1. Purpose and Scope of the Policy
The FINALAIN Group (the holding company of the Jean Lain Group), of which our entity is a part, attaches the utmost importance and care to the protection of privacy and Personal Data, as well as to compliance with applicable legislation. Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data (hereinafter the “GDPR”) states that Personal Data must be processed lawfully, fairly, and transparently.
Accordingly, this privacy policy (hereinafter the “Policy”) aims to provide you with clear and simple information about the Processing of Personal Data concerning you, in the context of your browsing and the transactions carried out on our website.
2. Data Controller
As part of your activity on our website, we collect and use Personal Data relating to you as a natural person (hereinafter the “Data Subject”).
Personal Data collected through all our websites is processed by the companies/legal entities of the FINALAIN Group (holding company of the Jean Lain Group), a simplified joint-stock company (SAS) with a share capital of €19,918,206, registered with the Chambery Trade and Companies Register under number 822 650 206, whose registered office is located at:
158 Rue des Epinettes, ZI Les Landiers Ouest, BP 617, La Motte-Servolex, France.
3. What Personal Data do we collect and how?
By using our website and subscribing to our services, you provide us with a certain amount of information about yourself, some of which may identify you (“Personal Data”). This applies when you browse our website, subscribe to our communications, take part in competitions, or respond to our satisfaction surveys.
The nature and quality of the Personal Data collected about you vary depending on the relationship you enter into with the FINALAIN Group. The main categories include:
Identification data: information allowing us to identify you, such as your last name, first name, and phone number. We may also collect your email address and postal address.
Connection data: information required to access your personal account, such as IP address, password, and other data necessary for authentication and account access.
Browsing data: information related to your interactions with our website while browsing.
Audio recordings: we may record your calls when you contact our call center by telephone.
Data collected from third parties: Personal Data that you have agreed to share with us, including data from publicly accessible social networks and/or data collected from other databases provided by third-party specialists in data aggregation.
4. Why do we collect your Personal Data and on what legal basis?
We collect your Personal Data for specific purposes and on various legal grounds.
For the performance of a contract or pre-contractual measures:
Customer relationship management
Customer billing
Quote management
Complaint handling
Based on your consent:
B2C commercial prospecting
Sending newsletters
Management of cookies and trackers requiring consent
Based on our legitimate interest:
B2B commercial prospecting
Organization of competitions
Conducting satisfaction surveys and polls
Responding to contact requests
Management of visitor Wi-Fi access
Pre-litigation and litigation management (which may include audio recordings)
Physical access control to premises, including video surveillance
Management of cookies and trackers not requiring consent
Improvement of service quality (which may include audio recordings)
To comply with legal and regulatory obligations:
Fraud prevention
مكافحة money laundering and counter-terrorist financing
Maintenance of general and auxiliary accounting records
5. Do we share your Personal Data?
Your Personal Data is accessible to authorized employees of the FINALAIN Group, depending on the purposes of collection and within the limits of their respective responsibilities.
For certain tasks related to these purposes, and within the scope of their missions and authorizations, your data may be shared with:
Other entities of the FINALAIN Group for administrative and accounting management and commercial prospecting purposes, including:
(list of entities unchanged)
Technical service providers and subcontractors acting on our behalf, including website administration agencies;
Duly authorized public authorities (judicial, supervisory, etc.) in accordance with legal and regulatory obligations;
Automotive manufacturers partnering with our dealerships (brands of the dealership with which you have been in contact);
Regulated professions (lawyers, bailiffs, etc.) involved in warranties, debt recovery, or litigation.
When your Personal Data is shared with service providers or subcontractors, they are required not to use it for purposes other than those initially agreed. We take all reasonable steps to ensure that these third parties maintain the confidentiality and security of your data. Only strictly necessary data is shared, and we implement measures to ensure secure transmission.
We do not sell your data.
6. Is your Personal Data transferred to third countries?
We strive to store Personal Data in France or, at a minimum, within the European Economic Area (EEA). However, some data collected through our platform or services may be transferred to other countries, for example when certain service providers are located outside the EEA.
In such cases, we ensure that transfers are carried out:
To countries providing an adequate level of protection;
Under standard contractual clauses;
Under binding corporate rules.
7. How long do we retain your Personal Data?
We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, to meet your needs, or to comply with legal obligations.
Retention periods vary depending on:
Our operational needs;
Contractual requirements;
Legal obligations;
Recommendations from supervisory authorities.
8. How do we ensure the security of your Personal Data?
The FINALAIN Group is committed to protecting the Personal Data it collects or processes against loss, destruction, alteration, unauthorized access, or disclosure. Appropriate technical and organizational measures are implemented according to the nature of the data and the risks involved.
These measures may include restricted access to authorized personnel, pseudonymization, encryption, and regular reviews and updates of physical and logical security measures (secure access, authentication processes, backups, software, etc.).
9. What are your rights?
Under the GDPR, Data Subjects have the following rights:
Right to information
Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to object (subject to conditions)
Right to withdraw consent at any time
Right to restriction of processing
Right to data portability
Right not to be subject to fully automated decision-making
Right to define post-mortem directives regarding Personal Data
Additional rights may be granted under local regulations. The FINALAIN Group has implemented a rights management procedure in compliance with applicable legislation.
To exercise your rights, you may contact the Data Protection Officer (DPO) at: dpo@jeanlain.com.
When submitting a request, please specify as clearly as possible the scope of your request, the right you wish to exercise, the relevant data processing, and any useful information. Proof of identity may be requested in case of reasonable doubt.
10. Cookie Management
For more information, please refer to our Cookie Policy.
11. Updates to this Policy
This Policy may be updated periodically to reflect changes in Personal Data protection regulations.
Last update: April 2025.