PRIVACY POLICY

CARTOBIKE data protection information

The CARTOBIKE website ("CARTOBIKE", "offer" or "platform") is made available by CARTOBIKE, Place du Champ de Mars, 5, 1050 Brussels, Belgium, legally represented by the director Mr. Moussa JADIR, ("CARTOBIKE" or "we") as the person responsible in the sense of the applicable data protection law.

The following information informs you about the personal data we collect when you use CARTOBIKE and how we handle this data. You can access this data protection information at any time in the "Data Protection" section of the website.

CARTOBIKE is responsible for the collection and processing of your personal data in the context of the provision of the Services, which depends on the use you make of our Services.

1. What data is processed by CARTOBIKE?

CARTOBIKE is a platform for suppliers and interested parties of vehicles and related services such as financing or insurance. In principle, you can visit our website without registering and actively providing us with personal data. In this case, we only collect the following data:

• The file name of the page or file or information you enter (e.g., the query parameters in the URL);
• File name of the page from which the current page or file was requested;
• Date and time of application;
• Amount of data transferred;
• Access status (page transferred, page not found, etc.);
• Type and operating system of the web browser used;
• the customer's IP address and, if applicable, its domain name or the name of the Internet service provider;
• Statistics on page views, traffic data and advertising data (each via cookies - see below under cookies).

1.1 Registration with CARTOBIKE

If you decide to actively trade on our marketplace, registration is required, during which we collect the following data from you:

• As a private seller: e-mail address and password, first name, last name, street name and number, postal code and city, area code and telephone number;
• As a professional seller: title, first and last name, address, e-mail address and telephone number, company name, VAT number, user name, mobile phone number (optional), fax (optional) as well as contact person for contractual matters, invoice address (if different), business address (if different)
• As a buyer: e-mail address and password, title, surname, first name, postcode, current ownership of the vehicle, type of customer (private / commercial)

1.2 Data entered on CARTOBIKE

We collect the data you enter on our platform. You are not obliged to provide the non-mandatory information; without this data, you may not be able to use the corresponding function. We would like to inform you about the data we collect in the course of your use of the platform, namely

• The identity of the natural persons (surname, first name, address, age, e-mail address, telephone);
• The identity of legal persons and their representatives (see natural person);

As a subscriber to newsletters and mailings: e-mail address and, if given by registration as a supplier, first and last name, other data such as postcode for local offers, as well as additional personalisation based on consumer behaviour (e.g. search history, advertising content). In order to be able to optimally design our newsletter according to your interests and wishes, clicks on the links in the newsletter are recorded and stored.

2. For what purposes and on what legal basis does CARTOBIKE process your data?

We process your data primarily in order to make the offer and the associated services and functions available. In addition, further processing takes place for other purposes, which we describe below with the respective legal bases. In particular, we use various methods on the platform for the analysis of usage and the delivery of online advertising (both also using cookies). In addition, we process data for the purposes of direct e-mail advertising and for security and prosecution purposes.

2.1 Provision of the portal

We process your data in order to make the offer and the associated services and functions available. When you use the contact form in advertisements on our platform, the contact information entered by interested parties is passed on to the advertisers.

We store and process product data for statistical evaluations and publication beyond the duration of the advertisement.

To ensure that as many interested parties as possible become aware of your offers/advertisements, we sometimes run advertisements via websites. This includes passing on your data to partner websites as published publicly in the advertisement. 

We also send your advertisements by e-mail to interested parties who have subscribed to a search request and share your advertisements in social media (e.g. Facebook).

In some areas, we allow you to rate the services found on our platform by partners and third-party companies as a referral aid for other users. For this purpose, we will send you an e-mail asking you to submit such a review.

In addition, we process your data insofar as this is necessary for the execution and processing of the concluded contractual relationship, e.g. for sending invoices or for contacting you in case of problems.

These processes are carried out on the basis of legal provisions that allow us to process personal data to the extent necessary for the use of a service or the performance of a contract (Article 6(1)(b) of the General Data Protection Regulation "GDPR") or because CARTOBIKE has the overriding legitimate interest in making the use of the platform as simple and efficient as possible (Article 6(1)(f) of the GDPR ). In some cases, we also obtain your consent to data processing (Article 6(1)(a) of the GDPR).

2.2 Statistical evaluations and demand-driven design (cookies)

When using our offer, we create usage profiles using pseudonyms for the purpose of statistical evaluation and demand-oriented design of the offer. These processes are carried out on the basis of the legal regulations that permit the processing of personal data because CARTOBIKE has a predominant legitimate interest in a needs-oriented design, focused on usage patterns and statistical evaluation of our offer (Article 6, paragraph 1 f) of the GDPR).

To do this, we use cookies, which are alphanumeric identifiers that we send to your computer via your web browser. They allow our systems to temporarily distinguish your browser from others. On the one hand, we send you so-called persistent cookies, with the help of which we note the application criteria you have entered in our car database and store them for our internal evaluations.

