Privacy policy
This policy explains what data we collect, why, how long we keep it and how to exercise your rights.
Processing of your personal data
Data controller
The controller is Nourridine LAZLA, a French sole trader, SIREN 503 183 295, established at 6 rue d’Aigremont, 57130 Ars-sur-Moselle, France. For data protection questions or to exercise your rights: contact@theone-auto.lu.
Data collected
We collect the data you provide voluntarily: identity, contact details, postcode, vehicle information, photographs and documents you upload, and the content of your messages.
We also collect limited technical data while you browse: IP address, browser type and pages viewed. Analytics data is collected only after you consent.
Purposes and legal bases
Handling your valuation, contact or appointment request: steps taken at your request prior to a contract.
Concluding and performing the sale of the vehicle: performance of a contract.
Meeting our accounting, tax and anti-money-laundering obligations: legal obligation.
Improving the site and measuring audience: consent.
Sending you commercial information: consent, revocable at any time.
Recipients
Your data is accessible to authorised staff and, where relevant, to our technical processors: hosting provider, email service, customer relationship tool and vehicle transport provider. These providers act on instruction and are bound by a processing agreement.
Your data is never sold or transferred to third parties for advertising purposes.
Retention periods
Request with no follow-up: 12 months from the last contact.
Completed sale: 10 years, in line with accounting and tax obligations.
Photographs and documents supplied for a request with no follow-up: 6 months.
Cookie consent: 6 months.
Marketing prospection: 3 years from the last contact.
Transfers outside the European Union
We select providers within the European Union wherever possible. Where a transfer to a third country is necessary, it is covered by the European Commission’s standard contractual clauses or by an adequacy decision.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time.
These rights may be exercised by writing to contact@theone-auto.lu, with proof of identity where reasonable doubt exists. We respond within one month.
You may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) in France or with the supervisory authority in your country of residence.
Security
The site is served over HTTPS. Documents submitted through the forms are encrypted in transit, access is restricted to authorised staff and files are scheduled for deletion once the stated retention periods expire.
Updates
This policy may be updated. The applicable version is the one published on this page, with the date of last amendment shown at the bottom.