Arval Privacy Statement
This privacy notice was reviewed and updated in June 2013.
ARVAL UK Limited ("ARVAL") takes data privacy seriously. It is committed to protecting your personal information and respects your privacy.
In the course of providing various services to you, we may process your personal information. Your personal information may include information like your name, email address or telephone number and processing could mean collecting, storing, using or disclosing your personal information.
ARVAL is bound to comply with EU data protection law. This notice forms part of ARVAL's obligation to be open and fair with all individuals whose personal data we collect and to provide full information on how we collect such data and what we do with it.
This Privacy Notice relates to the processing of your personal data by ARVAL in the UK. Unless otherwise stated, all references to "ARVAL", "we" or "our" in this Privacy Notice shall include all ARVAL entities that process personal data in the UK.
Links to other websites
What this Privacy Notice covers:
• What personal information we collect about you
• How we collect your personal data
• What we use your personal data for
• When we record communications with you
• When we may disclose your personal data
• How we protect your data and where we store it
• Your rights in relation to the personal information we collect
• How long we will hold your data for
• How we update or change this Privacy Notice
• How you can contact us
Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
What personal information we may collect about you
If you deal with ARVAL in the capacity of an officer, employee or director of one of our customers, we typically collect the following types of data about you:
• Your name, work email address and other work contact details.
• Your role, position and/or job title within your employment.
• Your area of employment.
• In some circumstances, identification documentation, such as a photocopy of your passport, driving licence, ID card or other documentation required by. Copies of these documents may include a photograph of your face and shoulders (this type of information may be applicable to directors, partners and sole traders when making credit applications).
• Details of your preferences for types of marketing events.
• Data required for ARVAL to provide products and services to you or your employer (for example your address details for delivery of a vehicle and information relating to your driving history).
If you deal with ARVAL in your private capacity, for example if you take part in a recruitment process with ARVAL or are an ARVAL employee, we typically collect the following types of data about you:
• Personal details, such as name, date of birth, occupation, marital status, country of residence and national insurance number, or equivalent.
• Contact details for your work and/personal details, such as email address, postal address and/or telephone number.
• Identification documentation, such as a photocopy of your passport, driving licence, ID card or other documentation required by local law. Copies of these documents may include a photograph of your face and shoulders.
• Information provided through our recruitment process.
• Details of your visits to our sites including, but not limited to, traffic data, location data and other communication data, and the resources that you access.
These types of data may include sensitive personal data.
We may also record telephone calls and store emails in connection with your dealings with us. See section below ‘When we record communications with you'.
You will never be forced to supply personal information about yourself and it is always at your discretion whether you provide us with such data or not. However, failure to supply any of the personal information we request may mean that we are unable to maintain or provide services or products to you or your employer and/or you may be unable to take part in any of our recruitment campaigns.
ARVAL makes every effort to maintain the accuracy and completeness of your personal data which it stores and to ensure all of your data is up to date. However, you can assist us with this considerably by promptly contacting us if there are any changes to your personal information or if you become aware that we have inaccurate personal information relating to you. ARVAL shall not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data or sensitive personal data that you provide to us.
How we collect your personal data
ARVAL usually collects your data from the information you or your employer submit during the course of your or your employer's relationship with us. This will typically be through the forms and documents used when you or your employer sign up to our marketing or market data news lists, are named as an authorised person to trade on behalf of your employer, sign up to access any of our products or services either on your own behalf or on behalf of your employer or take part in a recruitment campaign. We will also collect data when we monitor or record communications and/or through use of technology, please see further information set out below.
What we use your personal data for
ARVAL and/or persons acting on our behalf may process your data for the following purposes:
• to ensure the content on our websites is presented in the most effective manner for you;
• to carry out money laundering, financial and credit checks and for fraud prevention purposes;
• to provide you with requested products or services;
• to identify persons authorised to trade on behalf of our clients;
• for administrative purposes in relation to the security and access of our platforms and secured websites;
• to contact you about the services and products we offer;
• to consider your suitability for any of our current or future employment opportunities and to confirm your references and educational background;
• to comply with our legal and regulatory obligations and requests anywhere in the world, including reporting and/or being audited by national and international regulatory, enforcement or exchange bodies;
• to comply with court orders and exercise and/ or defend our legal rights;
• for any other legitimate business purpose; and
• as otherwise permitted by any applicable law or regulation.
