Privacy Policy

1.Who we are

The data controller for the personal data collected through this website is JVG Automotive BV, with registered office at Stadspark, 2018 Antwerpen, Belgium, company (KBO/BCE) number 0789.456.123, VAT number BE 0789.456.123, trading as JVG Automotive.

You can contact us by email at info@forgedigital.io, by phone at +32 3 123 45 67, or through our website jvg-automotive.forgedigital.io.

2.What personal data we collect

a. Data you provide to us through a form: when you contact us via the contact form, ask a question about a specific vehicle, or ask a question about financing, this concerns the information you enter yourself: your name, email address, telephone number, the content of your message, and the language you chose to fill in the form. That message is forwarded straight to our company's email inbox. It is not stored in the website's database, and there is no screen in our management system where customer messages are held. Your message therefore arrives in our mailbox in the same way as an email you would have written to us yourself.

The “Offer your car” form works differently. That data we do store in the website's database, because we follow up your offer over a period of days or weeks: your name, email address, telephone number, the content of your message, the details and any photos of the car you are offering, and your IP address as a salted hash (meaning it can no longer be traced back to you) to prevent abuse of this form. How long we keep this data is set out in section 7.

b. Technical and usage data: to keep our website secure and running smoothly, and to understand how it is used, we collect certain technical data: information about your browser and device, and which pages you viewed. This is done using a privacy-friendly, cookieless analytics tool that does not track individual visitors and does not build personal profiles.

c. Data from emails or phone calls: if you email or call us directly, we process the information you share with us in order to respond to your query.

We do not knowingly collect special categories of personal data (such as data concerning health, ethnic origin, religious beliefs, and the like). Please do not send us such data via our forms or emails.

3.Why we process your data, and on what legal basis

We process your personal data for the following purposes, each on a specific legal basis under the GDPR:

• To respond to your query and take any steps prior to a sale that you request (for example, arranging a test drive or reserving a vehicle), under Article 6(1)(b) GDPR, as this is necessary to perform (pre-contractual) steps taken at your request.
• To manage our vehicle offering and customer relationship, to prevent spam and misuse of our forms, and to compile simple aggregated statistics on the use of our website, under our legitimate interest as a business (Article 6(1)(f) GDPR). We have weighed this interest against your rights and freedoms and consider that minimal, proportionate processing is justified.
• To comply with our legal obligations, for example for accounting or tax purposes, under Article 6(1)(c) GDPR.
• Where we ask for your explicit consent for certain processing (for example, optional, non-essential cookies), the processing is based on Article 6(1)(a) GDPR. You may withdraw this consent at any time.

4.Cookies and analytics

Our website uses only essential and functional cookies that are necessary for the site to work properly, such as remembering your language preference and security measures against misuse. No consent is required for these cookies.

For website statistics we use a privacy-friendly, cookieless analytics tool that does not track individual visitors, does not place any unique identifiers on your device, and does not build personal profiles. This tool only provides us with aggregated insights (for example, how many visitors viewed a page).

Should we add any non-essential cookies in the future (for example, for marketing purposes), we will inform you beforehand and request your explicit consent through a cookie banner.

5.Who receives your data

We do not share your personal data with third parties for commercial purposes, and we never sell your data. To operate our website and services, we rely on carefully selected service providers, in categories such as website hosting, database management, email delivery, and website security and analytics.

These service providers act as our processors within the meaning of the GDPR: they process your data solely on our instructions and for our purposes, and are contractually bound to do so through a data processing agreement that imposes, among other things, appropriate security measures and confidentiality. They may not use your data for their own purposes.

6.International data transfers

Your personal data is processed primarily within the European Union/European Economic Area (EU/EEA). Should any of our service providers process data outside the EEA, we ensure that appropriate safeguards apply, such as the European Commission's Standard Contractual Clauses, or that the transfer is made to a country for which the European Commission has adopted an adequacy decision.

7.How long we keep your data

Messages sent through the contact form, a vehicle inquiry or a financing question are not stored by us. We forward them by email to our own inbox, where they arrive in the same way as an email you would have written to us yourself. From that moment on they are kept and deleted in line with the normal running of our mailbox. We cannot state a fixed deletion date for them, because no automated process on the website governs these messages.

Data you provide to us through the “Offer your car” form is stored, because we need to assess your car and to contact you over a longer period. As soon as the vehicle is sold, your personal data (name, email address, telephone number, the content of your message and the hashed IP address) is deleted automatically. What remains afterwards is only a record of the car itself: one photograph and a summary of its specifications in our public overview of sold vehicles, which contains no personal data whatsoever. If your offer does not lead to a sale, we keep this data for 24 months after our last contact with you, after which it is deleted.

Of every message the website sends, we keep a technical send log permanently, so that we can check afterwards whether a message arrived. That log contains only a reference number, the type of inquiry, the vehicle concerned, and whether sending succeeded. It does not contain your name, your email address, your telephone number or the content of your message.

Data we are legally required to keep, such as accounting records relating to a sale, is retained for the statutory period (in Belgium, generally 7 years for accounting documents). A longer retention period is also possible where it is necessary, for example in the context of an ongoing dispute.

8.Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: you can request to know what data we hold about you.
• Right to rectification: you can have inaccurate or incomplete data corrected.
• Right to erasure (“the right to be forgotten”): you can request that we delete your data, within the limits of our legal obligations.
• Right to restriction of processing: you can request that we temporarily limit the processing of your data.
• Right to data portability: you can request to receive the data you provided to us in a structured, commonly used format.
• Right to object: you can object to processing based on our legitimate interest.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, you can contact us at info@forgedigital.io. We will respond within the legally required timeframe.

9.Security of your data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration or destruction. These include: encryption of data in transit (for example, via HTTPS), access controls on our systems, storing IP addresses only in hashed form, hosting data within the EU, and entering into data processing agreements with all of our service providers.

10.Changes to this policy

We may update this privacy policy from time to time, for example following changes to our operations or to applicable legislation. The date at the top of this page indicates when the policy was last updated. We encourage you to review this policy periodically.

11.Contact

If you have any questions about this privacy policy or about how we process your personal data, you can always contact us:

JVG Automotive BV (JVG Automotive), Stadspark, 2018 Antwerpen, Belgium. Email: info@forgedigital.io, phone: +32 3 123 45 67, website: jvg-automotive.forgedigital.io.