Your privacy is important to Kia Corporation and its subsidiaries and affiliates (collectively, “Kia” “we,” “us” or “our”), as is your trust in Kia’s products and services.
This Kia Privacy Policy (this “Privacy Policy”) describes how we collect, use, and share your personal information through our Mobile Warranty Book Application including users who provide information through any of our Mobile Warranty Book Application contact forms, and any features, promotions, offers, or services provided by this Mobile Application (collectively the “Application”). This Privacy Policy also describes, as applicable, your rights regarding access, deletion, opting-out, and correction of your personal information.
Not Covered by this Policy: This Policy only applies to the Application and not to any other Kia website or online service, unless specifically indicated. It does not apply to any third-party websites even though we may link to these sites on our Application.
By disclosing your personal information to us or using our Application, you understand and agree that Kia may collect, transfer, use, and disclose your personal information in accordance with this Privacy Policy. For example, you consent to Kia’s transfer to and retention of your information within South Korea, which may have less protections for your personal information than the jurisdiction where you live. If required by applicable law, we will obtain your consent to our collection, use, transfer and disclosure of your personal information. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY OR OUR TERMS, THEN PLEASE DO NOT DISCLOSE PERSONAL INFORMATION TO US OR USE THE Application.
We collect information about you from several sources: directly from you, from third parties, and automatically through your use of our Application and interactions with us. For example, we collect personal information that you provide directly by completing one of the forms on our Application. We and our third party services providers also automatically collect usage data when you use the Application via tracking technologies; web analytics; and log files. We may combine the information we collect from these various sources.
Certain privacy laws, such as the California Consumer Privacy Act (“CCPA”), require that we disclose the categories of personal information that we may collect about individuals. While the actual information we collect varies depending upon the circumstances, generally we may collect the following categories of personal information:
Kia uses the information collected above in several different ways. And we may use your information individually or combine it with other information to generate aggregate statistical information. The primary uses of your information include:
Anonymous and De-identified Information. We also may de-identify information and create anonymous and aggregated data sets and reports to assess, improve, and develop our business, products, and services; prepare benchmarking reports; and for other research and analytics purposes.
We disclose personal information to third parties to provide and improve our Application, products, and services; to reach you with more relevant information and offers; to provide you with information about third party offers you may be interested in; and to honor your consent or authorization. We also disclose personal information to the entities listed and for the purposes set out below:
Disclosed for a business purpose. In general, we may disclose the following categories of personal information for the business purposes described above:
Sale. We do not disclose personal information through the Application to third parties in exchange for direct monetary compensation from such third parties. We may disclose or make available personal information collected through the Application to third parties to receive certain services or benefits from them—for example, when we allow third party tags to collect information such as browsing history on our Application to improve and measure our ad campaigns. This disclosure can be considered a sale under certain laws, like the CCPA, and the information “sold” in this manner includes: identifiers, customer records, commercial information, Internet or other electronic network usage data, and profiles and inferences to affiliates and subsidiaries, and analytics providers. These entities are contractually required to use the personal information we disclose exclusively to provide their respective services, and not for their own independent purposes.
Subject to applicable law, you may request access to, correction, or deletion of certain of your personal information by contacting us at https://www.kia.com. We will endeavor to respond to those requests in the time periods required by applicable laws. We may request certain information from you to verify your identity before responding to a request. We offer these options to you as general rights, but you may have further specific rights that are outlined in our jurisdiction-specific sections below (for example, residents of California, Brazil, China, Saudi Arabia, the European Union and the United Kingdom should refer to jurisdiction-specific sections within this Privacy Policy).
Opting-Out of Certain Communications. Kia offers you the opportunity to opt-out from marketing communications from Kia, and to opt out of certain disclosures of personal information to third parties.
If the processing of personal information about you is subject to European Union or United Kingdom data protection law because it was collected from you as a European Union or United Kingdom resident, you have certain rights with respect to that personal information:
To make such requests, please contact https://www.kia.com. The controller of your personal information is Kia Corporation, 12 Heolleung-ro, Seocho-gu, Seoul, 06797, Republic of Korea. If you have any concerns about data protection, you can also contact our company data protection officer from https://www.kia.com. Our representative in the European Union is Kia Europe GmbH, Theodor-Heuss-Allee 11, 60486 Frankfurt am Main. If you are a European Union resident, you have the right to lodge a complaint with a supervisory authority of the European Member state in which you reside. If you are a resident of the United Kingdom, you can submit a complaint to the Information Commissioner Office (see https://ico.org.uk/make-a-complaint/). However, we encourage you to first contact us with any questions or concerns.
We rely on different lawful bases for collecting and processing personal information about you, for example, with your consent and/or as necessary to provide the products and services you use, operate our Application, business, and meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.
If you are a resident of the European Union, please be sure to review the Additional Information for EU Residents section below for vital information, as required by the GDPR.
