*These terms and conditions have been established by Kvdcars on February 24th, 2020*

Policy

This website policy describes how Kvdcars processes personal data through the use of cookies on our website. If you have any questions about how we process your personal data or how we use cookies, please contact us at dpo@kvdcars.com. 

When you visit our homepage, you will be asked to accept our use of cookies. By ticking the box “Yes, I accept your use of cookies”, you give consent to our using cookies and processing your personal data as stated in this website policy. If you do not want us to use any cookies at all, you can tick the box “No, I do not accept your use of cookies”. Please note that if you do not accept our use of cookies, it may affect the way you use and experience our website. 

Cookies

Cookies are used on Kvdcars’ websites to collect information automatically. A cookie is a small text file that the browser saves on the website visitor's computer. The text file contains information that is used, for example, to make it easier for the user to use the website and to provide the owner of the website with certain information. This website policy describes what sort of cookies we use on our website, the purpose of each cookie, how long we store them and how you can block or delete cookies. 

What sort of cookies do we use?

There are two main types of cookies: 1) a long-term cookie remains on the visitor's computer for a predetermined period. 2) a session cookie is temporarily saved in the computer memory while a visitor is connected to a website. Session cookies disappear when you close your browser. 

What do we use cookies for?

When visiting Kvdcars’ website (www.kvdcars.com), the IP address is recorded automatically to measure visiting frequency. Kvdcars stores web statistics so as to safeguard the technical functionality and utilisation of the network. Kvdcars also uses the statistics to gain an impression of user experience and to develop its website. Kvdcars uses web statistics to improve its services and knowledge about the needs of customers and website visitors. The information is used to develop services within the framework of Kvdcars’ operations. 

Kvdcars also collects and analyses the following information about visitors to Kvdcars’ websites: 

• Browser (Internet Explorer, Firefox, Chrome etc.)
• Information about what type of device the visitor is using. 
• Operating system (Windows, IOS etc.) 
• Pages visited at Kvdcars

 

Kvdcars uses cookies to improve the website for visitors, for example by (a) adapting the website according to the visitor's wishes, choices and interests, (b) helping visitors to keep bidding in good order, (c) enabling us to handle visitors’ bids, (d) checking that the user is logged onto Kvdcars’ website, thus avoiding the need to log on for each new page visited and (e) enabling us to adapt our services so that visitors see advertising that is relevant to them. 

Long-term cookies are used, among other things, to save visitors’ personal settings with Kvdcars, so they do not need to keep making certain choices every time they visit Kvdcars’ website, for example, or to adapt and make information and marketing as relevant to them as possible. Session cookies are used, among other things, to be able to register statistics about the use of Kvdcars’ website. 

The table below describes the different cookies used on our website, the purpose of the cookie, what information the cookie saves, whether it is a session cookie, long-term cookie or third party cookie, how long the cookie is used, and whether the information in the cookie is shared with any other company or organisation. OBS – Kan vi ha denna tabell i en länk istället ?  

Cookie	User	Purpose	Lagrad information	Stored information	Sharing
Adform, C, CM, CM14, gads, gca, adtrc, anj, cid, icu, sess, uid, uuid2	Adforms.net	Show reminders about ongoing auctions on other sites	Advertisements that have been shown, unique ID.  No IP or personal data	C - 21 days, CM - 1 day, CM14 - 4 days, gads- 18 months, gca - 11 months, adtrc - 14 days, anj - 3 months cid - 2 months, icu - 2 months, sess - 1 days, uid - 2 months, uuid2 - 3 months	No
VWO, vwo_uuid_v2	Kvdcars.com, (https://vwo.com/)	Collection for improved experience, more relevant information	Unique ID that is not linked to a user account/IP	1 year	No
Google Analytics, ga, gi, utma, utmz	Kvdcars.com, (www.google.com)	Collection for improved experience, more relevant information	Only ID for anonymous website follow-up	ga: 2 years gi: 1 day	No
Imbox, cfduid, imbxxHit500	.imbox.io	Possibility of chatting with customer service	Only ID to keep any chats intact so the same Kvdcars employee can follow the whole dialogue	1 year	No
5Y6xTNl3Tay6mQ02sgWGo4, 5MuOz5PbqwCSCOyCuAq0Kc, 5nviyfq4UMGwm0yqy4KkKE, 2ykQ3Ya6vOQGi20wOCIcuw	Kvdcars.com	Keep track of accepted cookies, Keep track of messages that have been shown and hidden	1 if cookies are accepted, 1 if already shown, do not show again	1 year	No
Contentful, gid, intercom-session-xxxx, utmxx, cf_first_visit, insp_targlpt, insp_wid, insp_slim, insp_nv, utmx, insp_targlpu, insp_norec_sess, ga, visid_incap_678149, sp_id.ad18, cf_experiment, intercom-lou-k62e90m5, ajs_anonymous_id, ajs_gro	ContentFul (www.contentful.com)	CCMS – editorial content on the web so that the right information is shown depending on language and whether it is an internal/external user	Unique ID and information about when information was last collected	6 months	No

 

How you block and/or remove cookies

By using Kvdcars’ website, you are informed about the use of cookies as stated here. If you do not accept the use of cookies, you can disable cookies in your browser settings. Please note that if you do not accept our use of cookies, it may affect the way you use and experience our website.  

