Privacy Policy

Version 1 January 2023

1. Introduction

CARIFY AG, Cheesturmweg 21, 4624 Härkingen, is the operator of the car subscription platform www.carify.com and other platforms such as CARIFY Auctions or platforms for car manufacturers. We are aware of the importance of data protection and are committed to treating the personal data of our users (hereinafter referred to as "personal data") carefully and responsibly.

2. Responsible

The person responsible for the processing of your personal data is CARIFY AG. You can reach us at the following address:

CARIFY AG Cheesturmweg 21 4624 Härkingen 3. Collection and processing of personal data

We collect and process your personal data in order to conclude and process contracts with you, to provide our services, to meet our legal obligations and to operate our business activities.

We collect your personal data directly from you when you visit our website, use our apps or contact us. We also collect your personal data from third parties, such as credit reference agencies or vehicle inventory agencies.

The personal data that we collect from you in particular include:

Your name and first name
Your address
Your e-mail address
Your telephone number
Your date of birth
Your nationality
Your driver's license number
Your vehicle information
Your payment data
Your usage data

4. Purposes of processing and legal bases

We process your personal data for the following purposes:

Conclusion and processing of contracts with you
Provision of our services
Compliance with our legal obligations
Operation of our website and apps
Improvement of our products and services
Marketing and advertising
Market and opinion research
Fraud prevention
Customer service
Data analysis
Data security
Compliance with requests from authorities and courts
Compliance with legal requirements

The processing of your personal data is based on the following legal bases:

Your consent
The fulfillment of a contract with you
The fulfillment of a legal obligation
Our legitimate interest

5. Data transfer and data transmission

We only pass on your personal data to third parties if this is necessary for the conclusion and processing of a contract with you, for the fulfillment of a legal obligation or for our legitimate interest.

We pass on your personal data to the following recipients:

Credit reference agencies
Vehicle inventory agencies

Authorities
Courts
Service providers who support us in providing our services, e.g. IT service
providers, call centers
Companies that support us in market and opinion research
Companies that support us in fraud prevention

6. Storage period of personal data

We store your personal data only as long as this is necessary for the fulfillment of the purposes for which they were collected.

We store your personal data for the following periods of time:

Personal data that are necessary for the conclusion and processing of a contract with you are stored for the duration of the contract and thereafter for the duration of the statutory retention periods.
Personal data that are necessary for the fulfillment of a legal obligation are stored for the duration of the statutory retention periods.
Personal data that are necessary to protect our legitimate interest are stored for the duration for which our legitimate interest exists.

7. Data security

We take all necessary technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, modification or destruction.

8. Obligation to provide personal data

You are not obliged to provide us with your personal data. However, if you do not provide us with any personal data, we may not be able to conclude and process contracts with you, provide our services or fulfill our legal obligations.

9. Profiling and automated decision-making

We do not use your personal data for automated decision-making.

We partially process your personal data automatically in order to evaluate certain personal aspects and track the use and condition of our vehicles (profiling). Each

vehicle can continuously send data to us, which may also include personal data (in particular location/GPS data, data relating to the use of the vehicle and the control of vehicle functions, as well as telemetry data, insofar as they are actually data with a personal reference). These data are collected and used for administrative and contractual processing. They are generally not disclosed to third parties, unless the data must be disclosed on the basis of applicable laws, administrative orders or for other important reasons (e.g. investigation/clarification of damage cases, investigation of possible violations of contractual provisions, security defects, serious technical problems, violation of third-party rights or protection of our property).

We also use profiling to inform and advise you about products in a targeted manner. We use evaluation tools that enable us to communicate and advertise in a needs-based manner, including market and opinion research.

10. Rights of the data subject

You have the right to access, rectify, erase, restrict, transfer or object to the processing of your personal data. You also have the right to lodge a complaint with the competent data protection authority.

If you wish to exercise your rights or have any questions about our privacy policy, you can contact us at:

CARIFY AG Cheesturmweg 21 4624 Härkingen

11. Changes

We may change this privacy policy at any time without notice. The current, published version on our website applies.