Last Updated: 03/03/2021
The protection of your personal data matters to us. With this privacy statement we would like to inform you which personal data we collect about you on our website, why we use and pass on this data, how long we store the data, which rights you have and how you can exercise them. If you are a customer of Vauxhall Finance Plc the Customer Data Protection Notice will also apply to you.
This privacy statement explains to you the nature, scope and purpose of the processing of personal data within our website (hereinafter referred to as “website”). The privacy statement applies regardless of the domains and devices used (e.g. desktop, mobile, etc.).
When we refer to data in the following, we mean your personal data. This is all information by which you can be directly or indirectly identified as a person. Which data is processed in detail and how it is used depends largely on the services we make use of.
In our privacy statement, we use various other terms within the meaning of the GDPR. These include terms such as processing, restriction of processing, profiling, pseudonymisation, controller, processor, recipient, third party, consent, supervisory authority and international organisation. In Art. 4 GDPR you can find the definitions for these terms.
Please read the following information carefully.
If you transfer personal data about your spouse, life partner, relatives or other third parties (e.g. guarantors), please inform them about the processing of their personal data by us and refer them to this privacy notice. If necessary, the consent of these persons for data transfer is required.
Vauxhall Finance plc (‘Vauxhall Finance’, also referred to in this Notice as ‘we’ or ‘us’) is the data controller of your data. Vauxhall Finance’s registered address is Vauxhall Finance plc, Heol-y-Gamlas, Parc Nantgarw, Treforest, Cardiff, CF15 7QU. We are part of the Opel Bank S.A. group of companies.
Please address any communication for the attention of our Data Protection Officer to: Data Protection Officer, Vauxhall Finance plc, Heol-y-Gamlas, Parc Nantgarw, Treforest, Cardiff, CF15 7QU. You can also contact the Data Protection Officer by phone on 01443 846274, or by email at firstname.lastname@example.org.
If you use the website exclusively for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you visit our website for information purposes only, we collect the following access data, which is technically necessary for us to display our website and to guarantee stability and security. This access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specifically accessed website), access status/HTTP status code, amount of data transferred, referrer URL (previously visited page), operating system and its interface, browser type and language and version of the browser software, notification of successful access.
If you start a chat conversation, we additionally process the following personal data: identification information, legitimation information, chat content, assigned user ID, connection time. We also receive your personal data if you contact us via contact form, or e-mail. Personal data processed in this case are e.g. name, address, e-mail address, telephone number.
We process your personal data in compliance with the provisions of the General Data Protection Regulation (GDPR) and Data Protection Act 2018 for the following purposes and on the basis of the following legal base:
For the fulfillment of pre-contractual and contractual duties (Article 6 Sect. 1b GDPR) as well as on the basis of statutory provisions (Article 6 Sect. 1c GDPR):
Within the scope of weighing of legitimate interests (Article 6 Sect. 1f GDPR):
We process your data for safeguarding our or third parties’ legitimate interests where necessary. We are pursuing the following legitimate interests in particular:
Within the scope of a consent given by you (Article 6 para. 1a GDPR):
Within Vauxhall Finance and in compliance with the applicable data protection laws, those departments that require your data in order to fulfil our contractual and statutory obligations will have access to it. Processors used by us may also receive data for these purposes. These are companies in the categories of customer service, IT services, telecommunications and consulting as well as sales and marketing. These data are processed both within the European Union and the US. Please be advised that we have agreed on EU standard data protection clauses with recipients of your data for countries without an adequacy decision by the EU Commission pursuant to Article 45 GDPR in order to protect your data and achieve an adequate level of protection. You have the possibility of receiving or inspecting a copy of the present EU standard data protection clauses. If necessary please contact us under the contact details given above.
Outside the Vauxhall Finance , we only pass on information about you to third parties if one of the legal bases listed under “For what purposes do we process your data?” applies, if you have consented to the data being passed on, or if we are subject to a legal obligation to pass it on. If your inquiry via contact form or e-mail refers to the conclusion of a car insurance policy, we share your data with our cooperation partners for insurance products.
If necessary, we process and store your personal data in the context of your request by contact form, e-mail or web-chat. The time limits for storage and documentation will vary depending on the nature of your query but general retention periods are set out in our Records Management Policy and Retention schedules. When using web-chat the following policy applies: https://www.vauxhallfinance.com/webchat-privacy-policy/
The storage period is also assessed according to the statutory limitation periods, which, for example, may be up to 7 years.
For security reasons (e.g. to clarify misuse or fraud), log file information is stored for a period of 30 days and then deleted (see above “Where we obtain your data and which data we use”). Where further storage of data is necessary for evidence purposes, it is excluded from deletion until the respective incident has been finally resolved.
You have the following rights with regard to your data and our processing of your data:
To exercise these rights please contact us directly at the contact details specified above (see above paragraph “Who we are”).
Moreover, you have the right to complain to the Information Commissioner’s Office.
Right to object pursuant to Article 21 GDPR
Right of objection
You have the right to object on grounds arising from your specific situation against the processing of your personal data being carried out on the basis of Article 6 Sect. 1e GDPR (data processing in public interest) and Article 6 Sect. 1f GDPR (data processing on the basis of legitimate interests); this will also apply to profiling based on this provision as defined by Article 4 No. 4 GDPR, which we use for credit rating or advertising purposes.
If you object, we will no longer process your personal data unless we can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
In individual cases we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of your personal data for such advertising; this will also apply to profiling to the extent that it is associated with such advertising. Where you object to the processing for purposes of direct marketing, we will no longer process your personal data for these purposes. The objection may be filed without any prescribed formalities and there are no other costs than the transmission costs according to the basic tariffs.
In regard to our website, when you visit you automatically provide limited personal data that is technically or for IT security reasons necessary for the use of our website.
When contacting us by form ,e-mail or web-chat, you only have to provide the personal data required to process your enquiry. Otherwise we will not be able to process your request.
In the context of accessing our website or contacting us by form, e-mail, or web-chat we generally do not use fully automated decision-making pursuant to Article 22 GDPR and no profiling. Should we use these procedures in individual cases, we will inform you separately if this is required by law.
You can return to our Cookie Settings banner at any time and review what these cookies are and what they do, and decide whether to consent to them.
You can withdraw your consent to the storage of cookies on your device with effect for the future. You can make these changes to the cookies used at any time using the following link to our Cookie Settings banner. This can be done individually or by category.
Alternatively, you can block the storage of cookies via the settings of your browser (please refer to the help page of your browser to find out how to set the cookie handling).
Against the background of constantly changing technical and economic conditions, we regularly update our data protection declarations. The current version will be available on this page. In the event of significant changes, if you are a customer, we will inform you individually via the usual contact channels.