Privacy statement ECR Car Retail 

1. General information

1.1 Introduction

Thank you for taking the time to read our data protection statement when enquiring about our services via our website or possibly using certain online services provided by ECR Car Retail.

For us as a company the protection of your data is the basis for good service provision. Transparency, communication and honesty are the most important values in the DNA of ECR Car Retail. Through these values we hope to win our customers' trust. In order to maintain that trust, we attach great importance to the protection of our customers' data and only use these in the way expected by our customers. Via the following statement regarding data protection we hope to be able to inform you about the processing of your personal data and your rights relating to this processing in accordance with the General Data Protection Regulation (GDPR)and all other legislation on data protection monitored by the Data Protection Authority (DPA).

1.2 Controller

The undersigned, EC Rent NV, Boomsesteenweg 934, 2610 Wilrijk (Belgium), as aforementioned, is the controller in accordance with the GDPR and is therefore responsible for the data processing referred to below. 

1.3 Data Protection Officer 

Under the applicable legislation EC Rent NV is not under the obligation to appoint a Data Protection Officer (DPO). In order to ensure your full trust and to help you with any doubts you may have concerning the legislation applied by ECR Car Retail you can contact us at any time at the following address: EC Rent NV, Attn. Marketing, Boomsesteenweg 934, 2610 Wilrijk (Belgium), e-mail: info@ecrb.be

 

2. Processing of personal data during your use of our website

When you visit our website and use our online services this is registered and stored. The IP address linked to the device you use (e.g. your computer, mobile phone or tablet), the date, time, language, location, web browser and operating system used, and the pages visited are registered and stored. In order to make our information as specific as possible and optimise and continuously improve our online services, these data are collected within the framework of the data protection legislation. These data will be processed in accordance with Art. 6, 1, 1, f) of the GDPR. 

It is in our interest to protect our website and improve our service provision. Any other processing of your data, except for statistical purposes in a completely anonymous form, will take place only in accordance with this data protection statement. Furthermore, personal data will only be stored if you voluntarily provide us with those data, e.g. as part of your registration, a survey, an online enquiry or request or in the framework of the performance of a contract. Below you will find more information, in particular about the technologies we use.

2.1 Registration for the newsletter

If you choose to register for our newsletter via our website https://www.ecrb.be you fill in the requested data via the registration bar provided for that purpose. If you choose to register for the newsletter at our physical office in Wilrijk you fill in the requested data on the registration form provided for that purpose by an employee of ECR Car Retail. 

If you fill in the registration form and provide us with your personal data or have agreed to receive our newsletter when registering as a customer you will receive an e-mail from us at the e-mail address you have provided. To complete the registration you only need to click on 'Confirm' in this e-mail. The personal data that are collected via the registration form will only be processed in order to send newsletters to your e-mail address and only if you have agreed to this data processing. These data will be processed in accordance with Art. 6, 1, 1, a) of the GDPR. We use Mailchimp® to send newsletters. 

Mailchimp® is a service of The Rocket Science Group, LLC (675 Ponce de Leon Ave NE 
Suite 5000, Atlanta, GA 30308 USA). When you open a newsletter a so-called tracking pixel is used. This way the following data are stored in Mailchimp®: your previously provided e-mail address, type of newsletter, date and time it was opened. Links in our newsletters contain tracking information which we can use to learn which links you are especially interested in by looking at which links you clicked on. The following data are stored in Mailchimp® via the tracking link: e-mail address, newsletters, link, date and time. Your personal data will only be stored until you unsubscribe from the newsletter by clicking on the 'Unsubscribe' link at the bottom of each newsletter you receive from us. When you unsubscribe your personal data will immediately be removed from the list in Mailchimp®. Please note: you will no longer receive any newsletters, promotions or news from us after your personal data have been removed.

2.2 Contact form 

You can use the contact form on our website to contact us with a request regarding collaboration as a supplier or retailer. The personal data you provide in the contact form will only be processed in order to deal with your request and only if you have agreed to the processing of your data. These data will be processed in accordance with Art. 6, 1, 1, f) of the GDPR.

2.3 Registration of a customer account

If you wish, you can create a customer account on our website https://www.ecrb.be. The personal data you provide in the registration form will only be processed in order to create and manage your customer account and only if you have agreed to the processing of your data. The provision of your personal data takes place on a voluntary basis. You have no obligation to provide us with your personal data and you are not required to provide your personal data to comply with a legal or contractual obligation as a condition to enter into a contract. If you do not provide us with your personal data this will not have any consequences for you other than the fact that in such case we cannot create a customer account for you. Your personal data will only be stored until your account is deactivated.

