Article version 2021.182.0

Privacy Notice – Online sales of a Volvo car

Effective from:

Published at:

This document describes how your personal data will be processed when you order a Volvo car online through www.volvocars.com (hereinafter the “Order”).

You can find below:

  1. Who we are;
  2. What personal data we process, why and how long;
  3. Who we share your personal data with;
  4. What are your rights in relation to the data processing we perform
  5. Contact information;
  6. Changes to our privacy notice.

1. Who we are

The legal entity responsible for the processing of your personal data in connection with the Order is Care by Volvo Car AB (company registration no 556746-9407), a company registered in Sweden and a legal entity within the Volvo Car Group, with address 405 31 Gothenburg (hereinafter referred to as ‘we’, ‘our’ or ‘us’).

2.What personal data we process, why and how long

As further described below, we will process the personal data that you provide to us, or as we otherwise collect, in connection with the Order.

1. When placing the Order

When you place your Order, we will process your:

  • personal identity number
  • fist and last name
  • residential address
  • contact details (email address and phone number).

The personal data is collected partly through your login with BankID, whereby we receive your personal identity number, your first and last name and your population registration address from SPAR (‘Swedish state personal address register’), partly by asking you to provide other contact information. This personal data will be processed in order to (i) verify your identity, (ii) perform a check against sanction lists (as further described in part 2 below), and (iii) communicate with you regarding your Order.

The legal basis for the processing of your personal data in connection with, (i) the verification of your identity and (ii) the performance of a check against sanction lists, is our legitimate interest to know who we are entering into a contract with.

The legal basis for the processing of your personal data in connection with, (iii) any communication with you regarding your Order, is to fulfill our contractual obligations to allow us to conclude a sales contract with you.

How long do we keep your personal data

If you do not finalise your Order by paying the deposit, your personal data will be stored for thirty (30) days in order for you to be able to complete the Order and for us to assist you during this period.

Payment of deposit

If you choose to pay your deposit through credit card or debit card, your personal data will be collected and processed by Stripe Payments Europe, Ltd (‘Stripe’), a company incorporated under the laws of Ireland. Stripe will be the controller of the personal data collected through the credit or debit card payment and you can view their privacy notice here.

If you choose to do a prepayment with Klarna by direct bank transfer, your personal data will be collected and processed by Klarna Bank AB publ (‘Klarna’), a company registered in Sweden. Klarna is the controller of the personal data processed in connection with a direct bank transfer via Klarna and you can read Klarna’s privacy notice here.

2. Performing a know your customer check against sanction lists

When you submit the Order, we will prior to accepting and confirming your Order perform a check against selected sanctions list. We will in connection with this process your:

  • personal identity number
  • first and last name
  • residential address
  • a copy of valid driving licence or other valid ID, if necessary to finalise the check against the sanction lists.

The purpose of the processing is to perform a scanning against sanction lists to prevent fraud, money laundering and terrorist financing. The legal basis for this processing is our legitimate interest to know who we enter into a contract with.

We will also share your personal identity number and your fist and last name with Schufa Holding AG, a company registered in Germany, (‘Schufa’) in order to perform a check against selected sanctions lists. Schufa is the controller for the personal data that the company processes in connection with performing these checks and you can read Schufa’s privacy notice here.

How long do we keep your personal data

If we do not accept your Order, after having performed the checks described under this Section 2, we will store your personal data described above for twenty four (24) months after we have declined your Order to be able to detect and prevent future fraud attempts.

3. When your Order has been confirmed

When you Order has been confirmed by us we will process your:

  • personal identity number
  • first and last name
  • contact details (residential address, email address and phone number)
  • Volvo ID
  • Volvo customer number
  • vehicle identification number (VIN) and registration number of the car
  • bank account details, if you have provided them to us in relation to a return of your car.

