Noviv Mobility AG Privacy Policy

 

In this Privacy Policy we, Noviv Mobility AG (hereinafter referred to as ‘Noviv’), explain how we collect and process your personal data.

Noviv Mobility AG takes the security of your personal data very seriously. For this reason, we process your personal data only in accordance with the data protection laws that apply to us.

Unless stated otherwise, Noviv Mobility AG is responsible for data processing within the meaning of the Swiss Federal Act on Data Protection (FADP). Please send data protection enquiries to:

Noviv Mobility AG
Data protection
Alte Steinhauserstrasse 1
6330 Cham, Switzerland

or by email to privacy@noviv.ch

We collect and process your personal data when you visit our website or use our services. This concerns the following data in particular and is done in the following situations for the purposes listed below.

We use the personal data we collect to enter into and perform contracts with you, including but not limited to contracts for vehicle sales, repairs, financing and vehicle leasing and for the sale of products and provision of services by us, our suppliers and their subcontractors. In addition, we also process personal data to the extent that this is in our legitimate interest.

Please note that data processing by our partners may be carried out under their own data protection responsibility, over which we have no control. More information about data protection can be found in the privacy policy of the relevant partner.  

When you visit our website, we and the service providers commissioned by us will process your personal data for operational and performance purposes, as well as to optimise and further en-hance our service. When you access the website, our system will automatically collect data and information. This includes:

- Information about the type of browser and the version used 
- The user’s operating system
- Information about the type of device
- The user’s internet service provider
- The user’s IP address
- Date, time and duration of the access
- Websites from which the user’s system accesses our website
- Websites that are accessed by the user’s system via our website

We process this data within the scope of our legitimate interest in the optimal provision of our website and in particular for analysing how visitors use this website; the data is also evaluated for statistical purposes and for internal measures aimed at improving security and quality.

Cookies & analysis and tracking tools

We use ‘cookies’ on our websites to identify your browser or device. A cookie is a small file that is sent to your computer or automatically saved to your computer or mobile device by the web browser you use when you visit our website. At the beginning of your website visit, you can select the cookies you want in our preference centre and can give your consent to the processing or your data. You can object to the data processing at any time with effect for the future by preventing the storage of cookies through your browser settings or by changing the consents saved in the prefer-ence centre. For more information, please refer to our cookie policy on our website.

Google Analytics

We use Google Analytics to analyse website use and optimise advertising measures. Google Analyt-ics is a web analytics service provided and operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes website use data on our behalf and is contractually obligated to follow measures for ensuring the confidentiality of the processed data. The EU Court of Justice has stated that data protection regulations in the USA are not adequate, which means risks are involved in the transmission of data (access to data by US authorities, lack of legal recourse). The corresponding EU standard data protection provisions have therefore been agreed with Google as a safeguard.

The following data is recorded during your visit to our website (list is not exhaustive):

- Pages accessed
- Your behaviour on these pages (e.g. duration of visit, clicks, scroll behaviour)
- Technical information such as your browser, internet provider, end device and screen reso-lution
- Source of your visit (i.e. which site you have come from or which advert brought you to our site)

Your IP address is anonymised.

The recorded data is stored together with a randomly generated user ID, which makes it possible to analyse pseudonymous user profiles. This user-related data is automatically deleted after two months. Other data will be stored indefinitely in aggregated form.

If you do not agree to the collection of your data, you can prevent it by installing the browser add-on for deactivating Google Analytics or by rejecting cookies in our cookie settings.

Adobe Analytics

This website uses the Adobe Analytics web analytics service provided by Adobe Systems Software Ireland Limited (4-6, Riverwalk Drive, Citywest Business Campus, Cooldown Commons, Dublin 24, D24 DCW0, Ireland) to analyse user access to the site. The data is processed based on the consent you provide in the cookie settings. The service works by storing cookies on your end device and using them to collect information that is also stored on servers of our contract processor Adobe Systems Software Ireland Limited ("Adobe") for the analysis. We cannot exclude the possibility that this information will be accessed by Adobe Systems Incorporated with its headquarters in the USA.

However, it will not be possible to directly trace back any information stored on Adobe servers to the corresponding person because we use Adobe Analytics with the ‘Before Geo-Lookup: Replace visitor’s last IP octet with 0’ and ‘Obfuscate IP-Removed’ settings. The ‘Before Geo-Lookup: Re-place visitor’s last IP octet with 0’ setting ensures that IP addresses are anonymised prior to geolo-calisation by replacing the last octet of the IP address with zeros. The user’s approximate location is added to the tracking package, which still contains the full IP address, for statistical analysis. If the ‘Obfuscate IP-Removed’ setting is enabled, the IP address will then be replaced with an individual fixed IP address, often referred to as a generic IP address, before the tracking package is saved. This means the IP address will not be included in a stored dataset.

