Privacy and Data Protection Policy

Salvador Caetano Auto África, SGPS, S.A. (“Salvador Caetano África”), as a Portuguese company and an entity subject to the General Data Protection Regulation (GDPR), promotes a culture of responsibility and compliance in the processing of personal data. All affiliated entities that are part of the Salvador Caetano group in Africa share this commitment to privacy and to complying with applicable local and international legislation.

Each local affiliate is responsible for the operation of this website, for the marketing of the brand’s products and services in its respective territory, and for the processing of personal data resulting from these activities.

1. Data Controller

The entity responsible for processing your personal data is:
EXAMPLE: SALVADOR CAETANO SOUTH AFRICA (PTY) LTD, 2023 / 795686 / 07, 277 MAIN ROAD, BRYANSTON, SANDTON, GAUTENG, 2191

This affiliate acts as the official importer of the GAC Motor brand in the territory of South Africa, and is the entity that collects, processes, and makes decisions regarding the personal data obtained through this website and other associated contact channels.

Although it is part of the Salvador Caetano África business group, this affiliate is legally autonomous and acts as an independent data controller with respect to your personal data.

2. Personal Data Collected

In the context of your interaction with our websites, applications, social media, landing pages, forms, and commercial contacts, we may collect the following personal data:

• Identification: full name, identification documents;
• Contact: address, phone number, email address;
• Professional data: profession, employer;
• Additional personal data: date of birth, marital status;
• Financial information: IBAN, payment data (securely);
• Commercial history: preferences, proposals received, contracts, satisfaction surveys;
• Vehicle data: license plate, mileage, maintenance records;
• Digital usage: browsing data, online interactions, cookies (see separate policy).

3. Purposes of Processing

Personal data is processed for legitimate, specific, and explicit purposes, such as:

• Presenting commercial offers or responding to contact requests;
• Managing contractual relationship and providing services (assistance, warranty, maintenance);
• Direct marketing activities, institutional communications, and promotional campaigns;
• Compliance with legal and regulatory obligations;
• Satisfaction management and service improvement;
• Analysis and segmentation of preferences and behaviors.

4. Sharing of Personal Data

Your personal data may be shared with:

• Affiliates of Salvador Caetano África;
• Authorized brand dealers;
• Technical and logistics service providers;
• Local commercial partners.

Sharing will be limited to the brand and territory relevant to the interaction in question and will only be carried out to the extent necessary to fulfill your request or comply with contractual and legal obligations.

Please note that by filling out forms on our websites or campaign landing pages, for example, to request a test drive, receive a commercial proposal, or schedule a service, your data may be forwarded to the authorized brand dealer in your territory for the purpose of responding to your request.

This data, known as leads, will be used exclusively to:

• Contact you;
• Present commercial offers or schedule services;
• Provide information about products or campaigns.

Dealers are legally autonomous entities and are responsible for the subsequent processing of data under their own privacy policies.

The importer affiliate and Salvador Caetano África do not assume responsibility for how the dealers handle the data received.

There is no systematic sharing of data between affiliates of the Salvador Caetano Auto África Group. Each affiliate acts as an independent data controller within the scope of the brands and territories assigned.

Additionally, your data may be shared with the vehicle brand manufacturer or the official representative of that manufacturer whenever necessary, namely:

• To ensure the provision of product-related services (e.g., warranties, technical campaigns, maintenance records);
• Or to comply with legal or contractual obligations associated with the brand in question.

In some cases, your personal data may be transferred to countries different from the one in which it was originally collected. When such transfer occurs, it will be carried out based on appropriate legal mechanisms, including standard contractual clauses, adequacy decisions, or other legally foreseen safeguards, as applicable to the origin and destination of the data.

5. Data Subject Rights

As a data subject and given that the processing of your data is carried out by an entity established in the European Union, you benefit from the rights set out in the General Data Protection Regulation (GDPR), regardless of the country where you are located.

Therefore, you may, at any time and free of charge, exercise the following rights:

• Right of access to your personal data;
• Right to rectify inaccurate or incomplete data;
• Right to erasure of your personal data, in legally admissible cases;
• Right to restriction of processing, where applicable;
• Right to object to the processing of your personal data, when there are legitimate grounds;
• Right to data portability, where the processing is based on consent or a contract and carried out by automated means;
• Right to withdraw consent, whenever it has been previously given, without affecting the lawfulness of processing based on the consent previously provided.

To exercise any of the rights listed above, or to obtain further clarification about the processing of your personal data, you may contact us via the following email address: privacidadeafrica@salvadorcaetano.pt

Additionally, if the local legislation of the country where you are located provides complementary rights beyond those described here, you may also exercise them through the same contact.

6. Data Security and Retention

We implement appropriate technical and organizational measures to protect your data against unauthorized access or misuse.

Data will be retained only for the time necessary to fulfill the purposes for which they were collected or as required by law.

7. Data Protection Officer

We have appointed a Data Protection Officer (DPO), who can be contacted regarding any privacy-related matters at:
epdafrica@salvadorcaetano.pt