In addition, we use session cookies, with which you receive a session ID for the duration of a visit to our pages, which allows us to recognise you as a certain (anonymous) user. This allows us to create continuity for you during your visit and, for example, to prevent the same advertisements from being displayed repeatedly. The session cookie and your session ID will be deleted at the end of your visit to our site.

If you wish to prevent this from happening, you can do so by disabling the cookie. The help function in the menu bar of most web browsers explains how to configure your browser so that it no longer accepts cookies or only accepts cookies to a certain extent. There you will also learn how to set your browser to inform you when a cookie is "offered" to your computer. Unfortunately, you can only use the full functionality of our website by accepting cookie activation.

We therefore recommend that you leave your browser's cookie function activated when you visit our pages. We also recommend that you always log out completely after using a computer that you share with other people and whose browser is set to accept cookies. If you do not accept cookies, it is unfortunately not possible for us to provide you with all the services and functions of the platform.

For the above-mentioned statistical evaluation purposes and the demand-oriented design of our offer, we use different procedures, unless you object.

2.2.1 Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be reduced by Google in the Member States of the European Union or in other countries that are signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. This data transfer is based on a corresponding EU-US Privacy Shield certification by Google, which can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.

Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data.

You can also prevent Google from collecting the data generated by the cookie about your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

For more information on the terms of use and data protection, please visit http://www.google.com/analytics/terms/fr.html. Please note that the code "gat._anonymizeIp ();" has been added to Google Analytics on this website to ensure the anonymous collection of IP addresses (so-called IP masking).

Google Analytics is used on the basis of our legitimate interest in demand-oriented design, statistical evaluation and effective advertising of our website and the fact that your legitimate interests do not override (Article 6(1)(f) of the GDPR).

2.3 Online advertising

Advertising on our websites is optimised for you by collecting and processing your usage behaviour in relation to predicted interests. Cookies are used for this purpose, which are stored on your computer's hard drive and allow recognition, but do not allow personal identification of your person.

We collect data about your activities on our website (e.g., banner ads clicked on, subpages visited, search queries, etc.). This data is used by third parties through an anonymous user number on behalf of CARTOBIKE in order to display content and advertising according to your interests.

These processes are carried out on the basis of the legal provisions that allow the processing of personal data because CARTOBIKE has an overriding legitimate interest in refinancing the investments for the operation of the portal through advertising (Article 6, paragraph 1 f) of the GDPR). If you have given us your consent, CARTOBIKE will combine browsing data on CARTOBIKE websites and mobile applications (pages viewed, content clicked, etc.) and data from other services used on these websites/applications with your registration data to show you interesting advertising offers on these websites/mobile applications (Article 6, paragraph 1 a) of the GDPR).

For the delivery of usage-based online advertising, we use, if you do not object, various advertising network operators.

2.3.1 Google AdSense

We use Goolge AdSense, an advertising service of Google Inc (1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA; "Google"). Google AdSense uses cookies that enable an analysis of your use of the site and the automatic delivery of advertisements. Google Adsense also uses "web beacons" (small invisible graphics) to collect information. By using the web beacon, simple actions such as visitor traffic can be recorded and collected on the website.

The information generated by the cookie and/or web beacon about your use of this website (including the abbreviated IP address) will be transmitted to and stored by Google on servers in the United States. This transfer of data will be carried out in accordance with the applicable data protection legislation, in particular in compliance with the EU-US Privacy Shield. Google will use this information for the purpose of evaluating your use of the website with respect to advertising, compiling reports on website activity and advertising for website operators, and providing other services relating to website and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. Third parties will also place cookies on your browser and use the data collected in this way in an anonymous form for advertising purposes or to advertise our product. You may refuse the use of cookies by selecting the appropriate settings on your browser (see below); however, please note that if you do this you may not be able to use the full functionality of this website. You may object to the use of your pseudonymous data at any time by installing a browser add-on.

You can download it here: https://www.google.com/settings/u/0/ads/plugin?hl=en

2.3.2. AdWords 

We have integrated Google AdWords on this website. Google AdWords is an internet advertising service of Google. Inc (1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA; "Google") that allows advertisers to place ads both in Google search engine results and in the Google Ad Network. Google AdWords allows an advertiser to pre-define certain keywords to display an ad in Google search engine results only when the user uses the search engine to retrieve a relevant search result for a keyword. On the Google network, ads are served on thematic websites using an automatic algorithm and using the previously defined keywords.

The purpose of Google AdWords is to promote our website by displaying relevant advertisements on third party websites and in the search engine results of the Google search engine, and by displaying third party advertisements on our website.

If a data subject accesses our site via a Google ad, a conversion cookie is stored on the data subject's computer system by Google. Cookies are already explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping cart of an online shop system, have been called up on our website. The conversion cookie allows us and Google to know whether a person who has accessed our website via an AdWords ad has generated revenue, i.e. has completed or cancelled a purchase of goods.

The data and information collected through the use of the conversion cookie is used by Google to generate statistics about visits to our website. We use these visit statistics to determine the total number of users referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimise our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive any personally identifiable information from Google.

