Privacy Policy

Privacy Policy

The DUBOURG Group undertakes to ensure that the processing of personal data carried out as part of its activity complies with European regulation no. 2016/679, known as the General Data Protection Regulation (GDPR) of a personal nature, as well as the Data Protection Act.

In this privacy policy (the “Policy”) we explain how and why we use your personal data, what your rights are and how to exercise them.

What is personal data?

Personal data (“Personal Data” or “Data”) means any information relating to an identified or identifiable natural person:

• directly (name, first name, email address) or
• indirectly, since its association with other information allows you to be identified (IP address, geolocation).

Who is this Privacy Policy for?

This Policy applies to all of our online and third-party services.

It aims to inform:

• Users of the DUBOURG Group website;
• DUBOURG Group prospects;
• DUBOURG Group customers;
• The partners of the DUBOURG Group;
• Candidates for employment with the DUBOURG Group.

Who collects your Data?

The Data Controller, within the meaning of the European Data Protection Regulation, is the company FBUA, (hereinafter “the DUBOURG Group”) whose head office is located at 3 Petit Bourg, 33420, Rauzan – France, represented by DOMINIQUE DUBOURG as President.

How do we collect your Data?

Website User Data:

Your data is collected via our online contact form that we have made available on our Website, as well as, where applicable, via the use of cookies.

Customer and prospect data:

Your data is collected via our online contact form that we have made available on our Website.

Candidate data:

We collect your data via our recruitment area available in our online contact form that we have made available on our Website.

Why do we collect your Data?

Website User Data:

Purpose of processing: Management of contact requests

Data categories: Identity data (name, first name, title), contact data (email address, telephone number), browsing data (IP address), professional life data (company name) and free fields.

Legal basis: Legitimate interest

Purpose of processing: Cookie management

Data categories: Navigation data (IP address)

Legal basis: Consent – For more information you can consult our Cookie Management Policy.

Prospect data:

Purpose of processing: Management of contact requests from a prospect

Data categories: Identity data (name, first name, title), contact data (email address, telephone number), browsing data (IP address), professional life data (company name) and free fields.

Legal basis: Legitimate interest

Customer data:

Purpose of processing: Day-to-day customer management

Data categories: Identity data (name, first name, title), contact data (email address, telephone number), browsing data (IP address), professional life data (company name) and free fields.

Legal basis: Performance of a contract

Partner data:

Purpose of processing: Day-to-day management of partners

Data categories: Identity data (name, first name, title), contact data (email address, telephone number), browsing data (IP address), professional life data (company name) and free fields.

Legal basis: Performance of a contract

Candidate data:

Purpose of processing: Recruitment management

Data categories: Identity data (name, first name, title), contact data (email address, telephone number), browsing data (IP address), professional life data (company name) and free fields.

Legal basis: Legitimate interest

Are you obliged to provide your Personal Data?

Some fields in our collection forms are not mandatory. Mandatory data to be filled in is indicated by a red asterisk “*”.

How long do we keep your Data?

We retain your Personal Data for the period necessary to carry out the operations for which they were collected, except where the law provides for a different retention period.

Persons concerned: Users of the Website

Retention periods: To carry out statistical and attendance operations, your Personal Data is retained for a maximum period of thirteen (13) months, after which it will be destroyed.

For more information you can consult our Cookie Management Policy.

Persons concerned: Prospects

Retention periods: Your Data is kept for three (3) years after the last contact with the DUBOURG Group.

Persons concerned: Customers

Retention periods: Your Data is retained for the entire duration of the service provision contract, as well as five (5) years following the end of the latter.

Your billing data is kept for ten (10) years, in accordance with the provisions of the French Commercial Code.

Persons concerned: Partners

Retention periods: Your Data is retained for the entire duration of the execution of the contract binding you as a partner of the Dubourg Group, as well as five (5) years following the end of the latter.

Your billing data is kept for ten (10) years, in accordance with the provisions of the French Commercial Code.

Persons concerned: Candidates

Retention periods: Your Data is kept for two (2) years following the last contact with the DUBOURG Group.

This retention period may be extended with your express consent.

Who do we share your Data with?

Website User Data:

Purpose of processing: Cookie management

Data recipients: Youtube / Google ReCAPTCHA

Is your data sent outside the European Union?

We do not share any of your Data outside the European Union with service providers located outside the European Union.

What security measures have we taken to protect you?

We are committed to implementing all technical and organizational measures necessary to respect the protection of your Personal Data (impact analysis, audit, authorization and access management policy, application mapping).

In particular, we carry out audits of our service providers to ensure the proper implementation of security measures to guarantee the integrity, confidentiality and availability of your Data.

Our contracts with our service providers include a section dedicated to Data protection, in compliance with applicable laws.

What are your rights?

In accordance with the Data Protection Act, and subject to compliance with the legal obligations imposed on the DUBOURG Group within the framework of its activity, each individual may exercise the following rights:

You can :

• Right of access: Request a copy of the Data concerning you held by the Data Controller;
• Right of rectification: Correct or complete inaccurate Data concerning you;
• Right to erasure: Request the erasure of all or part of your Data;
• Right to object: Object to our processing of your Data, including in the context of profiling activities (this request is incompatible with the processing of your contact or quote request);
• Right to withdraw: Decide at any time to withdraw your consent;
• Right to restriction of processing: Limit the use of your Data for the duration of the processing of your request;
• Right to portability: Request to recover part of your Data processed by Groupe DUBOURG in a machine-readable format.

When a Data breach that is likely to result in a high risk to your rights and freedoms is detected, you will be informed of this breach as soon as possible.

You may formulate directives relating to the conservation, deletion and communication of your Personal Data after death, in accordance with article 85 of law 78-17 of January 6, 1978.

How to exercise your rights?

These rights and these directives can be exercised and addressed by writing to us:

• by post to the following address: DUBOURG AUTOMOBILES, 3 Petit Bourg, 33420, Rauzan – France

Or

• by electronic means: rgpd@dubourgauto.fr

Depending on the type of request and in case of doubt about your identity, we may ask you to prove your identity upon receipt of your request.

A response will then be sent to you within 1 month of receipt of the request. In certain cases, linked to the complexity of the request or the number of requests, this period may be extended by 2 months.

You can also contact the National Commission for Information Technology and Civil Liberties (CNIL), the regulatory authority responsible for enforcing regulations on the protection of personal data in France, via the internet https://www.cnil.fr/fr/agir or by post to the following address: Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy – TSA 80715, 75334 PARIS CEDEX.

Modification of this Privacy Policy

We may update this Policy by posting a new version on our Site, in which case you will be notified of this the next time you visit the Site.

Contact

For any questions regarding the Privacy Policy, you may contact us by the following means:

By electronic means: rgpd@dubourgauto.fr
By post: FBUA 3 Petit Bourg, 33420, Rauzan – France