Legal information

Privacy Policy

PRIVACY POLICY - JAGUAR & LAND ROVER RENT

1. WHAT YOU CAN EXPECT TO SEE FROM READING THIS PRIVACY POLICY

Jaguar Land Rover is one of the world’s leading producers of premium cars. Innovation and design give our customers experiences they love for life – anticipating and exceeding their needs and expectations. Quality and excellence are our hallmarks. Taking care of our customers is paramount.

We are committed to respecting the privacy of everyone who visits our websites and of anyone who has used or expressed an interest in our products and services. This privacy policy explains how we use your personal data and informs you of your data protection rights when you use the Jaguar and Land Rover Rent website.

We will also help you to know when there is new information available in this Policy. We will tell you when this Privacy Policy was last updated, so you can take time to read it if it has changed since your last visit. 

Privacy Policy Last Updated: August 31st 2023

2. DATA PROTECTION – WHAT YOU SHOULD KNOW

1. WHO WE ARE

Who We Are: When we refer to ‘Jaguar Land Rover France’, ‘JLR France’ ‘we’ ‘our’ or ‘us’ in this Privacy Policy, we refer to: Jaguar Land Rover France SAS, a French law company whose registered office is at Tour Plaza, 23 rue Delarivière Lefoullon, 92800 Puteau, registered at the Nanterre trade and companies register under number 509 016 804.

What this Privacy Policy covers: This Privacy Policy covers the processing by Jaguar Land Rover France of personal data of users of Jaguar & Land Rover Rent: a Website which enables Jaguar and Land Rover customers to reserve vehicle with participating members of the Jaguar and Land Rover retailer network in France.

For more information on personal data processing by Jaguar Land Rover France, please visit our general privacy policy at the following links:

  • For Jaguar: https://www.jaguar.fr/privacy-policy/index.html
  • For Land Rover: https://www.landrover.fr/privacy-policy/index.html

Identity and contact details of our DPO: Jaguar Land Rover France, as data controller, has appointed Altij law firm, represented by France Charruyer, as data protection officer ("DPO"). You can contact France and her team at dpo-jlr@altij.com, by post at 40 rue du Japon, CS94133, 31030 TOULOUSE Cedex 4, or by telephone on 05 61 14 61 00.

Customer Relationship Centre contact details: The Jaguar Land Rover Customer Relationship Centre contact details are accessible from these web pages:

  • Queries in relation to Jaguar: https://www.jaguar.fr/contact-us/index.html
  • Queries in relation to Land Rover: https://www.landrover.fr/services-and-accessories/contact-us/index.html

Tell me more about the JLR Group...

Jaguar Land Rover France is part of a group of companies whose parent company is Jaguar Land Rover Automotive plc., a company registered in the United Kingdom. You can find out more information about the Jaguar Land Rover group on our website at: https://www.jaguarlandrover.com/.

Jaguar Land Rover is part of the Tata group. More information about the Tata group and the Tata companies can be found here: http://www.tata.com/aboutus/sub_index/Leadership-with-trust and http://www.tata.com/company/index/Tata-companies

2. HOW WE COLLECT YOUR PERSONAL DATA

When you use the Jaguar & Land Rover Rent website, Jaguar Land Rover France may collect your personal data through the following sources in particular:

  • Vehicle reservation form: when you use the Jaguar & Land Rover Rent site to reserve a Jaguar or Land Rover vehicle and you enter the information required via our online reservation module,
  • Contact forms: when you visit, use or interact with the site, for example to request or use services available online, when you find information about an event or experience or when you request any other information via the various forms available on the site;
  • Cookies and other trackers: when you visit, use or interact with the Jaguar & Land Rover Rent website, the site automatically takes certain device information in order to optimise your website experience (for example, allowing our website to automatically adapt screen size as appropriate for the device you are using to browse the website). This data also supports our website analytics. More information on automated data collection and cookies can be found through our cookie management tool via this link.
  • Email: When you contact us using the contact details available on the Jaguar & Land Rover Rent website.

