‍(October 2025 version)
‍
‍1. Introduction
‍This privacy and cookie statement applies to the processing of personal data via the website. www.carvendo.nl and related services from Carvendo B.V.

Carvendo B.V.
Canal Park 140
2321 JV Leiden
Chamber of Commerce: 98117319
VAT: NL868363728B01
Email: info@carvendo.nl

Carvendo attaches great importance to protecting your personal data. We process your data carefully, confidentially and in accordance with the General Data Protection Regulation (AVG) and the Telecommunications Act.

‍2. Who is responsible for data processing
‍Carvendo B.V. is the controller for the processing of personal data within the meaning of the GDPR.
When using Carvendo.nl, we can also act as processor for affiliated car companies (for example when forwarding a lead or contact request). In that case, the car company itself is responsible for further processing your data.

3. What personal data do we process
‍Depending on your use of the platform, we may process the following data:

‍a. When using the website
- IP address
- Browser data and device information
- Cookie IDs (see cookie statement below)
- Visited pages and click behavior.
‍
b. When purchasing or reserving a vehicle
- First and last name
- Address and contact details (phone number, email address)
- License plate number of vehicle to be exchanged (if applicable)
- Payment method and transaction information (if relevant to processing)

‍c. When applying for funding
- Date of birth and income information
- Data on employment status and living situation
- Credit-related information (only provided to authorized lenders)

‍d. When contacting our customer service
- Name and contact details
- Correspondence content (e.g. emails or chat conversations)

We process no special personal data (such as medical or religious information).

‍4. Purposes of data processing
‍Carvendo processes your data for the following purposes:

- The provision and technical functioning of the platform;
- Making it possible to reserve or purchase vehicles via the platform;
- Providing contact details to the relevant seller or dealer;
- Mediating financing applications under the AFM exemption for goods credit;
- Providing information and updates about your purchase or reservation;
- Improving the website and user experience;
- Executing legal obligations (e.g. tax retention obligations).

‍5. Processing principles
‍We process personal data on the basis of one or more of the following principles of the GDPR:
‍
- Consent of the person concerned (e.g. when using cookies or requesting funding);
- Execution of an agreement (e.g. purchase of a vehicle);
- Legal obligation (e.g. retention obligation);
- Legitimate interest of Carvendo or a third party (such as fraud prevention or platform security)

‍6. Provision to third parties
‍Carvendo only shares personal data with third parties when it is necessary for the execution of our services or to comply with a legal obligation.

This can include:
- The seller or dealer of the vehicle;
- The lender when applying for financing;
- IT service providers (such as hosting and maintenance partners);
- Payment or verification services.

With parties that process personal data on behalf of Carvendo, we close processor agreements in which appropriate security measures have been laid down.

‍7. Retention periods
‍Carvendo does not store personal data longer than necessary for the purpose for which it was collected, unless legal obligations require a longer storage period.
‍
Guidelines:
- Customer and transaction data: maximum 7 years (tax retention obligation)
- Contact forms and quotes: maximum 2 years
- Financing requests: maximum 1 year after processing

‍8. Data Security
‍Carvendo takes appropriate technical and organizational measures to protect personal data against loss, misuse or unauthorized access.

Examples include:
- SSL encryption of data traffic;
- Access protection to internal systems;
- Regular backups;
- Restriction of access to personal data to authorized personnel.

‍9. Your rights
‍Under the GDPR, you have the following rights:

- Right to view in your personal data;
- Right to rectification from incorrect data;
- Right to deletion (“right to be forgotten”);
- Right to restriction of processing;
- Right to portability of your data;
- Right to object against processing based on legitimate interest or for marketing purposes;
- Right to withdraw consent, without this having consequences for previously carried out processing.

You can exercise these rights by sending a request to privacy@carvendo.nl.Carvendo will respond to your request within 30 days.

‍10. Cookies and Similar Technologies

a. What are cookies?
‍Cookies are small text files that are placed on your device when you visit our website. They help us to make the website function properly and to analyse usage.

‍b. Types of cookies used by Carvendo

- Functional cookies — necessary for the operation of the website.
- Analytical cookies — help us improve the website (e.g. via Google Analytics).
- Marketing cookies — are used to make ads more relevant (only with permission).

‍c. Google Analytics
‍Carvendo uses Google Analytics and Zoho CRM with IP anonymization. No personal information is shared with Google or Zoho for advertising purposes.

‍d. Consent
‍When you first visit our website, a cookie banner is displayed that allows you to give or refuse permission for non-necessary cookies.
You can delete cookies or change your settings via the browser at any time.

‍11. Financing requests
‍When applying for funding, Carvendo acts as an intermediary under the goods credit exemption (article 2:84 paragraph 1 under the Wft).
The information provided is only shared with approved lenders to review the application. Carvendo does not provide credit itself and does not receive payments.

‍12. Minors
‍Carvendo does not direct its services to persons under the age of 18. We do not process the personal data of minors without the consent of their legal representative.

‍13. Changes to this Statement
‍Carvendo can change this privacy and cookie statement. The latest version can always be found at www.carvendo.nl/cookies/privacy.
We recommend that you check this statement regularly.

‍14. Contact
‍For questions or complaints about privacy, please contact:
‍
‍Carvendo B.V.
Email: info@carvendo.nl
Address: Kanaalpark 140, 2321 JV, Leiden

Not satisfied with the way your request was handled? Then you can file a complaint with the Personal Data Authority via www.autoriteitpersoonsgegevens.nl.