We at Veho Oy Ab are committed to complying with the EU Data Protection Regulation and other privacy legislation, and to processing your personal data in accordance with good data management practices.
This Privacy Policy will help you understand what personal data Veho collects about you and why and how we use this data. In addition, you will receive information about your rights as a data subject and how to exercise them.
What personal data we process?
We collect your personal data when you become a customer, use our services, participate in events we organise, test drive a car or otherwise contact us by submitting a contact request, subscribing to a newsletter or registering as a user of the service.
We obtain the personal data we process mainly from you, by collecting information about what you buy and what Veho services you use. We also obtain personal data from external sources, such as partners or service providers.
Personal data that you have provided or that we have collected based on your behaviour
- basic information such as name, address, e-mail address and telephone number
- if necessary, the personal identification code necessary for identification
- date of birth
- gender
- native language
- information about the vehicle you own or use, including its registration number and vehicle identification number
- marketing authorisations and prohibitions
- information about the products and services you have purchased and any offers made to you
- payment and invoicing information from payment
- data related to registration, such as username and password
- your responses to studies and surveys
- customer feedback and other contact
- video surveillance footage from our locations, time and location of recording (video surveillance footage does not include speech)
- Online identifiers, such as your IP address and information collected through cookies and other similar technologies.
Use of Cookies
Cookies are small files placed by a website, application or advertisement on a user's terminal device. The cookie contains a browser-specific identifier that allows our website and services to identify the browser and remember your previous visits. Cookies are used to collect information about how you use our services, such as which page you visit the service from, which of our webpages you visit and when, what browser you use, the resolution of your monitor, the operating system of your device and your IP address. See current information about the cookies we use.
Data obtained elsewhere
We obtain information from private register services, other service providers and authorities' registers, such as the Population Information System and Trafi. If the conclusion of an agreement with you requires an external financing decision, we will check your credit information before concluding the agreement.
What your infromation is needed for?
Sale of products and services and management of the customer relationship
We process your data to order and deliver vehicles, services and other products on the basis of an agreement between you and Veho and to manage our contractual relationship with you. For this purpose, we are often also required to verify your identity.
We also need your information in order to be able to contact you about your orders, reservations or purchased products, or when you contact us to obtain additional information or make an appointment, for example. Also in these situations, the processing of your personal data is based on an agreement between Veho and you or Veho's legitimate interest in managing and maintaining the customer relationship.
Marketing and communications
We process personal data for marketing purposes and for the formation of marketing target groups. We use the data for the sale of our own products and services, direct marketing and customer satisfaction surveys. Personal data allows us to personalise and target the offerings that we believe you would be interested in.
We also use your personal data for customer communications. We may send you notices about our products and services.
The processing of your personal data is based either on your explicit consent or, if you are already Veho's customer, on Veho's legitimate interest in managing and maintaining the customer relationship. When marketing is based on your consent, you can withdraw your consent at any time. In the case of electronic direct marketing, you can withdraw your consent by clicking the Unsubscribe link at the end of the message you received.
We buy online ad space for ads that can be shown on external ad networks. Advertising is purchased both with the help of third parties' pre-defined target groups and with the help of Veho's own defined target groups. Advertisements can also be targeted with the help of cookies, based on the use of Veho's website. Marketing in this way is also based on Veho's above mentioned legitimate interest.
Development of services and business
We use your personal data based on legitimate interest and the customer relationship to develop products, services, and customer service, as well as sales and marketing and to manage processes.
We process your personal data, for example, to process customer feedback and complaints we receive. Feedback from customer satisfaction surveys is also used to help develop services and business. You will receive an electronic customer satisfaction survey when you have visited Veho's car sales or maintenance. You can refuse to receive customer satisfaction surveys by sending a message to [email protected]
Management of business partner relationships
Veho processes the contact and billing information of its business partners, such as its contractual partners, in order to meet its internal service needs and to maintain contractual and cooperative relations with its various partners. These include relationships with various importers, logistics services, invoicing and accounting service providers, real estate services and marketing partners. The processing of personal data in this context is mostly based on Veho's legitimate interest in enabling and managing partner relations.
