Serial-Kombi is the company that publishes the service serial-kombi.com, hereinafter referred to as ‘Serial-Kombi’ for the purposes hereof.
Serial-Kombi attaches great importance to the protection of your privacy and your Personal Data and has always been committed to using the Personal Data of its customers and prospects only to the extent necessary for the proper functioning of the website www.serial-kombi.com (hereinafter the ‘Website’) and to provide its offers and services. Personal data refers to information that concerns natural persons who are identified or identifiable, directly or indirectly (hereinafter the ‘Personal Data’).
The collection and processing we carry out is carried out in compliance with the legal framework in force applicable to the protection of personal data and in particular, European Regulation 2016/679 of 27 April 2016 (hereinafter the ‘Regulation’).
The purpose of this personal data protection and privacy policy is therefore to present our approach to your personal data in more detail, to explain the cases in which we collect it, the reasons for doing so and what we do with it (hereinafter the ‘Policy’).
This Policy is intended to apply to Serial-Kombi customers, prospects and visitors when browsing the Site. The Policy forms an integral part of the Site's General Conditions of Use (hereinafter referred to as the ‘GCU’) and General Terms and Conditions of Sale (hereinafter referred to as the ‘GTC’).
Serial-Kombi reserves the right to modify its Policy at any time, in particular to develop its services or to comply with any new applicable regulations. The applicable policy is the one in force on the date of connection to access the User's Site or when registering for the Services offered by Serial-Kombi.
Users are therefore advised to regularly consult the Site Policy to keep up to date with any new updates.
Serial-Kombi, as data controller, respects the following principles:
Your personal data is processed for specific and legitimate purposes, in accordance with current regulations.
The collection of your personal data is limited to data that is relevant and strictly necessary for the purpose for which it is processed.
Your personal data is not reused for purposes other than those for which it was initially collected.
Personal data may be processed for other purposes, subject to prior verification of the lawfulness and relevance of such processing, in accordance with Article 6 of the GDPR.
To protect your personal data, appropriate organisational and technical measures are in place, in accordance with the applicable regulations.
These measures guarantee the security and integrity of your data. They prevent your data from being distorted, damaged or communicated to unauthorised third parties.
Furthermore, all employees of Serial-Kombi and all persons involved in the processing of personal data comply with all rules on the protection of personal data and undertake to guarantee their confidentiality.
Serial-Kombi is responsible for the collection and processing of your Personal Data. We carry out processing operations dedicated to services and the management of the relationship with our customers and prospects to enable each of them to maintain and repair their vehicle.
Throughout our relationship, you may be required to send us your Personal Data, when:
When you use our Site and our services, we collect and process your Personal Data.
The processing of Personal Data implemented by Serial-Kombi concerns the following data:
You may be asked to provide your bank details to make a refund. In this case, your bank details will be kept for the duration of the processing and then forwarded to our banking institution. By providing your bank details, you agree to them being recorded and forwarded to our banking institution.
Serial-Kombi only processes your Personal Data for one of the following legally authorised purposes:
Examples of legitimate interests, as set out in the regulations, include the prevention of fraud and the direct marketing of similar products and services to Serial-Kombi customers.
In order to secure its payments, Serial-Kombi uses systems that enable automated decision-making. These processes, which aim to combat fraud and are based on several parameters (purchase volume, shopping basket amount, frequency, etc.), enable an order score to be established. The result obtained from this scoring and the elements of the latter are sent to the payment service providers of Serial-Kombi and to the banks issuing your means of payment to secure access to your accounts and payment of your order. This processing and the methods governing its communication are implemented to meet the requirements of the European Directive on Payment Services.