If you use different devices to see and access the website (e.g. your computer, smartphone or tablet), you must ensure that the browser on each of your devices is adjusted to suit your wishes regarding cookies.  You can also adjust the browser so that you are asked every time Kvdcars’ website attempts to place a cookie on your computer. Previously saved cookies can also be deleted using the browser; see your browser's help pages for more information or click on this link: Disable cookies. You can also delete cookies from your hard disc manually at any time. 

If you do not want us to use any cookies at all, you can tick the box “No, I do not accept your use of cookies”. Please note that if you choose not to accept the storage of cookies, you may not be able to use all parts of our website and some parts of the website may not function correctly.  

Additional information

Please contact Kvdcars via the following email address if you have any questions about this website policy: kundtjanst@kvdcars.com. 

Kvdcars’ personal data processing

Kvdcars AB, corp. ID. no. 556746-1180, address Kilsgatan 4, SE-411 04 Gothenburg, telephone number 010-167 30 00, is responsible for the processing of your personal data through the use of cookies on our website. This means we are responsible for ensuring that your personal data are handled correctly and in accordance with applicable legislation. 

What personal data are collected?

Kvdcars collects and processes personal data about you through your use of Kvdcars’ website, for example, data you provide when you make an enquiry, sign up as a member, or provide information on Kvdcars’ websites. The personal data that Kvdcars processes are name, email address, sales and purchases history (including payment and bidding history), IP address and telephone number. Kvdcars stores bids in order to follow market developments regarding car prices and to protect both buyers and sellers from bidding that is detrimental to the auction process.  

Purpose of processing personal data

We process your personal data so as to improve your experience of our website and its services and to ensure that the information that may be sent to you is relevant to you as a member and is in accordance with the purposes stated in the table above. Kvdcars processes your personal data for the stated purposes on the basis of your acceptance of the use of cookies and the processing of personal data that implies. 

Technical and organisational security measures

We have taken several security measures to ensure that the personal data we process is secure: We have implemented security procedures and technical and organisational measures to protect your personal data, ensuring for example that passwords cannot be seen by anyone at Kvdcars and that forgotten passwords can only be restored through an email with a specific restoration link. Passwords are hashed which means they cannot be worked our backwards. All communication is encrypted, both external communication from Kvdcars and internal communication between systems.  We also have the necessary firewalls and antivirus programs to protect the network and prevent unauthorised access. Access to the areas where personal data are stored is limited and employees must be identified before gaining access. 

Your rights

According to current personal data legislation, you are entitled to receive information free of charge about the personal data about you that are processed, regardless of how they are collected. You have the right to have incorrect personal data about you rectified, to object to certain forms of processing of your personal data, to request that the processing of your personal data is limited, or that personal data are deleted. It should be noted that a restriction or deletion of your personal data may imply that Kvdcars is not able to fulfil its obligations under the agreement made with you as a member. You also have the right to request your personal data in a machine-readable format in order to transfer the data to another person in charge of personal data. 

You must submit a written request to us if you want information about what personal data about you are being processed. According to current personal data legislation, you must send the request by email to dpo@kvdcars.com or by post to the address below.  

That is also the address you must use if you want to request the amendment of incorrect or misleading data, or request a restriction, or object to the processing of your personal data, or request you be completely forgotten and removed from Kvdcars’ systems.  

To Data Protection representatives 
Kvdbil AB
Kilsgatan 4
SE-411 04 Gothenburg
Sweden

If you are dissatisfied with how Kvdcars is treating your personal data, you have the right to report your dissatisfaction to the Swedish Data Protection Authority (which is going to change name to the Integrity Protection Authority) which is the supervisory authority for the processing of personal data. 

Amendments to the website policy

Kvdcars reserves the right to amend this website policy at any time to the extent that such changes are necessary to rectify disruption or to fulfil new legal or technical requirements. All amendments to this website policy will be published on Kvdcars’ websites. 

Privacy Policy

Personal data

Kvdcars is concerned about your personal privacy and strive to protect your personal data in the best way possible. It is Kvdcars’ intention to comply with any and all applicable laws and obligations regarding protection of personal data. In connection with you entering into a sales agreement regarding your vehicle, Kvdcars will process your personal data. This policy helps you to inter alia understand what kind of personal data Kvdcars is processing and for what purposes it is processed. By accepting the terms set out in the sales agreement you confirm that you have been informed about the nature of the processing of your personal data in accordance with the below information. More information regarding our processing of your personal data when you visit our website is possible to find at https://www.kvdcars.com/websitepolicy.

