Privacy policy

This website is published by MISTER AUTO, a simplified joint-stock company (société par actions simplifiée), whose registered office is located at 19 rue Alfred de Musset, 69100 Villeurbanne (France). This website is hosted in Europe by Google, Gordon House, Barrow Street, Dublin 4, Ireland. 

This privacy policy details the way in which your personal data is processed. Please read it carefully. By browsing the website, you accept the terms of this policy.

Through this website, we collect and process the following personal data:

• information you provide to us in connection with an order placed on our website, such as your name, address, email, telephone number, bank details, make/model/type of vehicle, order history, payment method used
• information related to your order, such as products and services ordered, order reference, invoice date, invoice reference, invoice number, contacts with customer service, possible telephone conversations with customer service
• information you give us when you contact us for any reason other than an order placed on our website
• information collected in the course of submitting a review, such as the order involved, the comment, the type of experience involved in the purchase or service, a rating of the experience, the time stamp of the review
• Information collected using cookies (for more information, please see the cookie policy)

For more details, see section 2.

This website may also contain links to third party websites. Please note that these websites have their own data protection policies. We invite you to read them when you access these websites.

You are informed that Mister-Auto declines all responsibility for your access to and use of third party websites.

Your personal data is processed to respond to your request and for general administration purposes by Mister-Auto as data controller, as described below.

As data controller, we process your personal data as follows:

Automated decision-making in the fraud prevention process:

Mister Auto implements an automated decision-making system as part of a risk analysis to combat fraud. This system, which assesses you and attributes a score based on several variables (purchase volume, recency, frequency, etc.), is first carried out exclusively by means of automated processing carried out by the payment service provider, and secondly via manual processing carried out by Mister Auto once your order has been validated but a risk of fraud remains or a potential order error is detected by our services. Depending on the score attributed, Mister Auto reserves the right to cancel your order or deny you access to its services. You can contact Mister Auto (dataprotection@mister-auto.com) for more information about your score.

Your personal data will be retained for the following periods:

• Order data: 5 years from the last activity
• Fraud prevention: duration of the statutory limitation period
• Commercial prospecting data: 3 years from the last activity
• Invoices: 10 years
• Non-order data: 3 years
• Recorded telephone conversations with Customer Service: 30 days
• Cookies: 13 months maximum

We may communicate your personal data to the following recipients involved in the above-mentioned purposes: 

• our internal services
• our subsidiary Caronway Maroc (219 boulevard Zerktouni, Résidence El Bardai, Casablanca, Morocco) - Morocco does not benefit from an adequacy decision by the European Commission, but appropriate safeguards have been put in place, including standard contractual clauses.
• our payment providers, carriers, customer service providers, IT providers
• supervisory authorities, administrative bodies
• Mister Auto's partners wishing to send you their commercial offers, if you have consented to this or have not objected, depending on the prospecting channel used. To see the list of Mister Auto partners and their sectors of activity, click here.

Please note that the customer service providers Outsourcia and Prestacall are located in Morocco and Moldova respectively, countries which do not benefit from an adequacy decision of the European Commission. Appropriate safeguards have been put in place, including standard contractual clauses.

You can also contact us through our social media channels. For example, if you send us or post a message on our social media pages, we may use the information contained in your message or post to contact you regarding the question/request. In order to provide you with the requested assistance, we may ask you to provide, by direct or private message, additional information such as details of the problem, your name, email address, vehicle identification number (VIN), telephone number, location (city/state) and/or make, model and year of the vehicle. The information you provide will not be used for direct marketing purposes; market research to improve services and products will only be carried out on an aggregated (anonymous) basis.

Please note that you should not transmit sensitive data (such as information on racial or ethnic origin, political opinions, religious or philosophical beliefs, or health) in your message. We draw your attention to the public nature of the messages you publish on the public space of a social network.

You have a right of access, rectification, erasure (right to be forgotten), restriction of processing, portability of your data as well as the right to object to the processing of your personal data based on Article 6(1)(e) or (f) of the GDPR or where the personal data is processed for marketing purposes in accordance with applicable law. You also have the right to refuse fully automated decision-making.

Please note that these rights are limited by law and that conditions are required for us to enforce them.

Right of rectification:
Changes you make to your personal information in your customer account will be reflected in our database.

Subscribe / unsubscribe to advertising:
You may consent or object to the processing of your personal data for marketing purposes. Please proceed as follows:

• If you agree to receive commercial communications from Mister-Auto or its partners, please tick the box corresponding to the desired method of contact when creating your customer account or subsequently in your customer account (optional).
• If you do not wish to be contacted for marketing purposes, please uncheck the box in your customer account.

To exercise your rights, please contact us:

• by email dataprotection@mister-auto.com,
• or by letter to the following address: Mister Auto, Service Data Protection, 19 rue Alfred de Musset, 69100 Villeurbanne, France.

You also have the right to lodge a complaint (Art. 77 GDPR) with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés) via the following URL https://www.cnil.fr/fr/plaintes or by post (3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07).

This Privacy Policy may be subject to changes that will be posted on this website. We therefore invite you to consult it regularly to take note of the changes made.

Mister Auto
Service Data Protection
19 rue Alfred de Musset
69100 Villeurbanne
France
dataprotection@mister-auto.com

Version:  13 June 2023 

See the legal notice for full details of the company.