{"id":131229,"date":"2026-04-08T19:51:47","date_gmt":"2026-04-08T16:51:47","guid":{"rendered":"https:\/\/caar.fi\/?page_id=131229"},"modified":"2026-06-26T07:29:44","modified_gmt":"2026-06-26T04:29:44","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/caar.fi\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"131229\" class=\"elementor elementor-131229 elementor-131228\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-0dc03d1 elementor-section-height-min-height elementor-section-items-stretch elementor-section-boxed elementor-section-height-default\" data-id=\"0dc03d1\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1e8ad72\" data-id=\"1e8ad72\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div data-dce-title-color=\"#09FE7A\" class=\"elementor-element elementor-element-f525684 elementor-widget elementor-widget-heading\" data-id=\"f525684\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Privacy Policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ddbfa1a elementor-widget-tablet__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"ddbfa1a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>This privacy policy explains how CAAR Oy (hereinafter the &#8220;Company&#8221;) processes<br \/>your personal data in connection with our website, our services and our customer relationship.<br \/>We comply with the EU General Data Protection Regulation (GDPR) currently in force, as well as applicable<br \/>national legislation.<\/p>\n<section>\n<h2>1. Data controller<\/h2>\n<p><strong>CAAR Oy<\/strong><br \/>Business ID: 3574361-3<br \/>Address: Vetokuja 2, 01610 Vantaa<br \/>Email: <a href=\"mailto:tietosuoja@caar.fi\">tietosuoja@caar.fi<\/a><\/p>\n<p>CAAR Oy is responsible for the processing of your personal data and ensures that the processing of data is<br \/>lawful, secure and transparent.<\/p>\n<\/section>\n<section>\n<h2>2. Person responsible for data protection<\/h2>\n<p>Our company has a designated contact person responsible for data protection, whose task is to oversee<br \/>the processing of personal data and ensure compliance with the GDPR.<\/p>\n<p>Contact details:<br \/><a href=\"mailto:tietosuoja@caar.fi\">tietosuoja@caar.fi<\/a><\/p>\n<\/section>\n<section>\n<h2>3. Processing of personal data<\/h2>\n<p>We process your personal data for the following purposes:<\/p>\n<ul>\n<li><strong>Customer relationship management:<\/strong> sales, purchases, test drives, financing, insurance and additional services.<br \/><strong>Legal basis:<\/strong> contract and statutory obligations.<\/li>\n<li><strong>Marketing and communications:<\/strong> electronic direct marketing, campaigns, customer surveys and newsletters.<br \/><strong>Legal basis:<\/strong> consent or legitimate interest.<\/li>\n<li><strong>Website and service analytics:<\/strong> monitoring site usage, cookie management, technical optimisation and security.<br \/><strong>Legal basis:<\/strong> legitimate interest and\/or consent to cookies.<\/li>\n<li><strong>Security and fraud prevention:<\/strong> monitoring of premises and services, prevention of fraud.<br \/><strong>Legal basis:<\/strong> legitimate interest and statutory obligation.<\/li>\n<li><strong>Compliance with laws and regulatory obligations:<\/strong> accounting, records management, Traficom notifications.<br \/><strong>Legal basis:<\/strong> statutory obligation.<\/li>\n<\/ul>\n<\/section>\n<section>\n<h2>4. Personal data processed<\/h2>\n<p>The personal data varies depending on the situation, but may include:<\/p>\n<ul>\n<li><strong>Customers and leads:<\/strong> name, address, email, phone, driving licence details,<br \/>vehicle details, company details, financing and insurance details, communications and customer feedback.<\/li>\n<li><strong>Website visitors:<\/strong> IP address, device and browser information, cookies and anonymised usage data.<\/li>\n<li><strong>Service users:<\/strong> messages from chat services, WhatsApp contacts<br \/>(only if the customer uses the application) and other information they provide.<\/li>\n<li><strong>Other individuals:<\/strong> employees, drivers or service providers in situations related to their duties.<\/li>\n<\/ul>\n<\/section>\n<section>\n<h2>5. Retention period of personal data<\/h2>\n<p>The retention period is determined by the purpose of the processing and the requirements of the law.