Last updated 06-06-2025
Your privacy is important to us and to Société Générale Group to which Ayvens belongs. This is a matter of priority for us and we have implemented strong principles in that respect, especially in regards of the EU General Data Protection Regulation. Ayvens S.A. and its affiliated entities (hereafter “Ayvens”) value the trust of customers, suppliers and business partners and are committed to protecting their personal data. Compliant privacy and information security practices are therefore integral components of Ayvens’ services, corporate governance, risk management and overall accountability. We only process such personal data as is necessary for our business activities and the provision of the Ayvens services.
This Global Privacy Statement (the “Statement”) describes our practices in connection with the personal information (“Personal Data”) that we process about you and your business relationship with Ayvens.
Please read this Privacy Statement carefully so that you understand how we collect and use your Personal Data.
Click here to see the Global Privacy Statement.
Download the privacy notice for employees here.Download the privacy notice for job applicants here.
1.Scope of this Privacy Statement
2.Who we are?
3.How we collect your personal data
4.Why and on which legal basis do we use personal data?
4.1.Data pertaining to website visitors
4.2.Data pertaining to customers
4.3.Data pertaining to drivers (Employees of our customers)
4.4.Data pertaining to private lease customer (including sole proprietors av partnerships)
4.5.Data pertaining to private buyers of used vehicles
4.6 .Data pertaining to professional buyers of used vehicles (traders)
4.7.Data pertaining to suppliers
4.8.Data pertaining to business partners
5.Who has access to your data?
6.Why personal data may be transferred to third countries?
7.Childerns`s privacy
8.Do we use your data for other purposes?
9.How long will we keep your data
10.How do we secure your data?
11.Changes to this statment
12.How can you contact us?
13.How can i exercise my personal data rights?
1.
Website visitors/users (“Website Visitors”);
2.
Corporate Customers (“Customers”);
3.
Customers’ employees/drivers (“Drivers”);
4.
Private lease customer (including sole proprietors and partnerships) (“Private Lease Customers”);
5.
Private buyers of used vehicles (“Buyers”);
6.
Professional buyers of used vehicles (“Traders”);
7.
Suppliers of goods and services (“Suppliers”); and
8.
Any third party, other than a customer, buyer, trader or supplier, with a business relationship or strategic alliance (“Business Partners”).
(or prospects in relation to the above; individually and collectively also referred to as “you”, “your” or “yours”).
We collect and use your Personal Data through our various vehicle and fleet leasing, fleet management and driver mobility services and in the course of performing our business activities (“Services”).
Please also note that specific services may be subject to a separate privacy statement referenced in the respective terms.
Responsibilities of customers Insofar as Customers in their capacity as employers have access to Personal Data of their employees, i.e. Drivers, the Customer is the controller responsible for the processing and use thereof in such capacity. This Statement does not apply to the processing and use of Personal Data of Drivers by Customers.
The local Ayvens entity is responsible for the processing of your Personal Data (Controller).
Ayvens Norge AS Address: Brynsengveien 10, 0667, Oslo
Ayvens may also be referred to as “we”, “our” or “us”.
We and our service providers collect Personal Data in the following ways:
Through sales activities We commence the processing of Personal Data if you provide this, directly or indirectly via third parties, e.g. as part of an offline sales lead, registration, online contact form, inquiry by e-mail, telephone, chat and/or application, survey or price competition.
Through the Services
Most of the Personal Data we collect are in relation to the Services we provide or will be providing to you as (i) a Driver and our Customer, your employer, if you are using a company vehicle, or (ii) a Private Lease Customer. This starts with the registration of your Personal Data with respect to the vehicle to be leased (in some circumstances we may do some preliminary credit checks before this) and continues with the registration of the leased vehicle and when we communicate with you about our services, e.g., to arrange for periodic maintenance and repairs. We may also process your Personal Data when your vehicle inadvertently is involved in an accident, to ensure that we restore mobility and handle any damage, or where we are the recipient of traffic fines in relation to your leased vehicle. Next to our core-leasing activities, we also provide a number of other related services, such as e-mobility services, fuel card services, charging services, car rental services, and roadside assistance. Another service we provide relates to car remarketing, sales of used Ayvens vehicles.