Microsoft Bing Ads

In certain circumstances, we use Conversion Tracking, which is a service provided by the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, on our website. For Conversion Tracking, Microsoft Bing Ads stores a cookie on your computer when you access our website via a Microsoft Bing ad. This lets Microsoft Bing and us know that someone clicked on an ad, was for-warded to our website and landed on a previously defined target site (conversion site). This service only lets us know the total number of users that clicked on the Bing ad and that were forwarded to the conversion site. It does not involve the provision of any personal information relating to the user’s identity.

If you do not want information on your behaviour to be used as outlined above, you can reject the use of the related cookies. You can do so by, e.g. changing your browser settings to automatically block cookies. You can also prevent data generated by the cookie relating to your use of the web-site from being collected and subsequently processed by Microsoft by revoking your consent using the following link:  https://account.microsoft.com/privacy/ad-settings/signedout?lang=de-DE. 

For more information on data protection and the cookies used by Microsoft and Bing Ads, please visit the Microsoft website at https://privacy.microsoft.com/en-US/privacystatement

Hotjar

We use the ‘Hotjar’ analytics tool on our websites to analyse your user behaviour. Your data is pro-cessed based on your consent provided in the cookie settings. Hotjar uses cookies and tracking codes to collect your user data on our websites on our behalf. Hotjar collects the following infor-mation (list not exhaustive):

- The end device’s IP address
- The end device type
- The size of the end device screen
- The geographic location
- The language used on the website
- The referring domain
- Data and time of website visit 

Your data is stored on servers in Ireland. 

If you wish to contact us via our website, we, or a third party commissioned by us, will process your personal information, including: 

- Name and contact data 
- Address data

This data is processed based on your consent. 

Under some circumstances, your data will be disclosed to the following categories of recipients:

- Contractual and business partners
- Manufacturers and/or importers
- IT service providers
- Marketing service providers

Noviv will process your personal data in our customer database in order to perform and provide our services to you. Your data will be processed in connection with the initiation and/or performance of a contract, our legitimate interest and your consent.  

Under some circumstances, your data will be disclosed to the following categories of recipients:

- Contractual and business partners
- Manufacturers
- Banks
- Insurance companies
- Credit agencies
- IT service providers
- Marketing service providers
- Platform providers for vehicle data

Sales

Customers and interested parties may perform test drives, order vehicles and collect purchased vehicles at selected Noviv garages. For this purpose, we process the following data and, where necessary, forward this to the manufacturer and/or importer:

- Name
- Address data
- Contact data
- Copy of driving licence
- Vehicle data
- Invoice data
- Insurance data

Aftersales

We and/or third parties commissioned by us will generally process the following categories of data from you when you use our garage services (incl. workshop, wheel storage, body + paint shop):

- Name
- Address data
- Contact data
- Vehicle data
- Invoice data
- Claims reports
- Insurance data

We need this data in order to perform the service you have booked and to communicate with you.

Replacement vehicles, rental vehicles

If you receive a replacement or rental vehicle from us, we will process your name, address and con-tact data and take a copy of your driving licence.

Tuning/ Parts sales

If you purchase parts or tuning for your vehicle through our dealers or service partners, we will pro-cess the personal data that is relevant to the sale or service, such as contact data, vehicle data and payment data, and will forward these to the service providers used by us to provide the service, on the basis of the contract.  

In certain circumstances, we may process the names and contact data of our supplier’s employees as part of executing the contractual relationship.  

We are legally obligated to perform sanction checks on individuals and companies. In this context, we and a service provider commissioned by us process your name in order to check it against the relevant sanctions lists (SECO, CFSP, EURUDU EU, EURUKM EU, OFAC).

WhatsApp

We do not proactively use WhatsApp as a communication tool. If you would still like to communicate with us via WhatsApp, please be aware that personal data (name, contact information) will be transmitted to WhatsApp Inc. in the USA. The US does not currently have an adequate level of data protection. Please refer to the corresponding privacy policy data protection provisions for information on how WhatsApp processes your data and for what purpose: https://www.whatsapp.com/privacy.

If you apply for a position at Noviv through our job portal, then we will process the following personal data from you as part of and for the purpose of processing the application:

-          Name
-          Contact data
-          Date of birth
-          Cover letter
-          Curriculum vitae (CV)
-          References/certificates

This data will be disclosed within Noviv to those who are responsible for the application process both internally and externally. If no contract is signed with you, we will erase your data unless you have granted your consent for continued storage.

