We are Volkswagen Financial Services (UK) Ltd trading as MAN Financial Services (company number 02835230) and we are the data controller in respect of the personal information that you provide, or we collect, via this website www.financialservices.man.eu/uk/en (our “website”). This policy explains when and why we collect personal information, how this information is used, the conditions under which it may be disclosed to others, and how it is kept secure.
If you have any queries about our handling of your personal information, you can contact us by writing to our Data Protection Officer at Volkswagen Financial Services (UK) Limited t/a MAN Financial Services, Clearwater House, Clearwater Business Park, Frankland Road, Blagrove, Swindon, SN5 8YZ or by email to DPO@vwfs.co.uk or you can call us on 0370 900 6040. Please ensure you state that you are a customer of MAN Financial Services so that we can deal with your query promptly.
Where this policy refers to “we”, “our” or “us”, unless it mentions otherwise, it’s referring to MAN Financial Services. Where this policy refers to “you” it’s referring to the user of our website.
Personal data we collect and how we collect it
The personal information we collect and the way in which we collect it are as follows:
Personal information you give to us: This is information about you that you give us when you use our website and by communicating with us by phone, social media, e-mail or otherwise. This information is given by you entirely voluntarily. However, if you do not provide this information, we will not be able to deal with your enquiries and you may be unable to communicate with us effectively. We may also ask you for information when you report a problem with our website. This consists of the following categories of information:
- company name
- email address
- telephone number
- information contained in our correspondence or other communications with you about our products or business
Personal information we collect about you:We automatically collect information about you when you visit our website, this consists of technical data as follows: traffic data, location data, weblogs and other communication data, the resources you access, the Internet protocol (IP) address used to connect your computer or device to the Internet (please note that Google Analytics collects IP addresses in an abbreviated form so as not to identify you), click through, to and from data, browser type and version, time zone setting, browser plug-in types and versions and operating system and platform. We use Google Analytics to track your use of our website. This information may be collected by cookies placed on our website – please see Cookies below for more information.
How we use your information
The purposes for which we use your information and the legal basis under data protection laws on which we rely to do this are as follows:
- Legitimate interests or that of a third party. This is:
- to respond to enquiries received from the contact forms on our website, or by any other means, to ensure that we are providing you with information that you have requested and for good customer service;
- where you apply for a job vacancy advertised on our website, to assess your CV and application to determine whether your experience is suitable to take you to the next stage of the recruitment process;
- to ensure the physical, IT and network security of our systems for our legitimate interest of operating our website securely;
- to improve the services we offer you on our website for our legitimate interest of ensuring that we are offering relevant services based on the needs of our customers;
- to comply with a request from you in connection with the exercise of your rights;
- for the establishment and defence of our legal rights for our legitimate interest of ensuring that our business interests are protected; and
- for the management of queries, complaints or claims for our legitimate interest of ensuring that we are providing you with the necessary support and to improve our services.
- Compliance with a legal obligation.This includes when you exercise your legal rights under data protection law, to verify your identity, for the establishment and defence of our legal rights, for activities relating to the prevention, detection and investigation of crime and for compliance with our legal and regulatory responsibilities.
Google Analytics and Google
In the event that you wish to avoid disclosure of any personal data, which could be shared through the tracing service of Google Inc. you are advised to make use of the deactivation-add-on as supplied by Google under tools.google.com/dlpage/gaoptout?hl=en. Additionally, you are also entitled to withdraw any pseudonym user profiles at any time for future effect, should these have been created.
Also, you can exercise your general right to object to the use of your data for advertising purposes at any time with effect for the future. In view of the discussion on the use of analytical tools with complete IP addresses, we would like to point out that this website uses Google Analytics with the extension "_anonymizeIp()" so that IP addresses are only processed further in abbreviated form to prevent them being linked directly. You can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the Ads Settings: www.google.com/settings/ads
Use by third parties
We disclose your information to the following third parties:
- C&C Insurance will receive the information that you provide when you submit a GAP insurance form on the website, this is so that they can provide you with the insurance services that you have requested.
- Third party service providers, agents and sub-contractors acting on our behalf. This may also include providers of data storage and database hosting services, IT hosting, IT maintenance services, professional advisors, marketing agencies and third parties that provide communication fulfilment services.
- Courts in the United Kingdom or abroad as necessary to comply with a legal requirement, for the administration of justice, to protect vital interests and to protect the security or integrity of our business operations.
- If we’re under a duty to disclose or share it in order to comply with any legal obligation.
- Any third party who is restructuring, selling or acquiring some or all of our business or assets or otherwise in the event of a merger, re-organisation or similar event.
When we use third party service providers, we only disclose to them any personal information that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions.
