Privacy Policy

PURPOSE OF THIS PRIVACY POLICY

AutoMPS, a business unit of AutoFacets B.V. (a Gateway Group company) (“we” or “us”) is committed to protecting the privacy and security of your personal data.This privacy policy describes how we collect and use personal data about you during and after the usage of our website in accordance with the applicable law.We decide how we hold and use personal data about you. We are required under data protection legislations to notify you of the information contained in this privacy policy. This policy applies to all the customers/visitors (“you”) who access our website. It is important that you read this policy, together with our Terms of Use (“ToU”) and any other notice we may provide on specific occasions when we are collecting or processing personal data about you, so that you are aware of how and why we are using such information. By accepting this privacy policy and the ToU, you provide your consent to us to process your data.

DATA PROTECTION PRINCIPLES

We will comply with applicable data protection laws. This means that the personal data we hold about you shall be:

Used lawfully, fairly and in a transparent way.
Accurate and kept up to date.
Relevant to the purposes we have mentioned in this policy and limited only to those purposes.
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
Kept only as long as necessary for the purposes we have told you about.
Kept securely.

THE KIND OF INFORMATION WE HOLD ABOUT YOU

Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (also known as anonymous data).

We will collect, store, and use the following categories, amongst others, of your personal data

Name, country, phone number, and additional contact information which you provide on our website, which is used to ensure right person contact;
Email address, which is used as identification for our services and as the primary communication method;
Your photos or videos recorded at our premises;
Your IP address and unique device identifiers, used for fraud prevention, security and purposes.

Other information that you provide to us through digital or physical means may be stored on a case-to-case basis depending on the purpose for which it was provided for.

HOW IS YOUR PERSONAL DATA COLLECTED

We collect personal data directly from you/customer. This website caters to a broad audience and is intended for users aged 18 and above. Additionally, any further data provided by you while using the service or other agreed-upon instances will also be collected.

In our service, we may use cookies as per the industry standards to enhance your experience. These cookies help us gather essential information to improve our services When you communicate with us, we may record such interaction to track your behavior online and gain information to help us serve you better, to personalize your experiences, to train or otherwise support employees, resources or systems and for security purposes. Your acceptance to this privacy policy explicitly provides your consent to us for the same.

SITUATIONS IN WHICH WE WILL USE YOUR PERSONAL DATA

As a part of a global organization with offices and operations spread across the world, personal data we collect may be transferred or be accessible globally throughout our group network. We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we are required to provide, administer, maintain and/or analyze our services to you.
Where we are required to communicate with you, sharing information about the engagement as well as periodic updates/notifications.
Where we need to gain better understanding of how you engage with and utilize the website;
Where we need to resolve disputes, troubleshoot problems and to enforce our terms of use;
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
When complying with rules and regulations through judgments, decrees, or orders under Indian or foreign laws related to contractual or civil matters.
Where we need to ensure safety, provide assistance, or offer services during disasters or public order breakdowns.

We may also use your personal data in the following situations, which are likely to be rare:

Where we need to protect your interests (or someone else’s interests).
Where it is needed in the public interest or for official purposes.

IF YOU FAIL TO PROVIDE PERSONAL DATA

If you choose not to provide the requested information, we may be unable to route you to your desired services. It is important to note that your decision to provide personal data is voluntary.

CHANGE OF PURPOSE

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will strive to notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

DATA SHARING

We may have to share your data with third parties, including third-party service providers and other entities in the group. We require third parties to respect the security of your data and to treat it in accordance with the law. We may transfer your personal data outside the EU/EEA. In such instances, you can anticipate an equivalent level of protection for your personal data.

Why might we share your personal data with third parties?

We will share your personal data with third parties where required by law, where it is necessary to provide our services to you or where we have another legitimate interest in doing so. This website might include links to other websites that are independently operated and not under our control (‘Third Party Sites’). The data you share with Third Party Sites will be subject to the individual privacy policies and terms of service of those Third Party Sites, rather than this Privacy Policy. Our inclusion of these links should not be interpreted as an endorsement or comprehensive review of these websites. For details about the privacy practices and policies of Third Party Sites, we recommend contacting them directly.

Which third-party service providers may process your personal data?

“Third parties” includes third-party service providers (including contractors and designated agents) and other entities within our group.

How secure is your information with other entities in our group?

All our other entities in the group are required to take appropriate security measures to protect your personal data. We only permit them to process your personal data, if at all required, for specified purposes and in accordance with our instructions.

When might we share your personal data with other entities in our group?

We may share your personal data with other entities in our group as part of our regular reporting activities on our performance, in the context of a business reorganization or group restructuring exercise, for system maintenance support and hosting of data.

Transferring information outside the EU/EEA

We may transfer the personal data we collect about you to EU and outside the EU/EEA in order to perform our contract with you. There is not an adequacy decision by the European Commission in respect of those countries. This means that the countries to which we transfer your data are not deemed to provide an adequate level of protection for your personal data.

However, to ensure that your personal data does receive an adequate level of protection we have put in place the following appropriate measure/s to ensure that your personal data is treated by those third parties in a way that is consistent with and which respects the EU/EEA laws on data protection such as data transfer agreements based on standard contractual clauses. If you require further information about these protective measure/s, you can request it from Legal Department (please see contact details below).

DATA SECURITY

We have put in place measures to protect the security of your information. Details of these measures are available upon request.

Our entities will only process your personal data on our instructions and where they have agreed to treat the information confidentially and to keep it secure.

We have put in place appropriate technical, organizational and security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know basis. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

DATA RETENTION

How long will we use your information for?

We will only retain your personal data for as long as it is necessary to fulfil the purposes, we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

In some circumstances we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

DATA SUBJECT RIGHTS

Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your engagement with us.

Your rights in connection with personal data

Under certain circumstances, by law you have the right to:

Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.
Request the transfer of your personal data to another party.
Right of grievance redressal. By this you have the right to access grievance redressal mechanisms for any actions or omissions related to your personal data.
Right to nominate. This enables you to nominate any other individual who shall exercise the above rights in the event of your death or incapacity.

If you want to exercise a data subject right, please contact our Legal Department (please see contact details below).

RIGHT TO WITHDRAW CONSENT

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact our Legal Department (please see contact details below). Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

MISUSE OF DATA

We and/or our affiliates shall not be held liable for any damages, losses, or liabilities arising from the misuse or unauthorized access of personal data by third parties. While we and/or our affiliates shall take reasonable measures to protect the confidentiality and security of personal data in accordance with applicable laws and industry standards, the inherent risks associated with data transmission and storage cannot be completely eliminated. You are encouraged to take precautions when sharing personal data, and we and/or our affiliates disclaim any responsibility for the actions or conduct of unauthorized third parties.

CHANGES TO THIS PRIVACY NOTICE

We reserve the right to update this privacy policy at any time by posting the revised policy on the website and we encourage you to review the same regularly. We may also notify you in other ways from time to time about the processing of your personal data.

CONTACT US

You may contact our Legal Department in case of any questions or concerns about our privacy policy or practices with regard to the processing of your personal data at legal@autofacets.com.