Effective Date: September 1st, 2025
1. Introduction
This Privacy Policy explains how Car Addicts Cyprus (“the Company”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you use our website, services, and online vehicle auction platform (“the Platform”).
The Company is committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws.
By accessing the Platform, creating an account, or using our services, you acknowledge that you have read and understood this Privacy Policy.
2. Data We Collect
We may collect and process the following categories of personal data:
- Identification and Contact Information – full name, address, email address, phone number, and proof of identity (where applicable).
- Account Information – username, password, and account preferences.
- Payment Information – payment card details (processed by third-party providers such as Stripe; we do not store full card details).
- Transaction Data – details of bids placed, auctions participated in, purchases made, and payments received.
- Vehicle Listing Information – photographs, descriptions, documents, and reports you provide when selling a vehicle.
- Technical and Usage Data – IP address, browser type, operating system, and information about how you interact with the Platform.
- Marketing Preferences – records of your consent to receive marketing communications.
3. How We Collect Data
We collect personal data:
- Directly from you when you register, submit a form, list a vehicle, place a bid, or communicate with us.
- Automatically when you use the Platform, through cookies and similar technologies.
- From third parties, including payment processors, inspection service providers, and analytics tools.
4. How We Use Your Data
We process your personal data for the following purposes:
- To create and manage your account.
- To facilitate auctions, bids, and transactions between Buyers and Sellers.
- To process payments and refunds through third-party providers.
- To verify your identity and prevent fraud.
- To communicate with you about your account, listings, bids, or purchases.
- To comply with legal obligations, including tax and anti-money laundering regulations.
- To improve the functionality, security, and performance of the Platform.
- To send you service updates, policy changes, and, where you have consented, marketing communications.
5. Legal Basis for Processing
We process personal data under one or more of the following legal bases:
- Contract – processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
- Legal Obligation – processing is necessary to comply with applicable laws.
- Legitimate Interests – processing is necessary for our legitimate interests, provided they are not overridden by your rights and freedoms.
- Consent – where you have given us clear consent for specific processing purposes.
6. Data Sharing and Disclosure
We may share personal data with:
- Payment Processors – e.g., Stripe, for secure payment processing.
- Service Providers – such as hosting, IT support, inspection services, and marketing agencies, under strict confidentiality agreements.
- Legal and Regulatory Authorities – where required by law.
- Other Users of the Platform – where necessary to facilitate a transaction between Buyer and Seller.
We do not sell or rent personal data to third parties.
7. International Data Transfers
Where your personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms under GDPR.
8. Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
- For active accounts: as long as you maintain an account with us.
- For closed accounts: up to 7 years to comply with legal, accounting, and tax obligations.
- For marketing purposes: until you withdraw consent.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access – to request a copy of the data we hold about you.
- Right to Rectification – to correct inaccurate or incomplete data.
- Right to Erasure – to request deletion of your data where we have no legal reason to retain it.
- Right to Restrict Processing – to limit how we use your data.
- Right to Data Portability – to receive your data in a structured, machine-readable format.
- Right to Object – to object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent – where processing is based on consent.
To exercise any of these rights, contact us at info@caraddicts.com.cy. We may require proof of identity before responding.
10. Cookies and Tracking
The Platform uses cookies and similar tracking technologies to enhance user experience, analyse traffic, and provide personalised content. For more information, please refer to our Cookie Policy.
11. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
12. Children’s Privacy
The Platform is not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email, account notifications, or a notice on the Platform. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Car Addicts Cyprus
Email: info@caraddicts.com.cy
Location: Nicosia, Cyprus
