CarMatch

CarMatch Privacy Policy

Last updated on 12 July 2026

CarMatch attaches great importance to the protection of your personal data. In this privacy policy we explain which personal data we collect, why we process it, with whom we may share it, how long we retain it and what rights you have.

This policy applies to:

  • the website carmatch.be
  • the associated subdomains, including overname.carmatch.be
  • our contact, quotation, reservation, financing and trade-in forms
  • our communication by email, telephone, WhatsApp and social media
  • our services in our showroom and remotely.

1. Who is responsible for your personal data?

The data controller is:

MDware CommV, trading under the commercial name CarMatch
Enterprise number: BE 0663.775.156
Registered office: Dok-Noord 7 B/502, 9000 Ghent, Belgium
Business address: Kortrijksesteenweg 188, 9830 Sint-Martens-Latem, Belgium
Email: info@carmatch.be
Telephone: +32 (0)476 38 80 22

In this policy, "CarMatch", "we", "us" and "our" refer to MDware CommV, trading under the name CarMatch.

2. Which personal data do we process?

The data we process depends on the way you come into contact with us and on the services you use.

2.1. Identification and contact data

We may process, among other things, the following data:

  • first and last name
  • address
  • email address
  • telephone number
  • preferred language
  • preferred method of contact
  • date of birth, where this is necessary for an agreement or financing application
  • data enabling your identity or authority to be verified.

2.2. Professional data

When you contact us on behalf of a company, we may process, among other things:

  • company name
  • job title
  • enterprise and VAT number
  • professional contact details
  • billing and delivery address
  • data on the company's fleet or mobility needs.

2.3. Vehicle data

When you show interest in a vehicle, purchase a vehicle from us or wish to sell or trade in your vehicle to us, we may process, among other things:

  • make, model, version and year of manufacture
  • number plate and chassis number
  • date of first registration
  • mileage
  • fuel type, battery data and technical characteristics
  • equipment and options
  • maintenance, damage and accident history
  • information about ownership, financing or any outstanding balance
  • purchase, sale or trade-in price
  • photos and videos of the vehicle
  • data from the registration certificate, certificate of conformity, Car-Pass, maintenance booklet, inspection documents and other vehicle documents.

Documents may also contain personal data of other persons. We ask you to provide such data only when this is necessary and you are entitled to share it with us.

2.4. Commercial and contractual data

We may process, among other things:

  • information about your requests, interests and preferences
  • appointments and test drives
  • quotations and trade-in proposals
  • reservations, order forms and agreements
  • purchase and sale prices
  • invoices and payment information
  • data on delivery and transport
  • information about warranty, maintenance and repairs
  • complaints, damage cases and disputes
  • communication with our staff.

2.5. Financial and professional data

When you make a financing, credit, leasing or renting application, we may, to the extent necessary, process, among other things:

  • identification and contact data
  • professional situation
  • employer and job title
  • income and financial data
  • desired term and form of financing
  • data on the vehicle to be financed
  • documents required to assess the application.

Certain data may be collected directly by the relevant lender, bank, leasing company or other financial partner. In that case, the privacy policy of that partner also applies.

2.6. Website and technical data

When you use our website, we may process, among other things, the following data:

  • IP address
  • browser type
  • operating system
  • device and screen information
  • date and time of your visit
  • pages visited
  • referring page or campaign
  • click and interaction data
  • technical log data and error messages
  • cookie and advertising identifiers.

More information on this can be found in our separate cookie policy.

2.7. Communication and marketing data

We may retain information about:

  • telephone calls, emails and messages
  • communication via WhatsApp and social media
  • your preferences for newsletters and commercial communication
  • your response to emails and marketing campaigns
  • the opening of emails and the clicking of links, to the extent this is legally permitted.

We do not record telephone calls without informing you in advance.

