Effective Date: June 1, 2021
This document describes how Volvo Cars (as defined below processes your personal data or personal information (collectively referred to in this document as "personal data") when you create and use your Volvo ID to get access to services within the Volvo Cars digital ecosystem (hereinafter "Volvo ID").
You can find below:
The entity responsible for the processing of personal data in relation to the creation and use of your Volvo ID is Volvo Car Corporation, having its registered office at Assar Gabrielssons Väg, SE-405 31, Gothenburg, Sweden, company registration number 556074-3089, hereinafter referred to as "Volvo Cars", "we", or "us".
The creation and use of your Volvo ID, to get access to services withing the Volvo Cars digital ecosystem, involves the processing of the following categories of personal data:
We collect from you your personal identifiers (such as first and last name, phone number, preferred language, country, E-mail address and password) to create an account with us, provide you with access to the Volvo Cars Services that require a Volvo ID and to communicate with you regarding your Volvo ID. For the purpose of GDPR, the legal basis of this data processing is performance of the contract you have enter into with Volvo Cars ((Art. 6.1.b) GDPR).
To provide an overview of your Volvo ID and its connected services on the Volvo ID Portal, we process your personal identifiers (Volvo ID and VIN) and commercial information (, vehicle information and services connected to your Volvo ID). For the purpose of GDPR, the legal basis for this processing is the legitimate interest ((Art. 6.1.f) GDPR) to outline all cars and services that are associated with your Volvo ID.
We use your Volvo ID in order to uniquely identify you within the Volvo Cars App. To see how we use and share your information in connection with the Volvo Cars App see https://www.volvocars.com/us/legal-policies/privacy/volvo-cars-app-privacy-notice/. We also process the personal identifiers you provide when you created the account (see above) for troubleshooting purposes, in connection with the creation or use of your Volvo ID and to improve the reliability of our product. For the purpose of GDPR, the legal basis for this is our legitimate interest ((Art. 6.1.f) GDPR) to secure a stable and reliable product to you.
We will keep your personal data as long as you have a registered Volvo ID. If you delete your Volvo ID (which you can do through the Volvo ID Portal) the Volvo ID together with associated data will be deleted thirty (30) days after your deletion request.
With Service Providers:
We share personal data with third party processors that support us in providing the Volvo ID and carrying out the purposes above.
Our categories of processors supporting in delivering the Volvo ID are:
They are limited by contract in their ability to use your personal data for any purpose other than to provide services for us in compliance with each data processing agreement in place. In some of these situations the use of the processors involves limited transfers of personal data outside of the European Union. We have taken precautions that such transfers are limited to the minimum necessary.
For prevention of harm, in reorganization or for legal purposes:
General sharing
We may share the personal data collected from the Volvo Cars App in the following circumstances:
In the preceding 12 months:
In the preceding 12 months, we have shared, for a business purpose:
Volvo Cars does not sell your personal data collected as part of the Volvo ID services.
As a data subject you have specific legal rights granted by the General Data Protection Regulation (GDPR) relating to the personal data we process about you. These are briefly explained below, and you can exercise them by filling out the dedicated form indicated below.
You have the right to receive your personal data in a structured, commonly used and machine-readable format. Your right to receive your personal data must not adversely affect the rights and the freedoms of other persons. Your right to have your personal data transmitted from us to another organization is a right you have if such transmission is technically feasible.
You also have the right to object at any time, regardless of any reason, to the processing of your personal data for direct marketing (which includes profiling to the extent that it is related to such direct marketing), if such processing was based on our legitimate interest. If the marketing was based on your consent, you can withdraw consent (see above).
You can exercise your rights in relation to us by filling out this form, which will help us to deal with your request properly. The online form contains the information that we need to verify your identity and review your request. For requests submitted by telephone or email, you will need to provide us with sufficient information that allows us to reasonably verify that you are the person whose personal data we collected and describe your request in sufficient detail to allow us to properly evaluate and respond to it. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information.
Under California law, consumers residing in California have certain right with respect to the personal data about them that we collect and sell. These rights include:
To exercise your right to access, correct, or delete your personal data, you may submit a request through our online form here, via e-mail at vcuscare@volvocars.com, or by calling us at 1(800) 550-5658. You may only make a request for access twice within a 12-month period. To exercise your right to opt-out of the sharing of your personal data to advertising partners, which may be a sale under the CCPA, please use our OneTrust Cookie Manager.
If you are a resident of California, an authorized agent may make a verifiable consumer rights request related to your personal data. If you are an authorized agent making a request on behalf of a consumer, you must provide us with signed permission by the consumer that you are authorized to act on behalf of that consumer. If you are a legal entity, you must also provide us with documentation of your registration with the California Secretary of State. To submit such a request, please contact us via e-mail at vcuscare@volvocars.com.
The online form for access, correction, and deletion requests contains the information that we need to verify your identity and review your request. For requests submitted via telephone or e-mail, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal data and describe your request with sufficient detail to allow us to properly evaluate and respond to it. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information. We aim to respond to your request for access, correction, or deletion within the time required by applicable law. If we need more time to respond to your request, we will let you know of the reason and the extension period in writing.
We do not sell personal data collected through our website for monetary consideration. Under Nevada law, you may opt-out of future sales of your personal data collected through our website for monetary consideration. If you want to opt-out of any potential future sales, please e-mail us at: vcuscare@volvocars.com with "Opt-Out of Future Sale of Personal Data" in the subject line and body of your message.
Our products and services are not intended to be used by children. We do not knowingly solicit or collect any personal data about children under the age of sixteen (16) nor knowingly allow children to order our products, communicate with us, or use any of our online services or mobile applications. If a child has provided us with personal data, a parent or guardian of that child may contact us to have that data deleted from our records. If you believe that we might have any data from a child under the age of sixteen (16), please tell us using the Contact Information listed below. We will take all reasonable steps to delete the child’s data as soon as possible except where necessary to protect the safety of the child or others as required by law. We do not have actual knowledge that we sell personal data of minors under the age of sixteen (16) years.
To protect your personal data from loss, theft, and unauthorized access, use, or disclosure, we have implemented technical, administrative, and physical security measures including, for certain data, 256-bit encryption, access controls, and secure development processes. Unfortunately, no method of transmission over the Internet, or method of electronic storage, is 100% secure or impenetrable.
We respond to Do Not Track (DNT) signals. DNT is a preference you can set on your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser. For more information, visit: https://www.eff.org/issues/do-not-track.
In order to exercise your rights, please see section 5 above. If you have any other questions regarding the subject matter of personal data protection, you can contact us at the following contact details:
Volvo Car Corporation
Post address: Assar Gabrielssons väg, SE-405 31, Gothenburg, Sweden
E-mail address: globdpo@volvocars.com
We reserve the right, at our discretion, to modify our privacy practices and update and make changes to this privacy notice at any time. Whenever we make substantial changes to this notice, and in particular when this notice underlies your consent, we will inform you of the changes.
This privacy notice is current as of the date which appears at the top of the document.