WEBSITE PRIVACY AND COOKIE POLICY

Thank you for visiting our website! It is important to us to comply with the provisions under data protection law. This data protection statement is intended to inform you, as the user of our website, about the nature, scope and purpose of the processing of your personal data and the rights you have as a “data subject” within the meaning of the General Data Protection Regulation (GDPR).

1. CONTROLLER

This website and the services offered are operated by:

London EV Company Ltd.
Li Close, Ansty Park, Coventry
Coventry CV7 9RF
UK

Telephone number: +44 2476 572000
E-mail: GDPR@levc.com
Website: www.levc.com

Managing directors: Chris Allen

(hereinafter “LEVC“).

2. GENERAL

It is possible to visit our website without providing personal data. It is only necessary to process data if you decide to use certain services (e. g. the use of the online contact form or the consent to the use of statistic cookies). When doing so, we always ensure that we only process your personal data in line with a legal basis. We comply with the provisions of the GDPR.

3. DEFINITION

The terms used in this data protection statement refer to GDPR. “Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

“Restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future.

“Pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

“Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

4. DECLARATION OF CONSENT FOR THE ONLINE CONTACT FORM

If you would like to use our online contact form to contact us, it is necessary that you consent to the related collection and processing of the personal data transferred in this context for the purpose of dealing with your enquiry. Where your enquiry is directed to one of our third-party dealers from the LEVC dealer network, LEVC share the data provided on the enquiry form with that third party. Data shall be shared with the selected dealer only, and you should then consult the selected dealer for details of their privacy policy. The consent to collection and processing of the personal data referred to under this paragraph is given by means of an active check box before sending. You can revoke this consent at any time with effect for the future by sending a corresponding message to us. However, we would like to point out that it is no longer possible to use our service if you revoke your consent. To revoke your consent, please send an e-mail to GDPR@levc.com with your first name, last name and e-mail address.

5. PURPOSE OF USE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

Personal data that is necessary in order to constitute, execute or carry out our service offers are processed. Personal data will also be processed when it is necessary for the purposes of legitimate interests. On other occasions, personal data are processed for the stated purpose with your consent. We will process and use the collected personal data for the purposes listed below.

PURPOSE OF DATA PROCESSING

LEGAL BASIS FOR DATA PROCESSING

For contacting the data subject and any associated correspondence

Based on legitimate interests

For dealing with your enquiry and to provide further advice as requested by you, as the case may be

Based on your consent

For ensuring that our website is presented to you in an effective and appealing way (for instance by anonymised analysis)

Based on legitimate interests

For technical realisation of our website

Based on legitimate interests


6. COLLECTED AND PROCESSED PERSONAL DATA

For the online contact form we collect and process your personal data only if you provide it voluntarily with your knowledge.

The following data may be collected through the online contact form:

  • First name*
  • Last name*
  • Company name*
  • Company type
  • Fleet size*
  • E-mail address*
  • Contact number*
  • Postcode*
  • Preferred branch/location*
  • Details of business*
  • Message
  • Vehicles of interest
  • Service of interest
  • Comments & questions
  • Methods of contact (phone, e-mail, SMS, post)

Mandatory fields are marked with *.

The personal data listed above and provided by you will exclusively stay with us and our trusted service providers (Google Tag Manager, YouTube, Google Analytics, Google Ads, Google Conversion Tracking, Google Optimize, Google Maps, LinkedIn Insight Tag, Salesforce, Facebook, Instagram, LinkedIn, X (formerly Twitter)). We will store and process your data only for the purposes stated in item 5 above. Any use for any purpose other than that stated requires your explicit consent. This also applies to the transfer and transmission of your data to third parties. Please note that the information you send to us by e-mail is transmitted unencrypted. There remains a risk that unauthorised persons can intercept and use this data.


