Privacy policy

At RN Automotive AB (RNA), protecting your personal data is one of our highest priorities and a fundamental part of our trust. We take your privacy very seriously and are deeply committed to ensuring that all processing of personal data is carried out with the greatest care and in full compliance with applicable legislation, including the General Data Protection Regulation (GDPR). This policy describes how we handle your data so that you can feel safe in your contact with us.

RN Automotive AB is the data controller. Questions about how we process personal data can be sent to privacy@rnautomotive.com.

Forms and Astrid on this website

When you send a form – for example a test drive, a service request, a valuation of your car or a contact form with our assistant Astrid – we process the data you provide yourself: name, phone number, email address and, depending on the request, registration number, mileage, chosen dealership, car or model and your message.

The data is used to answer and handle your request. The processing follows the section Customer relations and sales below. The legal basis is our legitimate interest in answering you and, when you want to buy, lease or service a car, steps taken before entering into a contract.

If you also tick the boxes for offers and news – separately for email and text message – we process your contact details for marketing in the channel you chose, in line with the section Marketing and newsletters. The legal basis is then your consent. The boxes are optional and do not affect your request, we keep a record of when and how you gave consent, and you can withdraw it at any time.

Astrid is an assistant with ready-made answer options. It does not accept free text, and your choices are only stored in your browser during the visit (sessionStorage) until you close the tab. Nothing reaches us until you choose to send your contact details.

Recruitment

RNA processes personal data in connection with recruiting new employees to ensure a transparent, fair and efficient recruitment process. The data is handled confidentially and only authorised HR and recruitment staff have access to it.

Collection of personal data. Personal data is collected directly from the applicant through application documents and communication during the recruitment process.

Personal data processed. Name; contact details (address, email, phone number); CV and cover letter; references and previous experience.

Purpose of the processing. To assess candidates’ qualifications, experience and suitability for different roles in the company, to enable an efficient and fair recruitment process and to communicate with you during the process.

Legal bases. Legitimate interest in carrying out recruitment processes and, where needed and for further storage of the data, consent.

Storage and transfer to third parties. Personal data is stored in internal HR systems and only shared with recruitment partners within the EU/EEA.

How long the data is kept. Up to 24 months after the recruitment has ended.

Marketing and newsletters

RNA processes personal data to communicate with customers and other interested parties through targeted marketing, digital advertising, campaigns and newsletters. The processing always follows applicable marketing law and the GDPR, and recipients can unsubscribe at any time.

Collection of personal data. Via the website, email or contact with customer service.

Personal data processed. Name; email address; information about previous purchases or areas of interest.

Purpose of the processing. To send news, offers and information that are relevant based on the customer’s previous purchases, interests or requests, and to inform about our products, services and upcoming events.

Legal bases. Legitimate interest or consent at registration.

Storage and transfer to third parties. Personal data is stored in marketing systems within the EU/EEA. The information may be shared with our marketing partners, such as Google and Meta, and with external suppliers who help us administer and analyse our marketing activities. In some cases, if you have consented and as far as possible in anonymised form, data may be transferred to countries outside the EU/EEA under applicable safeguards. You can unsubscribe or decline further marketing at any time.

How long the data is kept. No more than six months after your last visit to our website or until you unsubscribe from newsletters or marketing, whichever comes first.

Chat and social media

When you contact RNA through our chat, email or social media, your personal data is processed to enable communication and give you fast service. We may also use the information to improve our customer dialogue and digital services.

Collection of personal data. Directly when you contact us through these channels.

Personal data processed. Name; email address or user name; information provided in the communication.

Purpose of the processing. To answer questions and communicate with customers and other interested parties.

Legal basis. Legitimate interest in handling customer communication.

Storage and transfer to third parties. Data is stored internally and on the social media platform concerned. Only authorised staff have access.

How long the data is kept. On social media, your comments and our communication remain until you delete them yourself. Material that may be perceived as inappropriate or offensive is removed earlier on a regular basis in line with our policy for the social media concerned, for example rude comments, offensive language or attacks on individuals.

Visits to the website

When you visit our website, certain information is collected automatically through cookies and other technical tools.

Collection of personal data. Via cookies and analytics tools (Google Analytics, Hotjar).

Personal data processed. IP address; device information; click history and navigation and usage behaviour.

