GDPR Compliance

Posted by Liana Harrow
0 Comments

Data Collection and Processing Principles

At 2018 Car Models Guide, we rigorously observe the principles established by the General Data Protection Regulation (GDPR) to ensure your personal data is handled lawfully, fairly, and transparently. We collect data solely for specified, explicit, and legitimate purposes, and do not process data in ways incompatible with those purposes. Personal information such as names, email addresses, and geolocation details may be collected when users interact with services like dealer locator tools, review submissions, or newsletter sign-ups. This data is processed only to provide users with comprehensive car model information, connect potential buyers with trusted dealerships, and offer automotive service guidance. We enforce data minimization standards, ensuring that only necessary and relevant data is acquired and retained for the shortest time needed. Regular audits and risk assessments are conducted to maintain data accuracy and integrity, and to ensure security protections are consistently updated. We commit to transparently informing users about the kinds and purposes of data collected, allowing users to make informed choices regarding their privacy preferences. Unless legally required, we do not disclose personal information to third parties without user consent. We respect users’ rights to access, correct, or erase personal information, and provide mechanisms to exercise these rights. As a U.S.-based service with international visitors, we uphold robust safeguards for all data entrusted to our care. Should you have questions or requests regarding our data handling policies, you are invited to contact our Data Controller through the methods provided below.

Lawful Basis for Data Processing

Our processing of personal information is anchored in several lawful bases as defined by the GDPR, including user consent, fulfillment of contractual obligations, compliance with legal obligations, and the pursuit of legitimate interests related to providing accurate and useful automotive information services. We obtain explicit consent before collecting any personal data that is not strictly necessary for service provision. Every data subject is informed about the specific legal ground for processing, whether it relates to facilitating vehicle comparisons, offering dealer connections, or supplying maintenance tips. In scenarios where users initiate communication with third-party dealerships or service providers, consent for data sharing is explicitly secured prior to action. We maintain comprehensive records of all processing activities and their legal bases to demonstrate accountability and transparency. Routine reviews of our consent mechanisms are performed to ensure ongoing compliance and to improve user control over their information. Users may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Where data is required for contract performance, such as managing service inquiries, we ensure minimal and secure processing. For legal compliance, such as responding to government requests or legal claims, data may be retained as mandated by relevant statutes. Legitimate interests pursued include providing personalized content and improving user experience; however, users’ fundamental rights and freedoms are always prioritized. All withdrawal, rectification, or objection requests are addressed promptly and thoroughly. Our commitment is to uphold the highest standards of legal compliance and user autonomy.

User Rights Under GDPR

In alignment with the GDPR, we ensure that all individuals whose personal data is processed by 2018 Car Models Guide are empowered with clearly defined rights. These include the right to access, enabling users to request and obtain copies of all personal data we hold about them. Users also have the right to rectification, allowing them to correct inaccuracies or incomplete information. The right to erasure, known as the “right to be forgotten,” enables users to request deletion of their data from our records under qualifying circumstances. Additionally, we recognize the right to restrict processing, which allows individuals to limit how their data is used. The right to data portability enables users to receive their information in a structured, machine-readable format and transfer it to another controller if desired. Users can also object to particular data processing activities, especially those based on legitimate interests or direct marketing. We respond promptly to all data rights requests, typically within one calendar month, ensuring that users’ needs are addressed comprehensively and transparently. Throughout our website and service interfaces, we provide clear avenues for users to exercise these rights. Data protection impact assessments are regularly conducted to ensure ongoing compliance with users’ rights. Our processes undergo continual refinement to reflect evolving best practices and regulatory guidance. We inform users of any significant changes to their data protection rights or our privacy practices. Questions or requests to exercise these rights may be directed to the contact details below.

Security and Data Protection Measures

The safeguarding of your personal information is paramount at 2018 Car Models Guide. We implement technical and organizational measures designed to protect all personal data against unauthorized access, loss, destruction, or alteration. These measures include the use of secure servers, regular system vulnerability assessments, encryption of data during transmission and storage, and restricted access protocols for our personnel. Our staff undergoes regular training on data privacy protocols to ensure compliance with GDPR standards. Backups and data restoration procedures are in place to mitigate the effects of unforeseen incidents or data breaches. We also maintain a comprehensive incident response plan to rapidly address and report security incidents, including notification to users when required by law. As part of our ongoing commitment, we monitor our systems and audit our security practices regularly, adapting as technology and regulatory requirements evolve. When sharing data with third parties, such as listed car dealerships or service centers, we enforce data processing agreements to guarantee similar levels of protection. Data retention policies are strictly enforced to ensure information is only stored as long as necessary. Users are informed of any security breaches that may impact their data, and we provide guidance for protecting one’s information. Security is treated as a continuous, company-wide priority, and we invest in leading tools and wisdom to safeguard all entrusted information. For further information on our security posture or to report vulnerabilities, contact our Data Controller directly via the email provided.

Children's Data Protection

The website and services provided by 2018 Car Models Guide are intended exclusively for individuals who are at least sixteen years of age. We do not knowingly collect or solicit personal information from minors under this age threshold. In the event that we become aware of inadvertently collected information from a user under the age of sixteen, immediate steps will be taken to delete such information from our records. We encourage parents and guardians to monitor their children’s internet usage and to help enforce our privacy policy by instructing minors never to provide personal data via our site. When user-generated content or submissions could involve minors, we require verifiable parental consent in accordance with applicable U.S. law. Our website contains clear instructions and age-gating measures during relevant registration or information request processes. Should a parent or guardian believe that their child has provided us with personal information, they are encouraged to contact us so appropriate action can be taken. We are committed to upholding children’s privacy rights and comply with all legal requirements, including the Children’s Online Privacy Protection Act (COPPA) and relevant GDPR articles, regarding the handling of minors’ data. Regular reviews of our processes help ensure compliance with state, federal, and international child protection regulations. All related inquiries may be directed to our Data Controller using the contact details provided below.

International Data Transfers

Given the global accessibility of 2018 Car Models Guide, some personal data may be transmitted between the United States and other jurisdictions, including the United Kingdom. We recognize and address the legal requirements governing international data transfers, ensuring that such movements only occur under mechanisms approved by the GDPR and relevant U.S. law. When transferring data outside the United States or European Economic Area, we implement standard contractual clauses and other appropriate safeguards to guarantee data remains protected at levels consistent with GDPR principles. Data is only shared with trusted partners or service providers with verified data handling practices. All international transfers are accompanied by clear notification to users about the purpose and scope. We continuously monitor legal developments in cross-border privacy laws to ensure compliance. Our data processing agreements with third parties specify obligations regarding international data transfers and impose restrictions on further transfers or sharing. If data must be transferred outside established safe regions, explicit user consent is requested before proceeding. Users have the right to obtain a copy of applicable safeguards governing their data. Data subject rights remain enforceable regardless of international transfer status, ensuring continuous protection and recourse for all affected individuals. For further information or requests related to international data movements, please contact our Data Controller using the information listed below.

Contact Information and Data Controller

For all inquiries, requests, or concerns regarding your data privacy rights under GDPR or any other applicable regulations, you may contact our designated Data Controller. The owner and Data Controller of 2018 Car Models Guide is Liana Harrow, whose postal address is Ashton Gate Stadium, Ashton Rd, Bristol BS3 2EJ, United Kingdom. Email correspondence may be directed to [email protected]. We are committed to cooperating with regulatory authorities and users alike to resolve any data privacy or GDPR-related matters efficiently, transparently, and in compliance with all governing laws. We appreciate your trust in our handling of your confidential information and strive to ensure your confidence is well-placed.

Write a comment