 19 32 00

Email: dt@datatilsynet.dk

3. CHANGE OF THE PRIVACY POLICY

Aston Martin Copenhagen reserves the right to change and update this privacy policy.

Updated 20/10/2022