Privacy Policy
Manheim Limited (Manheim) is the Data Controller for the personal data to which this privacy policy applies. You can contact us at our head office address:
Manheim Limited
Central House
Leeds Road
Rothwell
West Yorks
LS26 0JE
You can contact our privacy team by emailing ukca.dataprotection@coxautoinc.com.
What personal information do we collect and what do we do with it?
Manheim collects and uses personal data relating to you such as name, address, email addresses etc when you complete registration forms or send emails to us. We may also record telephone calls made to telephone numbers included on our website.
In cases where you are seeking to open accounts with us which have a credit facility, we will conduct appropriate anti-fraud and money laundering checks using publicly available sources such as press reports and credit reference agencies. We will share personal data relating to you with the other members of the Cox Automotive UK Group for direct marketing purposes.
The majority of the personal data we obtain about you is used for the purposes of administering your account and providing you with services relevant to the buying and selling of vehicles. We also user personal data for the purposes of sending direct marketing which may involve obtaining personal data about you from publicly available sources. This will generally be from your website or from publicly available directories.
We capture CCTV footage via cameras situated on our auctions sites and in the auction lanes and we record telephone calls made to our customer facing teams.
We process personal data on the following legal grounds:
• Where you have consented to the processing, this will generally apply only to processing for direct marketing purposes. In such circumstances you can withdraw your consent at any time by contacting us by email or telephone.
• Where it is necessary for the performance of a contract, this will cover the majority of the processing we undertake with regards to providing you with the products and services requested from us and administering your account.
• Where it is in our legitimate commercial interests to process your personal data subject to your rights as set out later in this policy. Where the processing is not covered by either of the two grounds above it will be processed on this basis.
Who your personal information may be disclosed to
Manheim will or may pass your personal information on to the following recipients:
• Employees and contractors of Manheim
• Other members of the Cox Automotive UK Group
• Third Party Suppliers operating on our behalf where necessary to provide you with the services you have requested
• Law enforcement agencies, Regulators and other investigative bodies where necessary for the prevention, detection or investigation of criminal or as required by law or otherwise to enable them to effectively carry out their functions
• We may transfer, sell or assign any of the personal information described in this Policy to third parties as a result of a sale, merger, consolidation, change of control, transfer of assets or reorganisation of our business (or any part of our group).
We will disclose your information to a party involved in the sale of a vehicle in the event of a dispute relating to that sale.
Overseas Transfers of Personal Information
We will transfer your personal information to the following countries or territories:
• To our parent company Cox Automotive Inc (CAI) in the United States of America (the USA) & Brazil. We do this using standard contractual clauses as our lawful safeguard.
Your rights in relation to your personal information
You have the right to:
• Object to the processing of your personal data in certain circumstances
• Object to the use of your personal information for direct marketing purposes
• Request the deletion of your personal data in certain circumstances
• Request access to the personal information we hold about you
• Request that we rectify inaccurate personal information we hold about you
• Restrict the way in which we can use your personal information in certain circumstances
• Request the portability of your data in certain circumstances
• You have the right, where personal information is processed on the basis of consent, to withdraw that consent at any time
• If you are unhappy with the way in which we have handled your personal information you have the right to lodge a complaint with the Information Commissioner’s Office. You can contact them at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or online at www.ico.org.uk.
Retention & disposal of personal information
We have a policy of only retaining your personal data for as long as we need it. We will retain personal data for as long as you have an active account with us and for as long as we are legally required to retain it once your account is closed. We will not retain your personal information for longer than 6 years maximum.
Automated decision making
We do not undertake any automated decision making using personal information we collect about you.
Cookies
The law on cookies changed in May 2011. Under the revised regulations, the requirement is not just to provide clear information about the cookies but also to obtain consent from users or subscribers to store a cookie on their device. It has been designed to protect online privacy by making consumers aware of how personal information about them is collected by websites, and enabling them to choose whether or not they want it to happen. Please read on for more information.
What is a cookie?
A cookie is a small piece of data that is sent from our web server to your browser, which is saved on the hard drive of your computer, smartphone or other device.
A cookie cannot:
• read data off your hard disk or read cookie files created by other sites;
• damage your system;
• run programmes on your computer; or
• deliver viruses.
You can change your browser settings to refuse cookies or alert you when a cookie is being sent at any time. If you do choose not to accept cookies, some features of the Site may not work as intended (e.g. services accessed while logged in, customised areas of the Site). We do not use cookies to identify you personally, except when you opt to use the ‘Remember me’ facility when logging in.
There are two broad classes of cookie: session and permanent.
Session cookies
These are used to keep track of information needed by a user and their browser on their journey through a website. Session cookies have a short lifetime and expire within a few minutes of the user leaving the site. Occasionally we will use 30 Day cookies which are similar to Session cookies but last a bit longer. They remember basic data to help improve the service you receive from us (for example, remembering vehicles that you have viewed in the last 30 days).
Permanent Cookies
These are stored on your computer and are not deleted when the browser is closed. This is so they can retain your preferences for a particular website, allowing those preferences to be used in future browsing sessions.
Permanent cookies can be used to analyse users' surfing behaviour within the Site, so that we can improve our services and allows us to prioritise our enhancements to the Site.
What we use cookies for
• remember that you have used the Site before; this means we can identify the number of unique visitors we receive to different parts of the Site. This allows us to make sure we have enough capacity for the number of users that we get and make sure that the Site runs fast enough;
• to keep you logged in for the duration of your visit, which enables you to complete certain actions on the Site, for example, move from one page to another within the Site, adding cars to a shortlist, using watchlists, viewing catalogues and using Simulcast.
