Privacy policy

Data controller

The controller of the data collected on this site is the company below. For any question about your data, write to us: we answer ourselves, with no intermediary.

The data we collect

This site only collects what you send us in a form. There is no account, no profiling and no browsing tracking.

• Contact or appointment form: name, e-mail address, telephone, city and country, message, vehicle concerned.
• Buy-back form: the description of the car you are offering, plus the photographs and registration certificate you choose to attach.
• The timestamp of your consent, kept as evidence that you gave it.
• Technical data strictly necessary to the security of the site (server logs: IP address, date, page requested), kept for a limited time and never used commercially.

Purposes and legal bases

Your data is used solely to handle your request: to answer you, prepare an offer, arrange a test drive or a visit, or value the car you wish to sell us.

The legal bases are the pre-contractual steps taken at your request and your consent, which you give explicitly by ticking the box on the form and may withdraw at any time.

Cookies and local storage

This site sets no cookies. No audience measurement, no advertising tracker, no social-network pixel, no third-party statistics tool.

Your theme preference (light or dark) is kept in your browser's local storage; your language is carried by the page address. Both stay on your device and are never sent to us.

That is why you will see no consent banner here: there is nothing to consent to.

Recipients

Your data is handled by the Deal & Drive staff following your request, and by our hosting provider, located in the European Union and acting on our instructions. It is never sold, rented, or passed on to third parties for marketing.

Retention

Requests received through this site are kept for twenty-four months after the file is closed, then deleted. You may ask for their erasure before that.

Where a request leads to a transaction, the related documents are kept for the statutory retention period applicable to accounting and contractual records in Luxembourg.

Security

Exchanges with this site are encrypted (HTTPS). Requests are stored in our internal management system, which is restricted to authorised staff, protected by authentication and logged.

Your rights

Under the General Data Protection Regulation you have the following rights, which you may exercise at any time by e-mail to solutions@dealndrive.com:

• Access your data and obtain a copy of it.
• Have it corrected if it is inaccurate.
• Ask for its erasure or restriction, or object to its processing.
• Withdraw your consent and ask for your data to be ported.

Complaints

If you believe your rights are not being respected, you may lodge a complaint with the Luxembourg supervisory authority: