This notice explains how personal data is processed on americancarsb2b.com (AmericanCars B2B), under Articles 13 and 14 of Regulation (EU) 2016/679 (the "GDPR").
Controller
WMIND S.r.l., registered office at via Nicolò Tommaseo 67/C, 35131 Padova (PD), Italy; operational office at via G. Galilei 10/4, 35037 Teolo (PD), Italy. VAT number IT05111270285, REA 444056. Phone +39 049 5206900, email info@wmind.it, certified email (PEC) wmind@pec.it.
For any question about your data, or to exercise your rights, write to info@wmind.it.
Browsing the site
When you visit the site, the servers receive the technical data of each request: IP address, date and time, the page requested, the referring page, and the type of browser and device. This data is needed to show the pages, keep the service secure and detect abuse (legitimate interest, Art. 6(1)(f) GDPR). Server logs are kept for no more than 30 days, unless they are needed to investigate abuse or an offence.
The site uses no cookies and no analytics, profiling or advertising tools.
Some resources of the pages come from other servers, which therefore receive your browser's IP address:
- Cloudflare (Cloudflare, Inc.), the network that delivers the site and protects it from attacks;
- OpenStreetMap (OpenStreetMap Foundation, United Kingdom), the map images, on the pages that show a map;
- EntityCMS and EntityKit, services of WMIND S.r.l.: the company logos and, on the "Suggest a company" page, the suggestion form.
The business directory
The directory profiles describe businesses: workshops, parts suppliers, dealers and other companies in the trade. They may contain personal data, such as the name of a sole trader, a contact detail or an image.
The information comes from publicly available sources, such as company websites and the other sources listed on each profile, or from suggestions received through the form. We process it to publish a B2B directory of the American car trade in Europe (legitimate interest, Art. 6(1)(f) GDPR) and keep it for as long as the profile is published.
You can ask at any time for a profile to be corrected or removed, or object to its publication, by writing to info@wmind.it.
The "Suggest a company" form
The form lets you suggest a company that is missing from the directory, either your own or one you know.
What data. The answers you write: the company's details (name, type of business, makes it works on, city, country, website and, if you run the company, its VAT number, contact person, email and phone). If you suggest a company as a customer, you may add a comment on your experience and your email; both are optional. With the answers we record the page, the language and the date of submission.
Each submission is recorded with a receipt that proves which version of the form and of this notice you were shown. The receipt contains a shortened IP address and the type of browser, operating system and device. If you gave an email address, it also contains the full IP address and the browser's user agent, encrypted together with the email and the name.
Why. To assess the suggestion, check the company, add or update it in the directory, and reply to you. The legal basis is taking steps at your request (Art. 6(1)(b) GDPR). The comment on your experience is used only to assess the suggestion and is not published.
Is it required? Filling in the form is optional. The required fields are needed to handle the suggestion: without them we cannot receive it.
Where and for how long. Suggestions are stored in EntityKit, a service of WMIND S.r.l. hosted on Google Cloud in the European Union (Netherlands). The answers and the contact details are encrypted.
- Suggestions are deleted automatically 24 months after they are sent.
- If you gave no email address, the receipt is anonymous: after 24 months it is merged into aggregated daily statistics and deleted.
- If you gave an email address, the request stays in force in the register of receipts for 24 months. Thirty days after it is no longer in force, the email, name, full IP address and user agent are deleted from the receipt. Only an encrypted fingerprint (HMAC) of the email remains: it does not reveal the address, but it lets us find the receipt if you ask us to. This reduced proof is kept for 10 years, to show how and when the request was handled. Then it is merged into aggregated statistics and deleted.
If you suggest someone else's company, the company details you give us are processed like the other directory information (previous section).
If you write to info@wmind.it, we use your address and the content of your message to reply (Art. 6(1)(b) GDPR). We keep the correspondence for as long as needed to handle the request and, if a business relationship follows, for the periods required by law.
Who receives the data
The data is processed by authorised staff of WMIND S.r.l. and by providers acting as processors (Art. 28 GDPR):
- Google Cloud (Google Cloud EMEA Limited), hosting the site and the EntityKit and EntityCMS services in data centres in the European Union;
- Cloudflare, Inc., delivering and protecting the site.
The data is not sold or disclosed to anyone else, unless the law requires it.
Transfers outside the European Union
Cloudflare, Inc. is based in the United States and participates in the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023). It also applies the standard contractual clauses.
The OpenStreetMap Foundation is based in the United Kingdom, which benefits from an adequacy decision.
Google may access data from the United States only within the limits of the standard contractual clauses and the Data Privacy Framework.
Your rights
You can ask for access to your data, rectification, erasure, restriction of processing and portability. You can also object to processing based on legitimate interest (Articles 15–21 GDPR). Write to info@wmind.it: we reply within one month.
If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the authority of the country where you live or work.
We take no decisions based solely on automated processing.
Changes
If this notice changes, the new version is published on this page with its date. Each form submission records the version in force at that moment.