Purpose of the processing |
Legal basis |
Categories of Personal Data (referred to in section 3) |
| Search for parts suitable for the vehicle. | Contract | Vehicle details |
| Management of operations carried out for banking transactions with payment service providers | Contract | Personal details including title and contact information; data relating to transactions carried out on the Website; connection data |
| Secure payments (fraud and debt collection) | Legal obligation | Personal details including title and contact details; vehicle details; details of transactions made on the Website; login details |
| Management of your customer account, your orders, deliveries and invoices. | Contract | Personal details including title and contact details; vehicle details; details of transactions carried out on the Site |
| Pre-sales service (advice, information, quotes, follow-up) by email, chat or telephone. | Contract | Personal details including title and contact details; vehicle details; details of transactions carried out on the Site |
| Management of customer relations (telephone, chat, email), order tracking, after-sales service, product returns and refunds. | Contract | Personal details including title and contact details; vehicle details; details of transactions carried out on the Site |
| Outgoing communications (calls, emails, text messages) for file monitoring, a satisfaction survey or a marketing study. | Legitimate interest of Serial-Kombi | Personal details including title and contact details; vehicle details; details of transactions carried out on the Site |
| Electronic canvassing. | Consent | Personal details including title and contact information; vehicle details; details of transactions made on the Website; preference data. |
| Analysis and performance of our site to improve the content, products and services of our Site. | Consent | Connection data (see paragraph 8: Definition and role) |
| Statistical studies, marketing and analysis studies, to improve our services and our offers | Legitimate interest of Serial-Kombi | Data relating to the vehicle; data relating to transactions carried out on the Site. |
| Training, measurement and improvement of the quality of the Service. | Consent | Data relating to your communications with our customer service department |
| Ensuring the cybersecurity of the website and its maintenance in operational condition (including data hosting). | Legitimate interest of Serial-Kombi | Connection data (cf: paragraph 8: Definition and role of cookies). |
| Information messages or promotional messages concerning products and services similar to those already ordered on our site. | Legitimate interest of Serial-Kombi | Personal data including title and contact details; data relating to transactions carried out on the Website. |
| Creation of a generic profile to get to know you better, build your loyalty and thereby improve our offers and services. | Legitimate interest of Serial-Kombi | Personal details including title and contact details; vehicle details; details of transactions carried out on the Site |
| Promote our services through push notifications | Consent | Connection data; preference data; data relating to transactions carried out on the Site |
For processing purposes related to the creation of your customer account and the history of your transactions on the Site, your Personal Data will be kept for as long as you are an ‘active’ customer and for a period of time that may vary according to the criteria governing the retention period (legal obligation, contractual obligation or legitimate interest). In any case, your Personal Data from invoices that are necessary to fulfil our regulatory accounting obligations are kept for the duration of our commercial relationship and then for a maximum of ten (10) years.
Your communications are kept for the time necessary for the intended purpose and for a maximum of six (6) months for voice recordings and for the time necessary to respond to requests not exceeding twelve (12) months for communications by e-mail and/or chat.
We do not share your Personal Data with third parties outside the internal departments and entities of the Serial-Kombi group held directly or indirectly by Serial-Kombi, duly authorised to process your Personal Data for the specific purposes set out in section 3.
However, we may transfer your Personal Data to duly authorised external service providers with whom we work, namely certain specialised service providers for the following specific purposes:
Serial-Kombi expressly invites the user to read the GCU to familiarise themselves with the conditions of use of our services.
Your data is stored in the European Union, in France, by Serial-Kombi. Specific measures and guarantees are implemented to secure such transfers.
You have a right to information as well as a right of access, rectification, limitation, opposition, erasure, suppression, and portability regarding your Personal Data, which you may exercise for legitimate reasons, subject to overriding legitimate reasons, which Serial-Kombi may cite to preserve its right to keep your Personal Data.
You have the right to request:
Once your unique customer account has been deleted, you will no longer be able to use the Serial-Kombi website:
You also have the right to formulate specific and general post-mortem directives regarding the storage, removal and communication of your Personal Data.
In order to exercise your rights, which you may do at any time, your request to exercise them must be sent to us as follows:
Requests sent to Serial-Kombi must contain your personal details identical to those provided when creating your customer account (surname, first name, email). In case of doubt about the identity of the person exercising one of the aforementioned rights, Serial-Kombi may ask the person to prove their identity by sending a copy of a proof of identity.
We will send you a reply within one (1) month of receiving your request. In certain cases, depending on the complexity of the request or the number of requests, this period may be extended by two (2) months.
We have appointed a Personal Data Protection Officer (hereinafter the ‘PDPO’) at the CNIL, to demonstrate our commitment to respecting your privacy and your rights over your Personal Data.
In case of complaint, you can contact the Data Protection Officer (hereafter referred to as the ‘DPO’) of Serial-Kombi by email at dpdsk(at)serial-kombi.com
If you believe that the processing of your Personal Data does not comply with the regulations in force, you may at any time lodge a complaint with the competent supervisory authority (in France, the CNIL).
