Home page
privacy notice
effective date : 10/10/2023
Alliance Automotive Holding Limited and all its subsidiaries ("AAH") is a wholly-owned subsidiary of Genuine Parts Company ("GPC"), and part of an international company specialising in the distribution and sale of car spare parts and accessories (AAH shall be referred to as "we", "our" or "our" throughout this Data Protection Information Notice ("Notice"), unless otherwise specified).
We place great importance on the principles of honesty and transparency in the course of our activities and wish to establish and maintain a relationship of trust with you. This privacy notice is intended to help you understand how we respect your personal data by describing how we collect, use, process and share your personal data when you interact with us, visit our websites (" Sites ") , use our mobile applications ("Applications") or participate in any other online service we offer (collectively "Services"), and to help you understand and exercise your privacy rights.
Please note that: This privacy notice does not apply to personal data we process on behalf of our corporate clients or business partners ("Corporate Clients") in the context of our business relationships with them (this data is our "Customer Data"). Data protection and other terms applicable to the processing of Client Data are governed by contracts between us and our Client Companies. If you interact with our Client Companies, their respective privacy policies govern the collection and use of your personal data, and any questions or requests you may have regarding how our Client companies may collect or use your personal data must be addressed to these companies.
personal data we collect
The categories of personal data we collect depend on how you interact with us, our Services and the requirements of applicable law, including but not limited to the EU General Data Protection Regulation 2016/679 ("GDPR") and the United Kingdom’s GDPRUnited (UK "GDPR"). We collect the information you provide to us, the information we obtain when you use our Services and information from other sources such as third-party services and organizations, as described below.
Personal data that you provide us directly
We may collect the personal data you provide to us in a variety of ways, for example:
Account Creation. We may collect personal data when you create an account or register with us via one of our Sites or Apps. The information we collect may include personal data such as name, email address, mailing address, username, company name (if business account), your mobile phone number, birthday and birthday, vehicle information or any other data that we may associate with you and your account.
purchases. We may collect personal data and information associated with your purchases, including payment details, the location of retail establishments such as a warehouse or store if you pick up an online order and, where applicable with your consent, information relating to your membership in programs that entitle you to discounts or other privileges. Payments made through our Services are processed by third-party payment processors. We do not directly collect or store payment card information entered through our Services, but we may retain certain banking information in connection with certain transactions. Regardless of the payment method you use, we may receive information about your purchase (for example, whether you made a purchase, the amount of your expense, information related to the payment method, etc.)
The communications you send us. We may collect personal information, such as your name, email address, phone number or postal address when you request information about our services, register for our newsletter, that you request technical assistance or call on our after-sales service, or that you communicate with us in any other way by email, SMS, chat, or when contacting our customer service representatives by phone.
investigations. We may contact you to participate in surveys or other voluntary questionnaires. If you decide to participate, we may collect personal data about you as part of the survey.
Chat and other interactive features. We and others using our services may collect personal information that you submit or make available through interactive features, such as email and chat features, or feedback features, forums, blogs and social media pages. Any information you provide using the public sharing features of the Services will be considered "public" unless otherwise provided by applicable law, and is not subject to the privacy protections described in this Notice.
loyalty programs. discounts or other purchase programs. We may offer loyalty programs, discounts or other promotional programs to interested customers. For example, if you are a frequent shopper and sign up for one of our promotional programs (a "Loyalty Program"), we may offer you discounts, promotional items or credits in connection with your purchases or other activities described in the terms applicable to the specific loyalty programme ("Conditions of the Programme"). Personal data provided when you register for a Loyalty Programme will be used to track your purchases and manage the Loyalty Programme in accordance with the Programme Terms.
promotional activities. If you choose to participate in promotions such as sweepstakes or contests that we may offer from time to time, you will be asked to consent to share your personal data with us so that we can administer the promotion in accordance with the general conditions of the activity ("Official Regulations"). The official rules of a promotion will be communicated at the time of registration for this promotion.
Conferences, trade shows and other events. If you attend or host conferences, trade shows and other events that we participate in or host, we may collect your contact details and other information about your interests if you agree to provide them to us.
Business development and strategic partnerships. We may collect personal data from individuals and third parties, subject to their consent, in order to evaluate and research potential business opportunities.