The purpose of the processing is to be able to (i) administer your Order, (ii) provide payment instructions, (iii) communicate regarding delivery of the car and to administrate the handover of the car (iv) administrate the registration of the car in the national vehicle register, (v) (if applicable) activate the car insurance included in the price of the car and, (vi) recognise you as a recurrent customer and thus enhance your user/Volvo experience. The legal basis for this processing is to fulfill the Order/sales contract with you.

We will also process the aforementioned personal data to be able to communicate with you regarding potential car recalls. The legal basis for such processing is to comply with a legal obligation.

We will share your personal data with the following parties, which will manage the personal data on our behalf as processors. These parties have an obligation under data processing agreements not to use your personal data for any purpose other than to provide services to us, and they are obliged to process the information confidentially and in a secure and proper manner.

  • Volvo Car Sverige AB (and its subcontractors) – financial services such as invoicing and potential refunds.
  • Selected authorised Volvo retailer(s) (and its subcontractors) – (i) communication and administration in connection with the handover of the car (ii) registration of the car in the national vehicle register, (iii) (if applicable) activation of the car insurance, and (iv) administration in the event of a return of the car.
  • Bilvision AB (and its subcontractors) – vehicle registration services.

Some of your personal data (such as personal identity number, first and last name, contact details and the car’s VIN and registration number) will be shared with the Swedish Transport Agency in order to register you as a driver of the car in the national road trafic register. The Swedish Transport Agency is the controller of the personal data in the national road trafic register and you can read its privacy notice here.

We also share some of your personal data (such as personal identity number, first and last name, contact details and the car’s VIN and registration number) with our insurance partner Folksam. Folksam is the controller of the personal data which is processed in connection with the insurance and you can read its privacy notice here.

If you choose to finance your car purchase via a financial partner, we may share your personal information with a financial partner of your choice, in order to evaluate the financing documents you submit to us and ensure the upcoming payment from the financial partner. In these cases, the financial partner will be the controller of the personal data that we share with them.

How long do we keep your personal data

Your personal data connected to your acquisition of the car will be kept for five (5) years from the date you cease to be a registered owner or driver of a Volvo car, assuming this date becomes known to us, unless we are legally obliged to keep the data for a longer period of time.

4. Provision of services under Volvo service program

Your car comes with a Volvo service program (’Service program’). In connection therewith, we will process your:

  • personal identity number
  • first and last name
  • contact details (address, email address and phone number)
  • Volvo ID
  • Volvo customer number
  • vehicle identification number (‘VIN’) and registration number of the car, and
  • service status of components in the car (this kind of data is related to the car VIN and may therefore be connected to you).

The purpose for the processing is (i) to be able to communicate with you on upcoming services and/or updates related to the services during the Service program and, (ii) to be able to, in relation to service status of components in the car, assess the status of the car and, if and when needed, initiate maintenance procedures. We will also save the maintenance history of the car to be able to better plan the car’s future maintenance schedule. The legal basis for this processing is to fulfill the contract regarding the Service program.

We will share your personal data with a selected and authorised Volvo repairer(s), which will process the personal data on our behalf as a processor. The chosen authorised Volvo repairer is limited by a data processing agreement in its ability to use your personal data for any purpose other than to provide services to us under the Service program and is obliged to process the information confidentially and in a secure and proper manner.

How long do we keep your personal data

We will retain your personal data in connection with the Volvo service programme for four (4) years from the date of the service of your car or until the warranty related to your car has expired.

5. If you place an Order as a business partner

If you place an Order on behalf of a company (legal entity) we will process your:

  • personal identity number
  • first and last name
  • contact details (email and phone number)
  • a copy of valid driving licence or other valid ID in order to check if you are the signatory of the company and to hand over the car.

This personal data is collected from you when placing the Order on behalf of the company (legal entity) and will be processed in order to (i) verify you as an authorized person to sign on behalf of the company, (ii) administer your Order, (iii) provide payment instructions, (iv) communicate regarding delivery of the car and to administrate the handover of the car and (v) to communicate with you about upcoming services and/or updates in connection with the services provided under the Service program. The legal basis for this processing is to conclude and fulfill the Order/sales contract.

