We use cookies. By browsing our site you agree to our use of cookies.   Accept this cookie   Find out more

Charter Vehicle Hire

Call us on:

0800 975 2945

or email us at info@cvhl.co.uk

Privacy policy

May 2018

Customer data is very important to all organisations, and it should be treated with the care and respect that it demands. EU, GDPR regulations formulate this and propose seven main principles with which we will endeavour to adhere to during our business activities:

  1. 1. The right to be informed – we will supply concise transparent and easily accessible information about the way we process personal data.
  2. 2. The right to access – individuals have the right to obtain access to their personal data.
  3. 3. The right to rectification (where data is inaccurate or incomplete, individuals are entitled to have their personal data rectified.
  4. 4. The right to be forgotten (this part of the regulations does not provide and absolute right to be forgotten, but introduces a right for individuals to have personal data erased in specific circumstances, such as where there is no longer a legitimate interest in the data being used.
  5. 5. The right to restrict processing (companies will be required to restrict the processing of personal data when an individual has objected to that processing on the grounds of it being inaccurate or gained through illegitimate means).
  6. 6. The right to data portability (companies must make personal data available for individuals in a way that makes it easy for them to move, copy or transfer their data from one platform to another. An example of a format that this data could take is a CSV file).
  7. 7. The right to object (individuals have the right to object to direct marketing and processing for purposes or research and statistics gathering).

Our DMS servers are maintained in house and backed up daily to tape which is locked in a secure environment with restricted access. Prohire, which powers our Vehicle rental system has Legitimate Interests protection and is hosted again on secure servers in two remote locations.

Other interested parties with whom data may be shared include:

  • DVLA – License checks
  • Various Finance companies – Provision of funding for vehicle purchases
  • BCMS – Debt collection where contractual payments have NOT been made
  • Santander Corporate and Commercial Bank – From where payments are made by us

This list is not exhaustive however a Legitimate Interests Assessment has also been completed in order to identify areas where data processing and sharing is appropriate. ( App. 1 )

Data will ordinarily be retained for seven years in order to comply with HMRC (Inland Revenue) requirements, after which time any paper records will be disposed of in an appropriate environmentally friendly manner and electronic data records deleted.

Should you not wish to be contacted or subscribed in error then please respond to carlie.james@jamesandjenkins.co.uk with the phrase “ UNSUBSCRIBE “ in the subject line.

Appendix 1.

Legitimate Interests Assessment (LIA)

May 2018

This LIA relates to the electronic and hard copy documentation known as DMS data relating to owners or perspective owners of vehicles supplied by James & Jenkins Garages Ltd (JJGL). Such data may have been transferred to Subaru UK or other franchises that we hold to enable those distributors or Manufacturers to carry out their duties as distributor or manufacturer and other legitimate commercial functions and responsibilities.

A) Identifies a Legitimate Interest

Question Answer
What is the purpose of the processing operation where processing includes any of the following:
Collection, recording,storeage,use, disclosure by transmission or destruction or ‘any operation which is performed on personal data’?
The purpose of the processing is two stage. Firstly to identify a single instance of the Data Subject and their associated enquiries, vehicles, service, warranty and parts business with JJGL. Secondly to have the ability to communicate with the Data Subject (DS) relevant marketing communications in some instance via a distributor or Manufacturer.
Is such processing required to achieve a lawful business objective Yes. The lawful business objective being to ensure that we fulfil our responsibilities as Dealer to our Customers and perspective customers.

B) The Necessity Test

Question Answer
State briefly why the processing activity is importantto the business ? It is important to the business to reduce duplicate and erroneous messaging from JJGL and our franchise partners.