Applications and recruitment. If you apply for a job at one of our companies, we may collect information that will be used to assess whether your skills, your skills and interests correspond to career opportunities within our company or our affiliated companies and to contact you regarding the status of your application. If you accept a position within one of our organisations, your application data may be included in your employee file. How we process your personal data as an employee is explained in the applicable employee privacy notice provided to you at the time of onboarding.
Personal data collected by technical means
We use technologies that may collect personal data when you use our Services.
Device information. When you use our Services, we may have access to certain technical information, such as your Internet Protocol (IP) address, user settings, MAC address, Internet cookies, mobile carrier, your mobile advertising and other unique identifiers, information about your browser or device, location information (including a coarse location derived from the IP address) and your internet service provider. We may also collect information regarding your use of our Services, such as the pages you visit before, during and after using our Services, from information about the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our Services.
Policy on cookies (and other technologies). With your consent, we and third parties that provide content, advertising or other features on our Services may use cookies, web beacons and other technologies ("Technologies") to collect information when you use our Services.
Cookies. Cookies are small text files placed in the browsers of devices that store preferences and facilitate and improve your experience.
Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in our Services that collects engagement information from our Services. The use of a pixel tag allows us to record (at your request and with your consent), for example, that a user has visited a given web page or clicked on a given advertisement. We may also include web beacons in emails to determine whether messages have been opened, acted upon or forwarded.
technology categories. The uses we make of these Technologies can be classified into the following general categories:
strictly necessary. This includes Technologies that allow you to access our Services, applications and tools, necessary to identify suspicious behavior on our websites, prevent fraudulent activities, to improve security or enable you to use the features we make available on our Sites or Services.
performance-related. To the extent that you consent to our use of Technology to evaluate the performance of our Services, including in connection with our analytics practices to help us understand how individuals are using our Services, we may collect information relating to the performance of our Sites, Apps and certain aspects of the Services. Some of the performance-related technologies we use include Google Analytics and Matomo. You may want to learn more about Matomo’s services and consult the Google Analytics privacy notice to better understand how Google uses your personal data (including for its own purposes, such as to create profiles or links to other data). To learn more about how to opt out of Google Analytics using your information, please click here.
Related to features. To the extent that you have enabled optional Technologies while using our Services, we may use those Technologies to provide enhanced functionality when accessing or using our Services. The features offered may include identifying you when you log in to our Services or tracking your preferences, interests or previously viewed articles.
Related to targeting. We may use Technologies to deliver content, including advertisements that match your interests, on our Services or third-party digital properties.
use of social networks. Our Services may contain links to social media, such as Facebook, Instagram, Twitter and YouTube, which may include widgets such as the "share this" button or other interactive mini-programs. These features may collect personal data such as your IP address, the page you are visiting on our Services, and may set a cookie to allow the feature to function properly. Your interactions with these platforms are governed by the privacy policies and terms of the social media companies that provide them.
Verification Service Providers. We may use third-party vendors to limit unauthorized logins to protect our Sites and Services. For example, when you fill out certain forms, a service may evaluate various information (e.g. IP address, duration of your visit to the Site, mouse movements, etc.) to detect whether an activity comes from an automated program and not from a human being. We may retain this data through our service providers for security purposes.
Personal information collected from other sources
We may obtain personal data about you from other sources, including through third party services and organisations. For example, if you access our Services through a third-party application, such as an App Store, a third-party login service or a social networking site, we may collect personal data about you from that third party application if you have made such data available via your privacy settings in that application.
HOW WE USE YOUR PERSONAL DATA AND THEIR LEGAL BASIS
We are committed to collecting and processing your personal data in a proportionate and permitted manner. We process your personal data for various business purposes, including to provide our Services, for administrative purposes and to market our products and Services. Our processing serves explicit, legitimate and specific purposes as described below.
provide our services
We use your information to provide you with our Services in connection with the performance of contracts that we have entered into with you, at your request and with your consent, including:
Manage your information and accounts;
To allow access to certain features and characteristics of our Services or some of our premises;
Respond to requests for technical assistance or requests made to our after-sales service;
Communicate with you about your account, our Services, your participation in our Loyalty Programs or other promotional offers;
Communicate with you about other changes to our policies;
Process and execute your transactions, including confirming orders, billing, registering for our Loyalty Program or any other program and delivering products or Services, and
Allow you to register for events.
