Information on the processing of personal data within the purchase of a car

We would like to inform you, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (DSGVO) about the processing of personal data, that occurs within the purchase of a car by our company Driverama Germany GmbH, registered address Maximilianstraße 13, 80539 München (the “controller”).

More information about the rights of data subjects in relation to the processing of your personal data and contact numbers and address where you can obtain more information or file a complaint, as well as contact information of our appointed person for protection of personal data is available on this website: Privacy policy.

We process personal data provided to us within a vehicle purchase (be it directly from the vehicle owner or someone representing the owner) in order to conclude a control and carry out the transaction and to determine and verify the identity of the seller (or the representative) and to check their authorization to sell the vehicle. We also process personal data for the purpose of client satisfaction survey and development of our services, including sending of marketing message, and for statistic, development and research activities. Information related to the vehicle is also processed for their possible later use, even if no purchase contract is concluded between us and the potential seller (the stored data are used within a new contractual process if the same vehicle is offered to us again in the future). If the data subject consents, we also process data for the purpose of sending marketing communication about all our products and services. The legal foundation for processing of personal data is:

  • Contractual obligations as per article 6 section 1 b) of DSGVO – conclusion of a contract, carrying out a transaction and possible change in the car registry;
  • Legal obligations as per article 6 section 1 c) of DSGVO – namely identification, verification and inspection of the seller, identification of the seller’s representative and archiving for accounting and tax purposes;
  • Justified interests as per article 6 section 1 f) of DSGVO – client satisfaction survey and development of our services, including sending of related marketing messages, processing of statistics, development and research activities; storage to prevent any disputes and application of rights towards the seller or the seller’s representative; processing and storage of data related to the vehicle even if the purchase contract is not concluded;
  • Consent as per article 6 section 1 a) of DSGVO – if the subject grants us consent with processing of dynamic biometric signature or with sending of marketing communication regarding all our products and services.

We obtain personal data directly from data subjects (alternatively from the data subject’s representative authorized to sell the vehicle). Personal data used to verify the identity of the seller or their representative are also obtained from public registries, and data related to the vehicles are obtained from third parties providing such data for purposes of verification of the vehicle. Persona data (of the seller or seller’s representative) are stored for 10 years from the end of the year in which the contract has been concluded. If the contract is not concluded, we store personal data related to the vehicles for purposes of our justified interests for a maximum of 10 years. If a contract is concluded between us and the data subject, or if the data subject gives us their consent with sending of marketing communication – identification and contact personal data are stored up to the moment when the consent is revoked or when such processing is rejected.

Within the processing of personal data, we store the following categories of personal data:

  • Identification data – name, surname, address, date of birth, identification card number (including all data stated on the identification card) in accordance with KYC (know your customer) processes; for entrepreneurs, instead of date of birth and address we store the place of business, company identification number and tax identification number;
  • Documents demonstrating the power of representation (if the seller is represented during the sale);
  • contact information – email and phone number;
  • Information on used services – information from concluded contract and other services;
  • Information about mutual communication – information from mail communication and phone calls;
  • Payment information – account number and other information stated in the tax document;
  • Information about execution and insolvency – information about whether execution and insolvency proceedings that would hinder the sale exist against the owner;
  • Information related to the vehicle – VIN and other information filled in to the online form; obtained during the contractual process directly from the seller (or the seller’s representative) or from an inspection of the vehicles, alternatively from third parties;
  • Dynamic biometric signature – if the data subject granted their consent.

Provision of identification data, identification documents, payment data and data about the vehicle is a contractual and/or legal obligation and if the seller refuses to provide such information, no contract can be concluded between the controller and the seller. Provision of other personal data is voluntary and is not a condition for the conclusion of a contract.

Transfer of personal data and categories of recipients of personal data Personal data are shared with connected persons of the controller and business partners who process personal data for the controller (contractual partner who take care of making changes in the car registry, transport companies, marketing and survey agencies, providers of technical solutions, providers of administrative, archiving, legal, accounting and similar services, providers of postal and communication services and electronic communication services), alternatively with other persons who provide services ordered by the data subject via the controller in relation to the purchase of the vehicle (e.g., ordering a custom license plate). Personal data may also be handed over to public administration bodies due to legal reasons (e.g., investigation of a crime or other offence, or a tax inspection). Personal data related to the vehicle are also shared with contractual partners who buy vehicles from the controller, for the purposes of obtaining an offer price that the price offer for the purchasing of the vehicle is based on. We do not share personal data outside of the EEA.

