Autofini Privacy Statement

Last updated: 2025-11-18

This privacy statement explains how Autofini B.V. handles personal data of visitors and users of our website and services. We process personal data in accordance with the GDPR (EU GDPR), the UK GDPR, and the relevant privacy regulations in Switzerland.

1. Who are we?

Autofini B.V.
Nevelgaarde 8
Netherlands
Email: info@autofini.com

Autofini B.V. is the data controller responsible for the processing of personal data as described in this privacy statement.

2. Which personal data do we process?

We process personal data that you actively provide to us, as well as data collected automatically when you visit or use our website.

2.1 Data you provide

• Name
• Email address
• Phone number
• Vehicle details (such as license plate, brand, model, year of manufacture, photos, description)
• Data submitted through contact forms or our messaging system

2.2 Automatically collected data

• IP address
• Browser and device information
• Language settings
• Cookie information via Cookiebot
• Website usage and interaction
• Anonymous statistics via Google Analytics
• Log files for error detection and security

3. For what purposes do we process personal data?

We use your data for the following purposes:

• Requesting and receiving a vehicle valuation
• Connecting you with vehicle buyers or partners
• Managing your request, login or communication
• Customer support and assistance
• Improving our website and services
• Statistical and analytical purposes
• Fraud prevention and security
• Complying with legal obligations (such as administrative requirements)

We only process personal data when a valid legal basis exists, such as performance of a contract, your consent, our legitimate interest, or a legal obligation.

4. Cookies and tracking

We use Cookiebot to comply with the GDPR and UK GDPR regarding cookies and tracking.

4.1 Cookiebot functions

• Transparent cookie information
• Registration and management of cookie consent
• Classification of cookies (necessary, preferences, statistics, marketing)
• Ability to change or withdraw consent at any time

The current overview of cookies and your consent status is visible in the Cookiebot banner on our website.

5. Sharing data with third parties

We only share personal data when necessary for our services or when required by law.

5.1 External parties receiving personal data

• Google Analytics & Google Tag Manager
  For collecting anonymous statistics and analyzing website usage.
• Cookiebot
  For registering and managing cookie consent.
• Email provider
  For sending automated emails, forms and notifications.

Where required, we conclude data processing agreements with parties that process personal data on our behalf.

5.2 No sale of personal data

We do not sell personal data to third parties. Affiliated vehicle buyers only receive the data necessary to make an offer or contact you.

6. International data transfers

Because we operate within the EU, the United Kingdom and Switzerland, data may be processed in countries outside your own jurisdiction.

Services such as Google and Cookiebot may process data within the EU and, in some cases, the United States. We use appropriate safeguards such as the EU-US Data Privacy Framework, the UK Extension, or Standard Contractual Clauses (SCCs), in accordance with applicable regulations.

7. Retention periods

We do not store personal data longer than necessary for the purposes for which they were collected, unless a longer retention period is legally required.

• Vehicle and request details: up to 2 years
• Communication via email or messaging system: up to 2 years
• Administrative data (invoices, etc.): 7 years (legal requirement)
• Cookies: according to the retention period specified by Cookiebot

8. Data security

We take appropriate technical and organizational measures to protect your personal data against loss or unlawful processing. Examples include:

• Use of HTTPS / TLS for secure connections
• Strict access control to systems and data
• Logical and physical security measures
• Firewall and DDoS protection
• Hosting on secure cloud environments within the EU

9. Your privacy rights

Under the GDPR, UK GDPR and Swiss privacy law, you have the following rights:

• Right of access to the personal data we process about you
• Right to rectification of incorrect or incomplete data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to certain processing activities
• Right to withdraw your consent

You can submit a request by emailing: info@autofini.com. We typically respond within 30 days.

If you disagree with how we handle your personal data, you can file a complaint with:

• In the Netherlands: the Autoriteit Persoonsgegevens (AP)
• In other EU countries: your national supervisory authority
• In the United Kingdom: the Information Commissioner’s Office (ICO)
• In Switzerland: the Federal Data Protection and Information Commissioner (FDPIC)

10. Minors

Our services are not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If you believe that we have collected such data, please contact us so we can delete it.

11. Changes to this privacy statement

We may update this privacy statement from time to time. The most recent version is always available on our website. When significant changes are made, we will clearly notify users on our website or contact you directly when appropriate.

12. Contact

Do you have questions about this privacy statement or about how we process your personal data? Please contact us:

Autofini B.V.
Email: info@autofini.com