Privacy

This privacy policy (hereinafter referred to as the “Charter”) is established by CTR-Media S.A., whose registered office is located at Rue Royale, 100, 1000 Brussels, and registered with the Crossroads Bank for Enterprises under number 0432.916.146 (hereinafter referred to as “CTR-Media”).

The purpose of this Charter is to inform you about the way in which your data are processed by CTR-Media through the website www.gocar.be.

The gocar.be website allows users to quickly and efficiently access information about vehicles for sale or for sale. In a few seconds, the user can consult all the information relating to the cars he is interested in and can also contact the sellers concerned by the ad.

By “personal data” we mean all personal data concerning you, i.e. any information that allows you to be identified, directly or indirectly, as a natural person.

In this context, CTR-Media collects and processes your personal data in complete transparency, in compliance with the law of 30 July 2018 on the protection of individuals with regard to the processing of personal data (hereinafter referred to as the “law on the protection of privacy”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data repealing Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation”).

CTR-Media pays particular attention to the protection of your privacy and therefore undertakes to take all reasonable precautions to protect your collected personal data against loss, theft, disclosure or unauthorised use.

1. In which context does CTR-Media process your personal data?

The website www.gocar.be – managed and operated by CTR-Media – is an online platform for publishing vehicles in the broadest sense and bringing together players in this field (owners, potential buyers, potential tenants, various service providers, dealers, etc.). As part of the operation of the www.gocar.be platform, CTR-Media collects and processes personal data of its customers, users and prospects. Consequently, CTR-Media acts as “controller” within the meaning of the law.

2. What categories of data are processed by CTR-Media?

2.1. Within the framework of the operation of the website www.gocar.be, CTR-Media collects and processes – potentially – the following personal data:

Categories	Examples	Context
Personal identification data	Surname, first name, postal address, etc.	This data is collected during the registration process for our services, when creating an account, and when you want to contact us.
Electronic identification data	Phone number, e-mail, IP address, fax, etc.	Some of this information is collected via online forms when you register and when you want to contact us.
Professional data	Company name, registered office, company / VAT number, business telephone number, professional email address, function, status, representative’s name	Some of this information is collected via online forms when you register as a professional (professional account).
Financial data	Bank account number and banking institution	Some of this information is collected via online forms when you register as a professional (professional account).
Data on owned vehicles	Owned vehicles	This information is collected when you post an ad with the objective of selling a car, we have access to this information.

2.2.

CTR-Media may also collect non-personal data. This data is called non-personal data because it does not allow you to be identified (directly or indirectly). This data may therefore be used for any purpose whatsoever, for example to improve the website www.gocar.be, the products and services offered by CTR-Media or its partners.

2.3.

In the event that non-personal data are combined with personal data, so that identification of the data subjects is possible, these data will be treated as personal data until their connection with a particular person is made impossible.

For what purposes does CTR-Media process your personal data?

3.1. Principles

The legal basis for the processing of your data varies according to the processing operation concerned, and more particularly the purpose of the processing operation. In principle, when collecting your data, CTR-Media informs you of the way and methods of collecting and processing your data. On this occasion, CTR-Media will inform you of the legal basis of the processing.

For example, your data may be collected and processed in the context of the execution of the contract between you and CTR-Media, which is formed by the acceptance of the general conditions of this Website. When the processing is not necessary to execute a contractual relationship, it may be based either on your explicit and informed consent or on CTR-Media’s legitimate interest as a company (in particular freedom of enterprise and information). In this respect, CTR-Media always ensures that there is a balance between your interests and its own, for example by granting you a right of opposition. It is also possible that your data may be processed in accordance with a legal or regulatory obligation.

3.2. Processing carried out by CTR-Media

3.2.1. Compliance with our legal obligations

In some cases we are obliged to process your personal data in the context of legal obligations or when we cooperate with the competent authorities. In these cases, we transmit your personal data to meet our obligations.

3.2.2. Contractual basis

In execution of the contract between you and CTR-Media, CTR-Media carries out processing operations whose purposes can be described as follows:

– the use of the Website and the services provided on it, and more specifically: (a) the follow-up and management of the evolution of an operation whose purpose is to provide information on our Site (sale, purchase, etc.); (b) and the establishment of contact with a seller / candidate/buyer/supplier/ Concessionaire….;

– customer management;

– issuing, collecting and verifying invoices;

– provide you with an activity report;

– answer your questions when you contact us voluntarily.

– in order to ensure the publication and visibility of your offers/advertisements on www.gocar.be and, where applicable, in partner media (portals, newspapers, etc.); other partner to whom the data are given?