We use security policies, procedures, and tools which are reasonably designed to safeguard the personal information we collect. However, the security of information transmitted through the Internet can never be guaranteed regardless of the level of security. We are not responsible for any interception or interruption of any communications through the Internet or for changes to or losses of data. Users of our Application are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of any of our Application. In order to protect you and your data, we may suspend your use of any of the Application, without notice, pending an investigation, if any security issue arises. Access to and use of password protected and/or secure areas of any of the Application, if any, are restricted to authorized users only. Unauthorized access to such areas is prohibited and may lead to criminal prosecution or civil action.
We will also take reasonable and practical measures to ensure that unnecessary personal information is not collected. We will only retain your personal information for the period of time necessary to achieve the purposes stated in this Privacy Policy, unless longer retention is required or allowed by applicable law.
We may offer links to or from our Application to other websites within the Kia family as well as to websites, services, and resources operated by third parties. We offer links to third party websites so that you can conveniently visit our vendors and advertisers or locate other content likely to be of interest to you. We are not responsible for the privacy practices, content, or policies of websites operated by third parties and urge you to inquire about their privacy and information sharing practices before providing any personal information. In the event that you provide personal information to any third party website or service, you understand that Kia is not responsible for such third parties’ use or misuse of your personal information. You further acknowledge and agree that Kia shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such content, goods or services available on or through any such thirdparty website, service, or resource.
No part of our Application is directed to or designed to attract anyone under the age of eighteen (18). Our Application does not sell products or services for purchase by children, and we do not knowingly solicit or collect personal information from children. If you are under the age of 18 (or a minor in the jurisdiction from which you are accessing our Application), please do not provide us with your personal information. If you are a parent or guardian of someone under the age of eighteen, please do not provide us with their personal information. If you believe we have collected information about a child, please contact us at https://www.kia.com so that we may take appropriate steps to delete this information.
Kia reserves the right to change this Privacy Policy at any time. Kia will use, share, and disclose all personal and other user information in accordance with the Privacy Policy in effect at the time the information is collected. We will post any changes to this Privacy Policy on this page so check back frequently so that you are always aware of what information we collect, how we use it, and under what circumstances we may disclose it. Continued interaction with us following changes to this Privacy Policy will mean that you accept the changes.
Please contact us at https://www.kia.com if you have any complaints or questions about this Privacy Policy or our information practices.
The terms below apply to the processing of personal data in the context of activities of a controller or processor in the European Union as well as to the processing of personal data of data subjects who are in the European Union by a controller or processor not established in the European Union, where the processing activities are related to:
Lawful bases for processing your personal data:
We process your personal data for the aforementioned purposes based on the following lawful bases:
Data processing when using our contact form:
If you send us inquiries via our contact form at https://www.kia.com, your message, including the data you provide, will be stored and processed solely for the purpose of contacting you as well as for processing and answering your inquiry. We do disclose this data to third parties unless it is necessary in the context of processing and answering your request or you have given us your corresponding consent. This involves the following data:
If you contact us within the scope of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed in accordance with Art. 6(1)(b) GDPR along with Art. 6(1)(f) GDPR for the protection of our legitimate interests for the proper response to customer and contact inquiries. The data is deleted as soon as the purpose of the contact has been fulfilled.
Processors:
We use data processors in the course of processing your data. A processor is a natural or legal person, public authority, agency or other body, which processes personal data on behalf of the controller. Processors do not use the data for their own purposes; instead, they carry out data processing exclusively on the controller’s behalf. Processors only act according to our instructions and have been contractually obligated to comply with data protection regulations in accordance with Art. 28 GDPR.
Recipients outside the EU:
Where processing in third countries takes place, in certain cases, this occurs only if the adequacy of the level of data protection in the third country has been confirmed by the European Commission in accordance with Article 45 GDPR, based on the EU standard contractual clauses, or if it has otherwise been ensured that the level of protection afforded to data at the recipient’s end is adequate.
Recipients (or categories of recipients) of the personal data:
Our company, our subsidiaries and affiliates (to the extent necessary to process and answer your request), and our third-party service providers (to the extent necessary to process and answer your request).
This section provides additional information for data subjects located in Brazil about their personal information, as required under Brazilian privacy laws, including the Brazilian General Data Protection Law (“LGPD”). International transfer. You consent to Kia’s transfer to and retention of your information within South Korea, which may have less protections for your personal information than Brazil.
Retention Period. We will retain personal data for compliance with legal or regulatory obligations. If permitted by law, we may also retain personal data for longer periods of time than required by law if it is in our legitimate interests (or to protect our rights).
Your Rights Under LGPD, when we act as controller of your personal information, you may exercise certain rights, as described below:
Submitting Requests. You may submit requests to us at https://www.kia.com.br. If you have any concerns about data protection, you can also contact our Brazilian data protection officer from https://www.kia.com.br In order to make a request, you will need to provide us with your name, email address, telephone number, and mailing address.
Please note that we may require additional information from you in order to verify your request.
There may be circumstances in which we will not be able to honor your request. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or for other permitted purposes. However, we will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request.