2.4 Cookies and tracking

In order to make your visit to our website more attractive and enable the use of certain functions we use so-called 'cookies' on several pages. These are small text files that are stored on your device. Some cookies that we use are removed after your browser session, i.e. after you close your browser (so-called session cookies). Other cookies stay on your device and allow us to recognise your browser on your next visit (persistent cookies). You can set your browser so that you are informed about the configuration of various cookies and can decide yourself whether you accept them or not, or you can refuse certain cookies in certain cases or in general. See the help function of your Internet browser for more information. If cookies are not accepted the functionality of our website may be limited. Below you can find more information about specific cookies. We distinguish between essential cookies and promotional cookies. Essential cookies are necessary for the proper functioning of our website. If you refuse these cookies this will affect you user experience during your visit to our website and certain services on our website will not be available.

Promotional cookies are described below. By accepting our 'cookie pop-up' you agree to the processing of data via these cookies. These data will be processed in accordance with Art. 6, 1, 1, a) of the GDPR.

2.4.1 Google Analytics

We use Google Analytics, a web analysis service of Google Inc. ('Google').  Google Analytics also makes use of cookies. As a rule, the information generated by the cookies about your use of our website is sent to a Google server in the US and stored there. However, prior to this, Google will have shortened your IP address in European Union Member States or in other states that have signed the agreement relating to the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to analyse your website use, to draw up reports on the website activity and to provide the website operator with other services relating to website and Internet use. The IP address that is sent by your browser in the framework of Google Analytics is not combined with other data held by Google. You can refuse the use of cookies by adjusting your browser settings. You can also prevent Google from collecting and processing the information generated by the cookies and information about your use of the website (including your IP address) by downloading and installing the browser plug-in via the following link: https://tools.google.com/dlpage/gaoptout?hl=en

2.4.2 Google Ads

As an AdWords customer we make use of Google Conversion Tracking. This is a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, US; 'Google'). Google AdWords is used to display pages of https://www.ecrb.be in Google's advertising space. If you visit our website through a Google ad, Google AdWords places a cookie on your device ('conversion cookie'). This cookie expires after 30 days and is not used for personal identification. If the cookie has not expired when you visit certain pages, we and Google can see that someone has clicked on the ad and has been led to our page. Each AdWords customer is given a different cookie. Therefore, cookies can be traced via the websites of AdWords customers. The information collected by the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users that have clicked on their ad and have been led to a page with a conversion tracking tag.

However, you will not receive any information by which users can be identified personally. If you do not wish to participate in this tracking process you can also refuse the setting of a required cookie – for instance by using a browser setting that turns off the automatic setting of cookies. You can also turn off cookies for conversion tracking by setting your browser so that cookies from the domain 'googleadservices.com' are blocked.

2.4.3 DoubleClick by Google

With DoubleClick by Google we use a service of Google Inc. in order to show you relevant advertisements. The cookies used to this end do not contain any personal information. DoubleClick cookies use a pseudonymous identification number which is assigned to your browser to check whether advertisements are displayed and whether you click on them. This way, Google and its partner sites can show ads based on previous visits to pages of ECR Car Retail. The information generated by DoubleClick cookies is sent to and stored by Google on servers located in the United States. Google complies with the provisions of the American and European 'Privacy Shield' agreement on data protection and is Privacy Shield certified. The data will only be passed on to third parties within the framework of the legal provisions or the processing of order information. If you agree to the storage of cookies but do not wish to use DoubleClick cookies you can download and install a browser plug-in that turns off DoubleClick by Google via the link https://www.google.com/settings/ads/onweb/.

2.4.4 Hotjar

For analysis and feedback purposes we work together with service provider Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe.

Within this framework, cookies are stored on the server of Hotjar, which allows us to analyse the use you and others make of our website. By means of these cookies, information about the use of our website is collected, sent to and stored on a server of our service provider. Our service provider uses this information to give us feedback about our website. By installing these cookies only pseudonymous information is collected. In no case are these pseudonymous data linked to your personal data.

