Terms & Conditions
The national GROUPAUTO Regions have provided information to GROUPAUTO International regarding their own personnel and their associated contact information which may be considered as Personal Data.
The national GROUPAUTO Regions have also provided to GROUPAUTO International information provided by the members of their national Distributor Networks and Workshop Networks. This information may have also been present in publicly available sources.
- 2.1. CNIL: means the Commission Nationale pour l'Informatique et les Libertés (CNIL), the independent French administrative authority responsible for ensuring compliance with the Personal Data Regulations in France and/or any locally competent authority in this area for the territory concerned by the Agreement.
- 2.2. Data Controller: has the meaning given by the Regulation on Personal Data.
- 2.3. Data subjects: means the natural person whose Personal Data is processed and which are employees Workshops or Distributors member of GROUPAUTO INTERNATIONAL’ network.
- 2.4. Distribution Agreement: designate the agreement concluded between GAI and the Entity and under which GAI proposes its distribution services to the Entity.
- 2.5. Recipient: has the meaning given by the Regulation on Personal Data.
- 2.6. Regulation on Personal Data: means the (i) Law no. 78-17 of 6 January 1978 on data processing, data files and individual liberties, as last amended by Order no. 2018-1125 of 12 December 2018 and commonly referred to as the "Loi Informatique et Libertés, (ii) the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, commonly known as the General Data Protection Regulation or "GDPR" and (iii) the guidelines and recommendations of the CNIL and/or the European Data Protection Committee, in the form of opinions and guidelines.
- 2.7. Personal Data: has the meaning given by the Regulation on Personal Data, which are collected and processed under the Contract.
- 2.8. GROUPAUTO Listed Suppliers: means the suppliers of GAI and its members who will send marketing emails and more generally contact and promote their products and services.
GROUPAUTO International publishes information about the GROUPAUTO networks on the GROUPAUTO International webpage, EUROGARAGE webpage, and TOP TRUCK webpage at the following URLs.
GROUPAUTO International also publishes information about the GROUPAUTO networks via the Members Directory and Workshop Network Directory on the GAI INTRANET. The GAI INTRANET directories can only be accessed GROUPAUTO International, the GROUPAUTO Regions, and the GROUPAUTO Listed Suppliers.
In the processing of this information, GROUPAUTO Regions, GROUPAUTO International, and the GROUPAUTO Listed Suppliers act as independent data controllers. The contact details of the Data Controllers are accessible at the Section 9 below.
The national GROUPAUTO Regions provide GROUPAUTO International with this information in order to allow GROUPAUTO International and the GROUPAUTO Listed Suppliers to confirm the membership of distributors and workshops in the GROUPAUTO networks and to allow GROUPAUTO Listed Suppliers to provide information about their products, promotions, support, and training.
- 4.1. The processing of Personal Data by GROUPAUTO International
- Business Name, Address (Distributors and Workshops)
- Parts Segments (Distributors)
- Capabilities & Operating Hours (Workshops)
- Contact Name (Distributors)
- Contact Phone Number (Distributors and Workshops)
- Contact Email Address (Distributors and Workshops)
- 4.2. The processing of Personal Data by GROUPAUTO Listed Suppliers
- Contact Name (Distributors)
- Contact Phone Number (Distributors and Workshops)
- Contact Email Address (Distributors and Workshops)
The information provided by the national GROUPAUTO Regions and processed by GROUPAUTO International includes the following categories:
The processing by GROUPAUTO International of Workshops’ and Distributors’ information, for the purpose of confirming their membership to GROUPAUTO network and the management of GROUPAUTO networks is necessary to the execution of the contractual relationship between the Distributors/Workshops, the national GROUPAUTO Regions, and GROUPAUTO International.
The categories of personal data transferred by GROUPAUTO International to GROUPAUTO Listed Suppliers and processed by these latter include:
This processing is necessary to determine if Workshops and Distributors are part of the Distributor and/or Workshop networks and the date of their entry/exit to these networks as well as to allow the GROUPAUTO Listed Supplier to provide the Workshops and Distributors with information about their products, promotions, support, and training. The processing of Workshops’ and Distributors’ information by GROUPAUTO Listed Suppliers for this purpose is based on their consent.
