Carnext External Privacy Policy

Last revised: 30th of March 2021

Introduction is committed to protecting the personal information collected and processed by us. When you visit the website, order our products or request our services, this Privacy Policy applies. Please find below the topics in this privacy statement:

  • Who we are

  • Use of personal data o Website visits

  • Requests for information

  • Booking appointments

  • Buying a car

  • Car lease

  • Newsletter subscription

  • Improving our products and services, fraud prevention and risk mitigation

  • Legal grounds

  • Provision of personal data

  • Use of personal data by third parties

  • Transfer of data outside the EEA

  • Storage period

  • Your rights

  • Contact

  • Changes of this policy

Who we are

The joint controllers of your personal data are B.V. located at John M Keynesplein 10A, 1066 EP Amsterdam, the Netherlands and Deutschland GmbH, located at Lippestrasse 4, 40221 Düsseldorf, Deutschland (referred to below as we us our or

Use of personal data

Below, we give you a description of the personal data we use, for what purposes and on which legal grounds.

Website visits

When you visit the CarNext website, we use information on your browsing and interactions with us as necessary to comply with your requested service. We also collect and analyze this information for fraud prevention and to measure the quality and effectiveness of our website, products and services. With your permission, we may further use this information to better serve you when you contact us or to show you advertisements based on your personal preferences on the CarNext website or, through one of our advertising partners, on third party websites that you may visit. With your permission, we will also use this information to send you newsletters based on your preferences. For these purposes, the CarNext website makes use of cookies and similar technologies. Please see our cookie policy for further information.

Requests for information

When you request certain information through the site, we use your name, phone number and e-mail address and information on the contents of your request to communicate with you, answer your questions and/or comply with your request.

Booking appointments

When you request to book an appointment in one of our CarNext stores, we use your name, phone number, e-mail address and preferred appointment date, to communicate with you and to make the appointment.

Buying a car

If you are purchasing a car through or from us (on-line or in one of our stores), we register your name, company name, salutation, address, e-mail address, phone number, birth date, NIF, information on car purchase, any ancillary services purchased, payment information, information necessary to provide ancillary services and car trade-in information if applicable. This information is necessary to enter into a purchase agreement with you, to transfer and deliver the vehicle to you, to provide the requested ancillary service, to invoice and to handle payment, to communicate with you and to provide customer service. We will also process and store in addition to the above information, the identification number and your signature in the registration form to transfer and register the vehicle in your name.

As and its suppliers are legally obliged to follow the requirements on the prevention of money laundering, sanctions and financing of terrorism, it is a condition to our contract of sale that we perform a counterparty due diligence screening. To perform this screening, your name, address and date of birth is provided to Lexis Nexis who will provide us with the result of the screening procedure performed for our evaluation.

If you purchase cars in the professional market you can purchase a car via the auction via the platform. To be able to purchase a car via the platform you need to be registered as a professional trader. Therefore you will need to enter into an agreement with which determines the terms and conditions under which you may use the platform and purchase cars from sellers. will not always act as the seller itself, this can also be third parties like LeasePlan.

Condition to entering into the agreement with is performing, and continuously performing, counterparty due diligence screening in order to prevent money laundering, sanctions and terrorist financing. For this purpose and in relation to your trader agreement, the (potential) purchase agreement and other related Services like the delivery of the car and the settlement of the payment transaction, we collect your name, address, date of birth, email address, telephone number, ID, information related to your company including Chamber of Commerce document, VAT certificate and related UBO and Directors details of your company. The aforementioned personal data are provided to Lexis Nexis and/or Credit Safe and Dun and Bradstreet to perform the counterparty due diligence, for more information, please see their websites and our contact section below. In order to be able to conclude a (potential) purchase agreement your details are shared with the respective seller. Your details will also be provided to service providers involved in the performance of the purchase agreement, such as transport companies.

Financing a car

salutation, address, e-mail address, birth date, information on the car, financial data, xx, xx this information is needed to provide you with one or more finance offers. The offer you choose and the aforementioned personal data will be provided by to the financing partner. This financing partner will enter into an agreement with you.

If you subscribe to our newsletters, or if you agree to receive direct marketing we will use your e-mail address to send you updates about our products and services, special offers, surveys or events. We will customize the contents of our newsletters according to your personal preferences, which we determine based on your personal information and purchase history. For instance you will not get an offer for a car you have just bought. We will combine this information with information on your navigation on our website if, upon your visit on the CarNext website, you provided us with the cookie consent to do so. For instance we can better serve you if we know which cars you have looked at before.

In case you do not want to receive any more customized newsletters by e-mail, you can unsubscribe by using the link at the bottom of each email. If you do not wish to receive those newsletters or updates (direct marketing) please send an e-mail to

Improving our products and services

We use the information on your CarNext website navigation, purchases, requests, participation in online surveys and other interactions with us in an aggregate way to improve the contents of the website and our products and services.

