Privacy Policy
Back to home

Privacy Policy

Protection of your personal data (GDPR)

GDPR compliance
Reading time: ~7 min

Last updated: April 16, 2025

1. Introduction

The protection of your personal data is at the heart of our concerns. Incarline is committed to complying with the applicable regulations on personal data processing, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Data Controller

The data controller is the company Incarline, whose registered office is located at Espace commercial Le Méridien, Route de Montpellier, 34700 Lodève.

For any questions regarding data protection, you can contact our Data Protection Officer (DPO) at the following address: contact@incarline.com.

3. Data Collected and Purposes

We only collect data strictly necessary for our activity. Here are the details of the processing carried out:

Type of Data Purpose (Why?) Legal Basis
Identity & Contact
(Name, First Name, Email, Phone, Address)
Order management, invoicing, delivery, customer relationship, workshop appointment scheduling. Contract execution (Art. 6.1.b GDPR)
Vehicle Information
(Registration, VIN, Model)
Technical diagnosis, ordering suitable parts, remapping. Contract execution (Art. 6.1.b GDPR)
Connection Data
(Logs, IP, Technical Cookies)
Site security, session maintenance, shopping cart. Legitimate interest (Art. 6.1.f GDPR)
Payment
(Transaction, History)
Payment and accounting management. (No banking data is stored in clear by Incarline). Legal obligation (Art. 6.1.c GDPR)

4. Data Recipients

Your data is primarily intended for our internal services (Workshop, Training, Administrative). However, for the proper execution of the services, we may need to transmit them to trusted third parties:

  • Carriers: For the delivery of your orders (DHL, TNT...).
  • Payment Service Providers: For securing banking transactions.
  • Accounting: For our tax obligations.

We do not sell, rent, or transfer any of your personal data to third parties for commercial purposes.

5. Retention Period

We retain your data indefinitely as long as your customer account remains active or as required by legal obligations (warranty, traceability of technical interventions on vehicles, invoicing). As an automotive technical service provider, the history of interventions is permanently retained to ensure the follow-up and safety of the vehicles processed.

  • Customer & Intervention Records: Unlimited retention for technical follow-up and warranty.
  • Invoicing: Minimum 10 years (Accounting obligation).

6. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction (SSL/TLS encryption, restricted access, secure backups).

7. Your Rights

In accordance with the regulations, you have the following rights regarding your data:

  • Right of access: Know what data we hold about you.
  • Right to rectification: Correct inaccurate data.
  • Right to erasure: Request the deletion of your data (unless contrary legal obligation).
  • Right to data portability: Retrieve your data in a structured format.
  • Right to object: Object to a specific processing.

To exercise these rights, contact us by email at contact@incarline.com or by mail. In case of unsatisfactory response, you have the right to lodge a complaint with the CNIL (www.cnil.fr).

Would you like to exercise your rights over your personal data?

Contact the DPO

Incarline is committed to protecting the confidentiality of your personal data.