When you use RAC Cars, RAC is the data controller in respect of any personal information to which this Policy applies, while Motors.co.uk Limited (MOTORS) operate our website. Should you wish, you can contact the RAC in relation to this Privacy Notice at:
Data Protection Officer
RAC,
Great Park Road,
Bradley Stoke,
Bristol
BS32 4QN
Or via email: dpo@rac.co.uk
This Privacy Notice only covers how RAC handles your information.
When you use RAC Cars, RAC Motoring Services will also be a data controller for the following purposes:
| Our purpose for using your data | Our lawful basis |
|---|---|
| Marketing: Using your information for the purpose of marketing activities, including the use of determining the marketing communications we send to you (which may include profiling) and analysis of our marketing activities. | Consent |
| Service oversight, improvements, and analysis: Overseeing the performance of the RAC branded service, making improvements, reporting and analysis, quality assurance, governance, management and audit practices. | Legitimate interest |
| Your rights: Complying with your data protection requests under GDPR. | Legal obligations |
| Regulatory obligations including fraud detection: We use your personal data to comply with our regulatory obligations including for the prevention, detection and reporting of fraud. | Legal obligations |
For each different purpose for which we use your data, we need to have a lawful basis. The different lawful basis are set out in the UK General Data Protection Regulation (GDPR). The ones we're relying on are:
- Consent: Where we process your personal data for direct marketing purposes is based on us having contained valid opt in consent from you to do so. This legal basis is set out in article 6(1)(a) of the GDPR.
- Legitimate interest: We rely on this basis when our use of your data is necessary for the purposes of our legitimate interest which does not unduly impact you rights and freedoms. This legal basis is set out in article 6(1)(f) of the GDPR.
- Performance of a Contract: We rely on this basis when our use of your data is necessary for the purpose of fulfilling our obligations under a contract which you have with us. This legal basis is set out in article 6(1)(b).
- Legal obligations: We're required to comply with legal and regulatory obligations, such as the prevention, detection and reporting of fraud and other financial crime. This legal basis is set in article 6(1)(c) of the GDPR.
You can read more about our use of your information for marketing at https://www.rac.co.uk/legal-information/privacy-policy/part-2/marketing.
The information we collect and what we do with it
The information which we collect about you relating to your use of RAC Cars will include:
| Category of information | Examples |
|---|---|
| Key personal details | Name, date of birth, etc |
| Contact details | Home address, email address, telephone number |
| Marketing preferences | Your preferences for the marketing you would like to receive from us |
| Communicating with us | If you contact us directly, we may record telephone conversations and communication by email, post and social media |
| Details of your use of RAC services | Where you use RAC Cars, we may receive information about your use of the service |
We collect the following personal information about you and use it for the following purposes:
- When you sign up for an account or otherwise want to buy or sell a vehicle, we collect general identification and contact information: email address, name, postcode, and mobile number. We use this information for the purposes of setting up and administering your account on MOTORS and as a means of verification when you sell cars.
- If you are a dealer, whether a sole trader or other form of company, we also collect contact and general business information including postal addresses, VAT Number, Company Number, names of directors, owners or partners of the business and driver license numbers. We collect this information to set up and administer your account.
- When you express an interest in a vehicle, such as requesting an appointment to view or test drive the vehicle, we will share your contact details with the dealer so they can contact you to deal with such requests.
-
We use IP addresses for three reasons:
- To determine whether activity on our domains has been carried out by human activity as opposed to bot or crawler activity.
- For research purposes in order to help us understand consumer activity and search trends on our network.
- To help determine your location to make searching for vehicles more effective.
- We use cookies on our domains to collect information about how and what you browse on our domains and use this data to create audiences for marketing purposes. For more information about cookies, how we use them, and how to opt out please refer to our Cookies section (5).
- We retain a log of your correspondence with us including emails, online chat sessions and telephone calls. We retain such information for the purposes of providing an audit trail of your interactions with us. We also provide access to this information to our dealers for quality control and monitoring purposes.
- Where you inquire about or purchase a vehicle from a dealer, we may provide additional information to that dealer. We provide details of the postcode you supply and details of the vehicle searches and results to the dealer. This is provided to allow dealers to monitor traffic from MOTORS and the MOTORS Network and monitor how many sales are generated using the MOTORS website and MOTORS Network.
How we get your information
- Motors: We receive information from Motors relating to your use of RAC Cars who host our website on our behalf.
- From you: We receive information directly from you when you contact us directly.
How long we keep your information for
We keep your information for up to 7 years to meet our legal, regulatory, tax or accounting requirements.
Who we share your information with
We may share your information with third parties such as:
- RAC group companies: For administration purposes and to help us understand your relationship with RAC.
- IT providers: Providers of IT services for administration and management of our internal systems
- Regulators: Regulators and governmental bodies, such as the Financial Conduct Authority or Information Commissioner's Office if necessary to meet our mandatory reporting requirements.
- Professional advisors and purchasers: Our professional advisors for the purpose of providing us with professional advice. If RAC is sold, we may need to disclose your personal information to our advisers and any prospective purchasers and their advisers.
Your data protection rights
Under data protection law, you have certain rights about the way we use your information. The rights available to you depend on our reason for processing your information. More information about the scope of these rights can be found on the Information Commissioner's Office's website: ico.org.uk.
You are not usually required to pay any charge for exercising your rights, and we usually have one month in which to respond to you (unless your request is unusually complex).
Please contact us at dpo@rac.co.uk if you wish to make a request.
Automated decision-making
Automated decisions are decisions which are made about you using only technology and which aren't made with the direct input of an actual person. We do not make automated decisions relating to you when you use RAC Cars.
Your responsibility to provide accurate information
It is important that any information you provide directly to us is accurate and correct. Please let us know as soon as you can if any information we hold about you is no longer correct.
Providing false or inaccurate information in order to obtain a product or service may also result in services being restricted or cancelled.
Your right to complain
We take our responsibility to look after your data very seriously. If you have any questions about our use of your data, or wish to make a complaint, please contact our Data Protection Team by emailing dpo@rac.co.uk and we'll be happy to answer your questions.
You also have the right to make a complaint about the way we use your information to the Information Commissioner's Office. You can make a complaint to the ICO by calling 0303 123 1113 or visiting their website: https://ico.org.uk/make-a-complaint/.
Where your information is held
We are a UK based organisation but we do offer services to our members across Europe, such as our European Breakdown cover. It is possible that we may transfer your personal information outside of Europe, for example, where one of service providers has operations outside of Europe and such transfer is necessary. Where your data is transferred outside of Europe, we will ensure that suitable safeguards are in place to make sure that your data is protected. The safeguard will usually be reliance on standard contractual clauses.
What happens if you do not provide us with your personal information
Unfortunately, if you do not provide us with the personal information which we need in order to provide you with a product or service, we may not be able to provide you with that product or service.