The conversion cookie is used to store personal information, such as the websites visited by the data subject. The personal data, including the IP address of the Internet connection used by the data subject, is therefore transmitted to Google in the United States of America each time the data subject visits our Internet pages. This personal data is stored by Google in the United States of America. Google may pass on the personal data collected via this technical process to third parties.

The data subject can prevent the setting of cookies by our website at any time, as described above, by means of an appropriate setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting in the Internet browser used would also prevent Google from setting a conversion cookie on the data subject's computer system. In addition, a cookie that has already been set by Google AdWords can be deleted at any time via the Internet browser or other software.

In addition, the data subject has the opportunity to object to targeted advertising by Google. To do this, the data subject must access the link https://adssettings.google.be/authenticated?hl=fr in each of the Internet browsers used and make the required settings there.

All information about Google's data protection can be found here https://policies.google.com/privacy?hl=fr.

You can unsubscribe herehttps://adssettings.google.be/authenticated?hl=fr and herehttp://www.youronlinechoices.com/fr/controler-ses-cookies/

2.4 Direct e-mail advertising

In order to provide you with the most comprehensive service possible, we also use your data to send you appropriate additional information from us or third parties in connection with all services, e.g. purchase, financing or leasing, as well as sales or rental, workshop services and CARTOBIKE services

This processing is carried out on the basis of legal provisions that allow the processing of personal data for the purpose of direct advertising, as CARTOBIKE has an overriding legitimate interest in this and, in exceptional cases, undue harassment cannot be presumed (Article 6(1)(f) of the GDPR).

If you do not wish to receive such e-mails, you can unsubscribe at any time, either on the main page of your personal space or by sending an e-mail to contact@cartobike;com.

If you have given us your consent, CARTOBIKE will process your e-mail address for advertising in connection with vehicles, car buying and selling, car financing and leasing, workshop services and other products. On the basis of the appropriate consent, CARTOBIKE combines your registration data with navigation data on CARTOBIKE websites and mobile applications (pages viewed, content clicked etc) and data from other services used on these websites/applications in order to define e-mail advertising according to your interests (Article 6, paragraph 1 a) of the GDPR).

2.5 Customer service

The CARTOBIKE customer service responds to the daily service requests of business customers, private customers and interested parties. Personal data of customers are collected and processed. Personal data is collected by customers who submit it to us via a contact form provided on the website or by contacting us by e-mail, telephone or chat. We collect the data provided for the purpose of clear customer verification and for the prompt processing of customer requests. As we are constantly striving to improve our services for our customers, the data can be evaluated anonymously. All data will be used exclusively for the intended purpose and will not be passed on to third parties.

2.5.1 Contact form

The Contact form allows users to contact CARTOBIKE customer service. We collect the information provided via the contact form in order to process customer requests quickly. For private customers, we collect the category selected in the form (car, express sale ...), the subject of the request, the request (free text), the first name, the last name, the e-mail address and possibly the telephone number of the customer. For business customers, the postcode is also provided as an option.

Personal data that customers and interested parties voluntarily provide to us when using electronic forms, such as contact forms, or by e-mail, are only collected, processed and used for the purposes for which they were provided to us.

In order to improve our services, the data may be evaluated anonymously.

3. To which recipients do we transmit your data?

We may also pass on your data to other recipients for the purposes mentioned in paragraph 2, as they are already mentioned in detail in this document. In the context of providing the offer and the associated functions and services, we pass on your data to suppliers and interested parties of vehicles and their financing (e.g. if you use the vehicle search, we pass on your data to the seller you have chosen).

In exceptional circumstances, we may also be required by law to disclose your personal data to third parties, for example in the context of government prosecution measures. In the event of complaints about misuse of the CARTOBIKE marketplace, it is necessary to provide other users with substantiated and documented information.

In addition, your personal data may be passed on within the CARTOBIKE group, to service companies (possibly also from third countries), to government authorities and to persons involved in an offence and possibly to other companies in the context of a business transaction as explained below.

3.1 Transmission to instructed service providers

In some cases, we use service companies (both CARTOBIKE companies and external service providers) bound by contracts for certain data processing activities. Without exception, these are contracted service companies that process data on our behalf and in accordance with our instructions.

As a result of the above-mentioned transfers, service providers bound by contracts may process data in countries outside the EU ("third countries").

Each transfer of data to a third country is carried out in accordance with the applicable data protection law. If the European Commission has not established an adequate level of protection for a third country, CARTOBIKE provides appropriate safeguards to ensure adequate protection of your data. This can be done, for example, by concluding data processing contracts that contain standard EU data protection clauses and that the European Commission considers to provide adequate safeguards (available at: https://ec.europa.eu/info/policies/justice-and-fundamental-rights_fr).

3.2 Transmission to government agencies, aggrieved persons and legal proceedings

If it is necessary to clarify any illegal or abusive use of CARTOBIKE or legal proceedings, the personal data will be passed on to the law enforcement authorities and, if necessary, to the injured third parties. However, this only happens if there are indications of illegal or abusive behaviour. Disclosure may also take place if it serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public authorities on request.

