Privacy policy

Data controller

Groupe ADS (ADS Concept Car), 4 rue de l’Avenir, L-3895 Foetz, Luxembourg — +352 26 55 14 44.

Data collected and purposes

The website's forms (offer request, tailored search, trade-in valuation, body shop appointment, wheel quote, rental, contact) collect: name, telephone number, e-mail address where applicable, and the content of your message (including the vehicle concerned).

This data is used exclusively to respond to your request and to ensure its commercial follow-up. It is neither resold nor used for any other purpose.

Reserving a vehicle online additionally collects: your postal address, your country of residence, the documents required for the sale (identity document, driving licence, proof of address, extract from the trade register for companies), your electronic signature and, where applicable, your request for a financing assessment. These documents are used solely to prepare the sale of the reserved vehicle.

Renting a vehicle online additionally collects: your date of birth, the date your driving licence was first issued and photos of it (front and back). This information is used to check the rental conditions (minimum driver age and how long the licence has been held) and to draw up the rental contract.

An order from the online shop processes your first and last name, your contact details (e-mail address and telephone number) and, for delivery, your delivery address. This data is used solely to fulfil the order (payment, preparation, collection or delivery, follow-up).

Legal basis and retention period

The processing is based on your consent, evidenced by the checkbox present on each form. The data is retained for a maximum of 3 years after your last contact with our teams, then deleted.

Documents submitted during an online reservation are stored encrypted in a private space and automatically deleted within 30 days if the sale does not go through (reservation abandoned or cancelled).

Data relating to an online shop order or an online rental is processed because it is necessary for the performance of the contract. Licence photos uploaded for an online rental follow the same rules as reservation documents: stored encrypted in a private space, they are automatically deleted within 30 days if the rental does not take place (request abandoned or cancelled). Data relating to a paid order, rental or reservation is kept for the legal retention period for accounting records (10 years). Where an online payment was started but not completed, the request is deleted no later than 90 days after it was created. If a reservation whose deposit has been paid is cancelled, the signature on the reservation form is kept for 180 days as evidence, then deleted.

Recipients and processors

Your requests are handled by the Groupe ADS team. Four technical service providers act as processors: Vercel (website hosting), Supabase (database and secure storage of reservation and rental documents), Stripe (online payments — reservation deposit, rental, shop; your bank details never pass through our servers) and Resend (delivery of notification e-mails). Some of these providers, including Stripe (payment) and Vercel (hosting), may process data outside the European Union: such transfers are covered by the safeguards provided for by the GDPR, in particular the standard contractual clauses adopted by the European Commission. If you request a financing assessment, your contact details are passed to our partner Alfa Credit for that sole purpose. No data is transferred for advertising purposes.

Cookies

This website only uses cookies and technical storage strictly necessary for its operation. No advertising or audience-measurement cookie is set without your consent: if such a service were ever to be activated, it would only be after your explicit agreement, given via the consent banner (“Accept” and “Decline” buttons).

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability over your data. To exercise it, contact us via the contact form or on +352 26 55 14 44. You may also withdraw your consent at any time.

If you consider that your rights are not being respected, you may lodge a complaint with the Luxembourg supervisory authority: the Commission nationale pour la protection des données (CNPD) — cnpd.public.lu.