7. GENERAL LOG FILES

The webserver temporarily records in log files the connection data of the inquiring computer (IP address), the pages you visit on our website, the data and the duration of your visit, the identification data of the used browser and operating system type and the website you have visited before as well as the successful retrieval in log files. The technical administration of the website and anonymous statistical measures facilitate an evaluation of the accesses to our offers and an evaluation, the aim of which is to enhance data protection and data security in our company in order to ensure an optimum level of security for the personal data that we process. The data of the server log files will be stored separately from the personal data that you provide. Unless there are any potential obligations of retention provided by law, we will delete or render anonymous your IP address 28 days after you have left our website.


8. COOKIES

Our website collects and stores information by using what are called browser cookies.

Why do we use cookies?

Cookies facilitate our systems to recognise the user’s device and to make any potential presettings available immediately. As soon as a user accesses the platform, a cookie will be transmitted to the hard disk of the user’s computer. Cookies help us to improve our website and to offer you an even better and customised service. This enables us to recognize your computer or your (mobile) device when you return to our website and therefore, we can

  • store information about your preferred activities on the website and customise our website for you to suit your particular interests and
  • accelerate the speed of handling your enquiries.

We cooperate with third party services, which support us in making the Internet offer and the website more interesting for you. Therefore, cookies of these partner companies (third party providers) are also stored on your hard disk when you visit our website. These cookies are deleted automatically after the predetermined time.

A list and detailed information about the cookies set by us can be found below or in the consent manager of this website.

LEVC.com and its partners use cookies and similar technologies on this website to improve your online experience, undertake website analytics and to show tailored advertising to you.

You can manage cookies at any time by clicking the icon in the bottom of your window but this may limit or prevent use of certain features on the website.

Cookies are small text files that can be used by websites to make a user's experience more effective and efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. You can at any time change or withdraw your consent from the Cookie Declaration on our website.


9. INTEGRATION OF THIRD PARTY SERVICES AND CONTENTS

Our website uses contents and services of other suppliers. In order to retrieve and to present data in the user’s browser, it is absolutely vital to transmit the IP address. The provider (hereinafter “third party”) is therefore aware of the user’s IP address. Once with these trusted providers, we do not have any influence on whether the IP address is stored. If your IP address is stored it will be used for statistical purposes, amongst other purposes.

Use of the Google Tag Manager

Our website uses the Google Tag Manager. Through this service, website tags may be managed via an interface. The Google Tag Manager merely implements tags. This means: No cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which, in turn collects data, as the case may be. The Google Tag Manager does not access these data. If, at domain or cookie level, a deactivation was made, this deactivation remains for all tracking tags, provided those tracking tags have been implemented with the Google Tag Manager. You will find Google’s data protection statement at: https://policies.google.com/technologies/partner-sites?hl=en-GB

Use of YouTube

For integrating and presenting video content, our website uses plugins of the YouTube site, which is operated by Google. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, U.S.A.

When accessing a page with an integrated YouTube plugin, a connection to the YouTube servers is established. YouTube learns which of our pages you have visited. YouTube may attribute your surfing habits directly to your personal profile, if you are logged in to your YouTube account. You can prevent this by logging out of your YouTube account beforehand. Using YouTube is in the interest of an attractive presentation of our online offers. This is a legitimate interest. You will find details on handling user data in the data protection statement of YouTube at: https://policies.google.com/privacy?hl=en-GB&gl=de

Use of Google Analytics

Our website uses features of the web analysis service Google Analytics. The supplier of this web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, U.S.A.

Google Analytics uses cookies. Cookies are small text files that your web browser stores on your end device and that facilitate an analysis of the use of the website. Information about your use of our website generated by means of cookies are transmitted to a Google server and stored there. The server is generally located in the U.S.A.

Setting of Google Analytics cookies is based on legitimate interests. As the owner of this website, we have a legitimate interest in analysing the user behaviour in order to optimise our website, and advertising as well, as the case may be.