3.3. Transfer in the context of corporate transactions

As our business develops, the structure of our company may change as its legal form changes, subsidiaries, parts of companies or components are established, purchased or sold. In such transactions, customer information may be disclosed to the acquirer or legal successor with the part of the business to be transferred. Whenever personal data is transferred to third parties to the extent described above, we ensure that this is done in accordance with this data protection information and applicable data protection law.

Any disclosure of personal data shall be made on the basis of the legal regulations. Accordingly, this data processing is justified by the fact that (1) the processing is necessary for the performance of the contract for the use of CARTOBIKE or (2) CARTOBIKE has a legitimate interest in passing on the data for administrative purposes or the processing is necessary for the fulfilment of a legal obligation to which CARTOBIKE is subject.

4. How long do we store your data?

We will delete or anonymise your personal data as soon as it is no longer required for the purposes for which we process it in accordance with the above paragraphs. The actual storage period depends on how you use our offer.

If you are not registered with us, we will store your personal data for the duration of your use of our offer plus a maximum of 14 days during which we will keep back-up copies after deletion, insofar as this data is no longer required for criminal prosecution or to secure, assert or enforce legal claims.

If you are registered with us, we store your personal data for the duration of your registration and delete it as soon as you delete your user account. However, we will keep backups of your data for a maximum of 14 days before deleting it permanently.

Where you have given us your consent to process your data (for example, for advertising purposes, including associated profiling), we will store your data until you revoke your consent.

If we have to store data for legal reasons, further processing of the data concerned is restricted instead of being deleted.

5. What rights do you have as a data subject?

As a person affected by the processing of personal data, you have a right to information about the data processed, a right to rectification of your personal data, a right to deletion of your personal data, a right to processing of your personal data and a right to transferability of your personal data. You also have the right to lodge a complaint with a supervisory authority.

In cases where the processing of data is based on Art. 6 par. 1 e) or f) of the GDPR, or for direct advertising purposes, you have the right to object to the processing.

If you have given us your consent, you may revoke it at any time with effect for the future.

5.1 Right to object

You have the right to object to the processing of your data at any time on grounds arising from your particular situation. We will stop processing your personal data after your objection has been raised, unless CARTOBIKE can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Without prejudice to the above right of objection, you may also object at any time to the collection and processing of information on the use of the e-mail newsletter.

Please note that the sending of the newsletter will end with an objection. Please send your objection to newsletters and mailings to: contact@cartobike.com

You can also send your objection to newsletters and mailings to the postal address CARTOBIKE CONSULTING & MANAGEMENT, Place du Champ de Mars, 5, 1050 Brussels.

5.2 Right of revocation

You can revoke your consent, which you have given us if necessary, at any time with effect for the future, without affecting the legality of the processing carried out up to the revocation on the basis of the initial consent. You can send your revocation to CARTOBIKE , Place du Champ de Mars, 5 in 1050 Brussels or by e-mail to contact@cartobike.com.

5.3 Right to correct and complete data

You have the right to ask us to correct any personal data about you immediately if it is inaccurate. In addition, you have the right to ask us to complete your data in accordance with Art. 16 p. 2 GDPR - also by means of an additional declaration - if your data is incomplete.

5.4 Right of cancellation ("Right to be forgotten")

You have the right to request the deletion of your personal data under the conditions described in Article 17 of the GDPR. In particular, these conditions provide for a right of erasure if the personal data are no longer necessary for the purposes for which they were collected or processed, as well as in case of unlawful processing, existence of an objection or revocation of consent, existence of an obligation of extinction under Union law or the laws of the Member States to which CARTOBIKE is subject or to the collection of data relating to the information society services provided for in Article 8(1) of the GDPR.

5.5 Right to restrict processing

You have the right to demand that we restrict processing in accordance with Article 18 of the GDPR. This right applies in particular if the accuracy of the personal data between the user and CARTOBIKE is disputed, during the period necessary to verify the accuracy, and in the event that the user requires restricted processing in the case of an existing right of deletion instead of deletion; and in the event that the data is no longer necessary for the purposes pursued by CARTOBIKE, the user is required to assert, exercise or defend legal claims, and if the successful exercise of an objection between CARTOBIKE and the user is still disputed.

5.6 Right to information and complaints

You have the right to ask us for information at any time about the personal data processed by CARTOBIKE concerning you in the framework of Art. 15 of the GDPR.

They also have the right to complain to the competent supervisory authority.

5.7 Right to data transferability

If we process the data you have provided to us, you have the right to receive your personal data in a structured, up-to-date and machine-readable format or to pass it on to another responsible person.

6. What should you look out for when handling other users' data?

In order to facilitate commercial transactions between members of the CARTOBIKE community, our service allows you to access certain contact information of other users (see section 3 above). By accepting our terms and conditions, you agree to use this personal data exclusively for the following purposes:

• Communication related to the content published on CARTOBIKE, but not unsolicited advertising content,
• Other purposes for which the user concerned has given his express consent.