3.2.3. Consent

When you create an account on our website or when you ask us to contact you to send you an alert, or when you fill in a contact form, we ask you to read and accept that we process your personal data in accordance with this Policy.

The data collected on the basis of your express and informed consent are processed for the following purposes:

Your identification on the website;
The management of users:
The acquisition of motorcycle and car ads;
The publication of ads;
The management of ads;
The analysis of your interests in order to inform you;
Contacting you to let you know about our new services;
The personalization of our services;
Preparing studies, models (risk, marketing and others) and statistics, using anonymization and/or pseudonymization techniques whenever possible;
The preservation of the security of goods and persons, the fight against fraud or attempted intrusion, abuse or other offences;
The training of our staff through the use of real situations as an illustration (we try, as much as possible, to anonymize your personal data);
Keeping a list of former subscribers who no longer wish to be contacted;
To improve existing services and the experience of users (registered or not) of the site;
The organization of games and contests;
The management of your requests related to the application of your rights;
The establishment, exercise, defense and preservation of your rights;
The response to your requests;
The transmission of your contact data (email) to people who would like to contact you following your ad that you posted;
To carry out communication and marketing actions;
To contact you for an evaluation of our services.

3.2.4 Legitimate interest

The data collected on the basis of the legitimate interest of CTR-Media are processed for the following purposes:

In order to answer your questions when you voluntarily contact us;
To prevent and fight against fraud or attempted fraud on the website www.gocar.be and related applications of CTR-Media;
To ensure the technical management of the website www.gocar.be and related applications of CTR-Media;
In order to carry out anonymous statistics relating to the behaviour and browsing habits on the sites and applications of CTR-Media and, where applicable, of its partners;
To send you promotional information on the products and services of CTR-Media and its partners (direct marketing).
The identification on the application;
The personalization of our services;
The management of the persons registered on the application;
The preparation of studies, models (risk, marketing and others) and statistics, using anonymization and pseudonymization techniques whenever possible;
The preservation of the security of goods and persons, the fight against fraud or attempted intrusion, abuse or other offences;
The training of our staff through the use of real situations for illustration purposes (we try, as much as possible, to anonymize your personal data);
The analysis of your previous searches in order to better customize our service offerings to you;
To improve the quality of the service to you;
To keep a list of people who no longer wish to be contacted;
Improving the existing services and user experience (registered or not) of the application;
The management of your requests related to the application of your rights;
To establish, exercise, defend and preserve our rights.

3.2.5. Profiling and automated processing

In order to provide you with a better user experience, we use the technique of profiling to associate you with your various preferences.

Whenever possible, we will only use anonymized or pseudonymized data.

Profiling is any form of automated processing of personal data that involves using that data to evaluate certain personal aspects about an individual, including analyzing or predicting factors relating to that individual’s job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

In cases where we use your personal data for profiling, we ensure that no decisions are made that have legal effect or that significantly affect you in a similar way.

3.3.

CTR-Media may carry out processing operations that are not yet provided for in the present Charter. In this case, CTR-Media will contact the person concerned before re-using his or her personal data, in order to inform him or her of the changes and to give him or her the possibility, if necessary, to refuse this re-use.

Are your personal data disclosed to third parties?

4.1.

In the context of the pursuit of all or part of the purposes mentioned in Article 3, CTR-Media may transmit some of your personal data to third parties. These Third Parties may be companies or individuals. These are, for example, commercial partners, IT service providers who maintain the Site, or consultants… CTR-Media selects these third parties with the greatest care, and in particular according to the guarantees they provide in terms of personal data protection.

A list of these third parties is updated and available on the next page of this site: (see list of partners).

4.2.

No data are transferred to third parties who would be established in a country outside the territory of the European Union.

4.3.

CTR-Media may also be required to disclose your data, when required by law or in order to comply with a court decision or an order of a public authority.

CTR-Media employees

CTR-Media ensures that, for persons acting under its authority (employees), access to data and the possibilities of processing are limited to what these persons need in order to carry out their duties and the tasks entrusted to them.

CTR-Media informs persons acting under its authority of the provisions of the Privacy Act and the General Data Protection Regulations, as well as any relevant privacy and personal data protection requirements.

What are your rights and how can you exercise them?

6.1. Right to withdraw your consent.

When the processing of your data is based solely on your consent, you may withdraw it at any time by simply sending a written request to CTR-Media. This withdrawal does not affect the lawfulness of processing operations carried out before the withdrawal of your consent. For example, when you subscribe to a newsletter or automatic mailing, you can cancel your subscription at any time by clicking on the link at the bottom of each e-mail.