Legal grounds

The most important legal ground for processing your data is that this is necessary for the performance of an agreement between you and (Art.6 Abs. 1 S. 1 lit. b) DSGVO), when you purchase a car, request certain information, or place an order for our services. For vehicle transfer or registration and to keep accurate books and records for financial or tax purposes as well as to comply with prevention of money laundering, sanctions and financing of terrorism laws the processing is necessary to comply with a legal obligation such as the obligation to process certain data (Art. 6 As. 1 S.1 lit.c)),. When you subscribe to our newsletters, behavioral advertising on the basis of cookies or to improve the contents of the website, its products and services according to an analysis of your browsing behavior, purchases and interactions with us the processing is based on your permission (Art. 6 Abs. 1 lit. a)). Finally, has a legitimate interest to prevent fraud. The processing is necessary to safeguard our legitimate interests or those of a third party, unless the fundamental rights and freedoms of the person concerned, which require the protection of personal data, prevail, in particular if the person is a child (Art. 6 Abs. 1 S. 1 lit.f).

Provision of personal data

There is a statutory and contractual requirement for you to provide your personal data and any refusal may result in CarNext being unable to enter into a contract with you and/or continue the contractual relationship with you. However, there are cases where there is no statutory or contractual requirement or other obligation for you to provide your personal data, such as newsletters subscription, and any refusal to provide personal data in these cases will have no consequences on you or on our relationship with you.

Use of personal data by third parties

CarNext does not share your data with third parties, except: If you have given us your permission to do so; If there is a legal obligation for us to do so, for instance to provide information to tax authorities, other government institutions or third parties as provided by law; When we act on your request, to perform your contract with us or to carry out your order, to CarNext group companies or to third party suppliers (including third parties that own the vehicles, such as leasing companies, and mandate CarNext to sell and transfer the ownership of the vehicles), service-, payment- or shipment-providers; In the event of a transaction for financing our business, a merger or an acquisition of CarNext or of (part of) its assets by a third party; In the event of legal claims, legal proceedings or as part of legal, risk, privacy and data protection or financial audits; To perform credit checks or counterparty due diligence within the abovementioned purposes; To parties who act as a processor on our behalf, for instance our IT or cloud service providers.

Transfer of data outside the EEA

Within the abovementioned purposes for the processing of personal data by CarNext, your personal data may be transferred to CarNext Group entities and processors outside of the EEA. The level of personal data protection and privacy in the relevant countries is not considered similar to the data protection and privacy legislation applicable within the EEA. However, we have made sure your personal data is nevertheless sufficiently protected by binding corporate rules, standard contractual clauses and other appropriate safeguards.

Storage period

Personal data will not be kept by us any longer than necessary for the purposes for which they were originally collected or processed further for secondary purposes. All personal data will be stored no longer than required by the EEA privacy legislation and national laws and regulations, such as financial and tax obligations and prevention of money laundering, sanctions and financing of terrorism laws. These laws and regulations typically require to store and document personal data up to ten years. In case you order goods from us, we keep your data as long as reasonably necessary in order to comply with our warranty obligations under the applicable period. In case you have opted in to receive newsletters from us, your personal profile is based on up to 5 years of history preceding the newsletter. The storage period of cookies can be found in the cookie policy. Personal data may also be kept to evidence compliance with contractual and other obligations, until the limitation period of the respective rights has expired as well as for the period required for the establishment, exercise or defense of legal claims.

Your Personal Data Rights

You have the following rights against us with regard to the data concerning you: Right of information Right of rectification or deletion Right to limitation and processing Right to object to the processing Right to data transferability

You have the right to request to access your data and to request to rectify or erase it or to restrict its processing. You also have the right to request a machine-readable subset of your data and store it elsewhere. Where the processing of your personal data is based on your consent, you are at all times entitled to withdraw this consent which will not affect the lawfulness of the processing before your consent was withdrawn.

Furthermore, you may always object against to the use of your data for direct marketing purposes, including the creation of profiles for newsletter customization and advertising. You may also object against any other processing for legitimate interest purposes in connection with your personal circumstances. If you want to object please send an e-mail to In addition, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us.


If you would like to request to review, correct, update, suppress, restrict or delete your personal information processed by us, object to the processing of personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may contact us by sending an email to We will respond to your request consistent with applicable law.

In your request, please make as clear as possible what personal information your request relates to. For your protection, we will only implement requests with respect to the personal information associated with the particular email address as you indicated in the contact form, and we may request you to provide verification of your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event within any applicable legally required timeframes.Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.

Contact our Data Protection Officer (DPO) for via

Lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available here.

To change your cookie settings, click here. A change of your cookie settings will have no effect on information collected before such change.

Changes of this policy

CarNext reserves the right to change this policy. Make sure you are always familiar with the latest version of this policy posted here. Please, take a look at the LAST REVISED legend at the top of this page to see when this Privacy Policy was last revised. Changes in this Privacy Policy will become effective when we make the revised Privacy Policy available on or through the Website.