Updated 29.6.2026

1.       General information

This Privacy Notice describes how Kamux Group (hereinafter “we” or “Kamux”) processes your personal data in connection with the sale and marketing of vehicles. By reading this notice, you will learn what personal data Kamux collects, how the data is used and to whom it is disclosed, as well as how you, as a data subject, can exercise your rights.

The Kamux Group consists of Kamux Oyj, Kamux Suomi Oy, Kamux AB, Kamux Auto GmbH, and Webcars Logistics AB. Personal data may be shared between companies within the Group where necessary, for example for handling matters related to the sale and purchase of vehicles, providing the best possible service, and for internal reporting, statistics, and analytics.

Kamux’s business concept focuses on the sale of used vehicles. This Privacy Notice applies to all products and services offered by Kamux in its dealerships, showrooms, websites, or through marketing activities (hereinafter the “Products” and “Services”). Where applicable, this Privacy Notice also applies to partners and stakeholders involved in Kamux’s business operations.

Kamux is committed to protecting your privacy and processes your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws and regulations.

2.       Purposes and legal bases for the processing of personal data

Scheduling appointments to see vehicles and take test drives

We process your personal data in order to schedule and manage appointments to see vehicles and take test drives. This applies when you express interest in a specific vehicle, for example by submitting a contact form on our website, reserving a vehicle, booking a test drive online, or contacting us by phone or email.

When you book an appointment to see a vehicle or test drive it, we collect and store your name and contact details (such as your email address and telephone number). This allows us to confirm your appointment, notify you of any changes, and ensure that the selected vehicle is available at the agreed time.

If you book a test drive, we are required to verify your valid driving licence and retain a copy of it. Copies of driving licences are stored for nine (9) months for the purposes of investigating any potential misuse of the vehicle, recovering parking fines or speeding penalties incurred during the test drive, and demonstrating, where necessary, that the vehicle was driven by a person legally entitled to do so.

Legal bases for the processing: We process your personal data because it is necessary to take steps at your request before entering into a vehicle sales contract, such as responding to enquiries, arranging vehicle inspections, and organising test drives. We retain copies of driving licences based on our legitimate interest in protecting our vehicles and business. This includes investigating any misuse of a vehicle, handling parking fines or speeding penalties, and managing any related claims that may arise after a test drive.

Buying and selling vehicles

Kamux’s business consists of buying and selling used vehicles. We process your personal data in order to carry out processes related to these transactions, from preparing offers and conducting contract negotiations through to finalising the sale and fulfilling our legal and regulatory obligations.

In practice, this means that we process basic personal data, such as your name and contact details (address, email address, and telephone number), as well as your personal identity number or date of birth where necessary. This information is used to verify your identity, prepare sales agreements, and complete tasks related to vehicle registration or the transfer of ownership. We also process your bank details (such as your account number) to receive payments and, where applicable, to issue refunds.

When assessing a trade-in vehicle and completing the transaction, we also collect information relating to the vehicle itself, such as the registration number, vehicle identification details, and ownership history. This information is used to assess the vehicle’s suitability for resale and to ensure the accuracy and traceability of the transaction.

In addition, we retain records of your transaction and contact history, such as previous purchases, requests for quotations, and customer service interactions. This helps us to provide better service during future interactions and to address matters such as complaints or questions relating to contractual terms, where necessary.

Legal bases for the processing: The primary legal basis for processing your personal data is the performance of a contract between you and us relating to the purchase or sale of a vehicle, as well as compliance with legal obligations applicable to vehicle transactions, including requirements related to vehicle registration and ownership transfers. In certain cases, processing is also based on our legitimate interest in maintaining and developing the customer relationship, for example by using information about previous purchases to support customer service activities.

Arranging car financing and insurance

We offer our customers the option to arrange vehicle financing and insurance through Kamux’s partner organisations, such as financing institutions and insurance companies. If you choose to use this service, our sales staff may assist you with submitting a financing application or taking out insurance.

In these situations, we process your personal data, such as your name, contact details, personal identity number, and information relating to the vehicle, for the purpose of requesting financing or insurance offers and preparing the relevant applications. Where necessary, we transfer your personal data to our partner organisations. These partners process the data as independent data controllers in accordance with their own privacy practices.

Legal bases for the processing: We process your personal data in order to take steps at your request before entering into a financing or insurance contract, as well as the provision of the service you have requested. In certain situations, we may also process your personal data based on our legitimate interest in assisting you with the transaction, ensuring a smooth customer journey, and improving the overall customer experience.