Administrative, commercial and legal purposes
We use your information for various administrative purposes in the course of our legitimate interests, if this is necessary to perform a contract between us, or at your initiative and with your consent, including:
Conduct research and development (including market studies)
Ensure network and information security and prevent fraud;
Track your application for one of our positions;
Interact with you if you contact us as a seller or on behalf of another company;
Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activities, and prosecute those responsible for such activities;
Measure interest and commitment to our Services;
Offer personalized or contextual advertisements;
Improve, update or perfect our Services;
Develop new products and services;
Ensure internal control of the quality and safety of our products and Services;
Verify and authenticate the identity of persons, including for requests to exercise rights under this Note;
Notify you of a product safety announcement or recall or correction to an offer, promotion or advertisement;
Debug to identify and correct errors with our Services;
Conduct audits related to interactions, transactions and other compliance activities;
Share personal data with third parties, to the extent necessary to provide the Services;
Enforce our agreements and policies;
Perform activities necessary to comply with our legal obligations, and as far as the law allows it.
To carry out marketing and advertising campaigns for our products and Services
We may use your personal data in the context of our legitimate interests and/or with your consent, to personalize your experience on our Services and to provide you with content and advertising as permitted by applicable law. Among the means by which we may contact you, it is possible to cite, but is not limited to, postal campaigns, emails, SMS, advertising based on the target audience and "advertising based on interests" or "personalized", including through cross-device tracking.
If you have questions about our marketing practices or wish to opt out of the use of your personal data for marketing purposes, you can find out more about the choices available to you in the section « YOUR CHOICES AND PRIVACY RIGHTS » of this Note or contact us.
with your consent
We may use personal data for other purposes and on legal grounds which are clearly communicated to you at the time you provide the personal data, and/or with your consent.
other purposes
We also use your personal data for other purposes permitted by you or applicable law, and to create de-identified, aggregated or de-identified information in our legitimate interest. If we create or receive de-identified information, we will not attempt to re-identify the individuals to whom the information relates except to comply with applicable law.
How we disclose your data
We may disclose your personal data to third parties for a variety of business purposes, including but not limited to providing our Services, protecting ourselves or others, or in the event of an important business transaction such as a merger, sale or transfer of assets, as described below.
Disclosures for the provision of our Services
The categories of third parties with whom we may share your personal data are described below.
Service Providers. We may share your personal information with our service providers and third party suppliers who assist us in providing our services. This includes service providers and suppliers who provide us with IT support, hosting, payment processing, chat and other customer service functions, as well as related services.
trading partners. We may share your personal data with business partners in order to provide you with a product or service that you have requested. We may also share your personal data with business partners with whom we jointly offer products or services.
affiliated companies. We may share your personal data with our affiliates, for example with our parent companies and subsidiaries for administrative purposes, IT management, or to provide you with services or to support and supplement the Services we provide to you.
Other users or third parties with whom you share or interact. As described above in the PERSONAL DATA WE COLLECT section, our Services may allow you to share personal data or interact with third parties (including individuals and third parties who do not use our Services and the public).
advertising partners. We may share your personal data with third-party advertising partners if you consent to the use of certain technologies when using our Services. These third-party advertising partners may install Technologies and other tracking tools on our Services to collect information about your activities and device (for example, your IP address, cookies, page(s) visited), your location, when it happens). These advertising partners may use this information (and similar information collected from other services) to provide you with personalized advertisements when you visit digital properties within their networks. This practice is commonly referred to as "interest-based advertising," "cross-context behavioral advertising," or "personalized advertising." The categories of data we may share and may have shared for the purpose of providing cross-context behavioral advertising and targeted advertising include online identifiers such as IP address, marketing identifier, the identifiers and characteristics of the device; Internet address or other electronic network activities, such as navigational and usage information and inferences about the preferences, characteristics and behaviors of individuals.
We may also share your information with third parties, with your consent and to the extent permitted by law. The privacy choices you may have regarding your personal data are determined by applicable law and are described in the "YOUR CHOICES AND PRIVACY RIGHTS" section of this Notice.