For the processing of their Personal Data for purposes based on their consent, Distributor and Workshop can request to withdraw their consent to such processing and Opt-Out of having their contact information available to GROUPAUTO Listed Suppliers for marketing purposes.
This can be done via the Opt-Out page of the GROUPAUTO International website here: ( Opt-Out Webpage )
Opting-Out of having their contact information available to GROUPAUTO Listed Suppliers via the GAI INTRANET prevents them from receiving any messages from GROUPAUTO Listed Suppliers regarding their products, promotions, support, and training but does not impact the membership of the Distributor or Workshop in the GROUPAUTO networks.
Opting-Out of having their contact information available to GROUPAUTO Listed Suppliers via the GAI INTRANET may not prevent them from receiving any message from GROUPAUTO Listed Suppliers if their contact information has been provided to the GROUPAUTO Listed Suppliers via other means.
The Personal Data for Distributors and Workshops will be stored while the Distributor or Workshop is a member of the GROUPAUTO networks.
The Personal Data for an exited Distributor will be deleted once an exited Distributor is no longer available in the ENTRY/EXIT Report (maximum is current calendar year plus previous two-years).
The personal data for an exited Workshop will be deleted after 2-years to allow the Workshop the option to return to the network without repeating the entry process. The personal data of an exited Workshop will not be accessible to GROUPAUTO Listed Suppliers unless the Workshop chooses to return to the network.
During this retention in the ENTRY/EXIT Report, the GROUPAUTO Listed Supplier will have access to the Distributor’s Personal Data only to resolve any outstanding reconciliation issues.
In accordance with the Regulation on Personal Data, the Data Subject may at any time exercise the following specific rights, by contacting the DPO through contact means mentioned below.
- 7.1. Right of access
- 7.2. Right to rectification
- 7.3. Right to erasure
- The Personal Data are no longer necessary for the purposes for which they were collected or otherwise processed by the Data Controller receiving the request.
- The Data Subject has withdrawn his or her consent to the processing of the personal data and there is no other legal basis for the processing.
- The Personal Data has been processed unlawfully.
- The Personal Data must be deleted in order to comply with a legal obligation.
- 7.4. Right to restriction of processing
- The Data Controller verifies the accuracy of the Personal Data after the Data Subject has disputed the accuracy of the Personal Data.
- The processing is unlawful and the Data Subject objects to the erasure of the Personal Data and requests instead that the use of the Personal Data be restricted.
- The Data controller no longer needs the Personal Data for the purposes of the processing, but it is still necessary for the Data Subject to establish, exercise or defend legal claims.
- 7.5. Right to data portability
- 7.6. Right to object
- 7.7. Post-mortem instructions
The Data Subject shall have the right to obtain from the Data Controller confirmation as to whether or not Personal Data relating to him or her are being processed and, if so, access to such Personal Data.
Either mentioned Data Controller shall provide a copy of the Personal Data processed.
The Data Controller answering such request may charge a reasonable fee based on administrative costs for any additional copies requested by the Data Subject.
If the Data Subject submits his or her request electronically, the information shall be provided in a commonly used electronic form, unless the Data Subject requests otherwise.
The Data Subject's right to obtain a copy of his/her Personal Data shall not prejudice the rights and freedoms of any other person.
The Data Subject may obtain from any Data Controller, as soon as possible, the rectification of inaccurate PERSONAL data concerning it. It may also request that incomplete Personal Data be completed, including by providing an additional explanation.
No automated decision-making processes are applied to the information provided by the GROUPAUTO Regions/Members to GROUPAUTO International. GROUPAUTO International will not use personal information for communication with the data subject other than any required data-protection notifications and information related to the GROUPAUTO Networks.
The Data Subject shall have the right to obtain from any Data Controller the erasure, as soon as possible, of Personal Data relating to it for one of the following reasons:
The Data Subject shall have the right to obtain from any Data Controller the restriction of the processing of its Personal Data for any of the following reasons:
The Data Subject shall have the right to obtain from the Data Controller the Personal Data concerning it in a structured, commonly used, and machine-readable format.