We process your data for marketing purposes (newsletters, competitions, events, service information, new products, company information, etc.) only if you have given your consent for this or if there is a legitimate interest.

You can withdraw your consent at any time with effect for the future by sending an email to privacy@noviv.ch.

To improve the quality of our service, service providers commissioned by us will contact you following the conclusion of the contract and service provision as part of conducting opinion surveys.   

We or third parties commissioned by us will also receive your personal data from other sources, if these are authorised to disclose your details, for purposes of customer contact and acquisition and for the provision of services. These sources may be:

-          Public sources
-          Address brokers
-          Mobility service providers

To provide our services, we need to transfer personal data both within the company and external-ly. This involves, in particular, the following parties:

- Our service providers (in the areas of HR, IT services, finance, etc.)
- Dealers, service partners, suppliers, subcontractors and other business partners
- Authorities, official agencies or courts in Switzerland and abroad
- The general public, including the visitors to websites and social media
- Communication partners
- Competitors, industry organisations, associations, other organisations and bodies
- Purchasers of or parties interested in purchasing business segments or the company
- Other parties in potential or actual legal proceedings

all hereinafter collectively referred to as the ‘recipients’.

Where necessary for the provision of our services, personal data will be transmitted to the afore-mentioned bodies in Switzerland and the EU.  If we transfer data to a third country, we will provide an adequate level of protection, as prescribed by law, through use of appropriate contracts and/or measures (based in particular on the standard contractual clauses of the European Commission). You can obtain a list of the relevant service providers and processing locations for your personal data upon request by sending an email to privacy@noviv.ch

We process and store your personal data for as long as required to meet our contractual and statutory obligations or for as long as required for the purposes pursued by the processing, i.e. for the entire duration of the business relationship (from the initiation and performance of a contract to its termination and over the warranty period, as well as a subsequent service phase) and, in addition to that, in accordance with the statutory obligations regarding data retention and documentation. As part of the above, we may retain personal data for the period during which claims may be asserted against us, or if we are otherwise obliged by law to retain such personal data, or if legitimate business interests require that the personal data be retained (e.g. for evidentiary and documentation purposes). As soon as your personal data is no longer required for the purposes listed above, it will be erased or anonymised as a matter of principle and as far as possible. The retention periods for operating data (e.g. system protocols or logs) are generally shorter.

We take appropriate technical and organisational measures to protect your personal data from unauthorised access and misuse.

Within the scope of our business relationship, you will be required to provide us with the personal data required for the establishment and implementation of a business relationship, and the fulfilment of the associated contractual obligations (as a rule, you do not have a legal obligation to provide us with data). Without these data, we will generally not be in a position to enter into or perform a contract with you (or the entity or person you represent). In addition, our websites can also only be used if certain information is disclosed to allow the exchange of data (e.g. IP address).

As a data subject, you have the following rights:

Right of access

You have the right to obtain information about the processing of your personal data. A request for information is generally free of charge. A fee may be charged where the request entails a particularly extensive amount of work, the request for access to information is excessive or notorious, unless there is a legitimate interest. If your request for information will incur costs, we will notify you in advance. The exercise of these rights requires that you provide clear proof of your identity (e.g. by means of a copy of an identification card if your identity is otherwise unclear or cannot be verified). To assert your rights, you may contact us at the address indicated in section 2.

Right to rectification

You have the right to request the rectification of inaccurate or incomplete personal data about you.

Right to erasure

You have the right to request the erasure of your data under certain circumstances. Under this right, you may, for example, request the erasure of your data, provided this data is no longer required for the purposes for which it was collected. You may also request erasure if we are processing data on the basis of your consent and you withdraw this consent.

Please send your requests to:

Noviv Mobility AG
Data protection
Alte Steinhauserstrasse 1
6330 Cham, Switzerland

or by email to privacy@noviv.ch.

Right of withdrawal

At all times, you have the right to withdraw your consent with effect for the future. Please send your request to withdraw your consent to privacy@noviv.ch.

Complaints

Furthermore, every data subject has the right to assert their claims in a court of law or to file a complaint with the responsible data protection authority. The responsible data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch/edoeb/en/home.html). 

We may amend this Privacy Policy at any time without prior notice. The applicable version of the Privacy Policy is the latest version as published on our website. If the Privacy Policy forms part of an agreement with you, we will notify you of any updates to it where this is possible without undue expense.

As at 03/2023