CARTOBIKE and its members do not tolerate harassment by sending unsolicited advertising e-mails (spam). Therefore, you are not allowed to add a user's e-mail address to your e-mail distribution list or to any other mailing list without the user's express consent.

Note: Do not use the CARTOBIKE contact service or other transfer services to send unsolicited e-mails (spam).

7. Changes to this data protection information

The services offered by CARTOBIKE may be modified from time to time, in particular to further improve the services and features of the platform. Such changes may also affect the use of your personal data. We may therefore modify this privacy information from time to time. The current version is available on our website under "Data Protection". 

TERMS AND CONDITIONS OF THE ASSISTANCE SERVICE

Preamble
These Assistance Service Terms and Conditions (hereinafter the "Terms and Conditions") govern the use of the vehicle purchase or sale assistance service offered by CARTOBIKE, which enables users to be put in contact with selected professional partners.

Article 1 - Purpose of the Service

1.1. Definition of the Assistance Service
CARTOBIKE offers its users a personalised assistance service to support them in their automotive-related projects. This service allows users to express one or more needs by filling out a form or clicking on a dedicated call to action (CTA) in order to be contacted by a professional partner specialising in the requested service.

General principle:
The user submits a request → CARTOBIKE forwards this request to the relevant partner(s) → The partner contacts the user directly to respond to their need.

1.2. Free of charge and no obligation

a) Completely free of charge
The Assistance Service is 100% free for the user. CARTOBIKE does not charge any fees for:
• Submitting a form
• Clicking on a CTA button
• Requesting a quote or comparison
• Connecting with one or more partners

b) No obligation
Users who submit a request for assistance are under no obligation:
• No obligation to purchase: the user may refuse any offer made by the partner.
• No obligation to respond: the user may ignore calls or emails from the partner.
• Complete freedom: the user remains free to compare offers, look elsewhere, or not follow up.

1.3. Scalability of the Service

a) Addition of new purposes
CARTOBIKE reserves the right to add new purposes to the Assistance Service depending on:
• Changes to its commercial offering
• New partnerships (windscreens, tyres, accessories, warranties, etc.)
• The needs expressed by users
• Market opportunities

b) Addition of new communication channels
CARTOBIKE can create new channels for accessing the Assistance Service:
• Integration of AI chatbots (conversational assistant)
• Dedicated mobile application
• SMS or WhatsApp with action buttons
• Partnerships with brokers or third-party sites (banners, widgets)

c) Notification of changes
Any substantial change to the Assistance Service (addition of major purposes, modification of processing methods, change of main partners) will be notified by email to registered users, in accordance with Article 16 of the Terms of Use (Notification of changes).
Minor changes (addition of a CTA button, creation of a new form, addition of an ancillary service such as windscreen replacement) do not require prior notification and are deemed to be accepted by continued use of the Service.

Article 2 - Operation of the Service

2.1. Support form
Users can access the Support Service via several communication channels, all of which are free of charge and without obligation:

a) Online forms
• "General Support" form: for any multi-need support requests.
• Specialised forms: dedicated to a specific purpose (financing, insurance, windscreen, tyres, road test, etc.).
• Online comparison tools: insurance, financing, vehicles (results sent by email with a partner contact proposal).

b) Call-to-action buttons (CTA)
Available on the CARTOBIKE website, in vehicle advertisements, or via advertising banners hosted by brokers or communication partners:
• "I would like to be contacted"
• "I want to be called"
• "Receive a quote"
• "Take a test drive"
• "Test drive this car"
• "Compare insurance policies"
• "Simulate my financing"
• "Receive an offer"
• "Receive a list of matching vehicles"

c) Newsletters and email campaigns
CARTOBIKE may include CTA buttons in its newsletters allowing users to:
• "I want to be contacted"
• "Receive a comparison list"
• "Receive an exclusive offer"
• "Take advantage of a partner promotion"
By clicking on these buttons, users are redirected to a pre-filled form (if data is available) or to a confirmation page registering their consent to be contacted by a partner for the specified purpose.

d) Dedicated pages and landing pages
CARTOBIKE may create dedicated pages (landing pages) hosted on the site or by partners (brokers, affiliated sites), offering a specific assistance service (e.g. "Compare your insurance in 2 minutes", "Finance your vehicle in 3 clicks", "Receive 3 windscreen quotes instantly").
These pages use the same processing as the main Assistance form.

e) Pop-ups and notifications
Pop-ups or notifications (push, in-app) may appear when browsing CARTOBIKE, offering immediate assistance (e.g. "Need help financing this vehicle?", "Want to test drive this car?").