Tell me more about the personal data JLR France may process

The information we process depends on the service you request or subscribe to and may in particular include:

  • Your name and contact details: Your name and contact details such as e-mail, postal address and landline or mobile phone number.
  • Information about your vehicle: Information about the vehicle you wish to reserve, such as the make and model, the options you select and the configuration of the vehicle (colour, interior, driving dynamics, etc.).
  • Financial information: Information of a financial nature, such as credit cards to enable you to book and pay for the rental, the price of the vehicle, any payment options, etc. 
  • Driving licence: information relating to your driving licence in the context of a rental,
  • Other Information: Any general information you choose to share via our contact forms, such as your comments or requests for information about JLR France products and services,
  • Connection information: Information about your use of the Jaguar & Land Rover Rent website, collected by means of electronic tracers including cookies, and in particular the date and time of your connection, the sections of the site you have viewed, your configuration preferences and, as a security measure to detect possible cyber-attacks on our website and for a period of seven days, the IP address that your Internet service provider has assigned to you. Further information on automated data collection and cookies is available in our cookie management tool via this link.

When your personal data is collected, you will be informed whether certain data is optional or must be provided for legal or contractual reasons. In such circumstances, you will be informed if your decision not to provide the requested data would have an impact on JLR France's ability to provide the services offered.

3. HOW WE USE YOUR PERSONAL DATA

We use personal data to manage and meet service and information requests, to understand service, vehicle and website use, and to make our products and services (including our web services) as effective as possible.

The main uses of your personal data, the purposes for these uses and the legal grounds we rely on for these are described below.

ACTIVITY AND PURPOSEAPPLICABLE LEGAL GROUNDS

Reserving your vehicle

When you use the Jaguar & Land Rover Rent website to reserve a Jaguar or Land Rover vehicle, we use the personal data you provide in order to (but not limited to):

  • Review and, if applicable, approve your request,
  • Manage any payments you may have made for the reservation,
  • Organise the delivery of the vehicle to the Jaguar or Land Rover retailer of your choice,
  • Enable the relevant contractual documents to be prepared by the Jaguar or Land Rover retailer of your choice.
The purpose of this processing is to ensure efficient management and follow-up of the reservation.
Necessary for the performance of a contract to which you are a party, for example where the processing is necessary for the services set out in the order form for your vehicle and its accompanying documents, or by another contract.

Customer support and services

We the process personal data of our customers, including data collected through the Jaguar & Land Rover Rent website, to manage our client records, reply to your requests, carry out customer satisfaction surveys and communicate sales and after-sales information and services, for warranty purposes, and for other internal or administrative purposes (including, for example, the management of customer guarantees, data processing in relation to vehicle maintenance and service history information, breakdown assistance and courtesy cars, and the follow-up of purchases on credit, optional leases, long-term leases and short-term leases, testing, audits and responding to any queries you may have, including queries about your data protection rights.) The purpose of this processing is to monitor customer relations and efficiently manage after-sales services, particularly with regard to your requests and questions relating to your vehicle.

Necessary for the performance of a contract to which you are a party, for example where the processing is necessary for the services set out in the order form for your vehicle and its accompanying documents, or by another contract.

JLR France's legitimate interests in offering customers efficient after-sales services.

Maintaining and supporting website use

Where you use the Jaguar & Land Rover Rent website, we and our permitted third parties will process data in a number of ways that support our website services. For example, this may include the following activities: identity confirmation, any fraud and authentication checks, service delivery, administration of prize draws, competitions, membership offers, surveys and other promotional activities, any applicable payment processes and collections activities, customer support and any ongoing service communications. We may also seek to improve our services, using user experiences to strengthen our internal processes. For example, we send customer satisfaction surveys (or use third parties to send these on our behalf). We will also let you know when you call us (our Customer Relationship Centre numbers are available from our websites) that our calls may be recorded to support training, audit and quality purposes).

The purpose of this processing is to ensure the proper operation and maintenance of our websites and the services we offer you through them.

Necessary for the performance of the contract between you and JLR France where processing is necessary to fulfil a service of a contractual nature, for example purchases from an online shop. 

JLR France's legitimate interests in providing efficient website services.

Where personal data is required for a contract, we will tell you. If this information is not provided, the requested service will not be available.

Managing your requests

We will process data in managing your requests as made on or via our websites, or in other ways using our contact details (e.g. where you request a brochure, sign up to ‘keep me informed’, email or phone with a query or add your details into any other website data form or data field). We will also process data in providing and maintaining personalised website experiences.

Your consent when you fill in a contact form to request to be kept informed of our products and services.

JLR France's legitimate interests in providing effective services, including website services.

Enhancing website experience

Where we pre-fill website data fields to enhance and streamline your online experience.

Legitimate Interests of JLR France in running effective website services.

Internal research and development

For internal research, development, analytics, analysis and reporting purposes, e.g. to monitor current vehicle performance, predict trends or performance, develop new functions, products and services, or to evidence compliance with regulatory requirements. The purpose of this processing is to evaluate and improve performance, manage compliance, monitor trends and develop new products.