6.2. Right of opposition.

When the processing of your data is carried out for direct marketing purposes, you may at any time object to the use of your data for this purpose.

6.3. Right of access and copy.

In any case, you may obtain a free copy (including in electronic format) of your personal data and, where appropriate, rectify, complete or delete data that are inaccurate, incomplete or irrelevant.

6.4. Right to data portability.

You may also, at any time, request to receive your personal data free of charge in a structured, commonly used and machine-readable format, in particular for transmission to another controller.

6.5 Right of rectification.

You also have a right of rectification allowing you to ask us, at any time, to modify information that is inaccurate, incomplete or obsolete.

6.6. The right to forget.

You can obtain the deletion of your personal data when one of the following reasons applies:

– The data are no longer necessary for the purposes of the processing operation;

– You withdraw your consent to the processing of your data and we base this processing only on the legal basis of your consent;

– You are opposed to the treatment;

– We have processed your personal data unlawfully;

– In the event that the data we have are incomplete, inaccurate or obsolete;

– We must delete your personal data in order to comply with a legal obligation (under Union law or the law of the Member State) to which we are subject.

6.7. Right to limitation of processing.

In some cases, you may also ask us to limit the processing of your personal data.

The situations in which you may ask us to limit the processing of your personal data.

– If you dispute the accuracy of a personal data for as long as we can verify the accuracy of that data;

– If we unlawfully process your personal data and you prefer that we limit this processing rather than the deletion of your personal data.

Obviously, as soon as the processing restriction no longer applies, we will inform you.

6.8. How to exercise your rights?

If you wish to exercise one of the rights described above, you must send your written request (including in electronic format), dated and signed, to CTR-Media with proof of your identity. You will receive a reply as soon as possible, but no later than one month. After this period, you can consider that the request has been rejected. In the event of a request refused, the President of the Court of First Instance shall hear any request relating to the right to communicate, rectify, delete or limit personal data.

How long is your personal data kept?

The length of time your personal data is kept varies according to the type of data and regulations. In any case, they shall never be kept beyond the time necessary for the processing for which they were collected.

In the context of the execution of a contract, we do not store your personal data for more than 10 years after the end of the contract.

If you are registered on the website and/or the application, we keep your personal data for the duration of your registration in order to offer you the best possible service.

If you have unsubscribed from the website and/or the application, in this case we will keep your data for six months from the date of your unsubscription. Then they will be destroyed.

At the end of the storage period, CTR-Media makes every effort to ensure that your personal data has been deleted.

What security measures does CTR-Media take?

CTR-Media implements appropriate technical and organisational measures to guarantee a level of security of the processing and data collected with regard to the risks presented by the processing and the nature of the data to be protected adapted to the risk.

CTR-Media always uses encryption technologies that are recognized as the industry standards within the IT sector. In any event, CTR-Media puts in place appropriate security measures to protect your personal data against loss, theft, misuse or alteration of the information received, disclosure or unauthorised use.

In the unlikely and unfortunate event that your personal data under our control are compromised due to an information security breach, we will act promptly to identify the cause of the breach and take appropriate remedial measures.

If necessary, in accordance with applicable law, we will inform you of this incident.

Do you have a question or want to make a complaint?

9.1.

If you wish to respond regarding any of the practices described in this Policy, you may contact CTR-Media at the addresses specified in section 10 « How to contact CTR-Media ? ».

9.2.

You can lodge a complaint with the Data Protection Authority at the following address:

Autorité de Protection des Données
Rue de la Presse, 35
1000 Bruxelles
Tel. +32 2 274 48 00
Fax. +32 2 274 48 35
contact@apd-gba.be

9.3.

The law also allows you to bring an action to the court of first instance where you are domiciled. For more information on complaints and possible remedies, CTR-Media recommends that you consult the following Data Protection Authority link: https://www.autoriteprotectiondonnees.be.

How to contact CTR-Media

For any questions/requests/complaints, you can contact CTR-Media via:
privacy@gocar.be
+32(0)2 730 33 11
CTR-MEDIA S.A., Rue Royale, 100, 1000 Bruxelles – Belgique.

What happens if this Policy changes?

The contents of this Policy may be modified in accordance with the rules contained in Article 1 of the General Conditions of this Website.
The present version of the Charter is dated on 14/05/2019.
At the same date we updated our Terms & Conditions .

Applicable law and competent jurisdiction

This Policy is governed by Belgian law.
Any dispute relating to the interpretation or execution of this Policy will be subject to Belgian law and will come under the exclusive jurisdiction of the French-speaking courts of the judicial district of Brussels.