2.2. Information collected
When submitting the form, the user provides:
• Identification information (surname, first name, email address, telephone number, postcode)
• Nature of their project and specific needs (purchase, sale, financing, insurance, etc.)
• Information about the vehicle in question (if applicable: model, budget, mileage, etc.)
• Context of the request (link to the advertisement viewed, if applicable)

2.3. Selection of purposes
The user selects one or more purposes corresponding to their needs:
• Purchase of a new vehicle
• Purchase of a used vehicle
• Sale of my vehicle
• Financing/car loan
• Car insurance
• Other services (warranty, maintenance, trade-in, etc.)
Each selected purpose is subject to separate and explicit consent from the user.
Important: This list is not exhaustive. CARTOBIKE reserves the right to add new assistance services depending on changes to its offering and partnerships, without this constituting a substantial modification of these terms and conditions.

Article 3 - Transmission to Partners

3.1. Principle of transmission
By validating the assistance form, the user expressly agrees that their contact details and request may be transmitted to one or more professional partners selected by CARTOBIKE according to the purposes chosen.
Partners may belong to the following categories:
• Car dealerships and distributors (for purchase or sale projects)
• Banks and credit institutions (for financing)
• Insurance companies and insurance brokers (for insurance)
• Networking platforms specialising in the automotive sector

Article 3.3 - Updated list of partners
The updated list of our active partners is available
at the following address:
https://cartobike.com/fr/our-partners
This list is also available in our Privacy Policy

3.4. Intelligent routing
CARTOBIKE uses an automatic routing system to forward each request to the most suitable partner based on:
• The purpose selected by the user
• The geographical area (postcode)
• The availability and specialisation of the partner

Article 4 - Rule of Exclusivity by Purpose

4.1. Principle: 1 consent = 1 contact
Each consent given by the user for a specific purpose gives rise to a single contact by a single partner for that purpose.
Example:
If you consent to being contacted for "Used car purchase", only one partner specialising in the sale of used cars will contact you.
If you also consent to being contacted for "Financing", another partner specialising in financing will contact you separately.

4.2. No competition between partners
CARTOBIKE undertakes that the same request for a given purpose will only be
forwarded to only one partner at a time.

This rule aims to:
• Guarantee an optimal user experience
• Avoid multiple requests
• Ensure personalised processing of your request

4.3. Multiple purposes = multiple contacts
If the user selects multiple purposes (e.g. purchase + financing + insurance), they may be contacted by several different partners, each for their specific purpose.
Each partner is required to contact the user only for the purpose assigned to them.

Article 5 - Duration of exclusivity

5.1. 45-day exclusivity
The exclusivity granted to a partner for a given purpose expires 45 days after the request is submitted.

5.2. Recycling after expiry

5.2.1. Principle of 45-day exclusivity
Once the 45-day exclusivity period granted to a partner for a given purpose (Article 5.1) has expired, the exclusivity automatically expires.

5.2.2. New request from the user after expiry
If the user expresses the same need again on the Platform (by submitting a new form for the same purpose or by expressing renewed interest), CARTOBIKE may route this new request:
• either to the same initial partner (if they still have this vertical and agree to process the request), or
• to another partner with this vertical.

5.2.3. New consent required
The routing of a new request after the 45-day period has expired requires new explicit consent from the user, in accordance with the GDPR (Article 6.1.a). This consent is obtained via:
• a new form submission on the Platform, or
• a positive action by the user (clicking on a link of interest, replying to an email, requesting contact via customer service, visiting vehicles on the site followed by an explicit request, etc.).

5.2.4. No automatic transmission without consent
No User will be transmitted to a partner (initial or new) after the 45-day period without obtaining new explicit consent from the user. Simple passive actions (browsing, consultation) do not constitute valid consent within the meaning of the GDPR.

5.2.5. Justification of consent
CARTOBIKE keeps proof of the new consent (time stamp, nature of the action, form submitted, etc.) in its records for each User transferred after the initial period has expired.

5.3. Justification

5.3.1. Purpose of the 45-day period
This 45-day period allows the successful partner to process the user's request and make an offer under optimal conditions (analysis of the file, financing study, personalised commercial proposal, relationship follow-up).

5.3.2. No obligation on the part of the user during the period
The exclusivity granted to the partner does not create ANY obligation for the user. The user remains free at all times to:
• seek alternative offers from other providers on their own behalf,
• negotiate directly with other dealerships, banks or insurers,
• to refuse the offer made by the CARTOBIKE partner,
• to accept or refuse any proposal without justification.

5.3.3. End of exclusivity after 45 days
After this 45-day period, if no transaction has been completed between the user and the partner:
• The exclusivity automatically expires.
• The user is free to search for a new opportunity on the Platform (by submitting a new form) or elsewhere.
• CARTOBIKE may, with the user's new explicit consent (see Article 5.2), forward a new request to another partner.

5.3.4. No obligation to achieve results
Exclusivity does not constitute a guarantee of commercial success for the partner or an obligation for the user to conclude a transaction.

Article 6 - Obligations of Partners

6.1. Status as independent data controller
Partners who receive your contact details act as independent data controllers within the meaning of the GDPR.
They are therefore directly responsible for the use they make of your personal data and must comply with data protection legislation.