Where we store your information and transfers to third countries
We store your information on servers located within the European Economic Area (EEA). If at any time we transfer your personal information to, or store it in, countries located outside of the EEA (for example, if our hosting services provider changes) we will ensure that appropriate safeguards are in place for that transfer and storage as required by applicable law.
The third parties listed under ‘Use by third parties’ may be located outside of the EEA or they may transfer your information outside of the EEA. Those countries may not have the same standards of data protection and privacy laws as in the UK. Whenever we transfer your information outside of the EEA, we impose contractual obligations on the recipients of that information to protect your personal data to the standard required in the UK. Any third parties transferring your information outside of the EEA must also have in place appropriate safeguards as required under data protection law.
The data collected by Google Analytics is stored in the US; Google LLC participates in the EU-US Privacy Shield, which ensures an adequate level of protection of personal data transferred outside of the EU.
Retention of your information
If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws. We do not retain personal information in an identifiable format for longer than is necessary.
When you submit an enquiry via our website, we will keep your information for as long as necessary to deal with your enquiry. If you/ your company becomes a customer of MAN Financial Services, we will retain your information for as long as you/ your company are a customer. Other privacy notices may apply depending on our relationship with you, in which case you will be provided with the relevant privacy notice.
You have a number of rights in relation to your personal information under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within one month after we have received this information or, where this is not required, after we have received your request.
- Accessing your personal information. You have the right to ask for a copy of the information that we hold about you by emailing or writing to us at the address above. We may not provide you with a copy of your personal information if this concerns other individuals or we have another lawful reason to withhold that information.
- Correcting and updating your personal information. The accuracy of your information is important to us and we are working on ways to make it easier for you to review and correct the information that we hold about you. In the meantime, if you change your name or address/email address, or you discover that any of the other information we hold is inaccurate or out of date, please let us know by contacting us on the details provided above.
- Withdrawing your consent. Where we rely on your consent as the legal basis for processing your personal information, as set out under ‘Use of your information’, you may withdraw your consent at any time. If you would like to withdraw your consent to receiving any direct marketing to which you previously opted-in, you can do so by clicking the unsubscribe link in the email. If you withdraw your consent, our use of your personal information before you withdraw is still lawful.
- Objecting to our use of your personal information. Where we rely on our legitimate business interests as the legal basis for processing your personal information for any purposes, as set out under Use of your information, you may object to us using your personal information for these purposes by emailing or writing to us at the address above. Except for the purposes for which we are sure we can continue to process your personal information, we will temporarily stop processing your personal information in line with your objection until we have investigated the matter. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your data for those purposes. Otherwise we will provide you with our justification as to why we need to continue using your data. You may object to us using your personal information for direct marketing purposes and we will automatically comply with your request.
- Erasing your personal information or restricting its processing. In certain circumstances, you may ask for your personal information to be removed from our systems by emailing or writing to us at the address above. Provided we do not have any continuing lawful reason to continue processing or holding your personal information, we will make reasonable efforts to comply with your request. You may also ask us to restrict processing your personal information where you believe it is unlawful for us to do so, you have objected to its use and our investigation is pending or you require us to keep it in connection with legal proceedings. We may only process your personal information whilst its processing is restricted if we have your consent or are legally permitted to do so, for example for storage purposes, to protect the rights of another individual or company or in connection with legal proceedings.
- Transferring your personal information in a structured data file. Where we rely on your consent as the legal basis for processing your personal information or need to process it in connection with a contract with have with you, you may ask us to provide you with a copy of that information in a structured data file. We will provide this to you electronically in a structured, commonly used and machine readable form, such as a CSV file. You can ask us to send your personal information directly to another service provider, and we will do so if this is technically possible. We may not provide you with a copy of your personal information if this concerns other individuals or we have another lawful reason to withhold that information.
- Complaining to the UK data protection regulator. If you have concerns about the way we have handled your personal information, we encourage you to contact us and we will seek to resolve any issues or concerns you may have. You will find our contact details above. You have the right to complain to the Information Commissioner’s Office (ICO) if you are concerned about the way we have processed your personal information. Please visit the ICO’s website for further details.
We implement technical and organisational security measures to protect your personal information in order to prevent accidental or deliberate tampering, loss, destruction or access by unauthorised persons. Our security measures, such as data encryption, for example, are regularly updated in line with technological developments.
Links to websites of other providers
Changes to this policy
We may review this policy from time to time and any changes will be posted on this page and, where appropriate, notified to you in writing. Any changes will take effect on the date the new policy is posted to this page or on the date of our notification to you, whichever occurs first. Please check back frequently to see any updates or changes to this policy. If you do not agree with any aspect of the updated policy you must immediately notify us and cease using our services.