We would like to inform you, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”) about the processing of personal data, that occurs within the sale of a vehicle and other products and services (including intermediated services) by our company Driverama Germany GmbH, with its registered seat at Maximilianstraße 13, 80539 Munich, Germany (the “Driverama”).

We process personal data that you provide us in connection with your purchase of a vehicle or other goods and services at the website of Driverama “www.driverama.de”. The purpose of your personal data processing is the administration of your purchase, including fulfilment of archiving obligations, bookkeeping, tax, and accounting purposes, eventual registration in designated vehicle registry and intermediation of a loan agreement, protection of our rights and legitimate interests, and enforcement of our claims in case of any potential disputes. We also process personal data for the purpose of your satisfaction survey and the development of our products and services, including the sending of marketing messages, and for statistical, development, and research activities. If you consent, we will also process personal data for the purpose of sending marketing communication about all our products and services. The legal bases for the processing of personal data are: Contractual obligations - Article 6 (1) b) of the GDPR – conclusion of a contract, carrying out a transaction and possible intermediation of loan agreement or change in the vehicle register; Legal obligations - Article 6 (1) c) of the GDPR – namely fulfilment of archiving obligations, bookkeeping, tax and accounting purposes; Legitimate interests - Article 6 (1) f) of the GDPR – client satisfaction survey and development of our services, including sending of related marketing messages, processing of statistics, development and research activities; storage to prevent any disputes and application of rights towards the buyer or the buyer’s representative; Consent - Article 6 (1) a) of the GDPR – if you grant us consent on the processing of your personal data for the purpose of sending marketing communication about all our products and services, recording of phone calls, or processing your dynamic biometric signature.

We obtain personal data directly from you (alternatively from your representative authorized to buy a vehicle). Personal data are used to verify your identity or the identity of your representative. Personal data are stored for 10 years from the end of the year in which the contract has been concluded. If you give us the consent to send you our marketing communication – identification and contact personal data are stored up to the moment when the consent is revoked or when such processing is rejected.

Within the processing of personal data, we store the following categories of personal data:
Identification data – such as name, surname, address, date of birth, identity card number; for entrepreneurs, instead of the date of birth and address we store the place of business, company identification number, and tax identification number; Contact information – such as email and phone number; Documents demonstrating the power of representation (if you are represented during the sale process); Payment information – such as bank account and paid amount; Information about your financial situation (if we intermediate the loan for you) – such as net monthly earnings, fixed regular expenses (rent, etc.), information about other loans; Information on provided services; Information about mutual communication – including information from e-mail communication and phone calls (if you provide us with your consent also recordings of the call); Information related to the vehicle or goods – including VIN, make, model, mileage, and other information about the vehicle and goods. Processing of identification data, contact data, payment data, and data about the vehicle is a contractual and/or legal obligation and if you refuse to provide such information, no contract can be concluded between us. Provision of other personal data is voluntary and is not a condition for the conclusion of a contract.

Personal data are shared with connected persons to us and business partners who process personal data for us (marketing and survey agencies, providers of technical solutions, providers of administrative, archiving, legal, accounting, financial, banking and similar services, providers of postal and communication services and electronic communication services), alternatively with other persons that provide services ordered by you via us in relation to the purchase, including: PS-Team Germany GmbH & Co. KG, with its registered seat at Am Klingenweg 6 65396 Walluf, Germany if you order vehicle registration service, Santander Consumer Bank AG, with its registered seat at Santander-Platz 1, 41061 Mönchengladbach, if we provide the intermediation of a loan agreement. Personal data may also be handed over to public administration bodies due to legal reasons (e.g., investigation of a crime or other offense, or a tax inspection). For more information about the sharing of personal data with third parties see our Privacy Policy.

More information about the rights of data subjects in relation to the processing of your personal data and contact numbers and addresses where you can obtain more information or file a complaint, as well as the contact information of our appointed person for the protection of personal data, are available at: www.driverama.de/privacy-policy.

We are member of AURES Holdings

© 2022 All rights reserved.

Get startedFinanceAbout usBlogLog inContactPress kitBranchesCareersDeliveryCar registrationWarranty

Germany HQ:

Driverama Germany GmbH

Maximilianstraße 13

80539 München

(0) 800 225 5766

info@driverama.com

Germany HQ:

Driverama Germany GmbH

Maximilianstraße 13

80539 München

We are member of AURES Holdings