Privacy Policy

Last updated: December 2024

Introduction

chivarcbfu B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our vehicle leasing services or visit our website at chivarcbfu.top. We are the Data Controller for the purposes of data protection law.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, postal address, company information, and details about your vehicle leasing requirements. We collect this information when you contact us, request quotes, submit enquiries through our website, or enter into leasing agreements with chivarcbfu. We may also collect technical information about your use of our website, including your IP address, browser type, and pages visited.

How We Use Your Information

We use your personal data to provide vehicle leasing services, process your enquiries, communicate with you about our services, and fulfil our contractual obligations. This Privacy Policy explains how we use your information to respond to your requests, provide customer support, send you relevant information about our services, and comply with legal requirements. We may also use your data for legitimate business interests such as improving our services and conducting business analytics.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract: To perform our vehicle leasing services and fulfil contractual obligations
  • Legitimate Interest: To improve our services, conduct business operations, and communicate with you
  • Consent: Where you have given specific consent for marketing communications or optional services
  • Legal Obligation: To comply with legal requirements and regulatory obligations

Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. We may share your information with trusted service providers who assist us in delivering our services, such as vehicle manufacturers, finance companies, maintenance providers, and IT service providers. These third parties are contractually bound to protect your data and use it only for the specified purposes. We may also disclose your information if required by law or to protect our legal rights.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right of Rectification: Request correction of inaccurate or incomplete data
  • Right of Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw consent where processing is based on your consent

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. For active leasing agreements, we retain data for the duration of the contract plus seven years for legal and tax purposes. For enquiries that do not result in a leasing agreement, we retain data for up to three years. Marketing consent data is retained until you withdraw consent or we determine it is no longer relevant.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, staff training, and regular security assessments. While we strive to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Cookies and Website Analytics

Our website uses cookies and similar technologies to improve your browsing experience and analyse website usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

Marketing Communications

We may send you marketing communications about our services if you have given consent or where we have a legitimate interest to do so. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us directly.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us about data protection matters, please contact us using the following details:

Complaints

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can also contact us directly to resolve any concerns.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and indicating the date of the last revision. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Data Controller Information

The Data Controller for your personal data is chivarcbfu B.V., a company registered in the Netherlands with registration number 96853124 and VAT number NL247968531B173. Our registered office is located at Berkenlaan 120, 1036 YM Amsterdam, Netherlands.