<br \/>Examples:<\/p>\n<table border=\"1\" cellspacing=\"0\" cellpadding=\"8\">\n<thead>\n<tr>\n<th>Data<\/th>\n<th>Retention period<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Potential customer \/ lead<\/td>\n<td>6 months<\/td>\n<\/tr>\n<tr>\n<td>Offers and negotiations<\/td>\n<td>12 months if no purchase is made<\/td>\n<\/tr>\n<tr>\n<td>Test drive permits<\/td>\n<td>12 months<\/td>\n<\/tr>\n<tr>\n<td>Contract customers<\/td>\n<td>10 years<\/td>\n<\/tr>\n<tr>\n<td>Marketing consents<\/td>\n<td>Until consent is withdrawn<\/td>\n<\/tr>\n<tr>\n<td>Cookie analytics<\/td>\n<td>Anonymised storage on an ongoing basis, identifying data max. 24 months<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/section>\n<section>\n<h2>6. Sources of data<\/h2>\n<p>Personal data is obtained:<\/p>\n<ul>\n<li>From the customers themselves (forms, email, calls, chat, WhatsApp).<\/li>\n<li>From public registers and authorities (e.g. Traficom, the Population Information System,<br \/>the credit information register).<\/li>\n<li>From service providers, such as analytics and marketing partners.<\/li>\n<li>From data collected via website tracking tools and cookies.<\/li>\n<\/ul>\n<\/section>\n<section>\n<h2>7. Data security<\/h2>\n<p>To protect personal data we use appropriate organisational and technical measures,<br \/>such as:<\/p>\n<ul>\n<li>Firewalls and encryption<\/li>\n<li>Managed access rights and access control<\/li>\n<li>Staff training and confidentiality obligations<\/li>\n<li>Regular data backups and deletion as needed<\/li>\n<\/ul>\n<p>As the data controller, we ensure that access rights to servers and stored data<br \/>are handled confidentially.<\/p>\n<\/section>\n<section>\n<h2>8. Recipients of personal data<\/h2>\n<p>Data may be disclosed to:<\/p>\n<ul>\n<li><strong>Authorities:<\/strong> Traficom and other authorities required by law.<\/li>\n<li><strong>Financing and insurance companies:<\/strong> with the customer&#8217;s consent.<\/li>\n<li><strong>Service providers and subcontractors:<\/strong> IT, analytics, marketing and cloud services,<br \/>which act only as processors in accordance with the contract.<\/li>\n<li><strong>Business arrangements:<\/strong> the sale, merger or other restructuring of the company, always in accordance with the GDPR.<\/li>\n<\/ul>\n<p>As a rule, data is not transferred outside the EU\/EEA, but if a transfer does take place,<br \/>adequate data protection is ensured, for example through standard contractual clauses or the customer&#8217;s<br \/>consent.<\/p>\n<\/section>\n<section>\n<h2>9. Rights of the data subject<\/h2>\n<p>The data subject has the right to:<\/p>\n<ul>\n<li>Access and obtain a copy of their own data<\/li>\n<li>Request the rectification or completion of their data<\/li>\n<li>Request the erasure of their data (the &#8220;right to be forgotten&#8221;)<\/li>\n<li>Restrict processing or object to direct marketing<\/li>\n<li>Transfer the data to another controller<\/li>\n<li>Withdraw any consent given at any time<\/li>\n<li>Lodge a complaint with the Office of the Data Protection Ombudsman<br \/>(<a href=\"https:\/\/tietosuoja.fi\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/tietosuoja.fi<\/a>)<\/li>\n<li>Requests can be sent by email to<br \/><a href=\"mailto:tietosuoja@caar.fi\">tietosuoja@caar.fi<\/a><br \/>or by post to the company&#8217;s address at Vetokuja 2, 01610 Vantaa<\/li>\n<\/ul>\n<\/section>\n<section>\n<h2>10. Cookies and tracking<\/h2>\n<p>The site uses cookies and tracking technology for analytics, direct marketing and<br \/>improving the operation of the site. Users can manage their consents through the cookie policy.<\/p>\n<\/section>\n<section>\n<h2>11. Changes to the privacy policy<\/h2>\n<p>We reserve the right to update this privacy policy in the event of changes in legislation or<br \/>in our practices. The up-to-date version can always be found on our website.<\/p>\n<\/section>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy This privacy policy explains how CAAR Oy (hereinafter the &#8220;Company&#8221;) processesyour personal data in connection with our website, our services and our customer relationship.We comply with the EU General Data Protection Regulation (GDPR) currently in force, as well as applicablenational legislation. 1. Data controller CAAR OyBusiness ID: 3574361-3Address: Vetokuja 2, 01610 VantaaEmail: tietosuoja@caar.fi [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":115804,"parent":0,"menu_order":5,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-131229","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/pages\/131229","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/comments?post=131229"}],"version-history":[{"count":4,"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/pages\/131229\/revisions"}],"predecessor-version":[{"id":147193,"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/pages\/131229\/revisions\/147193"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/media\/115804"}],"wp:attachment":[{"href":"https:\/\/caar.fi\/en\/wp-json\/wp\/v2\/media?parent=131229"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}