1. Personal Data

YASA Limited is a wholly owned subsidiary of Mercedes-Benz and is the data controller for the personal data described in this notice unless otherwise stated. Mercedes-Benz and its subsidiaries and affiliates respect your privacy and are committed to protecting your personal data. We will only use the information that we collect about you lawfully.

This privacy notice describes how we collect and use personal information about you during your interactions with this website and our commercial team directly, in accordance with Data Protection Legislation.

Data Protection Legislation means the Data Protection Act 2018 (DPA2018), United Kingdom General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any legislation implemented in connection with the aforementioned legislation. Where data is processed by a controller or processor established in the European Union or comprises the data of people in the European Union, it also includes the EU General Data Protection Regulation (EU GDPR). This includes any replacement legislation coming into effect from time to time.

Your information will not be used for marketing purposes outside of YASA. We will never sell your data and YASA Limited promise to keep your details safe and secure.

Our data protection representatives can be contacted directly here:

 

01865 952 100

dpo@yasa.com

We may collect the following personal data:

The personal data we collect will be used for the following purposes:

• Administration – Stored within a CRM system.
• Marketing – Stored within a CRM systems
• Warranties / Returns / NDAs – Stored within a CRM system.

Our legal basis for processing the personal data:

• Your consent to receive sales communications
• Contractual for things such as Warranties / Returns / Sales
• Legal obligation – for example, when responding to data subject requests or assisting with fraud investigations

2. Consent

 

We send directing marketing information to you based on your consent.

You may withdraw consent at any time by contacting the DPO for YASA at dpo@yasa.com requesting a copy of the ‘Withdrawal of Consent Procedure’ and the ‘Data Subject Consent Withdrawal Form’. This must be completed and submitted back to the DPO at the same address where it will be processed in line with our ‘Withdrawal of Consent Procedure’.

3. Disclosure

We may share your personal data with other organisations in the following circumstances: 

Edit

Third party organisation	Purpose For Disclosure
Google Ireland Ltd	Google Analytics provision
Pipe Up Digital UK	Provision of WP and form function
GoDaddy US	Provision of web domain

The provision of our web domain services is provided by GoDaddy, a US based company. Appropriate contracts and safeguards are in place to protect this data and can be viewed here :  https://www.godaddy.com/en-uk/legal/agreements/data-processing-addendum

Where you have consented to receive direct marketing from us, your data will be transferred to Mailchimp based in North America. Appropriate contracts and safeguards are in place to protect this data and can be viewed here: Mailchimp Data Processing Addendum Preview | Mailchimp You have the absolute right to withdraw your consent to marketing, please see section 5

YASA utilises cookies on our website. You can read our cookie policy here: https://www.yasa.com/cookie-policy-2/

4. Retention period

We retain a record of your personal information in order to provide you with a high quality and consistent service. We will always retain your personal information in accordance with the Data Protection Legislation.

Unless otherwise required by law, prospect data will be stored for a maximum of 13 months after our last engagement, at which point it will be deleted.

Customer data will be retained for 7 years after purchase to comply with our contractual obligations.

You can unsubscribe to direct marketing at any time.

5. Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
• Right to judicial review: in the event that YASA refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in clause 6 below.

All of the above requests will be forwarded on should there be a third party involved (as stated in section 4 above) in the processing of your personal data.

6. Complaints

In the event that you wish to make a complaint about how your personal data is being processed by YASA (or third parties ), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and YASA’s data protection representatives

The details for each of these contacts are:

 

Policy version 1.2 Effective 9th February 2023