When we record communications with you
ARVAL and persons acting on our behalf may record and/or monitor communications (including telephone conversations over landlines and mobile phones, emails, instant messaging, chat rooms, fax and other electronic communications) between you and our employees, agents, consultants or contractors. ARVAL only does this to the extent permitted by applicable law for legitimate business purposes or for the purposes permitted by law. ARVAL collects this type of data for several reasons including but not limited to:
• recording facts;
• complying with applicable law and regulation;
• complying with internal procedures and policies;
• facilitating administration and support;
• assisting with security, crime prevention and fraud purposes; and
• investigating or detecting unauthorised use, wrongful use or abuse of our services, systems or other materials.
For more information on cookies generally and what cookies Arval uses, please see our Cookies Policy at http://www.arval.co.uk/portal/web/guest/cookies-policy
When we may disclose your personal data
ARVAL does not and will not sell, rent or trade your personal information. We will only disclose your personal information in the ways set out in this Privacy Notice and in accordance with our agreements with you and/or your employer.
We may disclose your personal information for the purposes set out in this policy and in the following circumstances:
• To any entity within the BNPP group, which means any subsidiary of the ultimate holding company, BNPParibas.
• To third parties who process your personal data on our behalf.
• To third parties who process your data on their own behalf but through providing us or you with a service on behalf of us.
• To third parties in the course of offering or providing services or products to you, for example vehicle collection agents, breakdown and maintenance suppliers.
• To other financial institutions or regulatory bodies with whom information is shared for money laundering checks, credit risk reduction and other fraud and crime prevention purposes.
• To any third party to whom we assign or novate any of our rights or obligations.
• To any prospective buyer in the event we sell any part of our business or its assets or if substantially all of our assets are acquired by a third party, in which case your personal information could form part of one of the assets we sell.
• To any national and/or international regulatory, enforcement or exchange body or court where we are required to do so by applicable law or regulation or at their request.
How we protect your data and where we store it
ARVAL is committed to safeguarding and protecting your personal information and maintains appropriate security to protect any personal information you provide us with from improper or accidental disclosure, use, access, loss, modification or damage.
A cookie is a small text file, stored on your computer that helps identify you. You can set our computer browser to reject cookies but this may disrupt your use of certain parts of our websites. For more information on cookies, what cookies there may be on your computer and how to set up your computer to manage and delete cookies, visit www.allaboutcookies.org.
Your rights in relation to the personal information we collect
If you wish to update or modify any of your personal information we store, access a copy of this personal data, or you would like us to stop processing any of your personal data which we hold, subject to applicable law, you can make such a request by writing to the appropriate address set out below (if your employer contracts with ARVAL then your employer has requested that we process your data on their behalf and we would suggest that you also liaise with your employer before asking us to stop processing your data). We will process your request within the time prescribed by applicable law. If you request access to the personal data we store on you, we reserve the right to charge an appropriate fee, if applicable.
In any of the situations listed above, in order for us to comply with our security obligations and to prevent unauthorised disclosure of data, we may request that you prove your identity by providing us with a copy of a valid means of identification.
If you currently receive marketing material from us but would prefer not to, please contact us by letter at the address listed below or alternatively online via ‘contact us forms' - http://www.arval.co.uk/portal/web/guest/contact-us.
How long we will hold your data for
We will only retain your personal information for as long as necessary to fulfill the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements. However, if you wish to have your personal information removed from our databases, you can make such a request by writing to the appropriate address set out below. Subject to any legal or regulatory requirements, we will then delete this information.
How we update or change this Privacy Notice
We may change or update parts of this Privacy Notice in order to maintain our compliance with applicable law and regulation or following an update to our internal practices. We will do this by updating the wording on this webpage and updating the publication date at the top of this page, although, please be aware, you will not necessarily be directly notified of such a change. Therefore, please ensure that you regularly check this policy so you are fully aware of any changes or updates.
How you can contact us
The Database Controller
ARVAL UK Ltd