Online We collect Personal Data from you online, when:
•
You visit our websites or social media channels;
•
Place an order over the phone or contact customer service;
•
Joint marketing partners share the information with us; and
•
You connect your social media account to your Services account or where you share information from our websites to your social media platforms, you will share certain Personal Data from your social media account with us, for example, your name, e-mail address, photo, list of social media contacts, and any other information that may be or you make accessible to us when you connect your social media account to your Services account.
From other sources
•
We receive your Personal Data from other sources, for example:
•
Drivers’ employers, if you use a company vehicle;
•
The relevant authority (e.g., police or justice department) where we are the recipient of traffic fines or administrative charges in relation to your leased vehicle;
•
Public and government authorities, including public and government authorities outside your country of residence, where we are subject to sanctions and embargoes or anti-money laundering and counter terrorism regulations;
•
From our independent service partners who assist us in providing our leasing and other services to you, including dealerships, maintenance providers and body repair shops;
•
From our partnerships being for instance original equipment manufacturers or dealerships;
•
Publicly available databases, credit reference agencies and other sources.
We need to collect Personal Data in order to provide the requested Services to you or to handle queries, comments or complaints related to our Services. If you do not provide the Personal Data requested, we may not be able to provide the Services. If you disclose any Personal Data relating to other persons to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Statement.
Monitoring of communications Subject to applicable laws, we will monitor and record calls, e-mail, text messages and other communications we have with you. We do this for compliance with regulatory rules, self-regulatory practices or procedures relevant to our business, to prevent or detect crime, in the interests of protecting the security of our communication systems and procedures, and for quality control and staff training purposes.
For example, where we are required by a regulator to record certain telephone lines (as relevant) we will do so. In addition, where appropriate and having regard to applicable data protection law, our monitoring will be to check for inappropriate content in communications. In very limited and specific circumstances we may conduct short term carefully controlled monitoring of your activities where this is necessary for our legitimate interests or to comply with a legal obligation. We may do this for instance where we have reason to believe that fraud or other crime is being committed, where offences are suspected and where the monitoring is proportionate to the type of the disciplinary offence, or where we suspect non-compliance with sanctions and embargoes or anti-money laundering and counter terrorism regulations to which we are subject. In particular, telephone calls may be recorded for these purposes.
Privacy Statement | Ayvens Norway
In addition to what is indicated for each purpose above regarding who has access to Personal Data under the control of Ayvens, we may also share Personal Data:
Within Ayvens Group for the purposes described in this Privacy Statement.
•
For a list of the Ayvens affiliates and their locations, that may process Personal Data on behalf of the Controller, see the country signs on the top right of www.ayvens.com.
•
Within Société Générale Group to which Ayvens belongs, for internal administrative purposes, to fulfil a legal obligation, to improve our services, to enable us to comply more efficiently and more effectively with laws and regulations or for monitoring, control and reporting purposes. Reporting purposes relate to any regulatory and statutory reporting obligations and data requests as required by Société Générale Group’s regulators.
•
To our third-party service partners, service providers and unaffiliated partners, or business partners such as original equipment manufacturers (OEMs) and brokers, to facilitate services they provide to you and us.
In order to provide you with our services, we often work closely with service partners, service providers and unaffiliated partners. Our independent service partners assist us in providing our leasing and other services to you, and include dealerships, maintenance providers, body repair shops, and roadside assistance providers, but also rental service companies and the administrators of our driver safety programs. Dealerships or suppliers of (electric) vehicles may require contact details of a driver to activate a personal account necessary to be set up as a driver, otherwise the vehicle does not work.
Service providers are companies we retain that support us in running our business, for example to help us maintain our IT network and related infrastructure and security and access controls to our premises.
We also use and disclose your Personal Data as necessary or appropriate, especially when we have a legal obligation or legitimate interest to do so:
•
To comply with applicable law and regulations. This can include laws outside your country of residence.
•
To cooperate with public and government authorities. To respond to a request or to provide information we believe is important. These can include authorities outside your country of residence.
•
To cooperate with law enforcement. For example, when we respond to law enforcement requests and orders or provide information, we believe is important.
•
For other legal reasons. To enforce our terms and conditions and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.
•
In connection with a sale or business transaction. We have a legitimate interest in disclosing or transferring your Personal Data to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of Ayvens business, assets or stock (including in connection with any bankruptcy or similar proceedings). Such third parties may include, for example, an acquiring entity and its advisors.