Legitimate interests of JLR France and other JLR group companies in measuring and improving performance, managing compliance, monitoring trends and developing new products.

Marketing activities 

Your personal data may be processed to send you communications about products or services that may be of interest to you. 

Such communications may be sent to you by electronic means (for example, e-mail, text message, social networks and other third-party platforms), by post or by telephone. 

In order to improve our services, we may ask you to participate in occasional surveys. The choice to participate is entirely yours. 

We may share this information relating to electronic marketing communications with our network of independent third parties, if you give your consent.
The purpose of such processing is to offer you products or services tailored to your interests.

Where required by applicable law, we will always seek your consent to send you direct marketing communications.

Where we obtain your consent to such processing, you may withdraw your consent at any time. See section 7 below for more information (this right does not affect the lawfulness of the processing based on your consent prior to its withdrawal). 

Our legitimate interests in carrying out direct marketing, including:
  • electronic communications relating to products and services similar to those we have previously provided to you,
  • marketing communications by post or telephone (unless your consent is required by law),
  • marketing communications relating to our Fleet and Business services and products, where the communication relates to your business.
In such circumstances, you have the right to object to the sending of such communications at any time.

Analysis and research for marketing purposes

In connection with the marketing activities described above, we may also study your personal data in order to carry out research and analysis activities for the following purposes:

  • to develop our marketing strategies,
  • to better understand our customers, visitors to our websites and anyone interested in our vehicles,
  • to compile sales statistics,
  • to advertise our website
  • to improve the quality of the information on the website, the functionality of the website and the services we provide.
Legitimate interests of JLR France and other companies in the JLR group to review and improve their marketing strategies

Records maintenance and general administration

Your personal data may be used to maintain, our records, administer and maintain our websites, support your queries and any other internal operations and administrative purposes (for example, this will include troubleshooting, testing, supporting our audit requirements and in responding to any enquiries you may make, including any data protection rights you raise). The purpose of this processing is to ensure the administration and maintenance of the websites and related services.

Our legitimate Interests in running a business, and maintaining appropriate websites, records and service administration.

Network and information security

Your personal data may be used to maintain our network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access and to maintain appropriate server locations (for example, we may work with third parties to support appropriate use of cloud services).

Legitimate Interests of JLR France to ensure network and information security.

Corporate acquisitions and disposals

In the event of future sales or investment transactions involving Jaguar Land Rover France, certain personal data of persons who have been in contact with our services may be processed in the context of "due diligence" procedures, during which potential investors or purchasers or their professional advisers carry out a preliminary analysis of various aspects of the business in order to assess its value, with the aim of ensuring the compliance and smooth running of these transactions.

Legitimate Interests of the companies concerned

Management of legal and regulatory requirements

Your personal data may be processed to manage legal and regulatory requests and requirements, meet or defend our legal rights or for the prevention/detection of crime, (including, where appropriate, to assist the tax authorities, the police, the Interior Ministry or any other public authority or criminal investigation body, or for the protection of national security)

JLR France's legitimate interests in complying with the law and regulations, including responding to requests from competent authorities. 

JLR France's legitimate interest in defending itself in court.

Necessity for compliance with our legal obligations.

4. WHO WE SHARE PERSONAL DATA WITH

Nous pouvons partager vos données à caractère personnel avec :

  • Third party suppliers: Those third parties who need to handle it so we can provide you with the products, services you have signed up for, or are eligible for, or as you have otherwise agreed to or requested, for example, to provide or offer finance or credit, marketing and advertising support services and/or for optimised website services.
  • Retailers and repairers: With our network of retailers and authorised repairers (together our “Retail Network”), so as to be able to fulfil your requests for goods, services, etc, and for assessment and training, to be able to enhance the quality of the services you obtain when interacting with our Retail Network.
  • Members of our group: Jaguar Land Rover group companies in line with the data uses set out in this Privacy Policy.
  • Investors: With third party investors or purchasers and their professional advisers such as lawyers and accountants in the event of future disposals or investments involving Jaguar Land Rover France.
  • Public authorities: If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or requests, or in order to enforce these terms or to investigate actual or suspected breaches.
  • Professional advisers: With our professional advisers, such as lawyers, chartered accountants and statutory auditors.

We have safeguards in place with our service providers to ensure that your data is kept securely and used in accordance with the purposes set out in this Privacy Policy.

Tell me more about JLR's network of Independent Third Parties...

