Privacy Policy (GDPR)

ARTICLE 1: PREAMBLE

This privacy policy applies to the website: mondial-motorcars.com.

The purpose of this privacy policy is to inform users of the website of the following:

The manner in which their personal data is collected and processed. Personal data shall mean any data capable of identifying a user. This includes, in particular, the user’s first name and surname, age, postal address, email address, location and IP address;
The rights users have in respect of such data;
Who is the controller responsible for the personal data collected and processed;
To whom such data is disclosed;
Where applicable, the website’s policy on cookies.

This privacy policy supplements the legal notice, which users may consult at the address provided in the footer of the website.

ARTICLE 2: GENERAL PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF DATA

In accordance with the provisions of Article 5 of European Regulation (EU) 2016/679 (General Data Protection Regulation), the collection and processing of the website users’ data comply with the following principles:

Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user shall be informed that their data is being collected and of the reasons for which it is being collected;
Purpose limitation: data is collected and processed in order to fulfil one or more purposes specified in these general terms of use;
Data minimisation: only the data necessary for the proper fulfilment of the purposes pursued by the website is collected;
Storage limitation: data is retained for a limited period, of which the user is informed. If the retention period cannot be communicated to the user;
Integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation (EU) 2016/679, the collection and processing of personal data may only take place if at least one of the following conditions is met:

The user has expressly consented to the processing;
The processing is necessary for the proper performance of a contract;
The processing is necessary for compliance with a legal obligation;
The processing is necessary in order to protect the vital interests of the data subject or of another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHEN BROWSING THE WEBSITE

A. DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION

The personal data collected on the MONDIAL MOTORCARS website is as follows:

– First names, surnames
– Email address
– Telephone number

This data is collected when the user carries out one of the following operations on the website:

– When the user uses the contact section to contact the members of MONDIAL MOTORCARS.

The data controller shall retain all the data collected in the website’s IT systems, under reasonable security conditions, for a period of: 3 years.

The data is collected and processed for the following purposes:

The data collected shall be used solely to respond to requests from website visitors who have used the contact section, and to carry out commercial follow-ups where necessary.

B. DISCLOSURE OF DATA TO THIRD PARTIES

The personal data collected by the website is not disclosed to any third party and is processed solely by the website publisher.

C. DATA HOSTING

The MONDIAL MOTORCARS website is hosted by: OVH, whose head office is located at the following address:

Registered office: 2 rue Kellermann – 59100 Roubaix – France

The hosting provider can be contacted on the following telephone number: 1007

The data collected and processed by the website is hosted and processed exclusively in France.

ARTICLE 4: DATA CONTROLLER

A. THE DATA CONTROLLER

The controller responsible for the processing of personal data is: Mr DELAIRE. He may be contacted as follows:

The data controller may be contacted on 06 82 85 31 07.

The data controller is responsible for determining the purposes and means of the processing of personal data.

B. OBLIGATIONS OF THE DATA CONTROLLER

The data controller undertakes to protect the personal data collected, not to disclose it to third parties without the user having been informed, and to respect the purposes for which the data was collected.

The website has an SSL certificate to ensure that the information and data transferred via the website are secure.

The purpose of an SSL (« Secure Socket Layer ») certificate is to secure the data exchanged between the user and the website.

In addition, the data controller undertakes to notify the user of any rectification or erasure of data, unless this would involve disproportionate formalities, costs or efforts on its part.

Should the integrity, confidentiality or security of the user’s personal data be compromised, the data controller undertakes to inform the user by any means.

ARTICLE 5: USER RIGHTS

In accordance with the regulations governing the processing of personal data, the user has the rights listed below.

In order for the data controller to comply with their request, the user is required to provide: their first name and surname, as well as their email address.

The data controller is required to respond to the user within a maximum period of 30 (thirty) days.

A. PRESENTATION OF THE USER’S RIGHTS REGARDING THE COLLECTION AND PROCESSING OF DATA

a. Right of access, right to rectification and right to erasure

The user may access, update, modify or request the erasure of data concerning them by following the procedure set out below:

The user must send an email to the personal data controller, specifying the subject of their request and using the contact email address provided above.

b. Right to data portability

The user has the right to request the portability of their personal data held by the website to another website, by following the procedure below:

The user must submit a request for the portability of their personal data to the data controller by sending an email to the address provided above.

c. Right to restriction of processing and right to object

The user has the right to request the restriction of, or to object to, the processing of their data by the website, and the website may not refuse unless it demonstrates the existence of compelling legitimate grounds that override the interests, rights and freedoms of the user.

In order to request the restriction of the processing of their data or to object to the processing of their data, the user must follow the procedure below:

The user must submit a request for the restriction of the processing of their personal data to the data controller by sending an email to the address provided above.

d. Right not to be subject to a decision based solely on automated processing

In accordance with the provisions of Regulation (EU) 2016/679, the user has the right not to be subject to a decision based solely on automated processing where that decision produces legal effects concerning them or similarly significantly affects them.

e. Right to determine what happens to data after death

The user is reminded that they may give instructions as to what should happen to their collected and processed data in the event of their death, in accordance with French Law No. 2016-1321 of 7 October 2016 (Loi pour une République numérique – Digital Republic Act).

f. Right to lodge a complaint with the competent supervisory authority

Should the data controller decide not to respond to the user’s request and the user wish to contest that decision, or should the user believe that any of the rights listed above has been infringed, the user is entitled to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés – French Data Protection Authority, https://www.cnil.fr) or with any competent court.

B. PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of European Regulation (EU) 2016/679 and the French Data Protection Act (Loi Informatique et Libertés), only minors aged 15 or over may consent to the processing of their personal data.

If the user is a minor under the age of 15, the consent of a legal representative shall be required in order for personal data to be collected and processed.

The website publisher reserves the right to verify by any means that the user is over 15 years of age, or has obtained the consent of a legal representative before browsing the website.

ARTICLE 6: CONDITIONS FOR AMENDING THE PRIVACY POLICY

This privacy policy may be consulted at any time at the following address:

Privacy Policy (GDPR)

The website publisher reserves the right to amend it in order to ensure its compliance with the law in force.

Consequently, the user is invited to consult this privacy policy regularly in order to stay informed of the latest changes made to it.

The user is hereby informed that this privacy policy was last updated on: 17/09/2018.

ARTICLE 7: ACCEPTANCE OF THE PRIVACY POLICY BY THE USER

By browsing the website, the user acknowledges having read and understood this privacy policy and accepts its terms, in particular with regard to the collection and processing of their personal data.