2.1. The nature of our Services means that we may obtain and use Personal Data (that is information relating to an individual who can be identified) which we collect about the following groups of individuals (Data Subjects):
(i) Users: that is anyone who visits or accesses AmazingCarsandDrives.com or Amazing Cars and Drives;
(ii) Clients: that is any individual or business which enters into a contract with us to receive any Premium Service, including any individuals who we contact on behalf of our Client in connection with such services.
(iii) Prospective Clients: that is employees, directors or representatives of any businesses which are not yet Clients but which we believe may be interested in becoming Clients.
We will hold Personal Data about the above listed Data Subjects as a Controller. This means that we make decisions about what data we collect and how it should be used to best serve our purposes. The reason for this notice is so that each Data Subject is clear as to what data we collect about them, what we do with that data, how long we store it for and their rights in relation to that data.
2.2. To the extent that we provide hosting services, it is likely that we may also collect and store information belonging to our Clients and that this may include Personal Data relating to third parties (Managed Data). We process any such Managed Data as a Processor, which means that we only use it in accordance with our Clients’ instructions. Our terms of processing which set out how we deal with Managed Data will be set out in the agreement we enter into with our Client in respect of such services, and is not dealt with here.
4.1. We collect Personal Data relating to Users (User Data) in the following ways:
(i) Primarily we will obtain User Data from users directly if they set up an account to use AmazingCarsandDrives.com or Amazing Cars and Drives (User Account) and if they create a public profile for AmazingCarsandDrives.com or Amazing Cars and Drives (User Profile). This is likely to be limited to their name, their email address, the town or city in which they live and any user name and strap line they will to include in their profile as well as the password they create. It may also include a photograph if the User so wishes.
(ii) We will also collect details of any posts uploaded by a User on to AmazingCarsandDrives.com or Amazing Cars and Drives and any responses they receive from other Users.
(iii) We may also collect usage data in respect of a User’s use of AmazingCarsandDrives.com or Amazing Cars and Drives. This could include location data (such as the region, town or city in which the User lives), information about what a User looked at and links clicked on, as well as IP addresses. We would do this to collect and collate aggregate data for our own business purposes.
(iv) We may also collect usage data (such as IP addresses) to ensure that AmazingCarsandDrives.com or Amazing Cars and Drives is being used in accordance with our terms of use.
(v) If a User contacts us directly with a support request or other issue, we may retain details of the request for our records and to make sure that the issue was properly resolved.
(vi) If a User clicks on a link on AmazingCarsandDrives.com or Amazing Cars and Drives and consequently purchases any goods or services from a Client, we may receive information from our Client confirming that a sale was made. This is unlikely to include any Personal Data and where possible we would request that it doesn’t. Any such information would only be used to assess any payment due between us and our Client and for aggregate statistical purposes.
4.2 We may collect Personal Data relating to contacts within our Client (Client Data) in the following ways:
(i) Primarily we will obtain Client Data from our Clients when they instruct us who we should contact in connection with our Services. This is likely to include their name and business contact details as well as their role in our client’s business. We will also need to hold information about our Client which we need to set them up as a Client and avail of our rights and fulfil our obligations under any services agreement we enter into with them. This is likely to include our Clients’ financial data as well as details of any past transactions and payment history with us.
(ii) If our Client contacts us directly with a support request or other issue (whether by email, telephone or letter), we may retain details of the request for our records and to make sure that the issue was properly resolved.
(iii) If our Client signs up to receive our newsletter or receive marketing information from us, we may retain information about marketing preferences and any contact details our Client provides us with
4.3 There are a number of ways we might collect Personal Data about contacts for prospective Clients (Prospective Client Data):
(i) If a business contacts us directly (whether by calling us up, sending us an email or if we meet a representative for a business somewhere in person) and the representative asks for information about our Services, we may retain information about that request, including their name, where they work and their business contact details.
(ii) Our marketing team may also carry out its own research using online sources to try to locate businesses and key contacts within those businesses who we think may be interested in hearing about our Services.
(iii) If a representative of a business signs up to receive our newsletter or receive marketing information from us, we may retain information about their marketing preferences and any contact details they provide us with.