Where the Data Subject exercises its right to portability, it shall have the right to have its Personal Data transferred directly by the Data Controller to another Data Controller designated by the Data Controller, where technically possible.
The Data Subject may at any time, on grounds relating to his or her particular situation, object to the processing of its Personal Data on the grounds of the Data Controller's legitimate interests. The Data Controller will then no longer process the Personal Data unless it can demonstrate that there are compelling legitimate grounds for the processing which override the interests and rights and freedoms of the Data Subject, or may retain it for the establishment, exercise, or defence of legal claims.
The Data Subject may provide the Data Controller with instructions regarding the retention, deletion, and disclosure of its personal data after its death, which may also be registered with a "certified trusted digital third party". These instructions, or a kind of "digital will", may designate a person to be responsible for their execution; failing that, the Data Subject's heirs will be designated.
In the absence of a directive, the Data Subject's heirs may contact the Data Controller in order to have access to the processing of Personal Data for the organisation and settlement of the deceased's estate.
In any event, the Data Subject may inform the Data Controller at any time that it does not wish his/her Personal Data to be communicated to third parties in the event of its death.
The rights may be exercised by the Data Subject at any time by contacting any Data Controller at the contact details set out below.
In order to exercise its rights under the above conditions, and in the event that the Data Controller has doubts about the identity of the person making the request, the Data Controller may ask that person to provide proof of its identity, stating its surname, first name and e-mail address, and to accompany its request with a copy of a valid form of identification.
A reply will be sent to the Data Subject within a maximum of one (1) month from the date of receipt of the request.
If necessary, this period may be extended by two (2) months by the Data Controller, who will inform the Data Subject, considering the complexity and/or number of requests.
If the Data Subject requests the deletion of its Personal Data and/or exercises its right to request the deletion of its Personal Data, the Data Controller may nevertheless retain it in the form of intermediate archiving, for the period necessary to fulfil its legal obligations or for evidentiary purposes during the applicable limitation period.
The Data Subject may also lodge a complaint with the competent supervisory authority (the CNIL).
The contact details of the Data Controllers are:
- 9.1. Identity and contact details of Data Controller
- 9.2. Identity and contact details of Data Controller’s Representative
- 9.3. Identity and contact details of Data Protection Officer
- 9.4. Identity and contact details of Listed Suppliers
- Live access to contact information which does not include contact information for any Distributor or Workshop who has Opted-Out of providing contact information.
- If contact information will be downloaded, then a fresh download must be done prior to the use of the contact information to ensure that any Distributor or Workshop who has Opted-Out is not included.
- Previously downloaded contact information must be deleted after use to ensure that the contact information for any Distributor or Workshop who has Opted-Out is not retained.
- The contact information can only be used by the GROUPAUTO Listed Supplier internally, on their sole behalf, and this contact information, as well as the user login, cannot be shared with any person or company outside the GROUPAUTO Listed Supplier’s organization for any purpose.
- Distributors and/or Workshops can be contacted for the purposes of providing information about products, promotions, support, and training. This contact information can be used for no other purpose than those stated.
GROUPAUTO International
47, Avenue Charles de Gaulle
Neuilly sur Seine, 92200, France
+33 01 46 37 25 02
groupauto@groupauto.com
SOFTECA INTERNET, SL.
Caleruega 53, Local 1
09001 Burgos
+34 947 245 078
www.softeca.es
www.softeca.es/privacy-policy
dpd@softeca.es
Robert Stevens
Director of Workshop Networks & Technology
robert.stevens@groupauto.com
The Listed Supplier and their contact details are accessible at the following address: (https://www.groupauto.com/suppliers)
In order to access this personal data, the GROUPAUTO Listed Suppliers must request a login for the non-public GAI Intranet. These logins are issued only on request and then only when approved by GROUPAUTO International. These logins are secured by 2-Factor Authentication (2FA) to ensure that only authorized GROUPAUTO Listed Supplier users have access to the GAI Intranet. The logins are disabled if the user is unable to authenticate.
Once logged into the GAI Intranet, the GROUPAUTO Listed Supplier must additionally agree to the terms & conditions for access to GROUPAUTO Distributor or Workshop contact information. These terms and conditions include: