Privacy notice – Polestar Community
This document describes how Polestar processes your personal data when you use the Polestar Community platform.
2. Who we are
Polestar Automotive Canada Inc., a Canadian legal entity with company registration number 2021859588 with address 2500, 10303 Japser Avenue Edmonton Alberta, T5J 3N6 Canada, hereinafter referred to as “Polestar”, “we” and “our”, are joint controllers who will process your personal data as described below. Polestar Performance AB is the provider of the technical solution(s) for these processings, and Polestar Automotive Canada Inc. is the provider of sales and marketing services in the country you have chosen to interact with us in.
3. What personal data we collect and why
We process personal data, name, e-mail address, username, Polestar ID, Vehicle Identification Number (VIN), photo, and information provided by you in our contacts, when you use the Polestar Community platform. The purpose of our processing is for our users to share stories, ask questions and engage in discussions with other community members and Polestar directly. We will also post various announcements and updates from Polestar.
The legal basis for our processing is the performance of the contract with you (GDPR, article 6.1 (b)).
4. How long we keep your data
We will retain your personal data until you choose to delete your content, or until we have to delete it following our House Rules (e.g. when the content is disrespectful, bullying etc.).
5. Who we share your personal data with
To provide our products and services and to comply with laws and regulations, we need to share your personal data with others, including other companies within the Polestar Group and third parties assisting us in various parts of our business and helping us to deliver our products and services. The categories of recipients are listed below.
- IT providers, e.g. companies that manage the necessary operation, technical support and maintenance of our IT solutions,
- Polestar affiliates,
- Subcontractors: mail and messaging services, banks and payment service providers, providers of analytics services
- Authorities, e.g. the police, the privacy protection authority, tax authorities, public courts, authorities for official registering of the vehicle, enforcement agencies.
- Business partners, e.g. workshops, finance and leasing companies, insurance companies, legal counsels, printing companies (marketing purposes), advertising agencies/companies, market research companies, and
- Providers of social media platforms.
6. Transfer of your personal data
We strive to process your personal data within the EU/EEA area. However, your personal data will be transferred outside the EU/EEA in some situations, such as when we share your information with a business partner or subcontractor operating outside the EU/EEA.
We always ensure that the same high level of protection applies to your personal data according to the GDPR, even when the data is transferred outside of the EU/EEA. As regards the United Kingdom, the Commission has decided that it ensures an adequate level of protection (article 45 of the GDPR), but regarding transfers to the United States we have entered into EU Model Clauses with all relevant third parties (article 46 of the GDPR). In addition, we take additional technical and organisational security measures when needed, such as encryption (TLS) and pseudonymisation.
7. Your rights
You have specific legal rights granted by the General Data Protection Regulation relating to the personal data we process about you. You can object to our processing of your data, access the data we hold about you, ask for rectification or restriction of your data, request that we delete your data, and finally you can file a complaint with a data protection supervisory authority.
8. Contact information
In order to exercise your rights, please use this web form. If you have any other questions regarding the subject matter of personal data protection, you can contact us or our Data Protection Officer on the contact details stated on polestar.com/privacy-policy.
9. Changes to our Privacy Notice
We reserve the right, at our discretion, to modify our privacy practices and update and make changes to this privacy notice at any time. For this reason, we encourage you to refer to this privacy notice on an ongoing basis. This privacy notice is current as of the date which appears at the top of the document. We will treat your personal data in a manner consistent with the privacy notice under which they were collected, unless we have your consent to treat them differently.