Privacy policy

Introduction

This policy explains how DELIVERY CAR processes the personal data collected on the deliverycar.com website and through applications to its job, internship and work-study offers, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties (loi Informatique et Libertés).

Data controller

The data controller is DELIVERY CAR, a French simplified joint-stock company registered under SIREN number 843 279 969. Its full contact details are given in the legal notice.

For any question about your personal data, you can write to rgpd@deliverycar.com.

DELIVERY CAR has appointed a data protection officer (Dipeeo), who can be reached at the same address.

Data collected

Contact form. When you write to us, we collect:

• your first name, last name, email address and phone number;
• your profile: business or individual;
• if you are a business: the name of your company and its profile (dealership, short-term rental company, long-term leasing company, fleet manager, manufacturer, garage or body shop, other);
• if you are an individual: the departure and arrival locations, the requested date and, if you provide it, the vehicle registration plate;
• the message you choose to send us.

Application to join the network of independent service providers. When you submit your application, we collect:

• your first name, last name, email address and phone number;
• your country and département of activity, your answers to the profile questions (licence, insurance, status, experience) and the description of your activity;
• the supporting documents you choose to attach (optional, up to 5 files in PDF, JPG or PNG format, 5 MB maximum each), for example your driving licence, your professional liability insurance certificate or proof of your self-employed status.

Documents are uploaded to a private storage space, accessible only through temporary links. Please only send the documents needed to review your application.

Technical data. When a form is submitted, technical data (IP address, browser and device characteristics, interaction signals) are analysed by our hosting provider’s security service in order to distinguish human visitors from bots. The hosting provider also keeps technical logs required for the operation and security of the website.

Audience measurement and website improvement. Only if you accept it, we measure the website’s traffic and performance (pages viewed, referring website, device and browser type, country, loading times) and analyse browsing (clicks, scrolling, form steps, session recordings). What you type into the fields is never recorded.

Mandatory form fields are indicated. Without this information, we cannot process your request.

Purposes and legal bases

• Answering your requests for information, quotes or demos: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and the legitimate interest of DELIVERY CAR in responding to the requests it receives (Article 6(1)(f)).
• Reviewing your application to join the network of independent service providers and getting back to you: steps taken at your request prior to entering into a contract (Article 6(1)(b)).
• Following up the business relationship with businesses and prospects: the legitimate interest of DELIVERY CAR in developing its business (Article 6(1)(f)).
• Securing the website and forms against bots, spam and fraud: the legitimate interest of DELIVERY CAR in protecting its services (Article 6(1)(f)).
• Measuring audience and performance of the website: your consent (Article 6(1)(a) GDPR and Article 82 of the loi Informatique et Libertés), which you can withdraw at any time.
• Complying with our legal obligations and, where applicable, establishing, exercising or defending our rights: legal obligation (Article 6(1)(c)) and legitimate interest (Article 6(1)(f)).

Your data are not subject to any automated decision-making or profiling, and are never sold.

Recipients and processors

Your data are intended solely for the authorised teams of DELIVERY CAR (sales, operations and partner teams), within the limits of their duties. They are also processed on our behalf and according to our instructions by technical providers bound by confidentiality and security obligations, for:

• website hosting and security;
• secure storage of form data and documents;
• sending e-mails and internal notifications to our teams;
• audience measurement, only if you accept it.

Finally, your data may be disclosed to administrative or judicial authorities where required by law.

Transfers outside the European Union

Some of our technical providers are established outside the European Union, notably in the United States. These transfers are governed by an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework for certified companies, or failing that by the standard contractual clauses adopted by the European Commission. You can obtain information about these safeguards by writing to rgpd@deliverycar.com.

Retention periods

• Contact requests and prospects: 3 years from your last contact.
• If a contractual relationship begins: for its entire duration, then archived for the applicable statutory limitation periods.
• Unsuccessful applications, including documents: 2 years from the last contact.
• Successful applications: for the entire duration of the collaboration, then archived for the applicable statutory limitation periods.
• Audience measurement: 13 months maximum.
• Cookie choices: 6 months, after which your consent is requested again.
• Technical logs and security data: a limited period, strictly necessary for the security of the website.

Your rights

You have the following rights over your data at any time:

• right of access and right to rectification;
• right to erasure and right to restriction of processing;
• right to object, in particular to direct marketing, without having to give a reason;
• right to data portability;
• right to withdraw your consent at any time, without affecting processing already carried out;
• right to set instructions regarding the fate of your data after your death.

To exercise these rights, write to rgpd@deliverycar.com. Proof of identity may be requested in case of reasonable doubt. We will reply within one month, which may be extended by two months for complex requests.

If you do not wish to receive telephone marketing, you can also register free of charge on the French opt-out list Bloctel.

Complaint to the CNIL

If, after contacting us, you believe that your rights have not been respected, you can lodge a complaint with the French data protection authority (Commission nationale de l’informatique et des libertés, CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.

Applications for employment, internships or work-study programmes

When you apply for one of our job offers through our recruitment tool Flatchr, through our Welcome to the Jungle page or by e-mail, we process the information you send us (identity, contact details, CV, cover letter, qualifications, experience, salary expectations where applicable) as well as our interview notes, which remain strictly professional. We never ask you for information unrelated to the position.

This data is used to review your application, organise interviews and reply to you (pre-contractual measures, Article 6(1)(b)). It may also be used to offer you other positions matching your profile during the retention period (legitimate interest, Article 6(1)(f)), which you may object to at any time.

It is accessible only to the people involved in recruitment (HR, the hiring manager, management) and to our providers within the limits of their engagement: Flatchr (recruitment software, data hosted in France) and Google Workspace (e-mail). Welcome to the Jungle applies its own terms when you apply through its platform. No recruitment decision is made solely by automated means.

If your application is not successful, your data is kept for 2 years after our last exchange and then deleted. If you are hired, the relevant information is added to your employee file. You have the rights described above, which you can exercise by writing to rgpd@deliverycar.com.

Cookies and trackers

A cookie is a small file stored on your device when you visit a website. Cookies that are necessary for the operation and security of the website are exempt from consent. Audience measurement tools are only loaded after you agree, through the banner displayed on your first visit: refusing is as easy as accepting, and refusing does not prevent you from using the website.

You can change your choices at any time by clicking Manage cookies, a link also available at the bottom of every page. You can also configure your browser to block or delete cookies.

Security

DELIVERY CAR implements appropriate technical and organisational measures to protect your data: encrypted exchanges (HTTPS), access restricted to authorised persons, private storage of documents accessible through temporary links, bot protection on forms and the selection of processors offering sufficient guarantees.

Updates to this policy

This policy may be amended to reflect changes to the website, our services or the regulations. The date of the last update appears at the top of the page. In the event of a discrepancy between language versions, the French version prevails.