Jump to navigation
Information about my lease vehicle.
Information about my fleet.
The protection of your personal data is important to the BNP Paribas Group – to which Arval belongs– and which has adopted strong principles in that respect for the entire Group in its Group Data Protection Notice.
This Arval Information Data Protection Notice provides you with detailed information relating to the protection of your personal data by Arval AS, Nydalsveien 28, N-0484 Oslo, Box 4748, Nydalen, N-0421 Oslo (legal representative: Michael Benabdallah) (“we”).
We are responsible, as a controller, for collecting and processing your personal data in relation to our activities. The purpose of this Arval Data Protection Notice is to let you know which personal data we process about you as a driver (being either our client or our corporate clients’ employee) or as a representative of our corporate client, the reasons why we use such data, how long we keep it, what your rights are and how you can exercise them.
Further information may be provided where necessary when you apply for a specific product or service.
1. WHICH PERSONAL DATA DO WE USE ABOUT YOU?
2. SPECIFIC CASES OF PERSONAL DATA COLLECTION, INCLUDING INDIRECT COLLECTION
3. WHY AND ON WHICH BASIS DO WE USE YOUR PERSONAL DATA?
4. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
5. TRANSFERS OF PERSONAL DATA OUTSIDE THE EEA
6. HOW LONG DO WE KEEP YOUR PERSONAL DATA FOR?
7. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?
8. HOW CAN YOU KEEP UP WITH CHANGES TO THIS DATA PROTECTION NOTICE?
9. HOW TO CONTACT US?
We collect and use your personal data to the extent necessary in the framework of our activities and to achieve a high standard of personalised products and services.
Depending on the product/service, we may collect various types of personal data about you, including:
Depending on the product/service, we may collect the following sensitive data only upon obtaining your explicit prior consent:
These data may nevertheless be processed without your consent if necessary to comply with applicable laws and regulations.
We never ask for personal data related to your racial or ethnic origins, political opinions, religious or philosophical beliefs, trade union membership, genetic data or data concerning your sex orientation, unless it is required through a legal obligation.
The data we use about you may either be directly provided by you or be obtained from the following sources in order to verify or enrich our databases:
In certain circumstances, we may collect and use personal data of individuals with whom we have, could have (such as prospects), or used to have a direct relationship.
In certain circumstances, we may also collect information about you although you do not have a direct relationship with us. This may happen for instance when a client (e.g. your employer), a service provider or a commercial partner provides us with information about you, if you are, for example, a :
We use your personal data to comply with various legal and regulatory obligations, including:
Applicable to you as a driver also being our individual client
We use your personal data to enter into and perform our contracts, including to:
We use your personal data in order to deploy and develop our products or services, manage the contractual relationship with our individual clients and corporate clients of whom you are an employee, to improve our risk management and to defend or exercise our legal rights, including:
Applicable to you as an employee of our corporate clients
Your data may be aggregated into global anonymised statistics that may be offered to professional clients to assist them in developing their business. In this case, your personal data will not be disclosed and those receiving these anonymised statistics will be unable to ascertain your identity.
In some cases, we must require your consent to process your data, for example:
Solely to the extent necessary to fulfill the aforementioned purposes and subject to the provisions of Section 3, we may disclose your personal data to:
In case of international transfers originating from the European Economic Area (EEA), where the European Commission has recognised a non-EEA country as providing an adequate level of data protection, your personal data may be transferred on this basis.
For transfers to non-EEA countries whose level of protection has not been recognised by the European Commission, we will either rely on a derogation applicable to the specific situation or implement one of the following safeguards to ensure the protection of your personal data:
To obtain a copy of these safeguards, you can send a written request as set out in Section 9.
We will retain your personal data for the longer of the period required to comply with applicable laws and regulations or another period with regard to our operational requirements, such as proper account maintenance, facilitating client relationship management, and responding to legal claims or regulatory requests. For instance, most of clients’ information is kept for the duration of the contractual relationship and after the end of the contractual relationship for the period of time needed to ensure the exercise of our legal rights or the defense of legal claims.
In accordance with applicable regulations, you have the following rights:
If you wish to exercise the rights listed above, please send a letter or e-mail to the following address: Arval AS, DPO Office, Nydalsveien 28, N-0484 Oslo, Box 4748, Nydalen, N-0421 Oslo or email@example.com. Please include a scan/copy of your identity card for identification purposes.
In accordance with applicable regulation, in addition to your rights above, you are also entitled to lodge a complaint with the competent supervisory authority.
We invite you to review the latest version of this notice online and we will inform you of any material changes through our website or through our other usual communication channels.
If you have any questions relating to our use of your personal data under this Data Protection Notice, please send a letter or e-mail to the following address Arval AS, DPO Office, Nydalsveien 28, N-0484 Oslo, Box 4748, Nydalen, N-0421 Oslo or firstname.lastname@example.org. Our data protection officer will then investigate your query.
If you wish to learn more about cookies and our Security Assurance Plan, please contact us through email@example.com.