Privacy policy

How L’Agence Automobilière collects, uses and protects your personal data, and how to exercise your rights.

01

Our commitment

Nous accordons une importance particulière à la protection de vos données personnelles et nous nous engageons à respecter la réglementation applicable en matière de protection des données, notamment le Règlement Général sur la Protection des Données (RGPD — UE 2016/679) et la loi Informatique et Libertés.

La présente politique de confidentialité a pour objectif de vous informer de manière transparente sur la nature des données collectées, les finalités de leur traitement, leur durée de conservation, ainsi que vos droits en tant que personne concernée.

We never sell your personal data. It is shared only with the providers strictly necessary to deliver the service, under contract and on our instructions alone.

02

Data controller

Company name

L'Agence Automobilière

Legal form

Société anonyme à conseil d’administration au capital de 100 000 €

Registered office

Zone Actipolis 1 — 24 C route départementale 201 — 68390 Sausheim — France

Registration

RCS 452 451 552 — SIRET du siège 452 451 552 00072

Legal representative

Christophe Winkelmuller, président du conseil d’administration

Telephone

03 89 61 90 10

E-mail

siege@agenceauto.com

Data protection

informatique@agenceauto.com

03

Data we collect

We collect nothing merely because you browse the site. The data below is gathered as your enquiry progresses, in the order of the table: when you contact us, when you entrust us with a vehicle, when you sign the mandate, when a buyer comes to test the vehicle, and finally when the sale is completed. At each stage we ask only for what that stage requires — proof of identity, for instance, is requested only when the mandate is signed. Mandatory or optional data. Where certain data is essential to handle your request or to perform a service, the fields concerned are marked as mandatory in the forms. Without that data, we may be unable to answer your request, draw up a mandate or perform the service concerned.

At which pointData collected
First contact
SurnameFirst namePostal addressE-mail addressTelephone
Vehicle entrusted to us
RegistrationRegistration certificateMileageService history
Signature of the mandate
Vehicle descriptionProof of identityDate of birth
Test drive by a buyer
Visit record — identity and contact details of the person testing the vehicle
Sale
Order formInvoiceMeans of payment
Financing and insurance
Details passed to the partner you choosewith your agreement
Browsing the site
IP addressPages viewedDeviceAudience measurement
04

Why do we use it?

Answering your enquiries

Handling contact forms, appointment requests, valuations and questions sent to an agency.

Delivering our services

Setting up and following a sale mandate or a purchase: building the file, drafting the documents, following the transaction.

Meeting our obligations

Invoicing, accounting, registration formalities and keeping the records required by law.

Measuring and improving the site

Measuring audience, understanding journeys and fixing what does not work, on the basis of statistics.

Telling you about our offers

Newsletter and commercial offers, only if you have consented, and until you object.

05

On what legal basis

ProcessingPurposeLegal basis
Contact form and appointment requestAnswering your enquiryPre-contractual measures at your request
Sale mandate, purchase of a vehiclePerformance of the servicePerformance of the contract
Invoicing and accountingKeeping books and supporting documentsLegal obligation
Registration formalitiesIssuing the registration certificateLegal obligation
Financing or insurance filePassing it to the partner you chooseConsent
Commercial newsletterTelling you about our offersConsent, withdrawable at any time
Audience measurement and non-essential cookiesVisit statisticsConsent
Site security and loggingPreventing fraud and abuseLegitimate interest
06

How long do we keep it?

Enquiry left without follow-up
3 yearsretention
Customer file (mandate, sale, purchase)
5 years after the end of the relationshipretention
Accounting records and invoices
10 yearsretention
Proof of identity collected for a transaction
For the duration of the transaction, then deleted
Consent to the newsletter
3 years after the last contactretention
Cookies and trackers
13 months at mostretention
07

Who has access to your data?

Data is disclosed only to the recipients necessary to fulfil the purposes described in this policy. Where recipients act as processors, they process the data on our instructions and under a contract compliant with article 28 GDPR. Where partners act as independent controllers, their own privacy policies apply to the processing they carry out.

Our agencies

The agency handling your vehicle or your enquiry accesses the data needed to deal with it.

OVH SAS

Hosting of the site and databases, on infrastructure located in the European Union.

R.G.A.I.X Tech

Design, maintenance and technical operation of the platform. Technical access strictly limited to operation and diagnosis.

L'Agence WAM

Search optimisation and audience measurement: accesses only aggregated browsing data, never your files.

Financing and insurance partners

Only the partner you choose, and only with your explicit agreement to study your file.

Authorities and judicial officers

Where the law requires it: vehicle registration, tax obligations, judicial requests.

08

How do we protect it?

Encrypted exchanges

The entire site is served over HTTPS; data travels encrypted.

Restricted access

Access is personal and limited to those who need it for their duties, with authentication.

Backups

Databases are backed up regularly and restores are tested, so that data remains available.

Hosting in the European Union

Servers and backups are located in the European Union, at OVH in France. Your data is hosted nowhere else.

Technical access from a third country

Maintaining and monitoring the platform may require remote access from a country outside the European Union. Such access is personal, logged, limited to what technical operation requires, and covered by the European Commission’s standard contractual clauses together with additional security measures — encrypted connections, strong authentication. You may obtain a copy at informatique@agenceauto.com.

09

Cookies and trackers

Session and security cookies

Always on

Site operation, session continuity and fraud protection — from the session to 12 months. Set without consent: they are strictly necessary.

Recording your choice

Remembers your decision on trackers, so we do not ask again — 6 months.

Audience measurement

Visit statistics and browsing journeys, subject to your consent — 13 months.

Personalisation and marketing

Adapting content and measuring campaign effectiveness, subject to your consent — 13 months.

10

Your rights

Access

Obtain confirmation that data concerning you is processed, and receive a copy of it.

Rectification

Have inaccurate data corrected or incomplete data completed.

Erasure

Ask for your data to be deleted, subject to our legal retention obligations.

Restriction

Ask for processing to be frozen while a challenge is examined.

Objection

Object to processing based on legitimate interest, and at any time to commercial prospecting.

Portability

Receive the data you provided in a machine-readable format, or ask for it to be transferred.

Withdrawal of consent

Withdraw a consent at any time, without affecting what was done before.

Complaint

Refer the matter to the CNIL if you consider your rights disregarded — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or https://www.cnil.fr/fr/webform/nous-contacter

11

Contact us

A question or a request?

Any request concerning your data is answered within one month, extendable by two months for complex requests — you will be informed if so. If our answer does not satisfy you, you may refer the matter to the CNIL, by post (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or through its online form: https://www.cnil.fr/fr/webform/nous-contacter

E-mail

informatique@agenceauto.com

Telephone

03 89 61 90 10

Address

Zone Actipolis 1 — 24 C route départementale 201 — 68390 Sausheim

GDPR • Data protection

Exercise my rights over my personal data

You may request access to, rectification, erasure, restriction or portability of your data, object to a processing operation, or withdraw a consent already given.

Indicate the right you wish to exercise: your request is passed to the data protection contact, who will reply within one month.

Proof of identity is requested only where there is reasonable doubt as to who you are — for instance where the request does not come from the address we hold. You may attach one to speed things up; it is not mandatory.

Your request is sent over an encrypted connection. Attachments are deleted once the request has been handled.

Can't find what you're looking for?

Contact us and we'll help you find the perfect vehicle for you.