Data Protection Notice and Cookie Statement for Aston Martin Media Site
We, Aston Martin Lagonda Limited (hereinafter referred to as "we" or "Aston Martin") welcome you to our Media Site and appreciate your interest in our company. Your privacy is important to us. We take the protection of your personal data and confidential treatment of such data seriously. This is to notify you that our processing of your personal data takes place exclusively within the framework of the General Data Protection Regulation (referred to below as "GDPR"). With this privacy policy we inform you about the processing of your personal data and your privacy rights in the context of the use of the Media Site. For information on other services and aspects of our company please refer to the respective privacy policy of those services or pages on our website.
 
1. Data Controller and Data Protection Officer
We are responsible for your personal data.  If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us by letter or email using the details below:
Aston Martin Lagonda Limited
Banbury Road
Gaydon
Warwickshire
CV35 0DB
E-Mail: data.officer@astonmartin.com
Contact: https://www.astonmartin.com/en-gb/legal/privacy
 
2. Subject of data protection
The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person (so-called affected person). These include e.g. Information such as name, postal address, e-mail address or telephone number, but also information that necessarily arises during the use of the Media Site, such as information on the beginning, end and extent of use and the transmission of your IP address.
 
3. Type, scope, purpose and legal basis of automated data processing
The use of the Media Site is generally possible without registration. Even if you use the Media Site without registration, personal data can be processed.
Below you will find an overview of the type, scope, purposes and legal basis of the data processing of the Media Site.
3.1 Provision of our online service
When accessing the Media Site through your device, we automatically process the following data:
- date and time of access,
- duration of the visit,
- user devices,
- used operating system,
- the features you use,
- amount of sent data,
- type of event,
- IP address,
- referrer URL,
- data that you download,
- domain name
Dimensions
- top country
- top page
- top browsers
- top devices
- top keywords
- top sources
Metrics
- sessions
- users
- page view
 
 
These data are processed on the basis of Article 6 (1) (f) of the GDPR to provide the service, to ensure the technical operation and to detect and eliminate interference. We are pursuing the interest of enabling and permanently securing the use of the Media Site and its technical functionality. When the Media Site is accessed, the data is processed automatically. Without this provision, you will not be able to use our services. We do not use the data for the purpose of drawing any conclusions about you or your identity.
We usually delete the data after 90 days, unless we exceptionally need it for the purposes mentioned above. In such a case, we will delete the data immediately after use.
 
3.2 Cookies
When you visit the Media Site, "cookies", i.e. small files, can be stored on your device in order to offer you a comprehensive range of functions, to make your usage more comfortable and to optimise our content. If you do not want to use cookies, you can prevent the storage of cookies on your device by adjusting the settings of your internet browser. Please note that the functionality of our content may then be limited. For detailed information on the nature, extent, purposes, legal bases and possibilities of contradicting the processing of cookies, please refer to our Cookie Policy.
 
3.3 Social Plugins
Some sections of our website use “social plug-ins” of social networks, such as Facebook, Twitter, Google+ or LinkedIn. The plug-ins are recognisable by the logo of the respective social network and serve primarily to "share" our content. As soon as you visit a website with an activated social plug-in, your browser uses the social plug-in to establish a direct connection to the servers of the respective social network and transmit data about your visit to the social network. Even if you are not a member of one of the social networks, there is a possibility that they will use the social plug-in to learn and save data such as your IP address.
If you have activated the use of the respective social plug-in, we process the following data and transmit it to providers of the respective social network:
- date and time of access,
- visited page of the Media Site,
- IP address
Your data will be processed to enable you to share certain articles of the Media Site within the social networks based on Article 6 (1) (f) GDPR.
As long as the social plug-in is not activated, no data will be sent to the social network. Once activated, the social plug-in connects to the social network servers and remains active until you disable it or delete your cookies. Activation establishes a direct connection to the server of the respective social network. The content of the social plug-in is transmitted by the social network directly to your browser, which integrates it into the visited website. Therefore, we have no influence on the amount of data collected by the social plug-in.
For more information on the purpose and scope of the data collection, as well as the further processing and use of the data by the respective social networks, your rights in this regard as well as setting options for the protection of your privacy, please refer to the privacy policy of the social network itself.
 
4. Individual services and functionalities
You may voluntarily provide personal information on our website in several places or register for services or functions, e.g. through the shop, newsletter subscriptions, information requests, contact requests, etc. When registering and using the services and features described below, personal information will be collected, processed and used by us as set out below.
 
4.1 Newsletter
4.1.1 Registration Process
For the reception of our newsletters - especially press information – a registration with an individual profile is required.
When registering/subscribing, the following compulsory personal information marked is requested: first name, surname, email, language, country. This subscription is automatically approved, accepted and the details logged in our database. The user is added to Aston Martin's distribution list on the media site and the user will receive an email each time a new press release goes out on Aston Martin's media site. Users can unsubscribe at any time in order to be removed from Aston Martin's distribution list and stop receiving emails.
 Unless this mandatory data is supplied, registration is not possible.
As part of your registration, you also have the opportunity to provide other voluntary information such as academic title. Please note that this information is not required for registration and you alone decide whether you want to provide us with this data. We process the data collected on the basis of Article 6 (1) (b) and (f) GDPR in order to register you for the receipt of newsletters. We delete the data as soon as the purpose of the processing ceases, at the latest after 90 days, if no further legal storage requirements exist.
 