Disclosures to protect our business or others
We may access, retain and disclose any information that we store about you to third parties if we believe, in good faith, that it is necessary or appropriate to: comply with requests from law enforcement or national security authorities and legal procedures, such as a court order or subpoena; to protect our rights, property or safety and that of you and others; to enforce our policies or enforce our contracts; to collect amounts owed to us; or to assist in any investigation or prosecution of suspected or actual illegal activity.
Disclosure in the event of a merger, sale or other transfer of assets
If we are involved in a merger, acquisition, pre-audit of financing, reorganization, bankruptcy, receivership, purchase or sale of assets, or transfer of services to another supplier, your personal data may be transferred as part of such a transaction, to the extent permitted by law and/or contract.
YOUR PRIVACY CHOICES AND RIGHTS
Your choices and rights regarding data protection. The privacy choices you can exercise regarding your personal data are described below.
email communications.
If you receive an unsolicited email from us, you may reply to the sender and request that you no longer be contacted or, where applicable, use the unsubscribe link located at the bottom of the email to stop receiving emails in the future. Please note that you will continue to receive transaction-related emails concerning the products or Services you have requested. We may also send you certain non-promotional communications about us and our Services, and you will not be able to opt out of these communications (for example, communications concerning updates to our Terms or this Notice or other legal notices).
SMS. If you have opted in to receive SMS messages and receive an unsolicited SMS message from us, you may choose to stop receiving SMS messages by following the instructions provided in the SMS message you received.
Mobile devices. If you enable push notifications from an Application we offer, we may contact you through push notifications. You may opt out of receiving these push notifications by changing your mobile device settings. If you enable location sharing on your mobile device with our Application, we may also collect precise location-based information. You may opt out of this collection by changing your mobile device settings.
Live chat. If you visit our websites or use our applications, you may request customer service through a live chat feature. Chats are user-initiated and session-based, and you may end a chat that you initiate at any time.
Telephone calls. If you receive an unsolicited telephone call from us, you may choose to stop receiving telephone calls from us by following the instructions provided during the call or by contacting us.
Cookies and personalised advertising. You may stop or restrict the installation of certain Technologies on your device or delete them by adjusting your preferences through the cookie banner displayed on the Site you visit, or through your device settings, where available. However, depending on how you set your preferences, our Services may not function optimally. Please note that cookie-based opt-out options are not effective on mobile applications. However, you may opt out of personalised advertising on certain mobile applications by following the instructions for Android, iOS, and other platforms. The online advertising industry also provides websites where you can opt out of receiving targeted advertisements from data partners and other advertising partners participating in self-regulatory programmes. You can access these websites and learn more about targeted advertising, consumer choice, and privacy by visiting the websites of the European Digital Advertising Alliance. Please note that you must set your preferences in each browser and on each device.
Loyalty programmes. You may request the deletion of your account and terminate your participation in a Loyalty Programme by contacting us as indicated in this Notice.
Request for information and access to your personal data. You have the right to ask us to provide certain information regarding the collection, use, and disclosure of your personal data. Once we receive and confirm your request, we will provide you with some or all of the following, depending on your request: the specific personal data we have collected about you; the categories of personal data we have collected about you; the categories of sources from which we collect personal data about you; the categories of personal data we have disclosed about you for business purposes; the categories of third parties to whom we have disclosed your personal data for business purposes; and our business or commercial purpose for collecting personal data.
Request for correction/rectification. You have the right to ask us to correct or amend your personal data if it is inaccurate or incomplete. In some cases, we may provide self-service tools that allow you to update your personal data.
Request for erasure/deletion. You have the right to ask us to erase/delete all personal data that we have collected from you and retained, subject to certain exceptions. Once we receive and confirm your request, we will delete (and, where applicable, instruct our service providers to delete) your personal data from our records, unless an exception applies.
Right to restriction. In certain circumstances, you have the right to request that we restrict the processing of your data. This right allows you to limit the processing of your personal data. Accordingly, although we may retain your personal data, we may not process it for certain purposes.
Right to data portability. Under certain conditions, you have the right to request to receive a copy of the personal data we hold about you in a format that you can use for your own purposes or in connection with another service provider.
Right to object. You have the right to object to certain uses we make of your personal data.
