Privacy Policy
1. Introduction
ANDAM Cars (“we,” “us,” or “our”) operates the website www.andamcars.com (the “Website”). We are
committed to protecting the privacy and security of the personal data of visitors, customers, and prospective
clients who interact with our Website and services.
This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information
when you visit our Website, submit inquiries, request information about our vehicles, subscribe to
communications, or otherwise engage with us. By using the Website, you acknowledge that you have read and
understood this Policy.
This Policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the
Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data,
and other applicable data protection laws.
2. Data Controller
The data controller responsible for the processing of your personal data is:
ANDAM Cars
- Operated under the ANDAM brand / Side Equity Ventures group of companies
- Website: www.andamcars.com
- Privacy inquiries: privacy@andamcars.com
For the purposes of the GDPR, the controller is the entity that determines the purposes and means of the
processing of personal data collected through this Website.
3. Information We Collect
We may collect the following categories of personal data:
3.1 Information you provide directly
Identity and contact data: full name, email address, telephone number, postal address, country of
residence.
Inquiry and communication data: messages, vehicle interest details, preferred models (e.g., ANDAM
Dragon, McAllister EPT, Sutton ESU or other configurations), appointment requests, and correspondence
with our team.
Newsletter and marketing preferences: email address and communication preferences when you subscribe.
Account or registration data (if applicable): username, password (stored in hashed form), and profile
information.
3.2 Information collected automatically
Technical and usage data: IP address, browser type and version, device type, operating system, referring
URLs, pages visited, time and date of visits, clickstream data, and approximate location derived from IP address.
Cookie and tracking data: information collected via cookies, pixels, and similar technologies (see Section
8)
3.3 Information from third parties
We may receive limited information from analytics providers, advertising partners, or social media platforms
if you interact with our content on those platforms, subject to their own privacy policies.
We do not intentionally collect special categories of personal data (e.g., racial or ethnic origin, political opinions,
religious beliefs, health data, or biometric data) through the Website, unless you voluntarily provide such
information in free-text fields
4. How We Use Your Information
We process your personal data for the following purposes:
- To respond to your inquiries, vehicle configuration requests, test-drive or viewing appointment requests, and other communications.
- To provide information about our vehicles, specifications, availability, events, and services.
- To send newsletters, marketing communications, and promotional materials where you have consented or where permitted by law.
- To operate, maintain, secure, and improve the Website and user experience (including analytics and troubleshooting).
- To detect, prevent, and address fraud, security issues, or technical problems.
- To comply with legal obligations and enforce our terms and policies.
- For internal record-keeping, statistical analysis, and business development purposes in aggregated or anonymized form where possible.
5. Legal Bases for Processing (GDPR)
We rely on the following legal bases under Article 6 GDPR:
Consent (Art. 6(1)(a)): for marketing communications, non-essential cookies, and certain optional data processing.
Contractual necessity (Art. 6(1)(b)): to take steps at your request prior to entering into a contract (e.g.,
responding to vehicle inquiries) or to perform a contract.
Legitimate interests (Art. 6(1)(f)): for Website security, analytics, improving our services, and responding to general inquiries, provided these interests are not overridden by your rights and freedoms.
Legal obligation (Art. 6(1)(c)): where processing is necessary to comply with applicable laws.
6. Sharing and Disclosure of Personal Data
We do not sell your personal data. We may share your information only in the following circumstances:
Service providers: trusted third-party processors who assist us with website hosting, analytics, email delivery, customer relationship management, and IT security, under written data processing agreements.
Affiliates and group companies: within the ANDAM / Side Equity Ventures group where necessary for
internal administration or to respond to your requests.
Legal and regulatory: when required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of others.
Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, subject to
appropriate confidentiality and data protection safeguards.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area
(EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including:
- Adequacy decisions of the European Commission;
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- Other lawful transfer mechanisms permitted under the GDPR.
You may request further information about the safeguards applied to international transfers by contacting us at
privacy@andamcars.com.
8. Cookies and Similar Technologies
We use cookies and similar technologies on the Website to enhance functionality, analyze traffic, and (where
consented) support marketing. Cookies are small text files placed on your device.
Types of cookies we may use:
Strictly necessary cookies: required for the Website to function (e.g., security, session management).
Analytics / performance cookies: help us understand how visitors use the Website (e.g., Google Analytics or similar tools).
Functional cookies: remember preferences and improve user experience
Marketing / targeting cookies: used to deliver relevant advertising, subject to your consent.
You can manage cookie preferences through your browser settings or any cookie consent tool we provide on
the Website. Blocking certain cookies may affect Website functionality.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including
to satisfy legal, accounting, or reporting requirements. Typical retention periods include:
Inquiry and correspondence data: up to 3 years after the last interaction, unless a longer period is required
for ongoing discussions or legal claims.
Marketing contact data: until you withdraw consent or unsubscribe, plus a short period to process the
withdrawal.
Technical logs and analytics data: typically 12–26 months, or as configured in the relevant tools. When data is no longer required, we will securely delete or anonymize it.
10. Your Rights Under the GDPR
If you are located in the European Economic Area (or another jurisdiction that grants similar rights), you have
the following rights regarding your personal data:
Right of access – to obtain confirmation whether we process your data and to receive a copy.
Right to rectification – to have inaccurate or incomplete data corrected.
Right to erasure (“right to be forgotten”) – to request deletion of your data in certain circumstances.
Right to restriction of processing – to request that we limit how we use your data
Right to data portability – to receive your data in a structured, commonly used, machine-readable format
and to transmit it to another controller.
Right to object – to object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent – at any time, without affecting the lawfulness of processing based on consent
before withdrawal.
Right to lodge a complaint – with a supervisory authority. In Belgium, this is the Data Protection Authority
(Autorité de protection des données / Gegevensbeschermingsautoriteit) – www.dataprotectionauthority.be
.
To exercise any of these rights, please contact us at privacy@andamcars.com. We will respond within the
timeframes required by applicable law (generally one month under the GDPR).
11. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized
access, alteration, disclosure, or destruction. These measures include encryption in transit (HTTPS/TLS),
access controls, secure hosting environments, and staff awareness. However, no method of transmission over
the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
12. Children’s Privacy
The Website is not directed at individuals under the age of 16 (or the applicable age of digital consent in your
jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently
collected such data, please contact us immediately so that we can delete it.
13. Third-Party Websites and Services
The Website may contain links to third-party websites, social media platforms, or services that are not operated
by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies
of any third-party sites you visit.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal
requirements, or other factors. The “Last Updated” date at the top of this Policy indicates when it was last
revised. Material changes will be posted on this page and, where appropriate, notified to you by email or other
means. We encourage you to review this Policy periodically.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices,
please contact us:
ANDAM Cars – Privacy Team
- Email: privacy@andamcars.com
- Website: www.andamcars.com
For formal data subject requests under the GDPR, please include sufficient information to allow us to verify your
identity and locate the relevant data.