Last revised: 30th of March 2021
Who we are
Use of personal data o Website visits
Requests for information
Buying a car
Improving our products and services, fraud prevention and risk mitigation
Provision of personal data
Use of personal data by third parties
Transfer of data outside the EEA
Changes of this policy
The joint controllers of your personal data are CarNext.com B.V. located at John M Keynesplein 10A, 1066 EP Amsterdam, the Netherlands and CarNext.com Deutschland GmbH, located at Lippestrasse 4, 40221 Düsseldorf, Deutschland (referred to below as “we” “us” “our” or “CarNext.com”).
Below, we give you a description of the personal data we use, for what purposes and on which legal grounds.
When you request certain information through the CarNext.com site, we use your name, phone number and e-mail address and information on the contents of your request to communicate with you, answer your questions and/or comply with your request.
When you request to book an appointment in one of our CarNext stores, we use your name, phone number, e-mail address and preferred appointment date, to communicate with you and to make the appointment.
If you are purchasing a car through or from us (on-line or in one of our stores), we register your name, company name, salutation, address, e-mail address, phone number, birth date, NIF, information on car purchase, any ancillary services purchased, payment information, information necessary to provide ancillary services and car trade-in information if applicable. This information is necessary to enter into a purchase agreement with you, to transfer and deliver the vehicle to you, to provide the requested ancillary service, to invoice and to handle payment, to communicate with you and to provide customer service. We will also process and store in addition to the above information, the identification number and your signature in the registration form to transfer and register the vehicle in your name.
As CarNext.com and its suppliers are legally obliged to follow the requirements on the prevention of money laundering, sanctions and financing of terrorism, it is a condition to our contract of sale that we perform a counterparty due diligence screening. To perform this screening, your name, address and date of birth is provided to Lexis Nexis who will provide us with the result of the screening procedure performed for our evaluation.
If you purchase cars in the professional market you can purchase a car via the CarNext.com auction via the CarNext.com platform. To be able to purchase a car via the CarNext.com platform you need to be registered as a professional trader. Therefore you will need to enter into an agreement with CarNext.com which determines the terms and conditions under which you may use the CarNext.com platform and purchase cars from sellers. CarNext.com will not always act as the seller itself, this can also be third parties like LeasePlan.
Condition to entering into the agreement with CarNext.com is CarNext.com performing, and continuously performing, counterparty due diligence screening in order to prevent money laundering, sanctions and terrorist financing. For this purpose and in relation to your trader agreement, the (potential) purchase agreement and other related Services like the delivery of the car and the settlement of the payment transaction, we collect your name, address, date of birth, email address, telephone number, ID, information related to your company including Chamber of Commerce document, VAT certificate and related UBO and Director’s details of your company. The aforementioned personal data are provided to Lexis Nexis and/or Credit Safe and Dun and Bradstreet to perform the counterparty due diligence, for more information, please see their websites and our contact section below. In order to be able to conclude a (potential) purchase agreement your details are shared with the respective seller. Your details will also be provided to service providers involved in the performance of the purchase agreement, such as transport companies.
salutation, address, e-mail address, birth date, information on the car, financial data, xx, xx this information is needed to provide you with one or more finance offers. The offer you choose and the aforementioned personal data will be provided by Carnext.com to the financing partner. This financing partner will enter into an agreement with you.
If you subscribe to our newsletters, or if you agree to receive direct marketing we will use your e-mail address to send you updates about our products and services, special offers, surveys or events. We will customize the contents of our newsletters according to your personal preferences, which we determine based on your personal information and purchase history. For instance you will not get an offer for a car you have just bought. We will combine this information with information on your navigation on our website if, upon your visit on the CarNext website, you provided us with the cookie consent to do so. For instance we can better serve you if we know which cars you have looked at before.
In case you do not want to receive any more customized newsletters by e-mail, you can unsubscribe by using the link at the bottom of each email. If you do not wish to receive those newsletters or updates (direct marketing) please send an e-mail to email@example.com.
