Arval Deutschland GmbH arval.ltd

Privacy Policy

Last updated: 1 January 2025. This policy explains how we collect, use, and protect your personal data.

1. Controller

The controller responsible for data processing on this website is:

Arval Deutschland GmbH
Bajuwarenring 5
82041 Oberhaching, Deutschland
Telephone: +49 (0) 89 / 744 23 100
Email: support@arval.ltd

2. Scope of This Policy

This Privacy Policy applies to all personal data collected and processed by Arval Deutschland GmbH through the website arval.ltd and through direct communications with our company. It describes what data we collect, for what purposes, on what legal basis, and how we protect it.

3. Legal Basis for Processing

We process personal data only where we have a valid legal basis under the General Data Protection Regulation (GDPR). The applicable bases are:

  • Article 6(1)(a) GDPR: Consent – where you have given specific consent to processing.
  • Article 6(1)(b) GDPR: Contract – where processing is necessary to perform a contract with you or to take pre-contractual steps at your request.
  • Article 6(1)(c) GDPR: Legal obligation – where processing is required to comply with a legal obligation applicable to us.
  • Article 6(1)(f) GDPR: Legitimate interests – where processing is necessary for our legitimate interests, provided these are not overridden by your rights and interests.

4. Data Collected When Visiting Our Website

When you access our website, our web server automatically records certain technical information. This includes your IP address, date and time of access, the URL accessed, the referring URL, your browser type and version, and your operating system. This data is processed to ensure technical operation of the website, to prevent and detect misuse, and to analyse usage in aggregated form. The legal basis is Article 6(1)(f) GDPR (legitimate interests).

We do not use this data to draw conclusions about individual users. Server log data is deleted after 14 days unless required for longer retention for security purposes.

5. Contact Form and Email Inquiries

When you contact us through our contact form or by email, we collect and process the personal data you provide – typically your name, email address, phone number, and the content of your message. This data is used exclusively to respond to your inquiry. The legal basis is Article 6(1)(b) GDPR (pre-contractual communications) or Article 6(1)(a) GDPR (consent, where applicable).

Data submitted through contact forms is retained for as long as necessary to process your inquiry and for any related follow-up, typically no longer than 12 months after closure of the inquiry unless a longer retention period is required by law.

6. Cookies

Our website uses cookies. Cookies are small text files stored on your device. For detailed information about the cookies we use, their purpose, and how you can manage your preferences, please refer to our Cookie Policy. Strictly necessary cookies are placed on the basis of our legitimate interests. Non-essential cookies are placed only with your consent pursuant to Article 6(1)(a) GDPR.

7. Disclosure of Personal Data

We do not sell personal data to third parties. We may share personal data with:

  • Service providers: Third parties who assist us in operating our website and business, under data processing agreements that bind them to equivalent data protection standards.
  • Regulatory authorities: Where required by law or in response to lawful requests from public authorities.
  • Professional advisors: Legal, accounting, or other advisors where necessary, subject to professional confidentiality obligations.

Any transfer of personal data outside the European Economic Area (EEA) is carried out only where adequate safeguards are in place in accordance with Chapter V of the GDPR.

8. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Retention periods vary by data category and processing purpose. When data is no longer needed, it is securely deleted or anonymised.

9. Your Rights

Under the GDPR and German data protection law (BDSG), you have the following rights with respect to your personal data:

  • Right of access (Article 15 GDPR): The right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data.
  • Right to rectification (Article 16 GDPR): The right to have inaccurate personal data corrected.
  • Right to erasure (Article 17 GDPR): The right to have your personal data deleted under certain circumstances.
  • Right to restriction of processing (Article 18 GDPR): The right to request that we restrict the processing of your data under certain circumstances.
  • Right to data portability (Article 20 GDPR): The right to receive your personal data in a structured, commonly used format.
  • Right to object (Article 21 GDPR): The right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent (Article 7(3) GDPR): Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@arval.ltd. We will respond within one month of receiving your request.

10. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for Arval Deutschland GmbH is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Deutschland
Website: www.lda.bayern.de

11. Data Security

We implement technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are reviewed and updated regularly to reflect the current state of technology and the nature of the data processed. Communication between your browser and our website is protected by SSL/TLS encryption.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated on this page with an updated revision date. We encourage you to review this page periodically. Continued use of our website following any changes constitutes your acknowledgement of the updated policy.

13. Contact for Data Protection Matters

For all data protection-related inquiries, please contact us at:

Arval Deutschland GmbH
Bajuwarenring 5, 82041 Oberhaching, Deutschland
Email: support@arval.ltd
Telephone: +49 (0) 89 / 744 23 100