Last Updated: 03/03/2021
The protection of your personal data matters to us. With this privacy statement we would like to inform you which personal data we collect about you on our website, why we use and pass on this data, how long we store the data, which rights you have and how you can exercise them. If you are a customer of Vauxhall Finance Plc the Customer Data Protection Notice will also apply to you.
This privacy statement explains to you the nature, scope and purpose of the processing of personal data within our website (hereinafter referred to as "website"). The privacy statement applies regardless of the domains and devices used (e.g. desktop, mobile, etc.).
When we refer to data in the following, we mean your personal data. This is all information by which you can be directly or indirectly identified as a person. Which data is processed in detail and how it is used depends largely on the services we make use of.
In our privacy statement, we use various other terms within the meaning of the GDPR. These include terms such as processing, restriction of processing, profiling, pseudonymisation, controller, processor, recipient, third party, consent, supervisory authority and international organisation. In Art. 4 GDPR you can find the definitions for these terms.
Please read the following information carefully.
If you transfer personal data about your spouse, life partner, relatives or other third parties (e.g. guarantors), please inform them about the processing of their personal data by us and refer them to this privacy notice. If necessary, the consent of these persons for data transfer is required.
Who we are
Vauxhall Finance plc (‘Vauxhall Finance’, also referred to in this Notice as ‘we’ or ‘us’) is the data controller of your data. Vauxhall Finance’s registered address is Vauxhall Finance plc, Heol-y-Gamlas, Parc Nantgarw, Treforest, Cardiff, CF15 7QU. We are part of the Opel Bank S.A. group of companies.
Our Data Protection Officer
Please address any communication for the attention of our Data Protection Officer to: Data Protection Officer, Vauxhall Finance plc, Heol-y-Gamlas, Parc Nantgarw, Treforest, Cardiff, CF15 7QU. You can also contact the Data Protection Officer by phone on 01443 846274, or by email at
Where we get your data and which data we use
If you use the website exclusively for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you visit our website for information purposes only, we collect the following access data, which is technically necessary for us to display our website and to guarantee stability and security. This access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specifically accessed website), access status/HTTP status code, amount of data transferred, referrer URL (previously visited page), operating system and its interface, browser type and language and version of the browser software, notification of successful access.
If you start a chat conversation, we additionally process the following personal data: identification information, legitimation information, chat content, assigned user ID, connection time. We also receive your personal data if you contact us via contact form, or e-mail. Personal data processed in this case are e.g. name, address, e-mail address, telephone number.
For what purposes do we process your data?
We process your personal data in compliance with the provisions of the General Data Protection Regulation (GDPR) and Data Protection Act 2018 for the following purposes and on the basis of the following legal base:
For the fulfillment of pre-contractual and contractual duties (Article 6 Sect. 1b GDPR) as well as on the basis of statutory provisions (Article 6 Sect. 1c GDPR):
- When you contact us (via contact form or e-mail), your details will be processed to handle the contact request and its processing.
- For the conclusion, processing, administration and execution of the contractual relationship as well as for the purposes of customer service including recording of telephone calls, chats, e-mails and other contact enquiries;
Within the scope of weighing of legitimate interests (Article 6 Sect. 1f GDPR):
We process your data for safeguarding our or third parties’ legitimate interests where necessary. We are pursuing the following legitimate interests in particular:
- Improvement of the quality of our products and services, testing and optimization of procedures for needs analysis and direct customer approach as well as measures for customer loyalty and service improvement;
- Conducting customer satisfaction and opinion surveys, provided that you have not objected to the use of your data for this purpose;
- Ensuring the IT security and IT operation of Vauxhall Finance, in particular the security of the website (see above under "Where we receive your data and what data we use").
Within the scope of a consent given by you (Article 6 para. 1a GDPR):
With whom we share your data (recipients) and where the recipients are located
Within Vauxhall Finance and in compliance with the applicable data protection laws, those departments that require your data in order to fulfil our contractual and statutory obligations will have access to it. Processors used by us may also receive data for these purposes. These are companies in the categories of customer service, IT services, telecommunications and consulting as well as sales and marketing. These data are processed both within the European Union and the US. Please be advised that we have agreed on EU standard data protection clauses with recipients of your data for countries without an adequacy decision by the EU Commission pursuant to Article 45 GDPR in order to protect your data and achieve an adequate level of protection. You have the possibility of receiving or inspecting a copy of the present EU standard data protection clauses. If necessary please contact us under the contact details given above.