4.1.2 Use of the newsletter
When using the newsletter, the following categories of personal data are processed:
Contact information, see point 4.1
We process this data on the basis of Article 6 (1) (b) GDPR in order to provide you with the services you require in this context and to conduct the associated contractual relationship with you. [The sending of the newsletter and the care of the recipients are taken over by the third party known as [EPressPack]].
We delete this data as soon as the purpose of the processing ceases, at the latest after 90 days, if there are no further legal storage requirements.
 
5. Recipient of personal data
Internal recipients: Within Aston Martin, only those persons have access who need this for the purposes mentioned in sections 3 and 4 above.
External recipients: We only pass on your personal data to external recipients outside of Aston Martin, if this is necessary for processing your request, if another legal authorisation exists or if your consent is given.
External recipients can be:
a) Processor
Group companies of Aston Martin or external service providers that we use for the provision of services, for example in the areas of technical infrastructure and maintenance for Aston Martin’s offer or the provision of content. These processors are carefully selected and regularly reviewed by us to ensure your privacy is maintained. The service providers may only use the data for the purposes specified by us and according to our instructions.
b) Public bodies
Authorities and government institutions, such as regulators, courts or tax authorities to whom we must transfer personal data for legally binding reasons. The transmission then takes place on the basis of Article 6 (1) (c) GDPR.
c) Private offices
Dealers, cooperation partners or auxiliary persons to whom data are transmitted on the basis of a consent, for the execution of a contract with you or for the protection of legitimate interests, such as Aston Martin Dealerships, financing banks, providers of other services or transport service providers. The transmission then takes place on the basis of Article 6 (1) (a), (b) and / or (f) GDPR.
 
6. Data processing in third countries
If a data transmission takes place in locations whose origin or place of data processing is not located in the United Kingdom or the  the European Economic Area, we ensure before the transfer,  that an adequate level of data protection exists (e.g. through a European Commission adequacy decision, through appropriate safeguards such as self-certification of the EU-US Privacy Shield beneficiary or agreement of so-called EU standard contractual clauses with the beneficiary). Alternatively   you may give your sufficient consent to the transfer of data.
You can obtain from us an overview of the recipients in third countries and a copy of the specific arrangements agreed to ensure the appropriate level of data protection. Please use the information in section 1.
 
7. Storage duration
The storage period for personal data can be found in the respective chapter on data processing in relation to certain services and functions in Section 3 and Section 4. In addition, we generally retain your personal data only as long as this is necessary for the fulfilment of the purpose or – in the case of explicit consent - as long as you have not revoked the consent. In the event of an objection, we will delete your personal data, unless its further processing is permitted in accordance with the relevant statutory provisions. We delete your personal data even if we are obliged to do so for legal reasons.
 
8. Affected rights
As a data-processing subject, you have many rights. In detail:
Right to information: You have the right to obtain information about the data we have stored about you.
Right of rectification and cancellation: You may demand the correction of incorrect data and - insofar as the legal requirements are met - the deletion of your data.
Restriction of processing: As far as the legal requirements are met, you can demand that we restrict the processing of your data.
Data portability: If you have provided us with data based on a contract or consent, you may, subject to the legal requirements, require that you receive the data you provide in a structured, common and machine-readable format, or that we transfer it to another person in charge to transfer.
Objection to data processing in the case of legal basis "legitimate interest": You have the right, for reasons arising from your particular situation, to object at any time to the processing of data by us, insofar as this is based on the legal basis "legitimate interest". If you make use of your right of objection, we will stop the processing of your data, unless we can - in accordance with the legal requirements - prove compelling legitimate reasons for further processing that outweigh your rights.
Opposition to cookies: You may also object to the use of cookies at any time. Details can be found in our Cookie Policy.
Revocation of consent: If you have given us consent to the processing of your data, you can revoke it at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected.
Complaints to the supervisory authority: You can also file a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority, which is responsible for your place of residence or your country, or the data protection authority responsible for us (the ICO).
Your contact to us: Furthermore, if you have any questions about the processing of your personal data, your data subject rights and any consent given, you can contact us free of charge. To exercise all of your aforementioned rights, please contact us by mail to the address indicated in 1. above. Please make sure that we can clearly identify you.
 
9. Links to offers from third parties
Websites and services of other providers to which the Media Site links are and have been designed and provided by third parties. We have no influence on the design, content and function of these third party services. We expressly dissociate ourselves from all contents of all linked offers of third parties. Please note that the offers of third parties linked from the Media Site may install their own cookies on your device or collect personal data. We have no influence over this. If necessary, please inform yourself directly of the providers of these linked third-party offers.