This Privacy Notice summarises the terms and conditions of Magyar Suzuki ZRT Esztergom Sucursala București’s processing of users' and visitors' personal data in a concise and transparent manner, as set out below:
The data controller is Magyar Suzuki ZRT Esztergom Sucursala București, alias SUZUKI (Str. Nicolae Caramfil. Nr 75, et 5,Sector 1, București,e-mail: privacy@suzuki.hu, dataprotection@suzuki.ro)
The purposes of the processing are:
(i) to conduct test drives,
(ii) to contact you by telephone or email as per you requested,
and
(iii) to send advertisements, offers and discounts to you.
What personal data do we process?
About test driving, we may process ("Test driving data"):
In connection with contacting you, we may process the following data ("Contact data"):
In order to send advertisements, offers, and discounts to you in electronic or paper format, we may process the following data
(„Marketing data”):
What is the legal basis for processing?
In the following activities, the legal basis for processing is your consent pursuant to Article 6(1)(a) of the GDPR:
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal.
What is the duration of data processing?
Test driving data will be retained for a maximum of 1 month after the test drive unless you have given your consent to the processing of data for marketing purposes, in which case we will retain such data until your consent is withdrawn, but no later than 5 years after the data is made available to you.
In case of Contact data, we process your data for a maximum of 1 month after the date of the last communication (when your request is answered or fulfilled) unless you have given your consent to the processing of data for marketing purposes, in which case we will retain such data until your consent is withdrawn, but no later than 5 years after the data is made available to you.Marketing data is retained for 5 years or until you withdraw your consent to process Marketing data provided by you.
Recipients:
Our employees could access your personal data according to the "need to know" principle for the fulfillment of their duties. In order to fulfill the operational attributions of our company, we will be able to transfer your data to Magyar Suzuki Zrt.(Hungary, H-2500 Esztergom, Schweidel József utca 52, email: privacy@suzuki.hu). Within Magyar Suzuki Zrt., your data may be
accessed by the Export Development Department, the Internal Audit Department, the Legal and Compliance Department and the IT Department on a "need to know" basis.
Once you have applied for a test drive, we will share your Test driving data with the Dealer of your choice. The Dealer details will be provided at the time of your selection. The Dealer of your choice will act as a data processor in fulfilling this processing purpose.For the purpose of contacting you, we will share your Contact data data with the dealer of your choice, who will act as data
processors in fulfilling this processing purpose.
IT background and support necessary to meet the purposes of the processing is provided by Suzuki Digital Private Limited (1Nelson Mandela Road, Vasant Kunj, New Delhi, India 110 070; hereinafter referred to as "Suzuki Digital"), an Indian company,acting as a data processor in connection with the processing. In the processing of your personal data by Suzuki Digital, we have put in place appropriate safeguards to ensure that your personal data is adequately protected. As part of these safeguards, SUZUKI and Suzuki Digital have put in place standard contractual clauses and technical and organizational measures adopted by the European Commission to ensure adequate protection of personal data. If you would like more information about how SUZUKI protects your personal data when transferring data outside the EEA, or to receive a copy of the safeguards we apply to data transfers, please contact us.Additional data processors are Suzuki's IT hosting data processors.
What are your rights and remedies?
In accordance with the applicable data protection legislation, you have the right to:
(i)request access to your personal data;
(ii) request rectification of your personal data;
(iii) request erasure of your personal data;
(iv) request restriction of the processing of your personal data;
(v) request portability;
(vi) object to the processing of your personal data
(including objection to profiling and other rights related to automated decision-making).
(i) Right of access
You have the right to receive feedback from us as to whether your personal data is being processed and, if such processing is ongoing, you have the right to access your personal data. The right of access includes, among other things, the following information: the purposes of the processing, the categories of personal data processed, and the recipients or categories of recipients to whom or to which the personal data have been or will be disclosed. You have the right to request a copy of your personal data that are subject to processing. If you request additional copies, we may charge you a reasonable fee based on
administrative costs.
(ii) Right to rectification
You have the right to have inaccurate personal data about you corrected at your request. Depending on the purpose of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary declaration.
(iii) Right to erasure (right to be forgotten)
You have the right to request that we delete personal data about you, and we may be required to delete such personal data on your
request.
(iv) Right to restriction of processing
You have the right to restrict the processing of your personal data at your request. In such cases, your data will be marked and processed only for specified purposes.
(v) Right to data portability
You have the right to receive personal data about you that you have provided to us in a structured, commonly used, machine-
readable format, and the right to have it transferred by you to another controller without our hindrance.
(vi) Right to object
You have the right to object to our processing of your personal data at any time on grounds relating to your particular situation, in which case we may be required to stop processing your personal data. Where you have the right to object and you exercise that right, we will no longer process your personal data for such purposes. There is no cost for exercising this right.This right does not apply to you, particularly where the processing of your personal data is necessary for pre-contractual steps or for the performance of a contract already concluded. You can exercise your rights by contacting us directly using the contact details provided above. If you believe that we have violated provisions of Romanian or European law in the processing of your personal data, thus infringing your rights, please contact us so that we can clarify your questions.
You can contact the National Supervisory Authority on Personal Data Processing (ANSPDCP), respectively a European supervisory authority, at the following coordinates:
28-30 G-ral Gheorghe
Magheru Bld. District 1, post code 010336, Bucharest, Romania;
Email: anspdcp@dataprotection.ro; Landline: +40.318.059.211; Fax
+40.318.059.602)