Right to withdraw your consent to the processing of your personal data. Please note that your withdrawal will only take effect for future processing and will not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint with a supervisory authority. You have the right not to receive discriminatory treatment from us for exercising any privacy right granted under applicable laws and to contact the competent data protection authority (the CNIL in France) to lodge a complaint regarding our data protection practices relating to your personal data.
CONTACT US
The controller of the personal data covered by this Notice is AAH. If you have any questions about our privacy practices or this Notice, or if you wish to exercise your rights as described in this Notice, you may contact us as follows:
Submit an online request: click here
Email address: [email protected]
We will process these requests in accordance with applicable laws.
Verification methods. Once you submit a request, we verify that you are the person concerned by the request by comparing the identifying information you have provided (such as your name, email address, or account information) with the information we hold. Depending on the type of request you submit, we will attempt to match two or three data elements that you have provided. If we are unable to verify your identity using the data you have provided, we may contact you to obtain additional information in order to verify your request.
Authorised agent. You may designate an “authorised agent” to submit requests on your behalf. We will require the authorised agent to have written authorisation confirming this authority. We may also ask you to verify your identity directly with us. Once your authorised agent has been verified, they may submit a request as described above.
Appeal. You have the right to appeal our decision or response to your request. To exercise your right of appeal, you may submit an appeal request using the same method used to submit your initial request, including by contacting us as described in this Notice.
SECURITY OF YOUR PERSONAL DATA
We take measures to ensure that your information is processed securely and in accordance with this Notice, including by allocating appropriate human and technical resources to ensure an adequate level of security, including a comprehensive set of policies and rules for the security of our information systems and networks. The purpose of these rules is to limit the risks of intrusion or unlawful access to information systems. Unfortunately, no system is 100% secure, and we cannot ensure or guarantee the security of all information you provide to us. To the extent permitted by applicable law, we disclaim all liability in the event of unauthorised access, use, disclosure, or loss of personal data.
By using our Services or providing us with personal data, you agree that we may communicate with you electronically regarding security, privacy, and administrative matters relating to your use of our Services. If we become aware of a security incident affecting your personal data, we may attempt to notify you electronically by posting a notice on our Services, by post, or by sending you an email.
RETENTION OF YOUR PERSONAL DATA
We retain the personal data we collect as described in this Notice for as long as you use our Services or as necessary to fulfil the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defences, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws. In addition, we endeavour to retain all such personal data in accordance with legal requirements or based on other criteria, including, but not limited to, the sensitivity and volume of such data.
INFORMATION ABOUT CHILDREN
Our Services are not directed at individuals under the age of 16 (“children”) and are not intended to attract or interest them, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has uploaded personal data to our website without your consent, please contact us. If we learn that a child has provided us with personal data in violation of applicable law, we will delete all personal data we have collected, unless we are legally required to retain it, and, where applicable, we will close the child’s account.
OTHER PROVISIONS
Third-party websites/applications. The Services may contain links to other websites/applications, and other websites/applications may refer or link to our Services. We do not control these third-party services. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, approve, or accept responsibility for the privacy practices or content of these other websites or applications. You acknowledge that if you choose to provide personal data to third-party websites or applications encountered on our Sites or through our Services, you do so at your own risk.
INTERNATIONAL DATA TRANSFERS
Some data we collect may be transferred, processed, and stored anywhere in the world, including, without limitation, in countries whose data protection laws are less protective than the GDPR and the UK GDPR. We require any importer of your personal data to apply the safeguards required by the GDPR and the UK GDPR and to take all necessary measures to ensure that our processors have implemented the technical and organisational measures required to secure your personal data.
If we transfer your personal data from the European Economic Area, Switzerland and/or the United Kingdom to a country that has not been deemed to provide an adequate level of protection under the GDPR or the data protection laws applicable to the UK GDPR, one of the safeguards we may use to support such transfer is the EU Standard Contractual Clauses (“EU SCCs”) and the International Data Transfer Addendum to the EU SCCs.
CHANGES TO OUR NOTICE
We may revise this Notice from time to time at our sole discretion. If we make material changes to this Notice, we will notify you in accordance with applicable law. You understand and agree that you will be deemed to have accepted the updated Notice if you continue to use our Services after the new Notice takes effect.