PRIVACY POLICY

Luxury Auto Services utilizes the website www.luxuryautoservices.fr to provide services to the public and to create a platform for individuals to learn about its services and subsequently book services from Luxury Auto Services. Data collection is conducted to ensure a secure and appropriate environment for website visitors and for contractual fulfillment purposes. We, as the data controller, aim to inform you about the processing of your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Code des postes et des communications électroniques. This privacy policy applies to the processing of personal data for the provision of our business services through our online platforms, including this website, our Instagram page, and email correspondence. We will explain how, for what purpose, and to what extent we process your data and which partners we utilize to provide these services. 

  1. Controller & Host

The website www.luxuryautoservices.fr is owned by: 
Luxury Auto Services S.A.S.U  
Rue de Neptune 4, 94700 Maisons-Alfort 
France 
contact@luxuryautoservices.fr  

The website is hosted by: 

Hostinger International Ltd.  
Société privée à responsabilité limitée de Chypre  
61 Lordou Vironos str. 6023 Larnaca 
Chypre 

  1. Legal Purpose of Data Collection:

EU General Data Protection Regulation (GDPR) Article 6. (1) 


a) Consent: Data collection is lawful if the individual has given explicit consent for their data to be processed for specific purposes

b) Contractual necessity: Data processing is necessary for the performance of a contract with the individual or for pre-contractual measures at the individual’s request.

c) Legal obligation: Data processing is necessary for compliance with a legal obligation to which the data controller is subject. 

d) Vital interests: Data processing is necessary to protect the vital interests of the individual or another natural person. 

e) Public interest: Data processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. 

f) Legitimate interests: Data processing is necessary for the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the fundamental rights and freedoms of the individual.

3. Types of Data

3.1 Cookies (Consent): Cookies are small text files stored on your device and do not cause any harm. They can be temporary (session cookies) or permanent (persistent cookies). Most websites use essential cookies for site performance and shopping functionality. There are various types of cookies. Some are essential, such as those for the shopping cart or video display, while others analyze user behavior or display advertisements. The use of necessary cookies and functional cookies to provide specific functions or optimize the website is carried out in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR). The website operator has a legitimate interest in storing these cookies to provide its services technically flawlessly. If we request your consent to use cookies, this is done exclusively based on this consent (Article 6(1)(a) GDPR); you can revoke this consent at any time. 

3.2 Server-Log-Files (Legitimate interest): When you access our website through a specific browser, data is automatically transmitted to and stored on our web server, which is managed by an external web hosting provider. This data storage is performed to ensure error-free rendering of the website and to protect the data. Only through the use of the web server and a hosting provider are we able to provide you with this website along with our service catalog and subsequently enter into purchase contracts with you. The storage of this data (server log files) serves the legitimate interest of the provider to ensure optimized and secure server performance. Server log data is stored for a maximum of 30 days but is not used to infer user behavior or linked with other data. The transmitted data includes the IP address, access date and time, browser information, referrer address, and operating system. 

3.3 Contact form (Consent): When visitors use our contact form on the website, we collect certain information to process inquiries effectively. This includes filling out the name and email address, as well as the IP address, date and time of submission, browser information, and the content of the message. We may also use cookies to improve user experience and streamline the form submission process. The collected data is used solely for communication purposes and contractual purposes and is not shared with third parties unless it is the subject of the request. 

3.4 Email (Consent): By sending us an email, we collect and store the information provided in your email, including your email address and any other personal data you may include in the message. This data is used solely to respond to your inquiry or to provide the requested services and will be automatically stored in our and the sender’s email service provider’s servers. We do not share this information with third parties unless necessary for the fulfillment of your request or as required by law. We take appropriate measures to protect the confidentiality and security of your personal data transmitted via email. Please note that email communication may not be fully secure, and we advise you not to include sensitive information in your emails. By contacting us via email, you consent to the processing of your personal data as described in this privacy policy. 

3.5 WhatsApp (Consent): When you choose to contact us via WhatsApp, we may collect and process certain personal data, such as your phone number and any messages exchanged, in order to respond to your inquiries and provide the requested services. The data collected through WhatsApp is used solely for communication and contractual purposes and is not shared with third parties unless necessary for the fulfillment of your request or as required by law. Please note that WhatsApp is an external platform with its own privacy policies, and we recommend reviewing WhatsApp’s privacy policy before contacting us through this channel. By taking the initiative to contact us via WhatsApp, you consent to the processing of your personal data as described in this privacy policy. 