We use Google Analytics in connection with the IP anonymization feature. It ensures that Google shortens your IP address within the UK, the member states of the European Union or in the other contracting states of the agreement on the European Economic Area before transmitting it to the U.S.A. There may be exceptions, where Google transfers the full IP address to a server in the U.S.A. and shortens it there. Google will use this information on our behalf in order to analyse your use of the website, to create reports about website activities and to perform other services for us associated with the website use and Internet use. The IP address transmitted by Google Analytics will not be combined with other data of Google.

You may prevent your web browser to set cookies. Some functionalities of our website might then be limited. You may also prevent the collection of data about your use of the website including your IP address and the subsequent processing by Google. This is possible if you download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

You will find details on handling user data at Google Analytics in the data protection statement of Google at: https://support.google.com/analytics/answer/6004245?hl=en

Our website uses the “Demographics and Interests” function of Google Analytics. It may be used to create reports that contain information about age, gender and interests of the website visitors. These data have been obtained from interest-related advertising of Google and visitor data of third parties. It is not possible to attribute the data to a specific person. You may deactivate this function at any time. You can do this by using the display settings in your Google account or by prohibiting the collection of your data through Google Analytics in general as described in the item “Objection against data collection”.

You will find Google’s data protection statement at: https://policies.google.com/technologies/partner-sites?hl=en-GB

Use of Google Ads and Google Conversion Tracking

Our website uses Google Ads. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, U.S.A. Google Ads is an online advertising program. When using the online advertising program, we use conversion tracking. After clicking on an ad placed by Google, a cookie is set for conversion tracking. Google Ads cookies lose their validity after 30 days and are not used to identify users. When having a look at the cookie Google and we can see that you have clicked on an ad and have been forwarded to our website. The storage of “conversion cookies“ is based on legitimate interests. As the website owner, we have a legitimate interest in analysing the user behaviour in order to optimise our website, and our advertising.

Every Google Ads customer receives a different cookie. The cookies cannot be traced via websites of Google Ads customers. Conversion cookies are used to create conversion statistics for Google Ads customers using conversion tracking. Google Ads customers are informed how many users have clicked on their ad and have been forwarded to pages featuring a conversion tracking tag. However, Google Ads customers do not receive any personal data to identify users. If you do not wish to participate in the tracking, then you can object to the use of it. The conversion cookie in the browser’s user settings must be deactivated. Then your activities will not be entered into the conversion tracking statistics.

You will find details on Google Ads and Google Conversion Tracking in Google’s data protection statement of Google: https://policies.google.com/privacy?gl=de&hl=en-GB

You may control, restrict or prevent that cookies are set with an up-to-date web browser at https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en. Deactivating of cookies may lead to a limited functionality of our website.

Use of Google Optimize

Nature and scope of processing
We have integrated Google Optimize on our website. Google Optimize is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for web analysis and A/B testing. Google Optimize uses cookies and other browser technologies to analyse user behaviour and recognise users. This information is used, among other things, to compile reports on website activity. For this purpose, Google Optimize offers different representations of the respective website in order to test user acceptance of different designs. The data is not passed on to third parties.

Purpose and legal basis
We process your data with the help of Google Optimize for the purpose of optimising our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information can be found in the privacy policy for Google Optimize: https://policies.google.com/privacy

Use of Google Maps

We use the map service Google Maps to display locations of LEVC dealers. Google Maps is a service of Google Ireland Limited, which displays a map on our website.

When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. If you have a Google account, it is possible that the use of Google Maps is linked to your account and that further data is collected. We have no influence on this. Therefore, when using Google Maps, we cannot guarantee that your data will be processed exclusively to maintain the security and functionality of Google Maps.

The use of Google Maps is based on your consent, which you have either given in the consent manager of this website or can give subsequently via overlay on the corresponding map section.

The storage period of the processed data cannot be influenced by us but is determined by Google Ireland Limited.