Controller

Kvdbil AB (”Kvdcars”/”we”), company registration no. 556746-1180, with address Kilsgatan 4, SE-411 04 Gothenburg, phone no. 010-167 30 00 is the controller of the processing of your personal data.

What categories of personal data do we process, for what purpose, on what legal basis and for how long?

Kvdcars processes your personal data for the purposes set forth below. For each purpose Kvdcars must have a legal basis. A legal basis could e.g. be (i) your consent to the relevant processing activity, (ii) that the processing is necessary in order for the performance of a contract to which you are a party, or (iii) that Kvdcars or a third party has a legitimate interest to process the personal data which is not overridden by your interest of not having the personal data processed. In the tables listed below, the categories of personal data, retention period and legal basis that Kvdcars relies on for each purpose will be identified.

__Purpose: Creating and administrating your membership / personal account__

Processing activities

• Use the personal data collected to create and administer your Kvdcars membership, making it possible for you to obtain Kvdcars’ services.
• Create the login function and verify users at login.
• Ensure identity. • Name.
• Social security number.
• Contact information (e-mail address, phone no., postal address, zip code and city).
• User information for your member account (customer ID and user name).

Categories of personal data

• Name.
• Social security number.
• Contact information (e-mail address, phone no., postal address, zip code and city).
• User information for your member account (customer ID and user name).

Legal basis: Performance of the membership agreement.
This collection of personal data is necessary for us to be able to perform our undertakings in accordance with the membership agreement that you enter into when you choose to become a member.

__Retention period: __ We will process your personal data until the membership is cancelled.

__Purpose: Performance of assignment__

Processing activities

• Management of payments (including analysis of possible payment solutions which may include a control of payment history and credit information).
• Preparation and administration of auctions.
• Management of complaints and warranty matters.
• Ensure identity.
• Contact in connection with sales services.
• Payment and invoicing.
• Control and payment of debts.
• Termination of lease agreement.

Categories of personal data

• Name.
• Social security number.
• Contact information (e-mail address, phone no., postal address, zip code and city).
• User information for your member account (customer ID and user name).
• Purchase and sales history.
• Payment information (bank account no., clearing no. and credit card information).
• Vehicle information (license plate no., brand and model).
• Debts and credits pertaining to the vehicle.
• Remaining lease period.

Legal basis: *Performance of the agreement. *

This collection of personal data is necessary for us to be able to perform our undertakings in accordance with the agreement entered into by you engaging us to perform our services.

__Retention period: __

We will process your personal data for the duration of the agreement and subsequent to this for a period of 5 years in order to manage potential complaints and for the period necessary in order to be able to determine, assert or defend any legal claims.

__ Purpose: Home delivery of vehicles__

Treatments performed

• Transmission of data to carrier.
• Ensure identity.

Categories of personal data

• Name.
• Social security number.
• Contact details (address, postal code and city).
• Order number.

__ Legal basis: __ * Compliance with the agreement. *
This treatment is required in order for us to fulfill our obligations under the agreement we have entered into with the fact that you have hired us to perform our services.

__Retention period __ The data will be stored for 10 years (general prescription) after a purchase is completed.

__Purpose: Carrying out of market and customer surveys__

Processing activities

• Carry out customer surveys.
• Process and analyse results from customer satisfaction surveys or market surveys.

Categories of personal data

• Name.
• Contact information (e-mail address, phone no., postal address, zip code and city).
• User information for your member account (customer ID and user name).
• Purchase and sales history.
• Vehicle information (license plate no., brand and model).

Legal basis: Legitimate interest.
The processing of personal data is necessary to meet our legitimate interest to perform market and customer surveys.

__Retention period: __

The personal data will be processed for a period of 2 years subsequent to the performance of the customer survey.

__Purpose: Evaluation and development of the business activities __

Processing activities

• Compile statistics of the use of our services based on the personal data collected for the purpose.
• Evaluate, develop and improve the user experience of our service.

Categories of personal data

• Name.
• Contact information (e-mail address, phone no., postal address, zip code and city).
• User information for your member account (customer ID and user name).
• Purchase and sales history.
• Vehicle information (license plate no., brand and model).

Legal basis: Legitimate interest.
The processing of personal data is necessary to meet our legitimate interest to develop our services.

Retention period: The personal data will be processed for a period of 2 years subsequent to the performance of the evaluation.

__Purpose: To perform legal obligations__

Processing activities

• Accounting of financial transactions.
• Necessary processing to fulfil legal obligations in accordance with law, judicial decisions or official decisions (e.g. Swedish Accounting Act).