3.6 Instagram/Facebook Pages (Consent): Before interacting with our Instagram profile, we advise you to carefully review Instagram’s terms of use and privacy policy to understand what personal data you may share with Instagram. Data collection on the platform is managed by: 

Meta Platforms Ireland Ltd. 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland Platform’s privacy policy: https://instagram.com/about/legal/privacy 

Through Instagram, you can react to our posts, comment, and view our stories. Depending on your preset profile information, certain data may be available to us but is not further processed by us. When we set up our Instagram profile, Instagram provides us with anonymized page statistics via “Insights,” which we do not influence or process. We have entered into a specific agreement with Meta (“Information about Page Insights”) that specifies the security measures Meta must adhere to and Meta’s commitment to fulfilling data subject rights (e.g., users can direct requests for information or deletion directly to Meta). User rights (especially access, deletion, objection, and complaint to the competent supervisory authority) are not restricted by agreements with Meta. Further information can be found at the provided link: https://www.facebook.com/legal/terms/page_controller_addendum 

Our website contains a link to our Instagram business page. When you access this link, data is automatically transmitted and collected by Instagram’s platform in the form of cookies, as is the case with all websites containing external links. We have no control over the cookies used by Instagram or the data collected and processed by the platform. You can exercise your rights through the platform. Our Instagram page is also accessible without consenting to the cookies used on Instagram. Please note that you should always exercise caution when following external links. For more information on Instagram’s cookie usage and how to manage settings, please visit: https://privacycenter.instagram.com/policies/cookies 

3.7 Cookie Banner: To manage the cookies and similar technologies used (such as tracking pixels, web beacons, etc.) and corresponding consents, we use the consent tool “Real Cookie Banner.” You can find details on how “Real Cookie Banner” operates at <a href=”https://devowl.io/rcb/data-processing/” rel=”noreferrer” target=”_blank”>https://devowl.io/rcb/data-processing/</a>. 

The legal basis for processing personal data in this context is Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is in managing the cookies and similar technologies used and the corresponding consents. 

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide personal data, we will not be able to manage your consents. 

  1. Storage of Data

Personal data transmitted to us during the booking process will only be stored by us for as long as necessary for the processing of the service and its legal obligations. The data provided by you will be saved for legal and tax retention periods (7 years) and will be retained and deleted after the expiry of the deadlines. If you contact us via email, these emails or phone messages, considered as commercial or business letters, will also be stored on our email servers for 7 years in accordance with the retention period. 

  1. Sharing of Data

The collected personal data will not be disclosed to third parties without your consent, unless it is necessary for the processing of the service process and our legal obligations (e.g., shipping service providers, hosting providers, sales plugins, tax advisors, accounting software). In this case, the data will only be shared to the extent necessary to fulfill the contractual purpose. 

  1. Security of Data

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. Our security measures are regularly reviewed and improved in line with technological developments. To protect the data transmitted through our online services, websites are equipped with SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address bar of your browser. If you contact us via email, we recommend that you never transmit personal data unencrypted. 

  1. Data Subject’s Rights

The rights of the data subject include: 

The right to be informed about the processing of their data. The right to rectify or complete inaccurate or incomplete data. The right to erasure of their data (“right to be forgotten”). The right to restrict the processing of their data. The right to data portability, meaning the right to receive their data in a structured, commonly used, and machine-readable format and to transmit it to another controller. The right to object to the processing of their data. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. 

  1. Complaint to the Data Protection Authority

If you believe that your data protection rights have been violated or you have concerns about the processing of your personal data, you have the right to lodge a complaint with the relevant data protection authority. 

In France, the competent data protection authority is the Commission nationale de l’informatique et des libertés (CNIL). You can lodge your complaint directly with the CNIL by completing and submitting the complaint form on their website. For more information, please visit the CNIL website: https://www.cnil.fr/. 

  1. Additional

If you have any questions, comments, or complaints regarding data protection and the processing of your personal data, you can always contact us using the provided contact information. Please note that this privacy policy may be updated at any time due to changes in laws or business processes. It is recommended to regularly check for any updates. Please also be aware that links to third-party companies may change from time to time.