top of page

PRIVACY POLICY

This Policy informs you about the nature of the personal information collected about you, how and for what purposes it is used, and who will have access to this information.

This Policy applies to the personal information of our clients and potential clients (interested in a service/product).

This Policy may be amended, supplemented, or updated in order to comply with any legal, regulatory, jurisprudential, and technical changes. However, your personal data will always be processed in accordance with the policy in effect at the time of their collection unless a mandatory legal provision states otherwise and applies retroactively.

### DATA CONTROLLER

The controller of all data processing mentioned in this Policy is: SAS GOODDAYS 7 bis rue Arago Grenoble 38000

### DATA COLLECTION

The data concerning you is collected directly from you or from our partners, after obtaining your consent when necessary, in the following cases:

When you visit the establishment's website:

- If you accept cookies
- If you request a quote
- If you make an appointment
- If you request to receive the newsletter
- If you place an order (service/product) online
- If you leave a review on a service

When you visit the establishment or contact the establishment by phone, in the following cases:

- If you request a quote
- If you make an appointment
- If you request information about the establishment's products/services
- If you respond to a satisfaction survey

### NATURE OF THE COLLECTED DATA

The personal data collected may include:

- Contact details and civil status (examples: name, first name, title, postal address, landline and/or mobile phone number, email address, date of birth).
- Information related to your vehicle (examples: registration number, make, model, mileage, date of first registration, repair history, etc.).
- Information related to the ordering of a service (examples: methods of receiving a product, date and time of appointment for a service, information related to a possible loyalty account, etc.).
- Payment information (examples: payment method used, financing options, etc.).
- Information related to customer relationship management (examples: satisfaction survey, complaints retention, etc.).
- Information related to commercial communication (examples: choice to receive commercial offers).
- Images (example: images captured by CCTV cameras).

### PURPOSES AND LEGAL BASES FOR PROCESSING

The establishment will only collect your personal data for a specific purpose and based on a specific legal basis (contract execution, your consent, or the legitimate interest of the establishment).

Depending on the service, the purposes and legal bases are as follows:

- **Provision of products and services**  
  - Collected data: identity, contact details, technical information related to the vehicle.  
  - Purposes: customer management, identification of compatible parts with the vehicle, appointment scheduling, service delivery, billing, and payment.  
  - Legal basis: contract execution.

- **Quality control and satisfaction surveys**  
  - Collected data: identity, contact details, technical information related to the vehicle, feedback, and complaints.  
  - Purposes: satisfaction surveys, market studies, quality control of products and services, product and service development.  
  - Legal basis: legitimate interest of the establishment (the necessity for the establishment to meet customers' satisfaction and desires).

- **Customer service and commercial relations**  
  - Collected data: identity, contact details, technical information related to the vehicle, feedback, and complaints.  
  - Purposes: responses to information requests and complaints.  
  - Legal basis: legitimate interest of the establishment and legal obligations (consumer withdrawal rights).

- **Promotions and communications**  
  - Collected data: preferences related to products and services, preferences regarding the media used to receive communication, information about your lifestyle habits.  
  - Purposes: informing the customer about news, new products, and commercial offers.  
  - Legal basis: legitimate interest of the establishment.

- **Statistical studies**  
  - Collected data: identity, data related to commercial relationships, including the use of products and services, information about your lifestyle habits, technical data of your vehicle.  
  - Purposes: preparation of statistics, communication of personalized offers.  
  - Legal basis: legitimate interest of the establishment.

- **Security**  
  - Collected data: CCTV images  
  - Purpose: ensuring the safety of people and property.  
  - Legal basis: legitimate interest of the establishment.

- **Compliance with legal and regulatory obligations**  
  - Collected data: data related to transactions, payments, order history, and information related to the order.  
  - Purposes: combating payment fraud.  
  - Legal basis: legal obligations to cooperate with organizations combating different types of fraud.

### DATA RECIPIENTS

The establishment may share your data with authorized organizations. 

Thus, the establishment may use subcontractors (any company handling personal data following the establishment's instructions) to process your personal data, limited to what is necessary for the performance of their services (example: hosting a website, managing the sending of promotional offers). 

The establishment ensures, through contracts with the subcontractor, that they respect the confidentiality and security of the personal data they receive. 

Except in the cases mentioned above, the establishment commits not to sell, rent, or transfer your personal data to third parties without your consent.

### DATA RETENTION PERIOD

Your data will be kept securely by the establishment for the period strictly necessary to achieve the purposes mentioned above or for the minimum retention period provided by applicable legislation.

For example, data related to the delivery of the service will be kept for the duration of the contract and for five years after the end of the service unless a stricter legal provision applies. 

Another example: data related to the sending of promotional offers will be kept for three years after the last contact unless you exercise your right to object.

### EXERCISING YOUR RIGHTS

You can exercise your rights of access, rectification, deletion, restriction, portability of your data, objection to processing for legitimate reasons, and the right to define the fate of your data after your death with the establishment.

You can exercise these rights by contacting (ADDRESS).

You can also file a complaint directly with the Commission Nationale de l’Informatique et des Libertés (CNIL) at https://www.cnil.fr. For any information on personal data protection, you can also consult the CNIL.

bottom of page