We use technologies commonly known as cookies. These include HTTP cookies; "fingerprinting" (calculation of a unique identifier for the machine based on elements of its configuration for tracking purposes); invisible pixels or "web bugs" or any other identifier generated by software or an operating system.
What is a cookie?
A cookie is a file downloaded to a computer, tablet or other mobile terminal when a website or application is accessed. This file can be read by the sender for the duration of its validity. They enable certain functions to function (authentication, use of services such as chat, etc.), as well as recognising the terminal concerned each time it accesses digital content containing cookies from the same sender. For this purpose, only the cookies themselves are identified on your device. Your Personal Data is only recorded when you authorise it or when it is necessary for you to access the services offered.
What information is collected?
The IP address, the date and time of connection, the type of device, the browser used, the operating system, your privacy preferences, the pages and products consulted.
What types of cookies are used on the Site?
The Serial-Kombi Site uses three types of cookies:
technical cookies ;
audience measurement cookies.
1. Technical cookies
Our Site uses so-called technical cookies, the sole purpose of which is to ensure that the Site functions properly, to secure your connection, to facilitate your browsing and to provide you with the services you request. These cookies, which are essential for browsing, the ordering process and the use of our services while maximising security, are not subject to your consent.
2. Audience measurement cookies
Cookies are also placed to enable us to measure the audience for our Site and to improve the quality of our services.
You can deactivate these cookies at any time using your browser settings or by refusing them when the cookies banner is displayed, but your experience on the site may be degraded (see below - Manage my cookies).
You will find below the cookies used on the Site, as well as the purpose of each of them:
2.1 Audience measurement cookies
| Publisher | Name or roles | Objectif | Shelf life |
| Google Analytics | These audience measurement cookies are used to measure traffic on our Website in order to assess its performance. They only collect information relating to the use of the Website. These cookies only produce anonymous statistics and traffic volumes, to the exclusion of any individual information. You can obtain more information on the Google Analytics service by clicking on the link below: https://support.google.com/analytics/answer/6004245?hl=fr | 13 months |
Cookie retention period
Cookies are kept for a maximum of thirteen (13) months from the time they are placed on your terminal. At the end of this period, your consent will again be required, and will be shown in the form of the cookies banner.
Manage my cookies
If you wish, you can authorise, block or delete the cookies installed on your computer or smartphone at any time.
On the Site, you can change your cookie preferences by clicking on the "Manage my cookies" link at the bottom of the Site page.
We draw your attention to the fact that refusing or deleting some of our cookies could result in reducing or preventing access to all or part of the services offered on our Site. You can also configure your browser software so that cookies are stored on your terminal or, conversely, so that they are rejected, either systematically or depending on the sender.
You can also deactivate cookies according to their purpose
You can also create lists opposing the deposit of cookies via the NAI, EDAA and DAA unsubscribe platforms.
Please note that Serial-Kombi cannot be held responsible for the content of any hypertext links pointing to resources outside the Site.
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited. If the body responsible for processing the data collected by this website is based outside the European Economic Area and Switzerland, then the processing of data associated with Google Analytics will be carried out by Google LLC (based in the United States). Google Ireland Limited and Google LLC are hereinafter referred to as "Google".
Google Analytics uses "cookies", which are text files placed on the visitor's computer, to help the website analyze how users use the site. The information generated by the cookie (including the truncated IP address) about use of the website is generally transmitted to and stored by Google.
Google Analytics is used exclusively with the "_anonymizeIp ()" extension on this website. This extension anonymises the IP address by truncation and thus excludes any direct personal reference. Using this extension, Google truncates the IP address of visitors to the site who are located in a Member State of the European Union or in another State party to the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address of the website visitor be transmitted to Google servers and truncated in the USA. The IP address, which is provided by the browser of the website visitor using Google Analytics, will not be combined by Google with other Google data.
On behalf of the website operator, Google will use the information collected for the purpose of evaluating the use of the website, compiling reports on website activity for website operators and providing other website- and internet-related services to website operators (Art. 6, 1. f, GDPR). The legitimate interest in data processing lies in optimising this site, analysing site usage and adapting content. Users' interests are adequately protected by the pseudonymisation of their data.