Compliance with legal obligations and preparation for legal requirements
We process personal data in order to fulfil legal obligations and comply with regulatory decisions. These include, for example, obligations arising from motor insurance legislation, statutory accounting obligations and tax obligations. The data may also be processed to fulfil legal obligations regarding the prevention of money laundering or terrorism.
We also process personal data in order to be able to prepare for legal claims, such as product and other liability claims.
Security and misuse
We also process your personal data to ensure the security of our services and communications networks. We process the recorded material from camera surveillance to ensure the safety of our premises. If necessary, we also use personal data to prevent and investigate misuse.
How long we keep your information?
The data is stored only for as long as is necessary for the purposes for which the personal data is processed. Deletion times and deletion policies are defined, and outdated and unnecessary personal data is deleted. The data retention times might vary by data type and Veho might have a statutory obligation to retain some data.
Who processes your data?
Your data will only be processed by persons with the right to process personal data, such as persons working in car sales or maintenance and other persons who have a need to process your personal data as a result of their duties.
Your personal data may also be transferred to outsourced service providers on the basis of a contract for processing on our behalf. Service providers process your personal data as defined by us to provide our services and are not entitled to use your data for their own purposes. This also means that when Veho's reason for processing your personal data ceases, the service provider we use must also stop processing your personal data without requiring any special measures from you.
We use external service providers for purposes such as the following: research, digital marketing, customer relationship management (CRM), data enrichment, payment processing, billing and collection, delivery and maintenance of systems, and the provision of various technical platforms.
Who is your information being disclosed to?
Disclosure of personal data refers to situations in which your personal data is provided to another controller for its own independent use. We comply with the current data protection legislation and its criteria for the disclosure of personal data.
We will disclose your personal data to car manufacturers, for example, for warranty purposes, and in cases where Veho is not the importer, also to car importers. You will be asked for your consent for the disclosure of your data.
We may also disclose your personal data to authorities in order to comply with legal obligations (for example, to the Finnish Transport Safety Agency Trafi or the police).
If necessary, we will also disclose personal data to banks and insurance companies to initiate credit or insurance applications on your behalf or to fulfil our obligations in the prevention of money laundering and terrorist crimes. In the event of a payment default, we will also disclose your personal data to the collection companies we use.
Your rights
You may review what information Veho has about you and request that your information be corrected or updated. You also have the right to object to the processing of your data, for example for marketing purposes.
In certain circumstances, you have the right to ask us to delete your data. Upon your request, we will delete your data, unless we are obliged to retain it for reasons such as accounting, tax or consumer protection legislation. In certain situations referred to in data protection legislation, you also have the right to request us to restrict the processing of your data. If the processing of your personal data is based on consent or a contract, you have the right to ask us to transfer your data that you yourself provided to us in a commonly used and machine-readable format and the right to transfer that data to another company.
If you have an OmaVeho account, you can access and update your information by logging in to the service.
You can also request to review or update your personal information using the form at the end of this page. Print the form, fill it in and send it to Veho Oy/ Data protection, P.O. Box 1006, 01511 Vantaa. You can also fill in the form at Veho's offices, from which it will be forwarded.
If you have any other questions about the processing of your data or if you wish to exercise other rights as a data subject, please send an inquiry to [email protected].
We hope that you will contact us if you have any questions regarding the processing of your personal data or if you would like to provide us with feedback on the processing of your personal data. If, despite this, you are not satisfied with the processing of your personal data in Veho, you can also file a complaint with the data protection ombudsman.
Will your data be transfered outside of Europe?
As a rule, we process data within the European Union and the European Economic Area. In some cases, the service provider may also process or have access to data from countries outside the EU or the EEA. In such cases, we will ensure an adequate level of protection of personal data as required by law.
Changes to the privacy policy
We will update our Privacy Policy as our operations and services evolve. Changes may also be based on changes in data protection legislation or best practices. We encourage you to regularly review the latest version of the Privacy Policy on our website.
For privacy-related requests, you can use the information request form.
Please note that for security reasons, we may need to verify your identity before completing your request.
This Privacy Policy has been drawn up on 23 May 2018