Data Protection Statement
Cranley Leasing Ltd
When you choose to purchase/lease a vehicle from us or have a vehicle repaired or serviced by us, we, the Dealer, will be one of the companies responsible for handling your personal information (known as a “controller” under data protection law).
The personal information collected by us includes your name address, contact information, telephone number, email address, finance information or any other personal details furnished by you during the purchase servicing or repairing of your vehicle.
The purpose and legal basis for processing your information
We collect your personal information to enter into a contract with you to sell a motor vehicle to you and/or to purchase a motor vehicle from you by way of a trade in, or to service or repair a motor vehicle. It is a requirement of the contract that we enter into with you that you provide the personal information requested. If you do not provide the information we may not be able to perform our contract, for example, we will not be able to call you when your vehicle is ready for collection.
In order to process your personal information for this purpose, the processing is necessary for the performance of a contract to which you are a party.
We may use your personal information for direct marketing purposes to make you aware of products and services which may interest you or for customer satisfaction surveys. We may do this by phone, post, email, text or through other digital media. As part of our marketing activities, we may also use your personal information (including, where permitted by you and your finance provider, any finance details) to analyse your suitability for trade-ins or upgrades. Where we do so we rely on the lawful processing ground of legitimate interest and our legitimate interest is to develop relationships with our existing customers and to assess our performance and standards.
When you purchase a new motor vehicle from us we will use your personal information to register the motor vehicle with the Revenue Commissioners to pay any VRT and VAT on the vehicle or, where applicable to apply for a VRT, VAT and/or motor tax exemption on your behalf, as required by law.
We may also use your personal information to comply with any obligation under anti-money laundering legislation, for the purposes of any statutory audit or for any other legal obligation to which we are subject.
We may also use your personal information to manage our everyday business needs, including accounting and to prevent fraud. Where we do so we rely on the lawful processing ground of
legitimate interest and our legitimate interest is in the effective management of our business.
Your Information and Third Parties
- Manufacturer of Your Vehicle & Their Distributor: We pass your personal information on to the manufacturer of the vehicle you purchase and/or their appointed distributor in Ireland for the purposes of warranty, safety, recall and customer satisfaction surveys. If you consent we will also pass your information to the manufacturer distributor of the vehicle you purchase or their appointed distributor in Ireland for marketing activities. The manufacturer or its appointed distributor may contact you separately about their use of your information.
- The Revenue Commissioners: We may sometimes share your information where we do the first registration of your motor vehicle or where we apply for exemptions from VRT. VAT and/or motor tax for you.
- Third Party Service Providers: We may share your personal information with third party service provides that perform services and functions at our direction and on our behalf such as our accountants, IT service providers, printers, lawyers and other business advisors, marketing companies who carry out marketing campaigns on our behalf and providers of security and administration services. We may also share your information with third party service providers who provide services to you such as insurance companies and car rental companies.
- Insurance Companies and Motor Assessors: We may pass your information to insurance companies and/or motor assessors appointed by you, a third party or an insurance company, where any portion of the costs of repairs or work being carried out by us is covered under an insurance policy.
- Potential Sale of the Dealer: We may also transfer your personal information to companies we plan to merge with or be acquired by.
An Gardai, Government Bodies or officials: We may share your personal information with
An Garda or other government bodies or agencies where required to do so by law.
We may hold your personal information for a period of 7 years from the from the end of the current year of date of completion of this contract or from the end date of any warranty period, whichever is the later. We may hold this data for a longer period if we are legally required to do so.
Transfers outside of the European Economic Area
We may transfer your personal data outside of the European Economic Area. These countries do not always afford an equivalent level of privacy protection and in such circumstances we will take specific steps, in accordance with data protection law, to protect your personal information. In particular, for transfers of personal data, outside the EEA where there is no adequacy decision by the European Commission we may rely on contractual protections approved by the European Commission.
You have several rights under data protection law in relation to how we use your personal information. You have the right, free of charge, to:
- check what type of personal data we hold about you and what we do with that information.
you are also entitled to receive a copy of this information
- rectify any inaccurate personal information we hold about you
- erase personal information we hold about you
- stop us from using your personal information in certain cases, including if you believe that the personal information we hold about you is inaccurate or our use of your information is
unlawful. If you exercise this right, we will store your personal information and will not carry out any other processing until the issue is resolved;
- object to us using your personal information where we rely on our legitimate interests to use your information. We will stop using your personal information unless we can demonstrate overriding legitimate grounds for the continued processing of this information; and
- receive your personal information in a structured, commonly used and machine-readable format and to have that data transmitted to another data controller.
These rights are in some circumstances limited by data protection legislation. If you wish to exercise any of these rights please contact us by phone at 01 4565422 or by email to firstname.lastname@example.org. We will endeavour to respond to your request within a month. If we are unable to deal with your request within a month we may extend this period by a further two months and we will explain why.
You also have the right to lodge a complaint to the office of the Data Protection Commission.