Outside the Vauxhall Finance , we only pass on information about you to third parties if one of the legal bases listed under "For what purposes do we process your data?" applies, if you have consented to the data being passed on, or if we are subject to a legal obligation to pass it on. If your inquiry via contact form or e-mail refers to the conclusion of a car insurance policy, we share your data with our cooperation partners for insurance products.
How long do we store your data for
If necessary, we process and store your personal data in the context of your request by contact form, e-mail or web-chat. The time limits for storage and documentation will vary depending on the nature of your query but general retention periods are set out in our Records Management Policy and Retention schedules. When using web-chat the following policy applies:
The storage period is also assessed according to the statutory limitation periods, which, for example, may be up to 7 years.
For security reasons (e.g. to clarify misuse or fraud), log file information is stored for a period of 30 days and then deleted (see above "Where we obtain your data and which data we use"). Where further storage of data is necessary for evidence purposes, it is excluded from deletion until the respective incident has been finally resolved.
You have the following rights with regard to your data and our processing of your data:
- Right of access pursuant to Article 15 GDPR, i.e. you have the right to request information about your personal data stored by us at any time;
- Right to rectification pursuant to Article 16 GDPR, i.e. in case your personal data is inaccurate or incomplete, you may request their rectification;
- Right to erasure of your data pursuant to 17 GDPR, i.e. you can request the deletion of your personal data to the extent permitted by law;
- Right to restriction of the processing of your data pursuant to Article 18 GDPR, i.e. you have the right to demand the deletion or restriction of the processing of your personal data if, for example, such processing has no longer a legitimate business purpose or a legal storage obligation
- Right to data portability pursuant to Article 20 GDPR, i.e. you have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance.
To exercise these rights please contact us directly at the contact details specified above (see above paragraph “Who we are”).
Moreover, you have the right to complain to the
Information Commissioner’s Office.
Right to object pursuant to Article 21 GDPR
Right of objection
You have the right to object on grounds arising from your specific situation against the processing of your personal data being carried out on the basis of Article 6 Sect. 1e GDPR (data processing in public interest) and Article 6 Sect. 1f GDPR (data processing on the basis of legitimate interests); this will also apply to profiling based on this provision as defined by Article 4 No. 4 GDPR, which we use for credit rating or advertising purposes.
If you object, we will no longer process your personal data unless we can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
In individual cases we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of your personal data for such advertising; this will also apply to profiling to the extent that it is associated with such advertising. Where you object to the processing for purposes of direct marketing, we will no longer process your personal data for these purposes. The objection may be filed without any prescribed formalities and there are no other costs than the transmission costs according to the basic tariffs.
Am I obligated to provide data?
In regard to our website, when you visit you automatically provide limited personal data that is technically or for IT security reasons necessary for the use of our website.
When contacting us by form ,e-mail or web-chat, you only have to provide the personal data required to process your enquiry. Otherwise we will not be able to process your request.
Is my data used for an automated decision process including profiling (scoring)?
In the context of accessing our website or contacting us by form, e-mail, or web-chat we generally do not use fully automated decision-making pursuant to Article 22 GDPR and no profiling. Should we use these procedures in individual cases, we will inform you separately if this is required by law.
By default, we only use
technicallynecessary cookies. Necessary cookies enable the core functionalities of our website. The website cannot be displayed correctly without these cookies or individual areas may not function properly.
These technologies are used by advertisers to serve ads that are relevant to your interests
List of Marketing cookies
These technologies allow us to analyze the use of the website in order to measure and improve performance.
List of Analytics cookies
You can return to our Cookie Settings banner at any time and review what these cookies are and what they do, and decide whether to consent to them.
You can withdraw your consent to the storage of cookies on your device with effect for the future. You can make these changes to the cookies used at any time using the following link to our Cookie Settings banner. This can be done individually or by category.
Alternatively, you can block the storage of cookies via the settings of your browser (please refer to the help page of your browser to find out how to set the cookie handling).
UPDATES TO THE PRIVACY STATEMENT
Against the background of constantly changing technical and economic conditions, we regularly update our data protection declarations. The current version will be available on this page. In the event of significant changes, if you are a customer, we will inform you individually via the usual contact channels.