We work with a number of independent third parties to provide services, such as our Retail Network, credit product provider and contract hire products. Personal data may be sent directly to these entities by you (for example if you contact them by phone or email or via their website pages), or we may share personal data with them where appropriate to support with your queries or other service requirements.

The members of our Retail Network, a credit provider, or a contract hire product provider are (unless otherwise stated), independent businesses and not JLR group companies. Any contact you make to them (for example, to call or send an email) and any data you provide to them in use of their websites, will be controlled by them, not by JLR France. If you have questions regarding a third party’s (such as a retailer, importer, credit provider, contract hire product provider or repairer's) use of your personal data, we recommend you contact those parties directly.

For Jaguar: Our Retail Network is generally identifiable from the ‘locate a retailer’ or ‘locate a repairer’ website functionality. They can be searched for by name, location or postcode. A full list of all French retailers is accessible by clicking here: https://www.jaguar.fr/retailer-locator/index.html

For Land Rover: Our Retail Network is generally identifiable from the ‘locate a retailer’ or ‘locate a repairer’ website functionality. They can be searched for by name, location or postcode. A full list of all French retailers is accessible by clicking here: https://www.landrover.fr/national-dealer-locator.html

Tell me more about JLR's suppliers...

We use a number of service suppliers to support our business and these service providers may have access to our systems and data in order to provide services to us and on your behalf, for example payment processors, information technology such as hosting service providers, marketing and digital advertising support and marketing technology services, customer services and relationship handling, service and system specialists, website analytics support, online store shipping, delivery and support for events and experiences.

Tell me more about JLR Group companies, and how they may provide service support...

As a member of the Tata Group of companies, we can benefit from the large IT infrastructure and expertise that exists within our wider corporate structure. This means that the personal data you provide to us may be accessed by members of our group of companies only as necessary for service and system maintenance and support, aggregate analytics, business continuity, IT and administrative purposes. 

For example where necessary to support particular website enquiries, or to provide technical support that maintains website functionality.

Tell me more about public bodies, law enforcement and regulators...

From time to time, the police, other law enforcement agencies and regulators can request personal data, for example for the purposes of preventing or detecting crime, or apprehending or prosecuting offenders.

5. INFORMATION ABOUT INTERNATIONAL DATA TRANSFERS

Jaguar Land Rover France uses IT systems which are hosted in the EU to store the personal data of its customers and prospects.  However, depending on the services you have requested, certain information about you may, in certain circumstances, be processed in "third countries" outside the EU.

Such transfers may occur in the following circumstances:

  • Jaguar Land Rover Group companies: It is sometimes necessary to communicate the personal data of customers and other users of JLR France's services to other members of the Jaguar Land Rover Group, in order to enable appropriate monitoring of the quality and performance of the various companies in the Group, as well as due to the centralisation of certain IT systems and infrastructure at Group level. In this context, recipients of data may include, in particular, the Jaguar Land Rover group’s teams in the United Kingdom.
  • Third party suppliers: JLR France and members of its group use third party suppliers and service providers (see section 4 above for more information in this respect). Some of these third parties may, in order to provide their services, process personal data outside the EU.
  • Cookies and tracers: If you accept the use of browsing and/or marketing analysis cookies on our websites, data relating to your browsing may be processed outside the EU (this may include Google Analytics cookies, enabling your browsing information to be processed by Google, Inc. in the United States). Further information on cookies is available in our cookie management tool via this link.

JLR France makes every effort to ensure that transfers comply with the requirements of European and French data protection regulations. This may include, in particular, an assessment of the level of data protection in the third country in question and the existence or not of an adequacy decision by the European Commission in this respect, as well as the implementation of appropriate safeguards such as standard contractual clauses approved by the European Commission, if necessary combined with additional measures to protect personal data.

Tell me more about the adequacy checks JLR puts in place for international data transfers...