We will limit access to Personal Data to personnel with a business need to know for the purposes described in this Statement.
Ayvens is a global service provider that has customers and locations around the globe. Your Personal Data may be stored and/or processed in a country other than the one you reside in. For a list of the Ayvens affiliates and their locations, that may process Personal Data, see the country sign on the top right of www.ayvens.com.
Some of the non-EEA countries are considered to provide for an adequate level of protection of your Personal Data, according to EU standards. You can find a list of these ‘adequate countries’ here. For the transfer of Personal Data to other countries, Ayvens has put in place adequate measures to protect your Personal Data, such as Standard Contractual Clauses. You may obtain a copy of these measures by contacting us using the address in the ‘How can you contact us?’section below or by following this link.
Our Services are not directed at individuals under the age of 18.
We may also use your Personal Data for a purpose other than the initial purpose. This is subject to the condition that the secondary purpose is in line with the initial purpose. The following factors are inter alia taken into account: are the purposes clearly related; is the secondary purpose appropriate and/or expected, was the Personal Data obtained directly from you or in another way; what kind of Personal Data is concerned for the secondary purpose; what would be the implications for you; and what data protection measures are applied when using your data for the secondary purposes.
It is generally permissible to process Personal Data for the following secondary purposes: transfer of the Personal Data to an Archive, internal audits or investigations, implementation of business controls and operational efficiency, IT systems and infrastructure related Processing such as for maintenance, support, life-cycle management, and security (including resilience and incident management), statistical, historical or scientific research, dispute resolution, legal or business consulting or insurance purposes.
Personal data of data subjects will be kept for the period necessary to fulfil the purposes described in this Statement unless a longer retention period is required or permitted by law.
The criteria applied to determine the applicable retention periods are:
•
the duration of a relationship and to provide the Services to you (for example, for as long as you use or lease an Ayvens vehicle);
•
as required by a legal obligation to which we are subject; and
•
as advisable in light of our legal position, such as in regard of applicable statutes of limitations, litigation or regulatory investigations.
After the relevant retention period, Ayvens will securely delete or destroy or de-identify your Personal Data or transfer your Personal Data to an Archive, unless this is prohibited by law or an applicable records retention schedule.
We seek to use appropriate organizational, technical and administrative measures to protect Personal Data within our organisation, in accordance with applicable privacy and data protection laws and regulations, including requiring service providers to use appropriate measures to protect the confidentiality and security of Personal Data. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us in accordance with the ‘How can you contact us?’ section below immediately.
We reserve the right to amend this Statement at any time in order to, for instance, address future developments of Ayvens or changes in industry or legal trends. The ‘Last Updated’ legend at the top of this Statement indicates when this Statement was last revised.
If you have questions, requests or complaints, please feel free to contact us via the contact page of the relevant Ayvens entity or contact our Data Protection Correspondent via this link. Because e-mail communication is not always secure, please do not include sensitive personal information in the e-mails you send us.
Please contact our Data Protection Correspondent via this link you have any questions or concerns about how Ayvens processes your Personal Data; if you would like to exercise your right to request access, correct, suppress or delete Personal Data about you or request that we cease using it (right to object), withdraw your consent or if you would like to request a copy or portability of your Personal Data. We will respond to your request consistent with applicable law.
Please note that we may not be required to comply (or fully comply) with your request. Applicable laws or regulations may impose conditions or restrict certain of such rights. For instance, for as long as we have a relationship with you, or where personal data is kept in a backup system (for the purpose of restoring the data in case of a data loss event) and the data purging cycle may be different than applicable to the production system. In those circumstances, we will write to you explaining why we are unable to comply at that moment or, in the case of backup data, the request may be implemented at a later stage (when the backup is overwritten).
In your request, please make clear what Personal Data you would like to access or have changed or deleted, or otherwise let us know what limitations you would like to put on our use of your Personal Data.
For your protection, in principle we only implement requests with respect to the information associated with the particular e-mail address that you use to send us your request, and we may request additional information necessary to verify your identity before implementing your request. Please note that certain Personal Data may be exempt from such requests pursuant to applicable data protection laws or other laws and regulations.
You may also lodge a complaint with a data protection authority for your country or region, or in the place of the alleged misconduct. Please see here a link to the national data protection authorities located in the European Union and the European Economic Area.
© 2025 Ayvens