Citroën Privacy Statement


This Privacy Statement sets out all the information that we are required, by UK Data Protection laws, to provide to you about how Citroën UK Limited (hereinafter referred to as “Citroën”, “we” or “us”) will process your personal data.

This version of our Privacy Policy is effective from 30th May 2018.

1. What purposes does Citroën process your personal data for and what is the legal justification for this processing?



1.The purposes for which we collect and process personal data are:
- To fulfil your order, deliver or service your vehicle.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary to enable us to perform our contractual commitments to you.

2.The purposes for which we collect and process personal data are:
- To book any test drive or provide any brochure you request, provide a part exchange valuation or to respond to any query you might have.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary in our legitimate interests to serve our customers properly.

3.The purposes for which we collect and process personal data are:
- To provide, manage and respond to any requests you have made to us.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary in our legitimate interests to ensure that we serve our customers properly.

4.The purposes for which we collect and process personal data are:
- To help us identify you when you contact us.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary in our legitimate interest to ensure that we serve our customers properly and provide you with a personalised service.

5.The purposes for which we collect and process personal data are:
- To manage safety recalls and quality campaigns.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary to do this in order to comply with legal requirements.

6.The purposes for which we collect and process personal data are:
- To provide you with the most user-friendly online navigation experience.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary in our legitimate interest to improve our websites and provide you with the best possible experience when you visit our websites.

7.The purposes for which we collect and process personal data are:
- For general administration, reporting, audit and analysis purposes and to manage our relationship with you

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary in our legitimate interests and to ensure the effective management of our business.

8.The purposes for which we collect and process personal data are:
- For market research purposes, customer satisfiaction surveys and to carry our mystery shopping exercises. This helps us improve the quality of our products and services we provide.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary in our legitimate interest to manage our business effectively and to improve our offering to you.

9.The purposes for which we collect and process personal data are:
- To market to you and, where appropriate, to invite you to any events that we might organise.

We are lawfully permitted to use your personal data for this purpose because:
- You have consented for us to contact you for these purposes. We will not contact you for these purposes unless you have consented.

10.The purposes for which we collect and process personal data are:
- To help us detect and prevent fraud and money laundering and to recover any debts owed to us.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary in our legitimate interests toprotect our business.

11.The purposes for which we collect and process personal data are:
- To comply with law for example if we are required by any law enforcement agency, court, regulator, government authority or other third party.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary to comply with a legal obligation.

12.The purposes for which we collect and process personal data are:
- Pass on to any third party that purchases, or to which we transfer, all or substantially all of our assets or business. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Policy.

We are lawfully permitted to use your personal data for this purpose because:
- This is necessary in our legitimate interests in order to manage our business.

13.The purposes for which we collect and process personal data are:
- To carry out analysis and customer profiling. We may combine and analyse your personal information to help us develop and improve our products and services, understand our customers better; and to manage and improve our relationship with you. This could include, for example, informing our distribution strategy, evaluating the effectiveness of our marketing and customer service, conducting market analysis and identifying products or services which may be of interest to you.

We are lawfully permitted to use your personal data for this purpose because:
- It is necessary in our legitimate interests to ensure that we personalise the service we provide to you and interact with you in the way that suits you best.



2. Who do we share your personal data with?



The personal data we process will be shared by Citroën on a need to know basis to a restricted number of third parties, depending on the purpose of the processing, as follows:

1.Type of third party:
- Third parties who provide our Contact Centre services.

Reason for sharing:
- To answer general queries and action brochure & test drive requests.

2.Type of third party:
- The Dealer Network of CUK

Reason for sharing:
-To organise test drives, follow-up brochure requests, part exchange valuations and answer sales enquiries or queries about vehicle orders, servicing & maintenance.

3.Type of third party:
- PSA Financial Services.

Reason for sharing:
- For any questions about your existing finance agreement.

4.Type of third party:
- Marketing & Advertising Agencies.

Reason for sharing:
- To enable them to create our advertising campaigns, emails, newsletters, letters, brochures & social media posts.

5.Type of third party:
- Print & Fulfilment Partners.

Reason for sharing:
- To enable them to send material such as letters and brochures.

6.Type of third party:
- Data Management Partners.

Reason for sharing:
- To securely manage data.

7.Type of third party:

- Media Partners (such as Google, Amazon, Facebook and Sky).
Reason for sharing:
- To advertise our products and services.

8.Type of third party:
- Technology Partners and IT service providers.

Reason for sharing:
- To manage services on our websites, for example Part Exchange Valuation And to help us maintain our IT systems.

9.Type of third party:
- Analysis Partners.

Reason for sharing:
- Analyse how our websites are navigated how effective our advertising campaigns are and which products and services are of most interest.

10.Type of third party:
- Market Research Partners

Reason for sharing:
- To research how you use your vehicle, what you like and what you dislike and what we need to do in order to increase your satisfaction and improve our products and services going forward.

11.Type of third party:
- Credit Card Payment Processors

Reason for sharing:
- To securely process credit card payments.

12.Type of third party:
- Driver & Vehicle Licencing Agency (DVLA)

Reason for sharing:
- Organisation that keeps a register of licenced vehicles in the UK.




3. Will your personal data be transferred outside the EU?



We may transfer your Information to a country outside the European Economic Area ("EEA"), provided that the country to which the personal data are transferred ensures an adequate level of protection for your rights and freedoms. If this country does not offer the same level of data protection as the European and local data protection legislation, Groupe PSA will take adequate measures to ensure that the collected personal data is processed in accordance with the applicable legislation relating to data protection. Personal data we hold may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. That staff maybe engaged in, among other things, the fulfilment of contracts with you, the processing of payment details and the provision of support services. By submitting Information to us, you agree to this transfer, storage and processing.




4. How long do we keep your personal data for?



of the length of time we will keep your personal data for will depend on the purpose we are processing it for. However, in deciding how long we need to keep it for, we will apply the following criteria: