Basis and purposes
The main basis on which we process data is in order to establish an agreement and/or to be able to perform an agreement. In addition, data are processed statistically on the basis of legitimate interest for the purpose of managing the organisation. For other purposes we will ask permission separately.
Buyer/client data are processed by we. We are also entitled to make this data available to third parties under our responsibility insofar as this is necessary for the performance of agreements of buyer/client. GTO adheres to the legally required purpose limitation principle. ‘Purpose limitation’ means that your data may only be used for the purpose for which it was provided.
As far as the processing of personal data is concerned, these are processing operations within the meaning of the AVG. Based on this processing, we can: make an offer, execute the agreement, fulfil warranty obligations to the buyer, provide optimal service and provide the buyer with timely product information. If it concerns the processing of personal data for the purpose of direct marketing, any objection lodged by the buyer with the dealer/repairer will be honoured
GTO processes personal data in a manner consistent with the General Data Protection Regulation, the implementing legislation based on the AVG and other currently applicable privacy legislation.
What kind of data do we collect?
GTO collects and processes personal data that you provide to us. This may include the following categories of data:
- Contact details of individuals such as Name, address, telephone number, email address. In the case of applicants and employees, also education and work experience.
- Contract data such as products and/or services purchased, including any contract terms and/or guarantees.
- Vehicle ownership data such as registration number, registration date, vehicle and license plate statuses, odometer readings and MOT date.
- Data on historical vehicle usage such as odometer readings and technical status as well as maintenance and repair history.
We also collect data collected through our websites via cookies. Please refer to the separate cookie statement on our website.
Legal request and prevention of damage
Pursuant to a legal request (such as a search warrant, court order or subpoena), we are obliged to retain and/or share your information. we are also entitled to retain and/or share your information when we determine that it is necessary to detect, prevent and raise concerns about fraud or other illegal activity and to protect our, you and others. Information that we receive about you may be processed and retained for a longer period when necessary because of a legal request or obligation, an investigation relating to our terms and conditions, policies or to otherwise prevent harm.
Security and safety
GTO has taken appropriate technical and organisational measures to secure your data against any form of unlawful processing and we also impose these requirements on any third parties engaged by us.
The processing operations that WE (do) carry out take place within the EEA or EU recognised countries with equivalent legislation (“Adequacy decision”) and are therefore subject to the AVG.
In accordance with the AVG and other relevant legislation, We do not retain personal data for longer than is necessary to fulfil the purposes for which they are collected or processed and to comply with legal retention periods. If you would like more information on how long your specific personal data is kept, please contact [email protected].
Data subject’s rights
After making a request, you will be asked for a copy of your ID proof so that we can determine whether you are the person making the request. We will immediately destroy the copy of your ID proof after verifying your identity. GTO will process the request as quickly as possible and, in many cases, free of charge. WE aim to respond to your request within two weeks.
If you object to the way we handle your data, you can file a complaint with the Dutch Data Protection Authority.