Categories of personal data

• Name.
• Social security number.
• Contact information (e-mail address, phone no., postal address, zip code and city).
• User information for your member account (customer ID and user name).
• Payment history.
• Payment information (bank account no., clearing no. and credit card information).

Legal basis: Legal obligation. The collection of personal data is prescribed in law. If the personal data is not provided we are not able to perform our legal obligations, and thus you are not able to use Kvdcars’ services.

Retention period: 5 years subsequent to the latest use of our services, 7 years for accounting and otherwise for the period prescribed in law.

From where do we obtain your personal data?

Kvdcars processes personal data collected directly from you when you become a member, when you enter into an agreement regarding our services or otherwise use our services or our website. Kvdcars further processes personal data collected from the Swedish Transport Agency’s records and from the finance company where you are a customer. Updates of the personal data are performed using the Swedish Population Address Register Board (SPAR) via Bisnode.  

What happens if you do not provide us with your personal data?

In order for us to fulfill the abovementioned purposes it is necessary for you to provide us with certain personal data. If you do not provide us with the personal data, we may not be able to fulfill our obligations towards you and you will consequently not be able to use our services. The personal data necessary for us to process in order for you to be able you use our services are the ones processed for the purposes of creating and administrating your membership, to perform the assignment, home delivery of vehicles and in order to comply with legal obligations. An exhaustive enumeration of such categories of personal data you will find in the above tables.

With whom do we share your personal data?

In order to fulfill the purposes listed above, Kvdcars may share your personal data with the following recipients. (a) Other companies within the Kvdcars group, (b) IT suppliers, partners, marketing companies, finance companies and carriers.

Will we transfer your personal data outside of the EU/EEA?

Kvdcars does not regularly transfer your personal data outside of the EU/EEA. However, Kvdcars may transfer some of your personal data to countries outside the EU/EEA if your vehicle is sold and exported to such country. If the EU Commission has not decided that a country ensures an adequate level of protection for your personal data, then we will provide a description of the safeguards implemented by us or the legal basis relied on by us to ensure that the transfer of your personal data is in compliance with European data protection legislation. For more information on whether we have transferred your personal data outside of the EU/EEA, what countries your personal data has been transferred to and what safeguards Kvdcars has implemented, please contact us using our contact details listed in the end of this privacy policy.

Your rights

Below is a summary of the rights you have under European data protection legislation. The exercise of these rights is free of charge and you may exercise the rights by contacting us (see contact details in the end of this privacy policy). Please do not hesitate to contact us should have any questions regarding your rights.

Note that Kvdcars will always assess a request to exercise a right to determine whether the request is valid. All rights listed below are not absolute and exceptions may apply. In addition to the rights set forth below, you always have the right to lodge a complaint with a supervisory authority regarding Kvdcars’ processing of your personal data.

(a) Right of access. You are upon request entitled to receive a copy of your personal data that Kvdcars processes and also to obtain supplementary information about Kvdcars’ processing of your personal data.

(b) Right to rectification. You have the right to have your personal data corrected and/or completed if it is inaccurate and/or incomplete.

(c) Right to erasure. You have the right to request that Kvdcars erases your personal data without undue delay in the following circumstances:

-the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
-you withdraw your consent to a processing activity and there is no other legal basis for the processing;
-you make a valid objection to the processing of your personal data;
-the personal data has been unlawfully processed;
or
-the personal data has to be erased for compliance with a legal obligation.

(d) Right to restrict processing. You have the right to request restriction of the processing of your personal data in the following circumstances:

-the accuracy of the personal data is under examination;
-the processing is unlawful or is no longer needed for the purposes of the processing but you oppose the erasure of personal data and request restriction instead;
-Kvdcars no longer needs the personal data but you need the personal data for the establishment, exercise or defense of legal claims;
or
-you have objected to the processing of your personal data and such objection is under verification.

(e) Right to data portability. Under certain circumstances you have the right to receive the personal data concerning you which you have provided to Kvdcars in order to transmit these to another service provider if the processing of the personal data is based on your consent or the performance of a contract.

(f) General right to object. You have the general right to, at any time, object to the processing of your personal data that is based on Kvdcars’ legitimate interests. If you object we have to demonstrate that we have compelling legitimate grounds for such processing or that we need the personal data for the establishment, exercise or defense of legal claims.

(g) Right to object to direct marketing. You have a right to, at any time, object to the processing of your personal data for direct marketing purposes. If you do this, Kvdcars may no longer process your personal data for such purposes.

If you would like further information regarding our processing of personal data or if you would like to exercise any of the abovementioned rights, please send us a request. Requests are sent by e-mail to dpo@kvdcars.com or via mail to the below address.

Data Protection Representatives
Kvdcars AB
Kilsgatan 4
SE-411 04 Gothenburg