If you choose, or you are provided with, a user identification code, password or any other piece of information as part of our security procedures, you must treat such information as confidential. You must not disclose it to any third party.
We have the right to disable any user identification code or password, whether chosen by you or allocated by us, at any time, if in our reasonable opinion you have failed to comply with any of the provisions of these Terms.
If you know or suspect that anyone other than you knows your user identification code or password, you must promptly notify us at hello@amazing cars & drives.com.
6.1 We may use User Data for the purposes set out below.
To enable you to use AmazingCarsandDrives.com or Amazing Cars and Drives: This includes enabling you to set up a publicly available User Profile; enabling you to post public reviews, read and respond to other reviews and comments and download resources (if agreed). It is necessary for the performance of our contract with you for the provision of our Services to you.
To ensure that you are using AmazingCarsandDrives.com or Amazing Cars and Drives in accordance with our terms of use and enforce our contractual and legal rights: This means that we may monitor your use of AmazingCarsandDrives.com or Amazing Cars and Drives by collecting usage, traffic and location data and we may transfer this data to our professional advisors if we believe that the usage data suggests you have acted in breach of our terms of use. It is necessary to protect our legitimate Interest of protecting our intellectual property rights.
For administration and dispute resolution purposes: We may also need to process Personal Data about you to meet our internal administration requirements and, as well as for matters such as dispute resolution. It is necessary to achieve our legitimate interest of protecting our rights as a business.
To send marketing communications: From time to time we might send you an email about events we are running or other products or services which we think might be of interest to you. We will always include an opt-out in any such emails. We will only send you marketing communications if you have expressly consented to it.
To facilitate our online marketing strategy: We may collect data about how you use AmazingCarsandDrives.com or Amazing Cars and Drives and use that information to make decisions about the type of online advertising to show you when you use AmazingCarsandDrives.com or Amazing Cars and Drives. It is necessary to achieve our legitimate interest of promoting our business.
To calculate the commission payable by our Clients to us: We may use the information that we receive from our Clients about any services you have purchased from them after clicking on a link on AmazingCarsandDrives.com or Amazing Cars and Drives. This is unlikely to include any Personal Data, but if it does, such use would be limited solely and strictly to the extent necessary to achieve our legitimate interest of creating a robust revenue structure.
To create aggregate data for analysis purposes: We may collect aggregate data relating to your use of AmazingCarsandDrives.com or Amazing Cars and Drives to analyse trends per region and split by other demographic. This data may be sold to third parties or used by us to help us improve our Services. Any such data shall not include data from which an individual can be identified.
6.3 We may use Client Data for the purposes set out below.
To provide our Clients with services: This includes recording and retaining communications with our Clients about their requirements.
Necessary for the performance of the contract for the provision of our services or taking steps necessary to enter into a contract/ necessary to achieve our legitimate interest of creating a robust revenue structure.
Administration and Dispute Resolution: We may also need to process Personal Data meet our internal administration requirements, to facilitate payments and, as well as for matters such as dispute resolution. It is necessary to achieve our legitimate interest of protecting our rights as a business.
Marketing: From time to time we might send you an email about products or services which we think might be of interest to you. We will always include an opt-out in any such emails. It is necessary to achieve our legitimate interest of promoting our business.
6.4 We may use Prospective Client Data for the purposes set out below.
To provide you with information about our services: If you have asked us to do so, we may use the details you give us to provide you with a quote for our services. We would usually do this by email.
Marketing: We might use the contact details you have provided us with to send you emails about events we are running or information about our Services which we think might be of interest to you. We will always include an opt-out in any such emails. It is necessary to achieve our legitimate interest of promoting our business.
7.2 We may also disclose Personal Data if:
7.2.1 we are under a duty to do so in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements or to protect the operation of our website, or the rights, property, or safety of us, our users, or others; or
7.2.2 to any buyer if we sell, transfer or merge parts of our business or our assets. If a change happens to our business, then the new owners will only be entitled to use Personal Data in accordance with the provisions set out in this privacy notice.
7.3 The nature of AmazingCarsandDrives.com or Amazing Cars and Drives means that any post published and the User Profile of the user posting, will be publicly accessible. You should consider this before publishing a post and think carefully about what information you want to include and whether you want to include any Personal Data at all. You are not required to do so.