3. How do we obtain your personal data?

We receive personal data primarily directly from you, for example when you:

  • fill in a contact form
  • search for or configure a vehicle
  • request a quotation
  • book an appointment or test drive
  • reserve a vehicle
  • request a trade-in offer
  • purchase, sell or trade in a vehicle with us
  • make a financing, credit, leasing or renting application
  • contact us by telephone, email, via WhatsApp or social media
  • visit our showroom
  • subscribe to our newsletter or marketing communication.

In addition, we may receive data from:

  • your employer, representative or leasing company
  • professional vehicle suppliers and sellers
  • financing, credit and leasing partners
  • insurers
  • transporters and logistics partners
  • inspection centres, repairers and warranty partners
  • suppliers of vehicle data and vehicle history
  • legally accessible or authorised databases
  • our website, analytics, CRM and communication service providers.

4. Why do we process your personal data?

We process your personal data only when there is a valid legal basis for doing so.

4.1. To handle your questions and requests

We process your data in order to:

  • answer your questions
  • provide information about a vehicle
  • organise an appointment or test drive
  • draw up a quotation or trade-in offer
  • search for a suitable vehicle
  • handle a reservation
  • prepare a financing, leasing or insurance application.

This processing is necessary in order to take steps at your request prior to entering into an agreement or is based on our legitimate interest in handling requests properly.

4.2. To perform agreements

When you purchase, sell, trade in or reserve a vehicle with us, we process your data in order to:

  • draw up and perform the agreement
  • process payments and invoicing
  • verify the identity and ownership of the vehicle
  • have the car inspected, registered, transported and delivered
  • arrange the transfer of ownership and administration
  • provide warranty, maintenance and customer service
  • handle complaints, damage cases and disputes.

This processing is necessary for the performance of the agreement with you.

4.3. To comply with legal obligations

We process certain data in order to comply with legal and administrative obligations, including:

  • accounting and tax obligations
  • invoicing obligations
  • consumer law obligations
  • obligations regarding vehicle registration and transfer of ownership
  • obligations relating to fraud and money laundering prevention, where these apply
  • lawful requests from government, police or judicial authorities.

4.4. To secure our website, systems and services

We may process data in order to:

  • prevent fraud and abuse
  • secure our IT systems and website
  • detect suspicious activities
  • trace technical errors
  • manage back-ups and technical log files
  • protect our rights and those of our customers.

This processing is based on our legitimate interest in securing our activities and systems.

4.5. To improve our services

We may process data in order to:

  • improve our website and forms
  • compile statistics on website use
  • understand how visitors use our website
  • improve our commercial and operational processes
  • evaluate the effectiveness of our services.

When cookies or similar tracking technologies are used for this purpose, we ask for your consent in advance where this is legally required.

4.6. For marketing and commercial communication

We may inform you about:

  • vehicles that may match your preferences
  • new vehicles in our range
  • promotions and special offers
  • CarMatch services
  • relevant mobility and automotive news.

We do this when:

  • you have given your consent for this; or
  • this is legally permitted within an existing customer relationship.

You can unsubscribe free of charge at any time via the unsubscribe link in our emails or by contacting us.

When you object to direct marketing, we stop using your data for that purpose.

4.7. For advertising measurement and online marketing

When you accept marketing cookies, we may use Google, Meta and LinkedIn in order to:

  • measure whether advertisements lead to a website visit, request or purchase
  • build audiences for advertising campaigns
  • reach previous website visitors again
  • make advertisements more relevant
  • analyse and improve the performance of our campaigns.

This processing is based on your consent.

4.8. To protect our rights

We may process personal data when this is necessary in order to:

  • enforce our agreements
  • retain evidence
  • collect payments
  • obtain legal advice
  • handle a complaint, damage case or judicial proceedings.

This processing is based on our legitimate interest in protecting our rights.

5. Are you obliged to provide your data?

You are not obliged to provide general contact details to us.

Without certain data, however, we may:

  • be unable to handle your request
  • be unable to draw up a correct trade-in offer
  • be unable to submit a financing application
  • be unable to draw up or perform an agreement
  • be unable to register or deliver a vehicle
  • be unable to comply with certain legal obligations.

