Information on the processing of personal data within the purchase of a car

We would like to inform you, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (DSGVO) about the processing of personal data, that occurs within the purchase of a car by our company Driverama Germany GmbH, registered address Maximilianstraße 13, 80539 München (the “controller”).

More information about the rights of data subjects in relation to the processing of your personal data and contact numbers and address where you can obtain more information or file a complaint, as well as contact information of our appointed person for protection of personal data is available on this website: Privacy policy.

Transfer of personal data and categories of recipients of personal data Personal data are shared with connected persons of the controller and business partners who process personal data for the controller (contractual partner who take care of making changes in the car registry, transport companies, marketing and survey agencies, providers of technical solutions, providers of administrative, archiving, legal, accounting and similar services, providers of postal and communication services and electronic communication services), alternatively with other persons who provide services ordered by the data subject via the controller in relation to the purchase of the vehicle (e.g., ordering a custom license plate). Personal data may also be handed over to public administration bodies due to legal reasons (e.g., investigation of a crime or other offence, or a tax inspection). Personal data related to the vehicle are also shared with contractual partners who buy vehicles from the controller, for the purposes of obtaining an offer price that the price offer for the purchasing of the vehicle is based on. We do not share personal data outside of the EEA.

Within the processing of personal data, we store the following categories of personal data:

  • Identification data – name, surname, address, date of birth, identification card number (including all data stated on the identification card) in accordance with KYC (know your customer) processes; for entrepreneurs, instead of date of birth and address we store the place of business, company identification number and tax identification number;
  • Documents demonstrating the power of representation (if the seller is represented during the sale);
  • contact information – email and phone number;
  • Information on used services – information from concluded contract and other services;
  • Information about mutual communication – information from mail communication and phone calls;
  • Payment information – account number and other information stated in the tax document;
  • Information about execution and insolvency – information about whether execution and insolvency proceedings that would hinder the sale exist against the owner;
  • Information related to the vehicle – VIN and other information filled in to the online form; obtained during the contractual process directly from the seller (or the seller’s representative) or from an inspection of the vehicles, alternatively from third parties;
  • Dynamic biometric signature – if the data subject granted their consent.

Provision of identification data, identification documents, payment data and data about the vehicle is a contractual and/or legal obligation and if the seller refuses to provide such information, no contract can be concluded between the controller and the seller. Provision of other personal data is voluntary and is not a condition for the conclusion of a contract.

We obtain personal data directly from data subjects (alternatively from the data subject’s representative authorized to sell the vehicle). Personal data used to verify the identity of the seller or their representative are also obtained from public registries, and data related to the vehicles are obtained from third parties providing such data for purposes of verification of the vehicle. Persona data (of the seller or seller’s representative) are stored for 10 years from the end of the year in which the contract has been concluded. If the contract is not concluded, we store personal data related to the vehicles for purposes of our justified interests for a maximum of 10 years. If a contract is concluded between us and the data subject, or if the data subject gives us their consent with sending of marketing communication – identification and contact personal data are stored up to the moment when the consent is revoked or when such processing is rejected.

We process personal data provided to us within a vehicle purchase (be it directly from the vehicle owner or someone representing the owner) in order to conclude a control and carry out the transaction and to determine and verify the identity of the seller (or the representative) and to check their authorization to sell the vehicle. We also process personal data for the purpose of client satisfaction survey and development of our services, including sending of marketing message, and for statistic, development and research activities. Information related to the vehicle is also processed for their possible later use, even if no purchase contract is concluded between us and the potential seller (the stored data are used within a new contractual process if the same vehicle is offered to us again in the future). If the data subject consents, we also process data for the purpose of sending marketing communication about all our products and services. The legal foundation for processing of personal data is:

  • Contractual obligations as per article 6 section 1 b) of DSGVO – conclusion of a contract, carrying out a transaction and possible change in the car registry;
  • Legal obligations as per article 6 section 1 c) of DSGVO – namely identification, verification and inspection of the seller, identification of the seller’s representative and archiving for accounting and tax purposes;
  • Justified interests as per article 6 section 1 f) of DSGVO – client satisfaction survey and development of our services, including sending of related marketing messages, processing of statistics, development and research activities; storage to prevent any disputes and application of rights towards the seller or the seller’s representative; processing and storage of data related to the vehicle even if the purchase contract is not concluded;
  • Consent as per article 6 section 1 a) of DSGVO – if the subject grants us consent with processing of dynamic biometric signature or with sending of marketing communication regarding all our products and services.

© 2021 All rights reserved.

Get startedAbout usLog inContactPress kitBranchesCareers

Germany HQ:

Driverama Germany GmbH

Maximilianstraße 13

80539 München

+49 941 640 790 32

info@driverama.com