Where JLR France chooses to share personal data with a third party located outside the EU, the following factors are assessed to support adequate transfer of this data:

  • Internal checks to identify the existence or absence of any adequacy decision by the European Commission. We have group companies, and use suppliers which process personal data in third countries recognised by the European Commission as providing an adequate level of data protection substantially equivalent to that provided in the EU. The full list of these countries at the date of this Privacy Policy is as follows:  Andorra, Argentina, Canada (commercial organisations), South Korea, Guernsey, Isle of Man, Israel, Faroe Islands, Japan, Jersey, New Zealand, United Kingdom, United States (for companies certified under the EU-US Data Privacy Framework mechanism), Switzerland and Uruguay. (This list and information on the protections that the European Commission has studied are available at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.
  • Use of appropriate safeguards to ensure an adequate level of protection of personal data. We also have group companies and use suppliers who process personal data in other countries around the world. In such circumstances, we endeavour to put in place appropriate safeguards to ensure an adequate level of protection for personal data transferred in this way. This includes signing standard contractual clauses approved by the European Commission with the recipient of the data located in the third country. We will also assess, where appropriate, whether a supplier is able to demonstrate to us that it is bound by binding corporate rules approved by a supervisory authority of an EU Member State and constituting an adequate guarantee of the level of protection of the data transferred. Where appropriate, these appropriate safeguards may be combined with additional measures to protect personal data, such as enhanced technical security measures.

To understand the protections required in European Commission approved Model Clauses, a template copy of these is available at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

To see a full list of approved Binding Corporate Rules, please see https://edpb.europa.eu/our-work-tools/accountability-tools/bcr_en

6. HOW LONG WE HOLD PERSONAL DATA FOR

We will keep your personal data for as long as we need it to provide the products and services you have signed up to. We may also keep it to comply with our legal obligations, respond to queries and resolve any disputes, to meet our legitimate interests and to enforce our rights.

The criteria we use to determine storage periods include: the various purposes of the processing concerned, the category of data processed, the retention period strictly necessary to ensure that the processing is carried out and the recommendations of the Commission Nationale de l'Informatique et des Libertés (CNIL), the applicable contractual provisions in force, statutory limitation periods, applicable regulatory requirements and industry standards.

7. YOUR DATA PROTECTION RIGHTS

You have rights in connection with your personal data that, including: to withdraw consent where you have given it, to be informed and have access to your personal data, to correct or complete inaccurate data, and in certain circumstances to restrict, request erasure, object to processing, or request portability of your personal data to another organisation.

We try to ensure that we deliver the best levels of customer service. if you do need or want to get in touch with us for any reason regarding your data protection rights, please get in touch using the email addresses below, add into the subject header that it relates to your data protection rights. These Customer Relationship email addresses are the appropriate contact details for our data protection o fficer where queries are data protection related.

If you are not satisfied and if you have a complaint relating to data protection, you can contact our DPO, Altij law firm, by e-mail on dpo-jlr@altij.com, by post at 40 rue du Japon - CS 94133 - 31030 TOULOUSE Cedex 4 or by telephone on 05 61 14 61 00. You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), whose website is at: www.cnil.fr.

To learn more about your data protection rights, see “Tell me more” below.

Tell me more about my data subject rights...

  • If you have given us consent to process your personal data, including for electronic marketing communications, you have the right to withdraw that consent at any time. Just use the unsubscribe options presented, for example, these are present in the email marketing communications sent by us.
  • You can ask for access to the personal data we hold about you, object to the processing, request that we correct any mistakes, restrict or stop processing or delete it. 
  • If you do ask us to delete or stop processing it, we will not always be required to do so. If this is the case, we will explain why.
  • You have the right to object at any time to the processing of your personal data for direct marketing purposes.
  • In certain circumstances you can ask us to provide you with your personal data in a usable electronic format and transmit it to a third party (right to data portability). This right only applies in certain circumstances. Where it does not apply, we will explain why.

To find out more about how to contact the CNIL...

The Commission Nationale de l'Informatique et des Libertés (CNIL) is the supervisory authority for the processing of personal data in France. You can contact the CNIL in one of the following ways:

  • By www.cnil.fr 
  • By calling 01 53 73 22 22
  • Or in writing to Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 – France

8. LINKS TO OTHER WEBSITES

Our website may contain links to other websites run by other organisations which we do not control. This policy does not apply to those other websites ‚ so we encourage you to read their privacy statements. We are not responsible for the privacy policies and practices of other websites and apps (even if you access them using links that we provide) and we provide links to those websites solely for your information and convenience. We specifically disclaim responsibility for their content, privacy practices and terms of use, and we make no endorsements, representations or promises about their accuracy, content or thoroughness.

9. KEEPING YOUR INFORMATION SECURE

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

We require all of our services providers to have appropriate measures in place to maintain the security of your information.

Where we have given you (or where you have chosen) a password that enables you to access any personalised area in a JLR website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted over the internet; any transmission is at your own risk. Your information will be kept in a secure environment protected by a combination of physical and technical measures such as encryption technologies or authentication systems to prevent any loss, misuse, alteration, disclosure, destruction, theft or unauthorised access.