Our forms indicate which data is mandatory. Other data you may provide voluntarily.

6. With whom do we share your personal data?

We do not sell your personal data.

We may share your data with carefully selected service providers and partners when this is necessary for our services.

6.1. Technical and operational service providers

We use, among other things:

  • Vercel for the hosting and availability of our website
  • Supabase for database, storage and back-end services
  • Pipedrive for the management and follow-up of customers, prospects and commercial requests
  • Resend for sending transactional emails and notifications
  • Airtable for internal administration, data processing and operational workflows
  • Mailchimp for newsletters and commercial email communication
  • Google Analytics and Google Tag Manager for website analytics and the technical management of measurement and marketing tags
  • Meta for advertising measurement and marketing via Facebook and Instagram
  • LinkedIn for advertising measurement, audience analysis and marketing via LinkedIn.

To the extent that these parties process personal data solely on our instructions, they act as processor and may use the data only in accordance with our instructions and applicable law.

Certain parties, including Google, Meta and LinkedIn, may, for some processing operations, determine themselves why and how they use personal data. For those processing operations, they act as independent data controller.

6.2. Financing, credit and leasing partners

When you make a financing, credit, leasing or renting application, we may share the data necessary for your application with one or more of the following partners:

  • Bank Van Breda
  • AlphaCredit
  • EB Lease
  • LeaseBroker
  • KBC
  • ING
  • Belfius
  • ES Finance
  • BNP Paribas Fortis.

We share your data with these parties only when this is necessary in order to:

  • handle your application
  • draw up a proposal or simulation
  • have your creditworthiness assessed
  • prepare or perform an agreement at your request.

The financial partners concerned generally determine themselves how they assess an application, which data they need for this and how long they retain it. For these processing operations, they act as independent data controllers. Their own privacy terms then also apply.

Providing data to a partner does not mean that your application is automatically approved.

6.3. Other recipients

We may also share personal data with:

  • bookkeepers, accountants and auditors
  • lawyers and other professional advisers
  • banks and payment service providers
  • transporters and logistics partners
  • inspection centres
  • repairers and maintenance partners
  • warranty and insurance partners
  • vehicle experts
  • suppliers of vehicle data and vehicle history
  • trade-in and trading partners when this is necessary in order to assess or carry out a vehicle transaction
  • competent government services, supervisory authorities, police and judicial authorities when we are legally obliged to disclose data.

7. Transfer outside the European Economic Area

A number of our service providers belong to international corporate groups. As a result, personal data may in certain cases be processed from or accessible in countries outside the European Economic Area.

When personal data is processed outside the European Economic Area, we ensure a legally permitted transfer mechanism, such as:

  • an adequacy decision of the European Commission
  • standard contractual clauses approved by the European Commission
  • participation in a recognised framework for international data transfers
  • other appropriate legal safeguards.

Where necessary, we take additional technical and organisational measures to protect your personal data.

8. Automated decision-making and profiling

We may use software, market data and historical vehicle data to support our staff with:

  • valuing vehicles
  • drawing up an indicative trade-in offer
  • selecting vehicles that may match your preferences
  • analysing commercial requests
  • measuring and optimising advertisements.

An automatically calculated value or indication does not necessarily constitute a final purchase, sale or financing proposal.

CarMatch does not make decisions that have legal or similarly significant effects on you based solely on automated processing, unless we inform you of this expressly in advance and there is a valid legal basis for doing so.

Financing and credit partners may use automated decision-making for their own assessment. More information on this can be found in the privacy policy of the partner concerned.

9. How long do we retain your personal data?

We do not retain personal data longer than necessary for the purpose for which it was collected.

