Kia Account – Privacy Notice

In this privacy notice ("Privacy Notice") we will inform you about the collection and processing of your personal data in connection with the provision of the Kia Account and your rights as a data subject.
We take your privacy very seriously and will process your personal data only in accordance with the applicable data protection and privacy laws.
Any processing of your personal data in connection with the provision of any linked services to your Kia Account is subject to a separate privacy notice.

Responsible for the processing of your personal data as explained in this Privacy Notice is the respective Kia Middle East & Africa FZE (“KiaMEA”) with its registered office in United Arabic Emirate-Dubai. KIAMEA will be referred to as “we”, “our” or “us”.

If you have any questions about or in connection with this Privacy Notice or the exercising of any of your rights, you may contact the Kia Connect Support Centre at the phone number [971-4-366-2200].

You may also contact Kia by sending an email to kiaconnectsupport@kia.ae.

Alternatively, you may also contact our data protection officer at the email address
kiaconnectsupport@kia.ae, or by writing to:

• c/o Data Protection Officer
• Kia Middle East and Africa FZE
• P.O.Box 31106, Arenco Tower, Dubai Media City, Level 23, Sheikh Zayed Road,
  United Arab Emirates

In connection with the Kia Account we collect and process your name, your email address, your phone number, the password, country, preferred language and the fact that you accepted the Terms of Use and Privacy Notice.

We process your personal data that you provide in connection with the registration of your Kia Account and the further use of your Kia account. The purpose of our processing is :

• to manage your Kia Account (from logging in until the possible termination of the Kia Account),
• to provide you with all the Kia Account features,
• to ensure access to the services for which a Kia Account is required,
• to provide you with guidance by e.g. providing support services when using the Kia Account, and
• to notify you of updates to the Kia Account

We process your personal data on the basis that it is necessary to perform our contract with you regarding the Kia Account and based on the legitimate interests of Kia to enable you an optimized customer experience via connected Kia Connect Services.

Any further data processing regarding linked services, in particular telematics services and personal data connected to it (such as a particular VIN or vehicle use related data) is subject to separate Privacy Notices for the Kia Connect Services.

We may process your personal data for other reasons only if we are obligated to do so, on the basis of legal requirements (e.g., transfer to courts or criminal prosecution authorities), if you have consented to the respective processing or if the processing is otherwise lawful under applicable law. In such cases we will provide you with additional information about the processing of your personal data, if appropriate.

We do not engage in automated decision-making including profiling in connection with the App Services unless we have expressly notified you of such automated decisionmaking including profiling by other means.

Any access to your personal data within Kia is restricted to those individuals that have a need to know in order to fulfill their job responsibilities. Your personal data may be transferred for specific purposes to the recipients and categories of recipients listed below and processed by those recipients for those specific purposes:

• Private third parties – Affiliated or unaffiliated private entities other than us that, alone or jointly with others, determine the purposes and means of the processing of personal data.
• Data processors – We share your personal data with certain third parties, whether affiliated or unaffiliated, that process your data on behalf of us under appropriate instructions as necessary for the respective processing purposes. The data processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data, and to process your personal data only as instructed.

The current data processor for the Kia Account is as below:

The KiaMEA within your country of residence may also use data processors for call center services and/or for CRM operations.
Governmental authorities, courts, external advisors, and similar third parties that are public bodies as required or permitted by applicable law.

Your personal data will be located in United Arab Emirates, and may be accessed from outside of your place of residence, e.g. Republic of Korea, where the data protection laws may provide a different level of protection compared to the laws in your jurisdiction.

By accepting this Privacy Notice, you agree that your personal data will be transferred outside of your country. With regard to data transfers to such recipients outside of your country, we provide appropriate safeguards, in particular, by way of entering into data transfer agreements which include standard clauses adopted by relevant government bodies (e.g. Standard Contractual Clauses) with the recipients or taking other measures to provide an adequate level of data protection. A copy of the respective measure we have taken is available via our data protection officer (see section 2 above).