It is important that the DS (Customer or Prospective) is put in control of their PII using the Preference Centre, and that the DS rights and preferences are respected by all channels.
Is the personal data held likely to be disclosed to anyone outside of JJGL. If so who will It be disclosed to and why ? The PII will be disclosed to a very limited number of third party processors including our Distibutor & Manufacturer partners to enable them to support our mutual customers and prospective customers needs.
Is there another way of achieving the objective No

C) The Balancing Test

Question Answer
Would the individual whose personal data is subject to the processing expect the processing activity to take place YES
Does the processing add value to a product or service that the individual uses ? Yes. It gives the DS a choice of preferred dealership across the Network and puts them in control of how the PII is used in all communication channels, both from JJGL and from IML
Is processing likely to negatively impact on the Individual’s rights NO
Is processing likely to result in unwarranted harm or distress to the individual NO
Would there be a prejudice to JJGL or IM if processing does not happen ? YES
Would there be a prejudice to any Third Party if processing does not happen ? Yes. A number of third parties provide critical services that benefit the DS, such as break down and recovery and extended product warranties.
Is the processing in the interests of the individual whose personal data it relates to ? Yes, both in terms of third party arrangements and the privacy by design elements of the Preference Centre.
Are the legitimate interests of the Individual aligned with JJGL & IM ? Yes, it is in the interests of JJGL & IML that the trust of the DS is fundamental to the success of our vehicle sales process
What is the connection between the DS and IM ?
  • Existing customer
  • Lapsed/cancelled customer
  • Business Client
  • Prospect (never purchased goods or services
  • Competition entrants
What is the nature of the data to be processed ? The nature of the data to be processed is governed by the attached ‘ CT DMS Integration Specification – UK – 2018.pdf document (see attached)
Is there a two way relationship in place between JJGL/IM and the individual whose personal information is going to be processed ? If so how close is that relationship ? Ongoing and the DS is put in control of their data and its’ use. Communication is regular and each instance allows a DS to reference back to their preferences opting in/out by channel and to take temporary holidays.
Would the processing by JJGL limit or undermine the rights of individuals ? NO
Has the personal information been obtained directly from the individual, or obtained indirectly from a third party ? PII is obtained from data transferred from IM & Dealership DMS.
Is there an imbalance in who holds the power between IM and the individual DS ? No. The Preference centre puts control firmly in the hands of the DS
Is it likely that the individual may expect their information to be used for this purpose ? YES
Could the processing be considered intrusive or inappropriate ? In particular, could it be perceived as such by the individual or in the context of the relationship ? NO. The processing is deemed necessary to identify a single contact from a number of sources. The balance of processing is deemed to be in favour of the DS as it reduces repetition and erroneous conclusions being derived from the data. e.g. assuming a customer is still driving a vehicle when it has in fact been sold by another dealership.
Is a fair processing notice provided to the individual, if so, how ? Are they sufficiently clear and up front regarding the purpose of the processing ? Yes, All DS’s and potential DS’s have access to our Privacy Policy and this is presented prior to any PII being captured by our automotive brands. Clear instructions have been given to all staff covering the transfer of DS’s PII as part of our arrangements with our Distributor & Manufacturer partners.
Can the individual, whose data is being processed control the processing activity or object to it easily ? Yes, the preference Centre allows the DS to notonly object and opt out of communication using any of the available channels (mobile,email,etc) But also to opt in/out of dealer and National Marketing as well as temporarily to opt out for a period of time.
Can the scope of the processing be modified to reduce or Mitigate any underlying privacy risks or harms ? Potentially as developments in the automotive sector and in particular the introduction of telematics. Questions regarding connected vehicle ownership and service history may be tested in the future, along with the need to pseudonymise the data where necessary.

Contact Us

14 Station Road
Llandaff North, Cardiff
Wales, CF14 2FF
Tel: 0800 975 2945
charter.cardiff@cvhl.co.uk
ICO Registration number: Z495900X

Opening Times

Monday to Friday: 08:00 - 17:30
Saturdays: 09:00 - 12:00
Sundays: Closed

LIKE Charter Vehicle Hire on Facebook FOLLOW Charter Vehicle Hire on Twitter Join Charter Vehicle Hire on LinkedIn
Prohire Software Systems BVRLA United Rental Group Sixt