Purpose of the processing. To analyse how the website is used, improve the user experience and show relevant marketing. RNA only uses cookies after your consent and lets you adjust your settings at any time via Cookie settings at the bottom of every page. We work with established partners, such as Google and Meta, in line with their security and privacy policies.

Legal basis. Consent via the cookie banner.

Storage and transfer to third parties. Processed within the EU/EEA. With your consent, data may be transferred to the USA via Google and Meta under standard contractual clauses.

How long the data is kept. Three months, after which the data is anonymised.

Which cookies and similar technologies the website uses is described in our cookie policy.

Online purchases / e-commerce

We process your personal data when you visit and/or make a purchase through our online shop. The data is collected directly from you when you make a purchase, create a customer account or otherwise provide information to us.

Collection of personal data. When you place an order or create a customer account.

Personal data processed. Name, address, email, phone number; payment information; order information and order history; personal identity number (if you chose to provide it); registration number and/or model of your vehicle.

Purpose of the processing. To handle orders, payments, deliveries and any customer service matters, and to administer customer accounts, invoicing, warranties and complaints. The data is also used to meet legal obligations, such as the requirements of the Swedish Bookkeeping Act. Our payment service providers may also process personal data they have already stored. You can read more in each provider’s privacy policy.

Legal bases. Performance of a contract and legal obligation.

Storage and transfer to third parties. Stored in internal systems. Data is shared with payment and transport providers (to send parcels and handle returns) and IT partners.

How long the data is kept. In line with the Bookkeeping Act (7–8 years) or until the contractual relationship has ended.

Customer relations and sales

RNA processes personal data in connection with the sale, rental, loan and servicing of vehicles and the purchase of related services. The data is used to fulfil contracts, register vehicles, arrange insurance or financing and provide customer support. The processing respects your privacy and is carried out together with carefully selected partners such as finance and insurance companies.

Collection of personal data. Directly from you and in some cases from the Swedish Transport Agency (Transportstyrelsen).

Personal data processed. Name, address, personal identity number; vehicle data (registration number, VIN); payment information.

Purpose of the processing. To handle orders, financing, insurance and service.

Legal bases. Performance of a contract, legal obligation and legitimate interest.

Storage and transfer to third parties. Shared with finance companies, insurance companies and manufacturers. Stored within the EU/EEA.

How long the data is kept. Up to five years after the purchase has been completed, or longer where required by law.

Representatives of suppliers or third parties

If you represent a supplier, partner or other third party, RNA processes your personal data to handle contact, negotiations and contracts. The processing only covers the information needed to maintain a professional business relationship and comply with applicable law.

Collection of personal data. From you or from the company you represent.

Personal data processed. Name; position; contact details.

Purpose of the processing. To handle contact and negotiations and to perform contracts.

Legal basis. Legitimate interest in maintaining business relationships.

Storage and transfer to third parties. Stored in business systems within the EU/EEA. No transfer outside the EU/EEA normally takes place.

How long the data is kept. Three years after the latest contact, or longer during an active contract.

Taking part in events

RNA processes personal data to plan, run and follow up participation in our events, seminars and customer meetings. The data is used to administer registrations, send practical information, document the event and improve future events. If photos or film are taken at an event, separate consent is obtained where needed, especially for close-ups or when minors appear.

Collection of personal data. Directly from participants when they register.

Personal data processed. Name; contact details; company and title; any dietary preferences/allergies.

Purpose of the processing. To administer events, evaluate participation and communicate before and after.

Legal bases. Legitimate interest and, for sensitive data, consent.

Storage and transfer to third parties. Stored internally and only shared with necessary partners (for example event organisers).

How long the data is kept. Until the event has taken place and the follow-up is complete (up to 12 months).

Your rights and how to contact us

You have several rights under the General Data Protection Regulation (GDPR).

You have the right to request access to the personal data we process about you and to receive information about how it is used. You also have the right to request rectification if your data is incorrect or incomplete. In some cases you have the right to request that your data is erased or that processing is restricted, for example if you believe that the processing does not comply with applicable rules. You have the right to data portability, which means that you can request your data in a structured format or have it transferred to another controller. You also have the right to object to certain processing, for example direct marketing, and to decline and unsubscribe from marketing messages.

If you believe that your personal data has been handled incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

Contact details. If you want to exercise any of your rights or have questions about how we process your personal data, you are welcome to contact us by email at privacy@rnautomotive.com.