6.2. Contractual commitments of partners
CARTOBIKE contractually requires its partners to:
• Use the data solely for the specified purpose
• Contact the user only once (or according to the agreed terms)
• Not resell, transfer or share the data with third parties
• Comply with the GDPR and individuals' rights
• Delete the data after processing or upon expiry of exclusivity

6.3. User rights vis-à-vis partners
If a partner fails to comply with these commitments (spam, misuse, failure to respect your rights), you may:
• Contact the partner concerned directly
• Report the behaviour to CARTOBIKE: contact@cartobik.com
• Exercise your GDPR rights directly with the partner
CARTOBIKE will take appropriate measures (warning, suspension, termination of partnership) in the event of proven breach by a partner.

Article 7 - Context of the Request

7.1. Transmission of the context of the advertisement
If the user submits a support form from the details page of a specific advertisement, CARTOBIKE may transmit contextual information to the partner, including:
• The link to the advertisement viewed
• The characteristics of the vehicle concerned (make, model, price, mileage, etc.)
• The browsing history (pages viewed) if relevant

7.2. Purpose
This transmission is intended to enable the partner to better understand the user's needs and to offer them a more relevant and personalised offer.
Example: If you request financing by viewing an advertisement for a "Mercedes A-Class for £31,000", the banking partner will receive this information in order to offer you a financing plan tailored to this vehicle.

7.3. Information and consent
This transmission of contextual information is clearly indicated in the assistance form and covered by the user's consent.

Article 8 - Legal basis and consent

8.1. Legal basis: Consent (Art. 6.1.a GDPR)
The processing of your personal data in the context of the assistance service is based on your free, specific, informed and unambiguous consent, in accordance with Article 6.1.a of the GDPR.

8.2. Terms of consent
Your consent is obtained by:
• Ticking a dedicated box for each selected purpose (active opt-in)
• Express acceptance of these Terms and Conditions
• Final validation of the form
Failure to give consent does not prevent you from using the other services of the CARTOBIKE Platform.

8.3. Optional nature
The assistance service is entirely optional. You are under no obligation to submit a form or give your consent in order to access the other features of CARTOBIKE (viewing listings, bidding, etc.).

Article 9 - Retention period

9.1. Retention by CARTOBIKE

9.1.1. Retention period for leads transmitted
CARTOBIKE retains data related to the assistance service (Users transmitted to partners) for a maximum period of 6 months after your request has been transmitted to the partner.

This 6-month period is justified by the average duration of a car purchase, sale or financing project, which often takes several months depending on the urgency, vehicle availability and administrative procedures.

9.1.2. Early deletion upon request
You may withdraw your consent to the processing of your personal data related to the assistance service at any time before the expiry of the 6-month period by contacting CARTOBIKE viacontact@cartobike.com or via your personal account.
Withdrawal of consent will result in:
• The immediate cessation of the transmission of your data to partners.
• The deletion of data related to the assistance service (lead, financing request, etc.) from our systems within a maximum of 30 working days.

9.1.3. Retention of user account data
IMPORTANT: Withdrawing consent for the support service does NOT automatically delete your CARTOBIKE user account data (profile, bidding history, transactions, etc.).

This data remains available as long as your CARTOBIKE account is active, in accordance with the Terms of Use and Privacy Policy (Document 7).

If you also wish to delete your CARTOBIKE account, you must submit a separate request via:
My account > Settings > Delete my account

In this case, all your data will be deleted in accordance with the account deletion conditions set out in the Terms and Conditions.

9.1.4. Legal exceptions to retention
After a period of 6 months (or after early deletion upon request), your data will be automatically deleted from our systems, unless:
• You submit a new request for assistance (via form).
• A legal obligation requires longer retention (e.g. accounting obligations – 7 years, ongoing litigation, judicial investigation, etc.).
• CARTOBIKE must retain evidence for its defence in the event of a claim or dispute (applicable statutory limitation period).

9.2. Retention by partners

9.2.1. Retention periods specific to partners
The partners to whom CARTOBIKE transmits your data (car dealerships, banks, insurance companies, specialised networking platforms) determine their own retention periods in accordance with their legal obligations and respective privacy policies.
CARTOBIKE is not responsible for the retention periods applied by partners after the data has been transferred.

9.2.2. Information about partners and their policies
The list of partner categories is available in:
• This clause (Article 3.2 of Document 6 – Terms and Conditions of the Assistance Service)
• The CARTOBIKE Privacy Policy (Document 7, Article 5.2 – Data recipients)
• The dedicated page accessible at: https://cartobike.com/fr/our-partners
This page contains, for each active partner:
• The name of the partner or its generic category (if commercial confidentiality is required)
• A link to their privacy policy (when publicly available)
• The contact details of its Data Protection Officer (DPO) or GDPR department

9.2.3. Right of access and rectification with partners
In accordance with the GDPR, you have the following rights directly with each partner who has received your data:
• Right of access: obtain confirmation of processing and access your data
• Right of rectification: correct inaccurate data
• Right to erasure: request the deletion of your data
• Right to restriction: restrict processing under certain conditions
• Right to portability: receive your data in a structured format
• Right to object: object to processing on legitimate grounds
To exercise these rights, you must contact the relevant partner directly using the contact details available on the partners page or in their privacy policy.