We will also process the aforementioned personal data to be able to communicate with you regarding potential car recalls. The legal basis for such processing is to comply with a legal obligation.

We will share your personal data with the following parties, which will manage the personal data on our behalf as processors. These parties have an obligation under data processing agreements not to use your personal data for any purpose other than to provide services to us, and they are obliged to process the information confidentially and in a secure and proper manner:

  • Volvo Car Sverige AB (and its subcontractors) – financial services e.g., invoicing and potential refunds.
  • Selected authorised Volvo retailer(s) (and its subcontractors) – (i) communication and administration in connection with the handover of the car (ii) registration of the car in the national vehicle register, (iii) and administration in the event of a return of the car.
  • Selected authorised Volvo repairer(s) (and its subcontractors) – performance of services within the Service program.

How long do we keep your personal data

We will keep the personal data that you provide to us in connection with the company’s purchase of the car, until the Service program has expired in order to communicate regarding the car’s services. However, we we will only keep the personal data as long as you are the companies appointed point of contact, unless we have a legal obligation to keep the personal data for a longer period of time.

3. Who we share your personal data with

In addition to the processors mentioned under Section 2 above, we will share your personal data with the following third parties acting as our processors:

  • Volvo Car Corporation (and its sub-processors) – provision of services such as customer care and planning of car maintenance services, the web-page platform and IT-systems for business support and data storage.
  • IT-suppliers (and their sub-processors) for provisions of general business support systems and data hosting, such as:
    • Salesforce UK Limited (and its sub-processors) – CRM system and data hosting
    • Adobe Systems Software Ireland Limited (and its sub-processors) – electronic signatures and data hosting
    • SAP Svenska AB (and its sub-processors) – ERP business system and data hosting
    • Fair Isaac Services Limited (and its sub-processors) – data hosting
  • Our legal advisors and similar professional consultants for the purpose of supporting, providing advice and representing us in relation to claims and/or court proceedings.
  • We may also disclose your personal data if required by law or upon request from governmental authorities.

We enter into data processing agreements with each processor who is limited by contract in their ability to use your personal data for any purpose other than to provide services for us. Each processor has an obligation to keep the information confidential and only process the personal data in compliance with the data processing agreement in place.

Your personal data may be transferred to a country outside of EU/EEA. If so, we will transfer your personal data with the basis of the Standard Contractual Clauses adopted by the European Commission. The general text used in the standard contractual clauses can be found in a number of different languages on the European Commission's website.

Please contact us (in accordance with Section 5 below), should you have any questions about transfers of personal data to countries outside of the EU/EEA.

4. What are your rights in relation to the data processing we perform

You have specific legal rights granted by the General Data Protection Regulation (GDPR) relating to the personal data we process about you. You can withdraw your consent or object to our processing of your data, access the data we hold about you, ask for rectification or restriction of your data, request to have your data ported to another entity, request that we delete your data, and finally you can file a complaint with a data protection supervisory authority.

In Volvo Cars - Customer Privacy Policy you can read more about your data protection rights.

5. Contact information

In order to exercise your rights (in accordance with Section 4 above), please use the web form available here. If you have any other questions regarding the subject matter of personal data protection, please contact us (details below):

Care by Volvo Car AB

Postal address: c/o Volvo Car Corporation, VAK HB2N, 405 31 Göteborg

Email address:

6. Changes to this privacy notice

We reserve the right, at our discretion, to modify our privacy practices and update and make changes to this privacy notice at any time. For this reason, we encourage you to read this privacy notice and our Volvo Cars - Customer Privacy Policy thoroughly and to refer to them on an ongoing basis. This privacy notice is valid from the date which appears at the bottom of the document. We will process your personal data in a manner consistent with the privacy notice applicable at the time we collected the personal data, unless we have your consent to process it differently.