Privacy statement PaceX
Introduction
We are PaceX, a provider of a mobile app (the Test Drive App) for test drive administration for dealers and/or garages. This app records cars, individuals, and trips. Our customers are the dealers or garages that use the app to manage their test drives; we refer to them as the "Users" of our app. For our services, we collect personal data.
Applicability
This Privacy Statement applies to the processing of personal information (Personal Data) provided by Users and data obtained from the use of our Test Drive App, including the mobile app and the admin backend, whether or not using the API and technical support. We also collect data from visitors to our website(s).
1. How does PaceX collect personal data
PaceX collects Personal Data when you are a User of our Test Drive app and use it to manage test drives. We request your information for billing purposes and to enable the use of the services. We also collect data when you request information, ask a question, respond on our website, or otherwise contact us. 2. What personal data does PaceX collect
PaceX collects contact information such as your (business) name, address, phone number, email address, date of birth, and bank details, as well as information related to previous orders and the use of our services. We also record when and what we have communicated with you about, for example, when you ask a question to our support department.
In addition to the personal data you provide to PaceX by using the Test Drive App, PaceX may collect, record, and process additional personal data about your use of our services and website(s). We collect data about the equipment you use, such as a unique device ID, IP address, the version of the operating system settings of the device you use to visit our website, as well as data about your use of our website(s) and App, including the last viewed or requested pages, time on page, and date and time stamps. The responses (opens and clicks) to our emails are also recorded at an individual level.
3. Why does PaceX collect Personal Data
PaceX processes Personal Data to provide our services, the Test Drive App, which allows you to manage your test drives from now on. We store data to deliver, create an account, invoice, and communicate with you in the context of that service. We also need your data when processing inquiries, complaints, and refunds. When placing an order, we create a unique quote and invoice number that is linked to your account.
PaceX stores IP addresses to provide you with an overview of which IP address has logged into the account or made changes. We also use the IP address for password resets and fraud prevention.
The legal bases on which we process user data are:
- The execution of an agreement: the processing is necessary for the execution of an agreement to which you are a party, or to take measures at the request of the data subject before the conclusion of an agreement. Such as using the Test Drive App.
- Consent: You have given consent for the processing of your data, for example in the case of sending the newsletter or placing cookies.
- Legitimate interest: the processing is necessary for the protection of the legitimate interests of PaceX. This is the case, for example, when we store certain information about contact and contract history to better serve our relationships (CRM) or for fraud detection.
4. I took a test drive and my information is in the Test Drive app?
Garages and dealers use the test drive app to manage their test drives. They are also responsible for storing your data. PaceX acts as a processor in this regard. If you have any questions or comments about the management of your data in the Test Drive App, you can direct them to the company where you took your test drive.
5. Your Personal Data and Third Parties
Processors
PaceX may engage other parties in the execution of its services. To the extent that these third parties process Personal Data while providing their services, they do so in the capacity of a processor for PaceX. We enter into agreements with all processors that ensure privacy and IT security are upheld.
Authorities
Based on a legal obligation or at the request of the courts, this data may also be transferred to the authorities (police, tax office, etc.).
Transfer outside the European Union
PaceX does not share data outside the European Union.
6. Your rights
Right to access
You have the right to access your personal data at any time and at no cost, as well as information on how it is processed. The right to access includes: information that PaceX uses your personal data, what data is involved, for what purpose, to whom the data has been provided, and its source (if known).
Right to correct the collected personal data
You have the right to request correction of your personal data. The right to correction means that you may ask PaceX to improve, complete, delete, or restrict the processing of your personal data. This can be done if the personal data is factually incorrect, incomplete, or irrelevant for the purpose for which it was collected, or if it is being used in any other way that violates the law.
Right to be forgotten
If it is no longer necessary for PaceX to retain or process your data, you can request to stop the processing of personal data (or to limit it) or to delete the personal data in whole or in part. We may not always be able to comply with this request. For example, if you have been a client of ours, the tax authorities require us to retain financial data for 7 years. Additionally, if you request that we no longer contact you for marketing purposes, we must retain your data in order to exclude you from our future campaigns. If we do not comply with your request, we will, of course, provide you with the reason.
Right to data portability
You can, if you wish, obtain data that you have provided to us in a machine-readable format, for example, because you want to pass it on to another entity.
You can download your personal data through the candidate portal.
Right to object
As far as the processing of personal data is based on the legitimate interests of PaceX (and not on other processing grounds), you have the right to object to the processing of personal data. For example, you can object to receiving targeted information about our services.
How does PaceX secure personal data?
PaceX takes appropriate technical and organizational measures to secure personal data against unauthorized access, (unintentional) destruction or dissemination, or any other form of misuse. We use secure connections. Data is always transmitted in an encrypted format, both to internal and authorized external parties. In the App, data is stored in a hashed format. Within PaceX, personal data is only accessible to employees who are authorized to access it based on their role, following a least privileged principle.
PaceX has implemented technical and organizational measures to secure (personal) information against unauthorized access, theft, or loss. Nevertheless, it is possible that there is a vulnerability in our information security. If you believe you have found a weakness, we would like to hear from you and work with you to investigate this as soon as possible.
If you give us a reasonable period to respond to your report before disclosing information, and if you make the necessary efforts to prevent violations of privacy, destruction of data, and interruption or degradation of our service during your investigation, we will not initiate legal action against you or request that authorities conduct an investigation into you, unless we have grounds to believe that your actions are not in good faith. We will follow the NCSC's Coordinated Vulnerability Disclosure guidelines when handling a report.
Questions?
If you have any questions or comments about PaceX's privacy statement, you can direct them to info@pacex.nl
Complaints
We are happy to assist you if you have a complaint about our organization. You can send an email to info@pacex.nl Under privacy legislation, you also have the right to file a complaint with the Data Protection Authority regarding our processing of personal data. You can contact the Data Protection Authority using this form.
Changes to privacy statement
PaceX reserves the right to make changes to this privacy statement.