We reserve the right to change this Policy from time to time and provide notice of any significant changes, and the proposed effect, on the MBC website. In addition, we include a revision date on each version of our Policy. By providing personal information to us, or continuing to use our products or services after that date, customers consent to the collection, use and disclosure of the personal information as set out in the Policy.
Affiliated Businesses: Our affiliated lines of businesses and programs that develop, enhance, market, and/or provide MBC consumer products, services, and marketing. Affiliated businesses include Daimler AG, Mercedes-Benz Financial Services Canada Corporation, independent Mercedes-Benz Canada dealerships, and all worldwide subsidiaries of Daimler AG.
Business Partners: Organizations with which we have an alliance or arrangement to provide our customers with products or services that may be of interest to them, but which we do not offer directly. Business partners also include organizations with which we partner in order to conduct market research so that we may better understand our customers’ interests and automotive needs.
Collection: Gathering, acquiring, or obtaining customer personal information from any source.
Consent: A customer’s voluntary agreement with what is being done or proposed. Consent may either be implied or express. Express consent is given in an explicit manner, either orally or in writing. Implied consent may be reasonably inferred by the action or inaction of the individual (e.g. customer presenting a driver’s license so we can authorize a test drive).
Customer: An individual person who purchases, or expresses an interest in, an MBC product or service. This includes potential customers with whom we have established, or are in the process of establishing, a customer profile by collecting personal information.
Disclosure: Making personal information available to other individuals or organizations outside of MBC, including to our affiliated businesses.
Personal Information: Information that identifies, or which could be used either alone or with other information to identify a customer, such as name, address, birth date, financial information, computer IP address, etc. In accordance with legal requirements, if customers identify themselves as employees of an organization, their name, title, business address, or business telephone number is not considered personal information.
Contractors: Organizations or individuals that perform services on our behalf and for our purposes. For the purpose of this policy, references to MBC include contractors.
Use: Handling or processing of personal information within MBC.
How is MBC Accountable?
At MBC, we are responsible for all personal information in our custody or control, including personal information that we share with contractors operating on our behalf (e.g. information technology providers). We require all of our employees (permanent and contract) who handle personal information to sign confidentiality agreements to ensure that they protect personal information in compliance with this Policy. Our agreements with our suppliers also contain confidentiality provisions.
Monitor legislative and industry developments in privacy and security on an on-going basis to ensure we are meeting or exceeding our privacy and security responsibilities.
What Personal Information Does MBC Collect?
MBC collects personal information in a variety of ways: directly from customers when they provide it, indirectly from their devices and online use, from other third parties, from a customer’s vehicle and from special service or features we provide or customers purchase. We describe these ways in more detail below.
From customer devices: We collect personal information from our customer’s devices, including:
Through our digital services, including our website, our software applications, social media pages, and in e-mail or text messages.
Automatically when a customer uses a browser or their device. This information may include a customer’s Media Access Control (MAC) address, type of computer or device, screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version, and the name and version of the services (e.g. the Mercedes me App) the customer is using.
Both MBC and its third party service providers, automatically when a customer visits our website, via cookies, web beacons and other digital markers:
From other third parties: We may also collect personal information from other sources, such as retailers, consumer reporting agencies, government agencies, our Affiliated Businesses, insurance providers and others. For example:
We collect credit information from consumer reporting agencies if a customer seeks to finance or lease a vehicle from MBC.
We collect information about customers from retailers to administer a purchase of a Mercedes-Benz vehicle and share repair or maintenance information about a customer’s vehicle when that customer seeks service from other providers.
We may obtain information about customers from government agencies in order to ensure that customers have not violated their agreement regarding exporting a vehicle or in order for us to locate and repossess a leased or financed vehicle.
We also may receive information about customers from other sources, such as public databases, joint marketing partners, certified installers, third-party vehicle repair or service centers, and social media platforms.
From the vehicle: Telematics refers to the use of wireless devices and technologies to transmit data in real time back to an organization. Many Mercedes-Benz vehicles are equipped with telematics functionality. MBC may collect certain telematics data regarding the performance, usage, operation, and condition of a customer’s vehicle to improve our vehicles and services. The types of data collected will vary among vehicle models, as well as the types of services available or selected by the customer. For example:
From special features:
Customers may subscribe to or purchase certain features in their vehicle (for instance, live traffic feature, tracking services, navigation services, route planning or other features which make use of location data of the vehicle, and we may share this data with partners that contribute similar data to help us provide the service.
MBC may collect similar data in connection with other features and may share it with business partners where necessary to provide the feature to the customer, but we will only collect and share the data in a way that does not personally identify the customer.
While we only collect and share this data if these features are enabled in the vehicle, the vehicle may send this data to MBC and its partners even if the feature is not in active use.