The servers of Google are located in data centers around the world, but most servers are located in the U.S.A. For this reason, your data is also increasingly stored in the U.S.A. Here you can read exactly where the Google data centers are located: https://www.google.com/intl/eng/about/datacenters/locations/

Further information can be found in the data protection statement of Google for Google Maps: https://policies.google.com/privacy?hl=en-GB

Use of LinkedIn Insight Tag

LinkedIn Insight Tag from LinkedIn Corporation, Sunnyvale, California, US, will be used to create target groups, segment visitor groups of our online offer, determine conversion rates and subsequently optimise them. This happens in particular when you interact with advertisements that we have placed with LinkedIn Corporation. To do this, LinkedIn Corporation provides retargeting for website visitors in order to display targeted ads outside of our website.

LinkedIn Insight Tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent), and timestamp. This data is used to present anonymised reports on website audience and ad performance.

We process your data using LinkedIn Insight Tag for the purpose of optimising our website and for marketing purposes based on your consent pursuant to article 6 (1) (a) of the GDPR.

The storage period of the processed data cannot be influenced by us but is determined by LinkedIn Corporation. Further information for the LinkedIn Insight Tag can be found in the data protection statement of LinkedIn: https://www.linkedin.com/legal/privacy-policy

Use of Salesforce

LEVC.com shares your data with Salesforce Inc for the purpose of processing enquiry forms. Your data is passed to Salesforce Inc using a secure API connection from the website to them. More details of how Salesforce processes your personal data can be found here. https://www.salesforce.com/uk/company/privacy/.

Social Media

You will find us on the following platforms and social networks:

  • Facebook
  • Instagram
  • LinkedIn
  • Google/YouTube
  • X (formerly known as Twitter)

When using social networks, data are processed outside the European Union (EU) and the European Economic Area (EEA). A data protection level equivalent to that of the UK cannot be safeguarded in all the countries outside the UK and EU. In this context, there may be risks involved for you as the user, if the transmitted data are processed in what is called third countries with an inadequate level of data protection. This makes enforcement of known rights of users difficult. Moreover, it may happen that the provider in the third country processes your data but not in your interest.

The purposes of processing pursued by the social networks usually deviate from the purposes we pursue. Thus, the data you record in social networks are, in most cases, processed for purposes of market research, advertising, and creation of user profiles for personalised advertising (such as Facebook, Google, Instagram etc.).

To realise this, cookies, which record the user behaviour and facilitate user profiling, are used. You will find a list of the purposes of the processing of users’ data in the data protection statements of the respective providers. You can restrict profiling, at least to some extent, by adjusting the settings in your user account. Please read the relevant data protection statements of the respective provider to find out how to proceed.

Processing of your personal data for the stated purposes is based on our legitimate management and communications interest to offer an information and communications channel pursuant to article 6 (1) (f) of the GDPR. Where you have given your consent to the data processing to the relevant provider of the social network, the legal basis of the processing is based on article 6 (1) (a) and article 7 of the GDPR.

Due to the fact, that the real data processing is carried out by the provider of the social network, our possibilities to access your data are restricted. Solely the provider of the social network is legitimised to access your data in full. That is why only the provider is able to directly take and implement relevant measures to perform your user rights (request for information, request for erasure, objection, etc.). Therefore, the most effective way to assert relevant rights is to assert them directly against the relevant provider.

Furthermore, on mobile end devices, you may restrict the services’ access to contact and calendar data, photos, location data etc. by adjusting the settings on your device. However, this depends on the operation system used.

We do not collect and process any data from your use of the service. However, in the event we share or respond to your posts or create posts that refer to your profile ourselves, then the data you have entered in the social network, including, but not limited to, your (user) name and the content made public on your account, will be processed to the extent that they will be integrated in our offer and made publicly accessible to our followers.

If you need assistance in this matter, please feel free to contact us.

Data Subjects’ rights

Below, you will find a more detailed list of the relevant data processing carried out by the providers.

Facebook:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data protection statement: https://www.facebook.com/about/privacy/

Instagram:

Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA

Data protection statement: https://help.instagram.com/155833707900388

LinkedIn:

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Data protection statement: https://www.linkedin.com/legal/privacy-policy

Google/YouTube:

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data protection statement: https://policies.google.com/privacy?hl=en-GB

X (formerly known as Twitter):

X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

Data protection statement: https://twitter.com/en/privacy


10. DATA SECURITY

Unfortunately, transferring information via the Internet is never 100 % secure, and that is why we cannot guarantee the security of the data transmitted via the Internet to our website.

