1. Data Controller
The company MUSTANG & CO SRL
Avenue du Commerce 15
7850 Enghien - Belgium
Company number: 0807.655.058
E-mail: info@mustangandco.com
MUSTANG & CO acts as Data Controller in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. We attach great importance to protecting your personal data and handle this information with the utmost care. Data is processed and secured in accordance with applicable legal requirements.
2. What data do we collect?
When you use our services or our website, certain personal data may be collected. This data is either provided directly by you or collected as part of the normal use of our services. We limit data collection to what is strictly necessary to provide our services and improve your experience.
2.1 Identification data
- First and last name
- Address
- Email address
- Phone number
- VAT number (professional clients)
2.2 Vehicle-related data
- Brand and model
- Chassis number
- Maintenance history
- Technical data required for repairs
2.3 Online account data
- Username and password (encrypted)
- IP address
- Date and time of registration
- Member area usage history
2.4 Event / training data
- Participation
- Payments
- Attendance
- Photos/videos taken during events
3. Purposes of processing
- Execution of contracts (sales, repairs, rentals)
- Management of online user accounts
- Organization of automotive events
- Management of the Mustang Family Club
- Management of training programs (MFC Academy)
- Billing and accounting
- Compliance with legal obligations
- Commercial communication (with consent)
- Improvement of our services and analysis of service usage
4. Legal basis for processing
- Performance of a contract
- Legal obligation
- Legitimate interest of MUSTANG & CO
- Explicit consent of the customer (particularly for marketing communications)
5. Data retention period
- 7 years for accounting data (legal obligation)
- During the duration of the contractual relationship
- Up to 3 years after the last contact for commercial purposes
- Until deletion of the user account or upon user request
6. Data sharing
- Accountants and legal advisors
- Transport companies
- IT service providers
- Public authorities when legally required
We never sell your personal data to third parties. However, some data may be shared with partners or service providers when necessary for the proper execution of our services.
7. Photos and events
During events organized by MUSTANG & CO, photos and videos may be taken for promotional or communication purposes (website, social media, publications).
Participation in an event implies acceptance of this possibility unless a written objection is submitted beforehand via info@mustangandco.com.
8. Security
Les données sont protégées contre :
- Unauthorized access
- Data loss
- Destruction
- Modification or unauthorized disclosure
We implement appropriate technical and organizational measures to protect your data against unauthorized access or misuse. Passwords are encrypted and never accessible in plain text.
9. Rights of data subjects
- Right of access to your data
- Right to rectification
- Right to erasure (right to be forgotten)
- Right to restriction of processing
- Right to object
- Right to data portability
Any request regarding your personal data can be sent to info@mustangandco.com. Proof of identity may be requested to verify your request.
10. Cookies
The MUSTANG & CO website uses technical and analytical cookies to ensure proper functioning of the website and to analyze how visitors use the website.
An information banner allows users to accept or refuse non-essential cookies. We also use analytics tools such as Google Analytics to understand how visitors use our website. IP addresses are anonymized and data is not used for other Google services.
11. Online account creation
- Acceptance of the Terms and Conditions
- Acceptance of this Privacy Policy
- User responsibility for protecting their login credentials
Checking the consent box constitutes valid proof of consent when creating an account.
12. Complaint
If you believe that the processing of your personal data violates applicable regulations, you have the right to lodge a complaint with the Belgian Data Protection Authority.