Version 1 January 2023
CARIFY AG, Cheesturmweg 21, 4624 Härkingen, is the operator of the car subscription platform www.carify.com and other platforms such as CARIFY Auctions or platforms for car manufacturers. We are aware of the importance of data protection and are committed to treating the personal data of our users (hereinafter referred to as "personal data") carefully and responsibly.
The person responsible for the processing of your personal data is CARIFY AG. You can reach us at the following address:
CARIFY AG Cheesturmweg 21 4624 Härkingen 3. Collection and processing of personal data
We collect and process your personal data in order to conclude and process contracts with you, to provide our services, to meet our legal obligations and to operate our business activities.
We collect your personal data directly from you when you visit our website, use our apps or contact us. We also collect your personal data from third parties, such as credit reference agencies or vehicle inventory agencies.
The personal data that we collect from you in particular include:
Your name and first name
Your e-mail address
Your telephone number
Your date of birth
Your driver's license number
Your vehicle information
Your payment data
Your usage data
4. Purposes of processing and legal bases
We process your personal data for the following purposes:
Conclusion and processing of contracts with you
Provision of our services
Compliance with our legal obligations
Operation of our website and apps
Improvement of our products and services
Marketing and advertising
Market and opinion research
Compliance with requests from authorities and courts
Compliance with legal requirements
The processing of your personal data is based on the following legal bases:
The fulfillment of a contract with you
The fulfillment of a legal obligation
Our legitimate interest
5. Data transfer and data transmission
We only pass on your personal data to third parties if this is necessary for the conclusion and processing of a contract with you, for the fulfillment of a legal obligation or for our legitimate interest.
We pass on your personal data to the following recipients:
Credit reference agencies
Vehicle inventory agencies
Service providers who support us in providing our services, e.g. IT service
providers, call centers
Companies that support us in market and opinion research
Companies that support us in fraud prevention
6. Storage period of personal data
We store your personal data only as long as this is necessary for the fulfillment of the purposes for which they were collected.
We store your personal data for the following periods of time:
Personal data that are necessary for the conclusion and processing of a contract with you are stored for the duration of the contract and thereafter for the duration of the statutory retention periods.
Personal data that are necessary for the fulfillment of a legal obligation are stored for the duration of the statutory retention periods.
Personal data that are necessary to protect our legitimate interest are stored for the duration for which our legitimate interest exists.
7. Data security
We take all necessary technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, modification or destruction.
8. Obligation to provide personal data
You are not obliged to provide us with your personal data. However, if you do not provide us with any personal data, we may not be able to conclude and process contracts with you, provide our services or fulfill our legal obligations.
9. Profiling and automated decision-making
We do not use your personal data for automated decision-making.
We partially process your personal data automatically in order to evaluate certain personal aspects and track the use and condition of our vehicles (profiling). Each
vehicle can continuously send data to us, which may also include personal data (in particular location/GPS data, data relating to the use of the vehicle and the control of vehicle functions, as well as telemetry data, insofar as they are actually data with a personal reference). These data are collected and used for administrative and contractual processing. They are generally not disclosed to third parties, unless the data must be disclosed on the basis of applicable laws, administrative orders or for other important reasons (e.g. investigation/clarification of damage cases, investigation of possible violations of contractual provisions, security defects, serious technical problems, violation of third-party rights or protection of our property).
We also use profiling to inform and advise you about products in a targeted manner. We use evaluation tools that enable us to communicate and advertise in a needs-based manner, including market and opinion research.
10. Rights of the data subject
You have the right to access, rectify, erase, restrict, transfer or object to the processing of your personal data. You also have the right to lodge a complaint with the competent data protection authority.
CARIFY AG Cheesturmweg 21 4624 Härkingen