7.4 Although you may be able to link to third party sites via AmazingCarsandDrives.com or Amazing Cars and Drives, save as set out in this paragraph 7, we will never transfer your data to a third party without your consent.
7.4 We may sell aggregate data which we have collected from our Users’ use of AmazingCarsandDrives.com or Amazing Cars and Drives to third parties to help them assess their performance. None of the information sold will include any Personal Data
8.1 We are aware how important it is for us to keep the data we hold about Users and other parties secure and have implemented the following processes and procedures:
8.1.1 Our employees are required to hold any data which they handle on our behalf securely and confidentially and are contractually bound to do so.
8.1.2 We make sure that any data processors (such as Mailchimp and Amazon Web Services) we use have a strong reputation for data security and are contractually obliged to implement adequate security measures to safeguard the data held.
8.1.3 While we store the content you upload to your private account, the information is encrypted and not readily accessible either to us or our employees. We could access it, for example, in an emergency or if it was necessary to comply with a request from you or to defend or protect our legal rights.
10.1 Our retention policies are as follows:
Transaction data: That is data we collect about the transactions our Client carries out with us. For the life of the Client contract + 7 years to ensure that we have sufficient records from an accounting and tax perspective
Financial Data: That is financial data relating to our Client For the life of the client contract + 1 year in case of renewed contract and/or any payment issues outstanding after the contract is completed.
User Account Data: That is any data collected which is attributable to a User Account Retained for so long as the User Account remains live, after which such data will be routinely deleted within 12 months.
Marketing Lists: That is any names and emails held and used as recipients for mail shots or other unsolicited marketing Retained until opt out with update and rectification procedure carried out every 3 years
Usage Data: That is any data concerning how AmazingCarsandDrives.com or Amazing Cars and Drives is used by its users. Retained for no longer than 6 years from the date of creation.
11.1 Data Subjects have the following rights against the Controller in respect of Personal Data held by the Controller which relates to them.
(a) Right to be informed: the right to be informed about what Personal Data the Controller collects and stores about you and how it’s used.
(b) Right of access: the right to request a copy of the Personal Data held, as well as confirmation of:
- the purposes of the processing;
- the categories of Personal Data concerned;
- the recipients to whom the Personal Data has/will be disclosed;
- for how long it will be stored; and
- if data wasn’t collected directly from you, information about the source.
(c) Right of rectification: the right to require the Controller to correct any Personal Data held about you which is inaccurate or incomplete.
(d) Right to be forgotten: in certain circumstances, the right to have the Personal Data held about you erased from the Controller’s records.
(e) Right to restriction of processing: the right to request the Controller to restrict the processing carried out in respect of Personal Data relating to you. You might want to do this, for instance, if you think the data held by the Controller is inaccurate and you would like to restrict processing until the data has been reviewed and updated if necessary.
(f) Right of portability: the right to have the Personal Data held by the Controller about you transferred to another organisation, to the extent it was provided in a structured, commonly used and machine-readable format.
(g) Right to object to direct marketing: the right to object where processing is carried out for direct marketing purposes (including profiling in connection with that purpose).
(h) Right to object to automated processing: the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects (or other similar significant effects) on you. We do not carry out any automated decision-making process.
11.2 If you want to avail of any of these rights, you should contact us immediately at
[email protected] or Amazing Cars and Drives.com. If you do contact us with a request, we will also need evidence that you are who you say you are to ensure compliance with data protection legislation.
11.3 We will confirm to you in writing to acknowledge receipt of any request we receive relating to your rights as a Data Subject, and we will let you know if we have complied with your request. If having, carried out an assessment, we believe we have an overriding reason for retaining the data, we will let you know why we have reached that conclusion.
12.1 You may notify us at any time that you no long want us to process Personal Data about you for particular purposes or for any purposes whatsoever. This may have an impact on the services you receive from us. For example:
12.2 If you ask us to stop processing Personal Data about you, you will no longer be able to access your user account since we will not be able to identify you.
12.3 If you ask us to stop processing Personal Data about you for direct marketing purposes, this will not impact on your ability to make access your user account.