You have the right to object to this service at any time with future effect. If you wish to exercise your right to object, please click on the following link: https://www.hotjar.com/legal/compliance/opt-out

If you have submitted an objection via the link above, no further data will be stored and the data already stored will no longer be used. We would like to point out that your objection is confirmed by placing a cookie on your computer. Without this cookie we are unable to confirm and observe your objection. However, this cookie only contains the information for which you submitted an objection against the use of the data during retargeting. In order for it to be activated permanently, this cookie must remain stored on your computer. If you remove the opt-out cookie you must unsubscribe again. You must also unsubscribe for each computer and browser you use. Please note: the opt-out described above only applies as long as cookies are accepted by your browser. For more information about Hotjar's privacy policy please check https://www.hotjar.com/legal/policies/privacy.

2.4.5 Facebook Pixel

We find it important to advertise according to your needs and not swamp you with unnecessary ads. For this reason we work with Facebook Pixel, which belongs to the company Facebook (1 Hacker Way, 94025 Menlo Park, US). Facebook Pixel is a web analysis tool that collects data in order to analyse your website use, to draw up reports on the website activity and to provide the website operator with other services relating to website and Internet use. You can consult the privacy guidelines in accordance with the GDPR on https://www.facebook.com/privacy/explanation.

2.4.6 Zotabox

For you as a visitor we are happy to work towards a communication that is as smooth as possible. We focus on the social media tool Facebook and its Messenger function to start up a direct chat conversation from our website. For this direct link from the website to the Facebook tool Messenger we make use of the service Zotabox, 504 building Hacinco B.3.7 Le Van Luong, Hanoi. Zotabox also observes the relevant GDPR legislation for you and presents this in Google's legal framework and privacy guidelines. These guidelines as well as additional information can be found in 2.4.1.

2.4.8 Bit.ly

For your ease of use and to improve the visual attractiveness on our website or social media channels (Facebook, Instagram, YouTube, Twitter and LinkedIn) Bit.ly, 

139 5th Avenue, 5th Floor, New York, NY 10010, US is used to shorten long URLs. In an analysis report this service shows the number of clicks on this URL generated by ECR Car Retail, together with the day and the location. Under no circumstances does this analysis contain any directly identifiable information about you. For more information about bit.ly's privacy policy please check http://bit.ly/pages/privacy.

 

2.5 Recipients of the data

For the purposes mentioned above under 2.a) and b), we make use of service providers, i.e. processors according to Art. 28 of the GDPR, for instance our service providers for cloud hosting, platform and maintenance services, for the storage of the data, or external platforms for sending e-mails and text messages, contacts by telephone or printing personalised advertising material. We make sure, e.g. through contractual provisions, that these service providers process personal data in accordance with the European legislation on data protection in order to guarantee a high level of data protection, even when personal data are transferred to another country where the general level of data protection is different and for which there is no decision of the EU commission on its appropriateness. Personal data are not passed on to other recipients in other ways, unless we are legally obliged to do so. For more information about the appropriate protection measures for the international transfer of data or a copy of this document, please contact our Marketing department by e-mail at: info@ecrb.be.

 

2.6 Mandatory/voluntary provision of data and period of storage

Your data are provided on a voluntary basis. You are not obliged to provide us with these personal data and you are not required to provide your personal data to comply with a legal or contractual obligation (unless you use our Online Shop; in that case, data must be provided in accordance with 2.c) as a condition for the performance of the contract). If you do not provide us with your personal data this will not have any consequences for you other than the fact that you will not be able to use our services. Personal data provided to us via our website will only be stored until the purpose for which they were processed has been achieved. Insofar as storage periods according to tax and commercial law must be observed, the storage period may be up to 10 years for certain data. Varying storage periods can also result from a legitimate interest of ECR Car Retail (e.g. to guarantee the safety of data, to prevent abuse or to prosecute offenders). Any data we are obliged to store under legal, regulatory or contractual storage obligations will be blocked.

 

3. Information about the processing of your personal data

3.1 Registration of the customer

We will process the data collected via the registration form for B2B customers and during further business transactions in order to enter into and perform the contract with the B2B customers. Because we only enter into contracts with registered retailers. These data will be processed in accordance with Art. 6, 1, b) of the GDPR.