Customers may contact us (see “How to Contact MBC” section below) to enquire about stopping the transmission of MBC telematics data other vehicle data. To stop transmission, disablement of the vehicle’s telecommunications module will be required. This can only be performed by a Mercedes-Benz technician. Once the unit is disabled, we will not be able to notify the customer of vehicle issues in real time, which may reduce vehicle functionality, result in serious damage to, or inoperability of, the vehicle. In addition, if customers do not provide telematics data, this may result in many features of the vehicle being disabled, including remote services, interactivity with the Mercedes me connect mobile app, and any service or feature that utilizes wireless internet communication.
For What Purposes Does MBC Use Personal Information?
We do not collect, use, or disclose personal information for a new purpose that was not previously identified without, first, explaining the new purpose to the customer and, second, obtaining consent.
We collect and use personal information for many purposes, including to:
MBC Collects Personal Information with Consent
We obtain the consent of customers for the collection, use, or disclosure of their personal information, except where it is inappropriate to do so. For sensitive uses and disclosures of personal information, such as disclosing financial information to Mercedes-Benz Financial Services Canada Corporation for the purpose of processing a request to lease or finance a vehicle, we obtain the express consent of customers. In addition, we obtain the implied consent of our customers by providing notice of our privacy practices through the MBC Privacy Statement, located throughout MBC dealerships and on our website. At MBC, we do not, as a condition of sale or service, require a customer to consent to the collection, use, or disclosure of personal information beyond that required to fulfill the specified purposes.
Customers may choose to withdraw their consent for certain uses and disclosures of their information by us at MBC, subject to legal or contractual restrictions and reasonable notice.
Customers can opt out of these uses and disclosures by contacting our MBC Privacy Officer (see “How to Contact MBC” section below).
Customers can withdraw their consent to our use and disclosure of their personal information for the following purposes:
Providing our customers with information on special offers, events, and promotions offered by us at MBC or our business partners;
Contacting our customers directly or through a business partner, such as JD Power or Maritz, in order to survey our customers’ level of satisfaction with our products and services and to enable us to better understand our customers’ interests and needs; or
Once we receive a customer’s opt-out request, we process it within 10 days.
If customers choose to withdraw their consent for any of the above-mentioned reasons, the MBC Privacy Officer will identify the implications of such refusals when the request is received and, if applicable, inform customers of any restrictions on their withdrawal of their consent.
Please note that MBC is unable to process opt-out requests on behalf of our affiliated businesses and business partners. Customers must contact these businesses directly to opt out.
2 In order to activate customers’ SIRIUS Satellite Radio free trial, MBC provides SIRIUS with a customer’s name, address, phone number, vehicle identification number, and SIRIUS Satellite Radio serial number. If customers do not want their information to be provided to SIRIUS, they must opt out of the free trial within 48 hours of the time of vehicle delivery.
MBC Limits its Collection of Personal Information
At MBC, we limit the collection of personal information to that which is necessary for the purposes identified to our customers, and collect personal information through fair and lawful means. For example, we limit the information we collect from drivers’ licenses for the purpose of test driving a vehicle by only recording the information required to verify the driver’s license and to identify the driver in case of vehicle theft, accident, ticket, or other liability. We also limit the collection of customer financial and contact information by only collecting information deemed necessary to process a transaction and for business development purposes.
MBC Limits its Use, Disclosure, and Retention of Personal Information
We do not use or disclose customer personal information for purposes that are not identified at the time of collection, except with the consent of the customer or as otherwise required or permitted by law.
Customers may request a representative list of the organizations to which we disclose their personal information by contacting the MBC Privacy Officer (see “How to Contact MBC” section below).
We may disclose personal information to third parties, including the following:
o Mercedes-Benz dealerships not owned by MBC;
o SIRIUS Satellite Radio and Roadside Assistance, so that they can provide our customers with products and services on a trial or fee-for-service basis from these businesses;
o Maritz and JD Power, so that these businesses may request information from customers concerning the quality of our services and products as well as conduct market research so that we can better understand our customers and their needs.3
On rare occasions, we may disclose customer personal information without customer knowledge or consent where we are required or permitted by law to do so. When we are required or permitted by law to provide information, we take reasonable steps to verify the lawful authority (where applicable) for the collection and we disclose only the information that is legally required or otherwise permitted to be disclosed.
We may share personal information with our service providers and business partners when necessary to perform services on our or on the customer’s behalf, such as:
MBC retains customer personal information only as long as it is required for our business relationship or as required by law. We follow established procedures concerning the retention of personal information. Personal information that is no longer required to fulfill the specified purposes is securely destroyed (e.g. shredded) or erased (e.g. sanitized for electronic media) or anonymized.
In the unlikely event that MBC, any of its Affiliated Businesses, brands or substantially all of any of their assets are acquired by an unrelated third party, customer personal information may be one of the transferred assets. By providing personal information to us, customers agree that we may disclose their personal information, on a confidential basis, to any prospective transferee and its professional advisors for the purposes of their due diligence investigations, the completion of any such transaction and the continued operation of the acquired business.