As general retention periods, we apply:

  • general contact requests and communication: a maximum of two years after the last relevant contact
  • quotations, vehicle searches and incomplete requests: a maximum of two years after the end of the request
  • trade-in requests without a completed transaction: a maximum of two years after the last contact
  • customer, contract, vehicle, transaction, payment and invoicing data: for the duration of the applicable statutory retention period, in principle ten years
  • financing applications with CarMatch: for as long as the application is ongoing and thereafter a maximum of two years, unless a longer retention period is legally required or necessary for the defence of our rights
  • warranty, damage and complaint files: for as long as the file is ongoing and thereafter for the duration of the applicable statutory limitation period
  • marketing data: until you unsubscribe or a maximum of three years after your last meaningful interaction with CarMatch
  • technical security and log data: in principle a maximum of twelve months, unless longer retention is necessary to investigate a security incident
  • cookie data: in accordance with the periods stated in our cookie policy.

Data may be retained longer when this is necessary for:

  • a legal obligation
  • an ongoing investigation
  • judicial proceedings
  • the establishment, exercise or defence of our rights.

After the retention period has expired, we delete or anonymise the data.

10. How do we secure your personal data?

We take appropriate technical and organisational measures to protect personal data against:

  • unauthorised access
  • loss or destruction
  • unauthorised alteration
  • disclosure
  • misuse.

These measures may consist, among other things, of:

  • access restrictions
  • secure connections
  • authentication and password management
  • logging and monitoring
  • regular back-ups
  • security updates
  • contractual agreements with service providers
  • internal procedures and responsibilities.

Although we take reasonable security measures, no information system can guarantee absolute security.

11. What are your rights?

Depending on the circumstances, you have the right to:

  • know which personal data we process about you
  • obtain access to and a copy of your personal data
  • have inaccurate or incomplete data corrected
  • have your personal data erased
  • have the processing temporarily restricted
  • object to processing based on a legitimate interest
  • object to direct marketing at any time
  • receive your data in a structured, commonly used and machine-readable form
  • have your data, where applicable, transferred to another organisation
  • withdraw your consent at any time
  • obtain information about automated decision-making that concerns you.

Withdrawing your consent does not affect the lawfulness of processing that took place before the withdrawal.

These rights are not absolute. We may, for example, continue to retain certain data when this is legally required or necessary for the defence of our rights.

You can exercise your rights via info@carmatch.be.

We may ask you to prove your identity when this is necessary to protect your data and prevent misuse.

We respond to your request in principle within one month. For complex or extensive requests, this period may be extended in accordance with applicable law.

12. Lodging a complaint

If you have a question or complaint about the way we process your personal data, please first contact us via info@carmatch.be.

You also have the right to lodge a complaint with:

Data Protection Authority
Drukpersstraat 35
1000 Brussels
Belgium
Telephone: +32 (0)2 274 48 00
Email: contact@apd-gba.be

You can also contact the supervisory authority of the country where you usually reside or work.

13. Cookies

Our website uses cookies and similar technologies.

Strictly necessary cookies may be placed without consent when they are needed to make the website or a function requested by you work.

Analytical and marketing cookies are only placed after you have given your consent.

More information about the cookies used, their purposes, providers and retention periods can be found in our separate cookie policy.

You can adjust your preferences at any time via the "Cookie settings" link at the bottom of the website.

14. External websites and platforms

Our website may contain links to:

  • WhatsApp
  • Facebook
  • Instagram
  • LinkedIn
  • financing partners
  • insurers
  • other external websites and services.

When you use an external website or service, the party concerned may process personal data in accordance with its own privacy and cookie policy.

CarMatch is not responsible for the privacy practices of external parties over which we have no control.

15. Changes to this privacy policy

We may amend this privacy policy when:

  • our services change
  • we use other technologies or service providers
  • the website is modified
  • our legal obligations change.

The most recent version is always published on our website. At the top of this policy we state the date of the last amendment.

In the event of significant changes, we may inform you additionally via our website, by email or via another appropriate communication channel.

16. Contact

For questions about this privacy policy or about the processing of your personal data, you can contact us via:

CarMatch – privacy contact
MDware CommV
Kortrijksesteenweg 188
9830 Sint-Martens-Latem
Belgium

Email: info@carmatch.be
Telephone: +32 (0)476 38 80 22