3.2 Marketing and analysis of the customer 

We will also process all your personal data collected via the registration form for retailers and during further business transactions with a view to relations and analyses. This comprises market research, surveys for feedback, analyses, segmenting and profiling of retailers to predict their behaviour and activities, i.e. 'customer churn', repeated purchases of certain goods and purchase dates. For these purposes we will also contact you by e-mail, text message, telephone, fax and post. Your data will be stored in our data warehouse for the aforementioned purposes and complemented with data we collect from public sources, e.g. telephone directories. These data will be processed in accordance with Art. 6, 1, 1, f) of the GDPR. This is necessary in order to promote our legitimate interests of improving our services and our relationship with you, which are key factors for our commercial success. Via the data we collect and store we learn about your interests and needs. This way we can take these into account and act accordingly, i.e. by communicating in a personalised way.   

We will also process all your personal data collected via the registration form for retailers and during further business transactions in order to provide you with information about our marketing campaigns by post and during physical visits. These data will be processed in accordance with Art. 6, 1, 1, f) of the GDPR. This is necessary in order to promote our legitimate interests of informing you about our offers and services and expanding our relationship with you. If you have previously agreed to the processing, we will also use your personal data to provide our marketing information by e-mail, text message, telephone or fax. In addition, links in our newsletters sent by e-mail may contain a tracking pixel which allows us to know whether you have opened a newsletter sent by e-mail and which links you showed an interest in by clicking on them. In this e-mail you have an opt-out option, which allows you to stop this pixel tracking at any time. The following data are collected: e-mail address, the content of the newsletter that was sent to you, which link you clicked on, the date and time of opening.

3.3 Recipients of the data

For the purposes mentioned above under 2.a) and b), we make use of service providers, i.e. processors according to Art. 28 of the GDPR, for instance our service providers for cloud hosting, platform and maintenance services, for the storage of the data, or external platforms for sending e-mails and text messages, contacts by telephone or printing personalised advertising material. We make sure, e.g. through contractual provisions, that these service providers process personal data in accordance with the European legislation on data protection in order to guarantee a high level of data protection, even when personal data are transferred to another country where the general level of data protection is different and for which there is no decision of the EU commission on its appropriateness. Personal data are not passed on to other recipients in other ways, unless we are legally obliged to do so. For more information about the appropriate protection measures for the international transfer of data or a copy of this document, please contact our Marketing department by e-mail at: info@ecrb.be.

3.4 Mandatory/voluntary provision of data and period of storage

Your data are provided on a voluntary basis. You are not obliged to provide us with these personal data and you are not required to provide your personal data to comply with a legal or contractual obligation (unless you use our Online Shop; in that case, data must be provided in accordance with 2.c) as a condition for the performance of the contract). If you do not provide us with your personal data this will not have any consequences for you other than the fact that you will not be able to use our services. Personal data provided to us via our website will only be stored until the purpose for which they were processed has been achieved. Insofar as storage periods according to tax and commercial law must be observed, the storage period may be up to 10 years for certain data. Varying storage periods can also result from a legitimate interest of ECR Car Retail (e.g. to guarantee the safety of data, to prevent abuse or to prosecute offenders). Any data we are obliged to store under legal, regulatory or contractual storage obligations will be blocked.

 

4. Your rights

As a data subject you can contact our Marketing department at any time via the contact data provided under 1. c) above to exercise your rights in accordance with the GDPR. These rights are:

  • The right to receive information about the data processing and a copy of the processed data (right of access, Art. 15 of the GDPR),
  • The right to request that incorrect data be corrected or incomplete data be completed (right to rectification, Art. 16 of the GDPR),
  • The right to request that personal data be removed and, if the personal data have been made public, that other controllers be informed of this request (right to erasure, Art. 17 of the GDPR),
  • The right to request that the data processing be restricted (right to restriction of processing, Art. 18 of the GDPR),
  • The right to receive the personal data concerning the data subject in a structured, commonly used and machine-readable format and to request that those data be transmitted to another controller (right to data portability, Art. 20 of the GDPR),
  • The right to object against the data processing in order to stop that processing (right to object, Art. 21 of the GDPR),
  • The right to withdraw the consent given at any time in order to stop the processing of data based on your consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal (right to withdrawal of consent, Art. 7 of the GDPR).
  • The right to lodge a complaint with a supervisory authority if you consider that the processing infringes the GDPR (right to lodge a complaint with a supervisory authority, Art. 77 of the GDPR).

This data protection statement may be modified due to possible legislative changes. In such case we will inform you about the changes concerned. Insofar as the changes affect processing based on your consent, we will ask for your consent again if necessary.

 

Back to website