Privacy policy

About the company

SIA CDAuto, registration number 40203770668, address Dārzciema iela 60a, Riga, e-mail [email protected], phone +371 22 050 808 (hereinafter – CD Auto).

CD Auto sells new cars (BAIC, SWM, Foton) in Latvia. Under a cooperation agreement, leasing applications are created in the CarBuy system (SIA "CarBuy", reg. No. 54103129111).

CD Auto contact for questions related to personal data processing: [email protected]. A request regarding your rights may be submitted as described in the last section of this policy.

What is personal data and what do we process?

Personal data is any information relating to an identified or identifiable natural person (data subject) – for example, name, surname, phone number, e-mail address and other information that allows a person to be identified directly or indirectly.

To provide you with our services, CD Auto processes only the necessary amount of data, for example:

• name and surname;
• phone number and e-mail address;
• the model of interest and the content of the enquiry (test drive, offer, leasing);
• in a leasing application, additionally – monthly income, length of employment and employer.

Scope of the privacy policy

This policy applies to natural persons – existing and potential customers who submit enquiries on the cdauto.lv website, contact CD Auto by e-mail or phone, as well as to visitors of the showroom.

CD Auto respects data subject rights in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the Latvian Personal Data Processing Law and other applicable legislation.

Purposes of personal data processing

CD Auto collects and processes personal data for the following purposes:

• to respond to test drive, offer and other enquiries;
• to prepare a leasing application and pass it on for review;
• to contact you regarding your request;
• to ensure the operation and security of the website;
• to fulfil obligations set out in legislation.

Legal basis for processing

CD Auto processes personal data based on one of the following legal grounds:

• the data subject's consent (by submitting an enquiry form);
• steps prior to entering into a contract and performance of a contract;
• compliance with legislation binding on CD Auto;
• CD Auto's legitimate interests – conducting business, storing enquiries, ensuring website operation and protecting legal interests.

Transfer of personal data

CD Auto protects personal data using up-to-date technical and organisational measures. Personal data is not sold and is not transferred to third parties except in the cases described in this section.

Leasing applications are created in the CarBuy system, and CarBuy may pass them to its leasing partners for review. CD Auto does not send data directly to banks or leasing companies.

CD Auto does not transfer personal data to third countries (outside the European Union and the European Economic Area).

Retention period

CD Auto stores personal data only for as long as necessary to achieve the relevant processing purpose. Where processing is based on consent, data is processed while the consent is valid and has not been withdrawn, or to the extent legislation requires the data to be retained.

Data subject rights

In accordance with legislation, you have the right to:

• receive information about the processing of your personal data;
• request access to your personal data;
• request rectification, erasure or restriction of processing;
• object to processing based on legitimate interests;
• data portability;
• withdraw consent at any time (withdrawal does not affect the lawfulness of processing carried out beforehand);
• lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv, Elijas iela 17, Riga, LV-1050).

Submitting requests

A request regarding your rights may be submitted in writing at the CD Auto showroom at Dārzciema iela 60a, Riga, upon presenting an identity document, or by e-mail to [email protected] signed with a secure electronic signature.

Upon receiving a request, CD Auto verifies the data subject's identity, assesses the request and fulfils it in accordance with legislation. CD Auto may update this policy to keep it in line with applicable legislation.