Thank you for visiting the Kia Connect GmbH (hereinafter “Kia”, “we”, “us”) website. The protection of your personal data is of the utmost importance to us. In this Privacy Notice we explain how we collect your personal data, how we process them, for what purposes and on what legal basis this is done, and which rights you have.
This Privacy Notice applies to the use of the website https://connect.kia.com/.

The responsible data controller for any personal data collected and processed in connection with the use of this website is Kia Connect GmbH:
Kia Connect GmbH
Theodor-Heuss-Allee 11
60486 Frankfurt, Germany
Email: info@kia-connect.eu

3.1 If you have any questions about or in connection with this Privacy Notice, please contact us:

Kia Connect GmbH
Theodor-Heuss-Allee 11
60486 Frankfurt, Germany
Email: info@kia-connect.eu

3.2 You may contact our data protection officer at any times:
Email: dpo@kia-connect.eu

This Privacy Notice applies to the collection and processing of personal data of users of the website https://connect.kia.com/.

5.1. Log Data/Access to this website
Every time you access this website, data is automatically logged. We only collect and use this technically necessary data to provide you with access to the website. The technically required data that is transmitted to our web server by your browser includes, for example: the browser type/version, the operating system used, the referrer URL, the pages accessed, the IP address, and the date and time of the request.

We need this data to ensure the functionality of the website and to make your visit to this website as pleasant as possible. We use your personal data, collected when you visit our website, in order to operate our system in the most convenient manner for your use and to protect our IT systems from attacks and other illegal activities. We reserve the right to analyze the logged data for data security reasons. We do not create individual profiles of you that provides information about your personalized usage behavior.

The legal basis for the processing of the described data - insofar as they are personal - is Art. 6 (1) f GDPR (legitimate interests). Our legitimate interest is to offer you an attractive, user-friendly and technically functional website.

5.2 Contacting Kia Connect
5.2.1 Contact Kia Connect by e-mail, telephone or postal mail
If you contact us by e-mail, telephone or postal mail, we will use your details to contact you and to process and reply to your enquiry for the purpose for which it is intended. Your data will not be passed on to third parties. Unless otherwise provided by law and if your request does not serve to prepare for the conclusion of a contract, your details will be deleted by us within a reasonable period after completion of processing.

The legal basis for processing is Art. 6 (1) f GDPR, legitimate interests. It is in our legitimate interest to appropriately answer and process your request.
If you contact us regarding an existing service relationship with us (Kia Connect Services) or to initiate a contract, the legal basis for the processing of your data is Art. 6 (1) b GDPR, performance of a contract.

5.2.2 Contact Kia Connect by using the contact form
You can contact us by using the contact form provided on our website. If you use the contact form, we collect and store your personal data that you have entered in the input mask: last name, first name, e-mail address, type of enquiry, any personal data entered into the comment box.

We use your data exclusively for the purpose-related processing and answering of your inquiry. Your data will not be passed on to third parties. Unless otherwise provided by law and if your request does not serve to prepare for the conclusion of a contract, your details will be deleted by us within a reasonable period after completion of processing.

The legal basis for processing is Art. 6 (1) f GDPR, legitimate interests. It is in our legitimate interest to appropriately answer and process your request.
If you contact us regarding an existing service relationship with us (Kia Connect Services) or to initiate a contract, the legal basis for the processing of your data is Art. 6 (1) b GDPR, performance of a contract.

5.3. Other data processing
In addition, we process personal data for the purposes of safeguarding our legitimate interests and the legitimate interests of third parties according to Art. 6 (1) f) GDPR. Maintaining the functionality of our IT systems as well as marketing our own products and services are such legitimate interests.
Please note that we process your personal data for other purposes only if we are obligated to do so on the basis of legal requirements (e.g., transfer to courts or criminal prosecution authorities), if you have consented to the respective processing or if the processing is otherwise lawful under applicable law. If processing for another purpose takes place, we may provide you with additional information.

When you visit our website, we use cookies to store certain information about you, for example what browser and operating system you use, the date and time of your visit and your IP address. For more and detailed information on the use of cookies on our website, please also refer to the 'Cookies' section and the 'Privacy Settings'.

Any access to your personal data at Kia is restricted to those individuals that have a need to know in order to fulfil their job responsibilities. Kia may transfer your personal data for the respective purposes to the recipients and categories of recipients listed below:
• Private third parties – Affiliated or unaffiliated private bodies other than us that alone or jointly with others, determine the purposes and means of the processing of personal data.
• Data processors – Certain third parties, whether affiliated or unaffiliated, may receive your personal data to process such data on behalf of Kia under appropriate instructions as necessary for the respective processing purposes. The data processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data, and to process the personal data only as instructed.
• Governmental authorities, courts, external advisors, and similar third parties that are public bodies as required or permitted by applicable law.

Some of the recipients of your personal data will be located or may have relevant operations outside of your country and the EU/EEA, e.g. in the Republic of Korea or the United States of America, where the data protection laws may provide a different level of protection compared to the laws in your jurisdiction and with regard to which an adequacy decision by the European Commission does not exist. With regard to data transfers to such recipients outside of the EU/EEA we provide appropriate safeguards, in particular, by way of entering into data transfer agreements adopted by the European Commission (e.g. Standard Contractual Clauses (2010/87/EU and/or 2004/915/EC)) with the recipients or taking other measures to provide an adequate level of data protection.

Your personal data is stored by Kia and/or our service providers, strictly to the extent necessary for the performance of our obligations and strictly for the time necessary to achieve the purposes for which the personal data is collected, in accordance with applicable data protection laws. When Kia no longer needs to process your personal data, we will erase it from our systems and/or records and/or take steps to properly anonymize it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which Kia is subject; e.g., personal data contained in contracts, communications, and business letters may be subject to statutory retention requirements, which may require retention of up to 10 years).

Kia uses technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed. We constantly improve our security measures in line with technical developments in order to ensure an appropriate level of security for any of your personal data that we process.

If you have declared your consent for any personal data processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
Pursuant to applicable data protection law you may have the right to: request access to your personal data, request rectification of your personal data; request erasure of your personal data, request restriction of processing of your personal data; request data portability, and object to the processing of your personal data.

In addition, you also have the right to lodge a complaint with the competent data protection supervisory authority.

Please note that these aforementioned rights might be limited under the applicable national data protection law.

Right of access: You may have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.
You may have the right to obtain a copy of the personal data undergoing processing. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
Right to rectification: You may have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure ("right to be forgotten"): Under certain circumstances, you may have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.
Right to restriction of processing: Under certain circumstances, you may have the right to obtain from us restriction of processing your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.
Right to data portability: Under certain circumstances, you may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.
Right to object: Under certain circumstances, you may have the right to object, on grounds relating to your particular situation at any time to the processing of your personal data by us and we can be required to no longer process your personal data. Moreover, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us.
To exercise your rights please contact us as stated in section (3.) above.

This privacy notice may require an update from time to time – e.g. due to the implementation of new technologies or the introduction of new services. We reserve the right to change or supplement this Website Privacy Notice at any time. We will publish the changes on https://connect.kia.com/eu/privacy-policy/.