We use the information on your CarNext website navigation, purchases, requests, participation in online surveys and other interactions with us in an aggregate way to improve the contents of the website and our products and services.
The most important legal ground for processing your data is that this is necessary for the performance of an agreement between you and CarNext.com (Art.6 Abs. 1 S. 1 lit. b) DSGVO), when you purchase a car, request certain information, or place an order for our services. For vehicle transfer or registration and to keep accurate books and records for financial or tax purposes as well as to comply with prevention of money laundering, sanctions and financing of terrorism laws the processing is necessary to comply with a legal obligation such as the obligation to process certain data (Art. 6 As. 1 S.1 lit.c)),. When you subscribe to our newsletters, behavioral advertising on the basis of cookies or to improve the contents of the website, its products and services according to an analysis of your browsing behavior, purchases and interactions with us the processing is based on your permission (Art. 6 Abs. 1 lit. a)). Finally, CarNext.com has a legitimate interest to prevent fraud. The processing is necessary to safeguard our legitimate interests or those of a third party, unless the fundamental rights and freedoms of the person concerned, which require the protection of personal data, prevail, in particular if the person is a child (Art. 6 Abs. 1 S. 1 lit.f).
There is a statutory and contractual requirement for you to provide your personal data and any refusal may result in CarNext being unable to enter into a contract with you and/or continue the contractual relationship with you. However, there are cases where there is no statutory or contractual requirement or other obligation for you to provide your personal data, such as newsletters subscription, and any refusal to provide personal data in these cases will have no consequences on you or on our relationship with you.
CarNext does not share your data with third parties, except: • If you have given us your permission to do so; • If there is a legal obligation for us to do so, for instance to provide information to tax authorities, other government institutions or third parties as provided by law; • When we act on your request, to perform your contract with us or to carry out your order, to CarNext group companies or to third party suppliers (including third parties that own the vehicles, such as leasing companies, and mandate CarNext to sell and transfer the ownership of the vehicles), service-, payment- or shipment-providers; • In the event of a transaction for financing our business, a merger or an acquisition of CarNext or of (part of) its assets by a third party; • In the event of legal claims, legal proceedings or as part of legal, risk, privacy and data protection or financial audits; • To perform credit checks or counterparty due diligence within the abovementioned purposes; • To parties who act as a processor on our behalf, for instance our IT or cloud service providers.
Within the abovementioned purposes for the processing of personal data by CarNext, your personal data may be transferred to CarNext Group entities and processors outside of the EEA. The level of personal data protection and privacy in the relevant countries is not considered similar to the data protection and privacy legislation applicable within the EEA. However, we have made sure your personal data is nevertheless sufficiently protected by binding corporate rules, standard contractual clauses and other appropriate safeguards.
You have the following rights against us with regard to the data concerning you: •Right of information •Right of rectification or deletion •Right to limitation and processing •Right to object to the processing •Right to data transferability
You have the right to request to access your data and to request to rectify or erase it or to restrict its processing. You also have the right to request a machine-readable subset of your data and store it elsewhere. Where the processing of your personal data is based on your consent, you are at all times entitled to withdraw this consent which will not affect the lawfulness of the processing before your consent was withdrawn.
Furthermore, you may always object against to the use of your data for direct marketing purposes, including the creation of profiles for newsletter customization and advertising. You may also object against any other processing for legitimate interest purposes in connection with your personal circumstances. If you want to object please send an e-mail to firstname.lastname@example.org In addition, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
If you would like to request to review, correct, update, suppress, restrict or delete your personal information processed by us, object to the processing of personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may contact us by sending an email to email@example.com. We will respond to your request consistent with applicable law.
In your request, please make as clear as possible what personal information your request relates to. For your protection, we will only implement requests with respect to the personal information associated with the particular email address as you indicated in the contact form, and we may request you to provide verification of your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event within any applicable legally required timeframes.Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.
Contact our Data Protection Officer (“DPO”) for CarNext.com via firstname.lastname@example.org.
Lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available here.
To change your cookie settings, click here. A change of your cookie settings will have no effect on information collected before such change.