9.2.4. CARTOBIKE assistance
If you encounter difficulties in identifying a partner or exercising your rights, you can contact CARTOBIKE's DPO at :contact@cartobike.com
CARTOBIKE will make every effort to assist you, but cannot guarantee the effective exercise of your rights with partners, as they are independent controllers within the meaning of the GDPR.

Article 10 - Your Rights

10.1. GDPR Rights
In accordance with the GDPR, you have the following rights regarding your data processed as part of the support service:
• Right of access: obtain confirmation of processing and access your data
• Right to rectification: correct inaccurate data
• Right to erasure: request the deletion of your data
• Right to restriction: restrict processing under certain conditions
• Right to portability: receive your data in a structured format
• Right to object: object to processing on legitimate grounds

10.2. Withdrawal of consent
You may withdraw your consent at any time, with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
How to withdraw consent:
From your personal account: My profile > Privacy
By email to:contact@cartobike.com
After withdrawing your consent, your data will no longer be transmitted to new partners. However, partners who have already received your data prior to withdrawal remain responsible for its processing.

10.3. Exercising your rights with regard to CARTOBIKE
To exercise your rights, please contact our Data Protection Officer (DPO):
Email: contact@cartobike.com
Post: Mr Moussa JADIR, DPO, Place du Champ de Mars, 5 - 1050 Brussels, Belgium
We will respond to all requests within a maximum of 30 days.

10.4. Exercising your rights with regard to partners
To exercise your rights regarding data held by partners, you must contact each partner directly (contact details available on our partners page).

10.5. Right to complain
You have the right to lodge a complaint with the competent supervisory authority:
Belgium: Data Protection Authority (APD) - www.autoriteprotectiondonnees.be
France: Commission Nationale de l'Informatique et des Libertés (CNIL) - www.cnil.fr

Article 11 - Data Security
CARTOBIKE implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or accidental disclosure.
Data is transmitted to partners via secure channels (encrypted APIs, HTTPS protocol).

Article 12 - Liability

12.1. CARTOBIKE's liability

12.1.1. Nature of CARTOBIKE's intervention
CARTOBIKE acts as a technical intermediary between users and partners. CARTOBIKE provides a networking platform and forwards user requests to partners selected according to the criteria defined in these terms and conditions.

12.1.2. CARTOBIKE's commitments
CARTOBIKE undertakes to:
• Select professional partners with the necessary approvals and qualifications to carry out their activities
• Forwarding user requests to partners in a secure manner and in compliance with the GDPR
• Ensuring the availability and technical security of the Platform under reasonable conditions
• Handling complaints from users and partners as quickly as possible
• Strictly respecting the confidentiality of personal data and commercial information transmitted

12.1.3. Limitations of liability
However, CARTOBIKE cannot guarantee:
• The quality, relevance or competitiveness of the offers proposed by partners (each partner being free to set their own commercial conditions)
• The effective conclusion of a transaction between a user and a partner (CARTOBIKE does not control or intervene in the final contractual relationship)
• Partners' compliance with their own contractual or commercial commitments to users
• The total absence of interruptions or technical malfunctions of the Platform (although CARTOBIKE takes all reasonable measures to ensure its availability)

12.1.4. Remedies in the event of a partner's breach
In the event of a serious breach by a partner (non-compliance with the GDPR, unfair commercial practices, non-compliance with contractual obligations towards a user), CARTOBIKE reserves the right to:
• Suspend or terminate the framework agreement with the partner concerned
• Remove the partner from the list of active partners
• Cooperate with the competent authorities if necessary

However, CARTOBIKE remains a mere technical intermediary and cannot be held liable for the acts, omissions or breaches of partners in the performance of their services.

12.2. Liability of partners
Partners are solely responsible for:
• For their commercial offers and their execution
• Compliance with the legislation applicable to their activity
• The processing of personal data they collect as independent data controllers

12.3. Limitation of liability
To the extent permitted by law, CARTOBIKE shall not be held liable for any direct or indirect damage resulting from:
• The use of the support service
• Contractual relationships between the user and partners
• A partner's failure to fulfil its obligations

Article 13 - Modification of the Terms and Conditions
CARTOBIKE reserves the right to modify these Terms and Conditions at any time to adapt to legal or technical changes or changes to our partnership model.
The amendments shall take effect as soon as they are posted online. If you use the assistance service after the amendments have been made, you accept the new Terms and Conditions.

Article 14 - Applicable Law and Jurisdiction

14.1. Applicable law
These Terms and Conditions are governed by Belgian law and the General Data Protection Regulation (GDPR).

14.2. Competent jurisdiction
In the event of a dispute, the Belgian courts shall have sole jurisdiction.

Article 15 - Contact
For any questions regarding the support service or these Terms and Conditions:
Email: contact@cartobike.com
DPO:contact@cartobike.com
Address: Place du Champs de Mars, 5 - 1050 Brussels, Belgium