However, we protect data through the following measures:

Data at rest:

  • Data is encrypted at rest in the database
  • Retention policies mean that:
    • NetDirector anonymises records after 30 days
    • PII exists in backups for 44 days

Email sending:

  • Emails are sent via the AWS Simple Email Service (SES)
  • SES uses opportunistic TLS
    • This means that Amazon SES always attempts to make a secure connection to the receiving mail server
    • If Amazon SES can't establish a secure connection, it sends the message unencrypted
    • More details here: https://docs.aws.amazon.com/ses/latest/dg/security-protocols.html#security-ses-to-receiver

11. RIGHTS OF THE DATA SUBJECTS

If you are a data subject, then you have the following rights regarding processing of your personal data according to the GDPR.

Right to confirmation and access

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed and to obtain access from the controller to the personal data stored about you and to obtain a copy of such information free of charge.

Right to correction

You have the right to request the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to deletion

You have the right to demand from us the erasure of personal data concerning you without undue delay, provided that one of the reasons stated in article 17 of the GDPR applies and the processing is not required.

Right to restriction of processing

You have the right to demand restriction of processing where one of the conditions stated in article 18 of the GPDR applies.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us provided that the other conditions of article 20 of the GDPR are fulfilled.

Right to withdraw consent

You have the right to revoke consent you have given for the processing of your personal data at any time. This should be done via e-mail to GDPR@levc.com

Right to object

You have the right to object at any time the processing of personal data concerning you. If the conditions for an effective objection are met, then we may no longer process your personal data.

Right to lodge a complaint with a supervisory authority

Regardless of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

12. FORWARDING YOUR PERSONAL DATA

Your personal data will be forwarded as described below:

Your personal data will also be forwarded if we have the right or are obliged to forward data due to legal provisions and/or official or court order. In particular, this may refer to the provision of information for law enforcement, prevention of threats or enforcement of intellectual property rights.

Where your data is forwarded to service providers within the European Union (EU) to the extent required, such service providers will only have access to your personal data to the extent that this is necessary to perform their tasks. These service providers are obliged to treat your personal data according to the applicable data protection laws, including, but not limited to the GDPR.

Other than described above, we, do not transmit your data to third parties without your consent. In particular, we do not forward personal data to an international organisation.

Your data will only be transferred outside the European Economic Area (EEA) for third party services and contents if you have actively consented to the transfer via the consent manager of this website. If we transfer personal data outside the European Economic Area (EEA), we will take appropriate safeguards, in accordance with legal obligations, to ensure that your personal data is adequately protected regardless of the country to which it is transferred.


13. STORAGE PERIOD FOR PERSONAL DATA

As regards the storage period, we delete personal data as soon as their storage is no longer required to fulfil the initial purpose and there are no statutory retention periods. The statutory retention periods are basically the criterion for the final period of storage of personal data. After expiry of this period the relevant data will be routinely deleted and further processing will be prevented.

14. REFERENCES AND LINKS

When you visit Internet sites that are referred to from our website, you may again be asked for details, such as name, address, e-mail address, browser features etc. This data protection statement does not lay down the processing, forwarding or handling of personal data by third parties.

Third party service providers may have diverging and their own rules on handling the collection, processing, and use of personal data.

15. MODIFICATION OF THE DATA PROTECTION STATEMENT

We continuously further develop our website to offer you a service that is becoming better and better. We will continuously keep this data protection statement up-to-date and revise it accordingly whenever and where this becomes necessary.

Where it is necessary that you give us further consent for handling your data other than this, we will of course obtain such consent from you before any changes in this regard become effective.

16. CONTACT

If you want to contact us in connection with this policy please use:

GDPR@levc.com

Issued: May 2024