Privacy Policy

1. Introduction

ANDAM Cars (“we,” “us,” or “our”) operates the website www.andamcars.com (the “Website”). We are committed to protecting the privacy and security of the personal data of visitors, customers, and prospective clients who interact with our Website and services.
This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information when you visit our Website, submit inquiries, request information about our vehicles, subscribe to communications, or otherwise engage with us. By using the Website, you acknowledge that you have read and understood this Policy.
This Policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, and other applicable data protection laws.

2. Data Controller

The data controller responsible for the processing of your personal data is:

ANDAM Cars

For the purposes of the GDPR, the controller is the entity that determines the purposes and means of the processing of personal data collected through this Website.

3. Information We Collect

We may collect the following categories of personal data:

3.1 Information you provide directly

Identity and contact data: full name, email address, telephone number, postal address, country of residence.
Inquiry and communication data: messages, vehicle interest details, preferred models (e.g., ANDAM Dragon, McAllister EPT, Sutton ESU or other configurations), appointment requests, and correspondence with our team.
Newsletter and marketing preferences: email address and communication preferences when you subscribe.
Account or registration data (if applicable): username, password (stored in hashed form), and profile information.

3.2 Information collected automatically

Technical and usage data: IP address, browser type and version, device type, operating system, referring URLs, pages visited, time and date of visits, clickstream data, and approximate location derived from IP address.
Cookie and tracking data: information collected via cookies, pixels, and similar technologies (see Section 8)

3.3 Information from third parties

We may receive limited information from analytics providers, advertising partners, or social media platforms if you interact with our content on those platforms, subject to their own privacy policies.
We do not intentionally collect special categories of personal data (e.g., racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) through the Website, unless you voluntarily provide such information in free-text fields

4. How We Use Your Information

We process your personal data for the following purposes:

5. Legal Bases for Processing (GDPR)

We rely on the following legal bases under Article 6 GDPR:
Consent (Art. 6(1)(a)): for marketing communications, non-essential cookies, and certain optional data processing.
Contractual necessity (Art. 6(1)(b)): to take steps at your request prior to entering into a contract (e.g., responding to vehicle inquiries) or to perform a contract.
Legitimate interests (Art. 6(1)(f)): for Website security, analytics, improving our services, and responding to general inquiries, provided these interests are not overridden by your rights and freedoms.
Legal obligation (Art. 6(1)(c)): where processing is necessary to comply with applicable laws.

6. Sharing and Disclosure of Personal Data

We do not sell your personal data. We may share your information only in the following circumstances:
Service providers: trusted third-party processors who assist us with website hosting, analytics, email delivery, customer relationship management, and IT security, under written data processing agreements.
Affiliates and group companies: within the ANDAM / Side Equity Ventures group where necessary for internal administration or to respond to your requests.
Legal and regulatory: when required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of others.
Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and data protection safeguards.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including:
You may request further information about the safeguards applied to international transfers by contacting us at privacy@andamcars.com.

8. Cookies and Similar Technologies

We use cookies and similar technologies on the Website to enhance functionality, analyze traffic, and (where consented) support marketing. Cookies are small text files placed on your device.

Types of cookies we may use:

Strictly necessary cookies: required for the Website to function (e.g., security, session management).
Analytics / performance cookies: help us understand how visitors use the Website (e.g., Google Analytics or similar tools).
Functional cookies: remember preferences and improve user experience
Marketing / targeting cookies: used to deliver relevant advertising, subject to your consent.
You can manage cookie preferences through your browser settings or any cookie consent tool we provide on the Website. Blocking certain cookies may affect Website functionality.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typical retention periods include:
Inquiry and correspondence data: up to 3 years after the last interaction, unless a longer period is required for ongoing discussions or legal claims.
Marketing contact data: until you withdraw consent or unsubscribe, plus a short period to process the withdrawal.
Technical logs and analytics data: typically 12–26 months, or as configured in the relevant tools. When data is no longer required, we will securely delete or anonymize it.

10. Your Rights Under the GDPR

If you are located in the European Economic Area (or another jurisdiction that grants similar rights), you have the following rights regarding your personal data:
Right of access – to obtain confirmation whether we process your data and to receive a copy.
Right to rectification – to have inaccurate or incomplete data corrected.
Right to erasure (“right to be forgotten”) – to request deletion of your data in certain circumstances.
Right to restriction of processing – to request that we limit how we use your data
Right to data portability – to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to object – to object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent – at any time, without affecting the lawfulness of processing based on consent before withdrawal.
Right to lodge a complaint – with a supervisory authority. In Belgium, this is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) – www.dataprotectionauthority.be .
To exercise any of these rights, please contact us at privacy@andamcars.com. We will respond within the timeframes required by applicable law (generally one month under the GDPR).

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (HTTPS/TLS), access controls, secure hosting environments, and staff awareness. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Children’s Privacy

The Website is not directed at individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately so that we can delete it.

13. Third-Party Websites and Services

The Website may contain links to third-party websites, social media platforms, or services that are not operated by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Last Updated” date at the top of this Policy indicates when it was last revised. Material changes will be posted on this page and, where appropriate, notified to you by email or other means. We encourage you to review this Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

ANDAM Cars – Privacy Team

For formal data subject requests under the GDPR, please include sufficient information to allow us to verify your identity and locate the relevant data.
Scroll to Top