• store your preferences or your user name and password so that you do not need to input these every time you visit the Site;
• customise elements of the layout and/or content of the pages of the Site for you;
• collect statistical information about how you use the Site so that we can improve the Site;
• gather information about the pages on the Site that you visit, and also other information about other websites that you visit, so as to place you in a "market segment"; and
• enable basic web traffic analysis using Google Analytics.
We also use some cookies from trusted third party sources to enable us to provide you with certain features on the Site, for example our live chat facility which uses cookies to enable the chat software to work.
When you access the Site you will receive a message advising you that if you continue to use the Site, you are consenting to cookies being placed on your device in order to maximise your experience on the Site and allow us to make improvements
Removing some of our cookies may seriously disrupt your use of the Site. You can always come back to this Privacy Policy at any time to find out how to change your preferences. You will find a link to this policy at the bottom of all of our web pages.
Information is collected by reference to the IP address that you are using and includes information about the county and city you are in, together with the name of your internet service provider. The information is sometimes used to place interest-based advertisements on the Site which it is believed will be relevant to your market segment. For more information about this type of interest based advertising, and about how to turn this feature off please visit www.youronlinechoices.com/uk/ .
Most web browsers automatically accept cookies but, if you prefer, you can change your browser to prevent that or to notify you each time a cookie is set. Visiting www.allaboutcookies.org will provide information on settings within your browser as well as other useful information on cookies. Please note however, that by blocking or deleting cookies used on the Site you may not be able to take full advantage of the Site if you do so.
How do I disable cookies?
You can change your browser settings to refuse cookies or alert you when a cookie is being sent at any time.
Further guidance on how to control and delete cookies can be found at http://www.allaboutcookies.org. Please note that removing some of our cookies may seriously disrupt your use of the Site and some features may not work as intended.
We do use some cookies from trusted third party sources to enable us to provide you with certain features on the Site and have included any relevant third parties on our cookie list so that you can control the cookies they place more easily:
Cookies list
Cookie |
Content |
Description |
Expires |
|||
ASP.NET_SessionId |
a 120-bit random number that is represented by a 20-character string |
ASP.NET session ID |
at end of browser session |
|||
__CSRFCOOKIE |
a random 32 hexadecimal digits string |
Used for protection against CSRF attacks |
at end of browser session |
|||
cb-enabled |
string |
If an end-user has agreed with the cookies policy then this flag is set to 'accepted' |
1 year |
|||
remarketing-web |
encrypted sequence containing user access ticket |
User authentication ticket - is created once user has successfully logged in |
at end of browser session |
|||
Sitecore Analytics |
||||||
SC_ANALYTICS_GLOBAL_COOKIE |
To identify repeat visits from a single user, Sitecore sends a persistent session cookie to the web client. The name of the persistent session cookie is SC_ANALYTICS_GLOBAL_COOKIE. |
one year after the last page requested from the solution by the web client |
one year after the last page requested from the solution by the web client |
|||
SC_ANALYTICS_SESSION_COOK |
To identify a sequence of HTTP requests from a single user, Sitecore sends an Engagement Analytics session cookie to the web client. The name of the session cookie is SC_ANALYTICS_SESSION_COOKIE. The value of the analytics session cookie before the first pipe character ("|") matches a value in the Visited column of the Visits table to identify an analytics visit record in the Analytics database. |
when you close your browser |
at end of browser session |
|||
Sitecore Backend - not populated for front-end users |
||||||
scContentEditorFoldersWidth |
Number |
|
3 months |
|||
sc_fv |
Text |
|
at end of browser session |
|||
shell#lang |
language code |
|
at end of browser session |
|||
sitecore_starttab |
Text |
|
3 months |
|||
sitecore_starturl |
URL |
|
at end of browser session |
|||
sitecore_userticket |
encrypted sequence containing user access ticket |
|
at end of browser session |
|||
Cookie |
Name |
Purpose |
Type and Duration |
_ga |
|
Used to distinguish users. |
2 years |
_gat |
Used to throttle request rate. |
10 minutes |
|
__utma |
Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __utma cookies exists. The cookie is updated every time data is sent to Google Analytics. |
2 years from set/update |
|
__utmt |
Used to throttle request rate. |
10 minutes |
|
__utmb |
Used to determine new sessions/visits. The cookie is created when the javascript library executes and no existing __utmb cookies exists. The cookie is updated every time data is sent to Google Analytics. |
30 mins from set/update |
|
__utmc |
Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit. |
End of browser session |
|
__utmz |
Stores the traffic source or campaign that explains how the user reached your site. The cookie is created when the javascript library executes and is updated every time data is sent to Google Analytics. |
6 months from set/update |
|
__utmv |
Used to store visitor-level custom variable data. This cookie is created when a developer uses the setCustomVar method with a visitor level custom variable. This cookie was also used for the deprecated _setVar method. The cookie is updated every time data is sent to Google Analytics. |
2 years from set/update |
|
visitor_id |
Pardot |
Visitor Cookie: The visitor cookie includes the name “visitor_id” plus the unique identifier for your account, |
10 years. |
pi_opt_in |
The persistent cookie named “pi_opt_in” is what we use to stay in compliance with the “Do Not Track” initiative |
10 years. |
|
Live Advisor |
Live Advisor |
This is used by the software to determine whether a visitor has been on the site before, for the purpose of identifying returning visitors (a visitor that deletes their cookies after a visit will not show as a returning visitor in live advisor). The cookie does not store any specific visitor or visit information, as that is stored in the Live Advisor database. |
5 years |
cb-enabled
|
Website |
This cookie is created when user selects one of options on the cookie bar; Continue or Disabled. It is an identifier whether user is allowing to use cookie or not. |
1 year |
Remarketing-web
|
Website |
We store this cookie to store user information securely by using standard cryptographic mechanism. We store information in cookie in order to set remember me and time out functionality |