Google LLC guarantees an adequate level of data protection on the basis of European standard contractual clauses. Data sent and linked to Google Analytics cookies, such as user IDs or advertising IDs, will be automatically deleted after 50 months. The deletion of data that has reached the retention deadline is carried out automatically once a month.
Site visitors may refuse the use of cookies by selecting the appropriate setting in their browser. Visitors to the site can also prevent Google from collecting information (including the IP address) via cookies and from processing this information by downloading and installing this plug-in in their browser: http://tools.google.com/dlpage/gaoptout.
For more information about the processing and use of data by Google, the settings you can make and how you can opt out, please consult Google's privacy policy. (https://policies.google.com/privacy) and Google Ads settings (https://adssettings.google.com/authenticated).
We use the reCAPTCHA service from Google LLC (Google) to protect form entries on your site. This service is used to differentiate between human input and automated abuse. This involves sending the IP address and possibly other data required by Google for the reCAPTCHA service. For this purpose, your data will be communicated to Google and used by their services. However, your IP address will first be shortened by Google in the Member States of the European Union - or in other countries which are party to the Agreement on the European Economic Area - and will thus be anonymised. In exceptional cases, your full IP address will be transmitted to a Google server in the USA and subsequently shortened. Google will use this information for the purpose of evaluating your use of the website on behalf of the website operator. The IP address provided by your browser to reCAPTCHA will not be merged with other Google data. This data collection is subject to Google's Privacy Policy. For more information about Google's privacy policy, please visit : https://policies.google.com/privacy?hl=fr
By using the reCAPTCHA service, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other sites behaves in the same way as if the visitor were visiting that other site.
These websites may collect data about you, use cookies, embed third-party tracking tools and track your interactions with this embedded content if you have a logged-in account on their website.
Serial-Kombi cannot be held responsible for external hypertext links set up as part of this website or for the content of third-party websites to which they link.
This website may, without its knowledge, have been linked to other sites via hypertext links.
Serial-Kombi declines all responsibility for the information presented on these other sites.
Personal data: refers to any information that directly or indirectly identifies a natural person. Examples include a name, telephone number, postal address, e-mail address, etc.
Processing of personal data: means any operation or set of operations, whether or not by automatic means, which is applied to personal data or sets of personal data. Examples of processing: data collection, recording, storage, etc.
Data controller: refers to any natural or legal person who, alone or jointly with others, determines the purposes and means of the processing. In this case, it is Serial-Kombi.
Sub-processor: refers to any natural or legal person who processes personal data solely on the documented instructions of the controller and on the latter's behalf. It is a natural or legal person distinct from the data controller, subject to an obligation of security and confidentiality of personal data in order to ensure its protection and processing.
Recipient: refers to any natural or legal person, or department, who receives the communication of personal data.
Phishing is a fraudulent technique used by hackers to obtain sensitive, personal and/or confidential information (bank details, identity theft, etc.) from Internet users. To do this, they reproduce a legitimate brand's website design or communications (email) identically.
The most common form is to send an email that appears to be official and whose content invites the victim to click on a link to a site that also appears to be official in order to communicate their confidential information.
How do phishers work?
Phishers send emails to a very large number of Internet users whose addresses have been collected illegally or composed automatically using specific tools. These emails use the official logos and typography of various companies such as banks, e-commerce sites and Internet service providers, and ask the user to click on a hypertext link included in the message. The URL address of the link included in the email is also "hidden" in order to appear authentic.
Phishing emails are generally threatening towards their victims or contain promises or guarantees.
They often contain spelling mistakes, syntax errors or incorrect information about the customer's credentials.
However, phishing techniques are becoming more sophisticated and modern. The modus operandi has not changed, but the fake emails are becoming less crude, more often written in French and with fewer mistakes.
What should you do if you receive a fraudulent email?
If it is an email from a company of which you are a customer (Serial-Kombi, banking organisation, Treasury, EDF, etc.):
How can I protect myself from phishing?
As a general rule, never give out your login details.
If you receive an e-mail containing a link to an online form asking you to enter your Personal Data (e-mail address, Serial-Kombi password, bank details, etc.), you have received a fraudulent e-mail and are visiting a fake Serial-Kombi site.
Serial-Kombi will never ask you for :
Serial-Kombi reserves the right to modify its personal data protection policy at any time, and will publish the modified version on its Site.