3 Disclosures to business partners such as Maritz and JD Power only occur with the personal information of existing customers – not potential customers (i.e. individuals, businesses, or organizations that purchase an MBC product or service – not those who only express an interest in purchasing an MBC product or service).
MBC Uses Reasonable Safeguards to Protect Personal Information
We protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification with security safeguards appropriate to the sensitivity of the personal information. We protect personal information regardless of the format in which it is held.
At MBC, we comply with industry practices and employ reasonable security procedures to protect personal information in our custody and control. These include, but are not limited to, the following safeguards:
We also protect the personal information we destroy and dispose of in order to prevent unauthorized parties from gaining access to the information during this process. This includes shredding paper documents and erasing electronic data.
Unfortunately, no data transmission or storage system is guaranteed to be 100% secure. If a customer has any reason to believe that their account, transaction or information is no longer secure, they should contact us immediately (see the “How to Contact MBC” section below.)
Customers who sell or transfer their vehicle to another person may need to take additional steps to safeguard their personal information from being disclosed to the new owner of the vehicle. Please notify us so that we can assist with any necessary additional steps.
MBC Is Open About its Privacy Practices
At MBC, we make available to our customers specific information about our policies and practices that relate to the management of customer personal information. We make this information available to our customers:
The management of customer personal information by our Affiliated Businesses and business partners is governed by the privacy policies of those businesses and is not the responsibility of MBC. Please contact these businesses directly for information about their respective data management practices.
MBC Maintains Accurate Personal Information and Permits the Correction and Access
At MBC, we make reasonable efforts to ensure that personal information we use or disclose is as accurate, complete, and up-to-date as is necessary for the specified purpose. This depends on the use of the information and takes into account the interests of the customer. For example, accuracy of information is particularly important if Mercedes-Benz Financial Services Canada Corporation is using this information to make a judgment or evaluation about a customer, such as for credit checks.
Some customer information can be modified or corrected by the customer if they log in to their account to make such changes. Customers may also contact us should their information (e.g. address, vehicle ownership information) change (see “How to Contact MBC” section below).
Upon written request, we will inform our customers of the existence, uses, and disclosures of their personal information and give them access to that information, except where we are restricted from doing so by law. Customers should make clear in their request what information they would like to have changed, whether they would like to have their personal information suppressed from our database, or otherwise let us know what limitations they would like to put on our use of the information they have provided to us.
Customers can request access to their personal information in our custody or control by contacting our Privacy Officer (see “How to Contact MBC” section below). If MBC is unable to provide access to all of the personal information that we hold about a customer, we provide the reasons for denying access to the customer.
A customer will be required to provide sufficient information so that we can confirm the customer’s identity and process the customer’s request. We only use the information provided to accurately locate the customer’s personal information.
We will respond to all requests for access to information within 30 business days from the receipt of request and at minimal or no cost to the individual. In the case where there is a cost associated with processing the request, we notify the customer in advance. The customer may then choose to withdraw his/her request.
If a customer finds that the information provided to him/her is inaccurate or incomplete, the customer may contact our Privacy Officer (see “How to Contact MBC” section below) and we will amend this information, as appropriate.
When appropriate, we will also transmit the amended information to the organizations to which we originally shared the information so that the information is correct and complete within the organizations’ records.
If we determine that it is inappropriate to amend a customer’s information, we will note this within our records.
Please note that we may need to retain certain information for recordkeeping or legal compliance purposes and/or to complete any transactions that a customer began prior to requesting such change or suppression (for instance, if a customer makes a purchase or enters a promotion, we may be unable to change or suppress the information provided until after the completion of such purchase or promotion). There may also be residual information that will remain within our databases and other records, which will not be removed.
How to Contact MBC
Individuals may direct inquiries, comments or complaints by submitting them in writing to the MBC Privacy Officer at:
98 Vanderhoof Ave
Toronto, ON M4G 4C9
Customer may also make inquires be calling us at 1-800-387-0100.
The MBC Privacy Officer reviews all complaints within 5 business days. If a complaint is found to be justified, our Privacy Officer will conduct an investigation and take appropriate measures to remediate the issue, including, if necessary, amending our policies and procedures, safeguards, and information management practices. The MBC Privacy Officer will inform the complainant of the results of the investigation within 30 business days from the receipt of the complaint. When investigations require more time in order to thoroughly review the issue, our Privacy Officer will provide the complainant with a timeline for completion of the investigation.
In the event that we are not able to address a complaint to the satisfaction of the complainant, he/she may contact the Office of the Privacy Commissioner of Canada by phone (1-800-282- 1376) or by filling out a complaint form available at https://www.priv.gc.ca/en/report-a-concern/file-a-formal-privacy-complaint/file-a-complaint-about-a-business/file-a-complaint-under-pipeda/ and submitting the completed form by mail to:
Office of the Privacy Commissioner of Canada
12 Kent Street
Place de Ville, Tower B
Ottawa, ON K1A 1H3
Special consideration for Financial Services