We use cookies on this website/app. Cookies are small text files that are sent to your browser by our web servers when you visit our website/app and are stored on your computer for when you re-visit our website at a later time.

Cookies allow our website/app to access or store information from your browser about you, your settings or your device. They are mainly used to ensure the website's expected functionality. As a rule, cookies do not contain any information that could identify you directly. They do, however, make it possible to offer you a more personalized web experience.

This website/app uses session cookies (also referred to as temporary or transient cookies). Session cookies are only stored for the duration of your visit to our website/app. The session cookies used by us serve solely to identify you for as long as you are logged on to your Kia Account and are erased at the end of each session. They are not used for any other purposes.

These cookies are required for the functionality of our website/app and cannot be disabled on our systems. As a rule, these cookies are only set as a response to an action taken by you constituting a service request, such as setting your privacy preferences, logging in or filling out forms. You can set your browser to block cookies or notify you of them. However, this may impair the functionality of the website in some areas.

If we did not use these cookies, you would not be able to technically access or use the website/app content and services.

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all these services may not function properly.

The data processing is based on your consent.

We and/or our service providers store your personal data to the extent necessary for the performance of our obligations and for the time necessary for the purposes for which we have collected your personal data, in accordance with the applicable data protection laws. When we no longer need to process your personal data for such purposes, we will erase it from our systems and/or records and/or take steps to properly anonymize it so that you can no longer be identified from the data, (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject)

If you have given your consent to the processing of your personal data, you can withdraw your consent at any time with immediate effect. Such a withdrawal will not affect the lawfulness of the processing prior to your consent withdrawal.

In accordance with the applicable data protection law, you have the following rights with respect to the processing of your personal data. Please note that these rights might be limited under the applicable data protection law.

1. 9.1 Right of access : You have the right to obtain from us confirmation as to whether personal data concerning you is being processed, and, where that is the case, to request access to your personal data. This information includes – inter alia – the purposes of the processing, the categories of your personal data concerned, and the recipients or categories of recipients to whom your personal data have been or will be disclosed. However, this is not an absolute right, and the interests of other individuals may restrict your right of access.
2. 9.2 Right to rectification : You have the right to the rectification of any inaccurate personal data about you. Depending on the purposes of the processing, you have the right to have any incomplete personal data rectified, including by means of providing a supplementary statement.
3. 9.3 Right to erasure ("right to be forgotten") : Under certain circumstances, you have the right to request the erasure of your personal data, and in certain circumstances we may be obliged to erase your personal data.
4. 9.4 Right to restriction of processing : Under certain circumstances, you have the right to obtain from us your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right, without hindrance from us, to transmit those data or have it transmitted directly by us to another entity.
5. 9.5 Right to data portability : Under certain circumstances, you have the right to obtain from us your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right, without hindrance from us, to transmit those data or have it transmitted directly by us to another entity.
6. 9.6 Right to object : Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, and we can be required to no longer process your personal data. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us.
7. 9.7 Right to lodge complaint : You also have the right to lodge a complaint with the competent data protection supervisory authority, in your country of residence. For the Kingdom of Saudi Arabia, this is the Saudi Data and AI Authority (their website with contact details is accessible at: sdaia.gov.sa).
   Unless otherwise stipulated by law, you will not be required to pay any fees in return for exercising these rights.
   To exercise your rights please contact us as stated in section 2 above.

You are not obliged by any statutory or contractual obligation to provide us with your personal data. However, if you do not provide your personal data as indicated in the registration process for your Kia Account, you cannot register for a Kia Account.

We may change and/or supplement this Privacy Notice from time to time in the future. In the case of material changes (e.g., in particular, any changes that materially affect your rights), we will notify you. The Privacy Notice in the respective applicable version can be accessed and viewed in your Kia Account at any time.