Customer service

We process your personal data in order to provide customer service. You may contact us, for example, by completing a contact form on our website or by calling our customer service line. We use the information you provide to respond to your enquiries, assist you with matters related to our Services, and follow up on the progress of your customer service request.

When you contact us via an online form, we collect your name, email address, telephone number, and any other information you choose to provide voluntarily, such as details relating to a vehicle or a previous purchase. If you contact us by telephone, your call is routed through our customer service switchboard.

Customer service calls are recorded for the purposes of quality assurance, training, and service development. Recordings may also be used to clarify individual customer interactions, such as handling complaints or resolving disputes.

Legal bases for the processing: The legal basis for processing your personal data is our legitimate interest in responding to customer enquiries and developing our customer service operations. In some cases, we also process personal data where this is necessary to manage an existing customer relationship or to take steps related to a potential transaction. The processing of call recordings is based on our legitimate interest in ensuring service quality and maintaining appropriate documentation of customer interactions.

Internal reporting, statistics and analytics

We also process personal data for the purposes of internal administration and the development of our Services. Our aim is to improve the quality and efficiency of our operations, enhance the customer experience, and develop our business based on customer needs.

In this context, we use a limited set of customer data for internal reporting, statistical purposes, and analysis of our service processes. This may include reviewing customer interaction history, such as enquiries, vehicle reservations, and customer service interactions, to better understand how our services are used and how we can improve them. The data is used for internal reporting and statistical analysis, for example to assess how frequently certain services are used or which matters customers most often contact customer service about.

We also use cookies and similar technologies to analyse the use of our website and for statistical purposes. This allows us to understand, for example, how different sections of the website are used, which vehicles attract the most interest, how long visitors spend on our pages, and how users navigate between pages.

Where possible, we aim to use data in an aggregated, anonymised, or pseudonymised form, so that individual customers cannot be identified. In some cases, however, we may review individual situations, for example for internal quality control, investigating errors or incidents, or diagnosing system issues. In such cases, processing is limited and carried out only to the extent necessary.

Legal bases for the processing: The legal basis for processing personal data is our legitimate interest in developing our business, ensuring service quality, and improving the customer experience. These interests are balanced against your rights and freedoms, and the processing is limited, proportionate, and does not involve automated decision-making. Processing based on cookies and similar technologies for statistical and analytical purposes is carried out on the basis of your consent.

Handling complaints and warranty matters

We process your personal data in order to handle complaints and matters relating to vehicle defects and warranty obligations. This includes situations where you contact us, for example, to request a repair, arrange warranty-covered servicing, or submit another type of service request.

When you complete a complaint form on our website, we collect your name, contact details (email address and telephone number), as well as vehicle identification details, such as the registration number and the vehicle’s make and model. This information is used to process your complaint, communicate with you about its progress, and document the matter.

In connection with warranty and defect liability matters, we may process your personal data to arrange the ordering of spare parts or to book service appointments. In these cases, in addition to vehicle identification details, we may also need to review previous service or purchase information in order to verify warranty coverage and ensure that the correct parts or actions are taken.

Legal bases for the processing: The legal basis for processing your personal data is the performance of an existing customer contract and the fulfilment of related contractual obligations, including warranty responsibilities. In certain situations, processing may also be based on our legitimate interest in responding to customer feedback, ensuring the quality of our products, and managing warranty and defect liability matters appropriately.

Marketing, customer surveys and competitions

We process your personal data for marketing purposes, so that we can inform you about current offers, services, events, and customer surveys. Marketing activities may be carried out by Kamux directly and, in some cases, in cooperation with selected partners.

When we organise marketing campaigns, events, or competitions, we may collect personal data that you provide when participating, such as your contact details or information about your interests. Participation is voluntary, and in these cases processing is based on your consent, which you may withdraw at any time.

We also use cookies and similar technologies to personalise marketing content. Through cookies, we may collect information about how you use our website or which vehicles you are interested in. This information allows us to display advertisements that are more relevant to you across different channels. Such personalised advertising is always based on your consent, which is requested separately through the consent banner on our website. You may withdraw your consent or change your cookie preferences at any time.

Legal bases for the processing: The legal basis for processing personal data for marketing purposes is our legitimate interest in promoting our business and maintaining customer relationships.

However, electronic direct marketing, such as sending marketing emails or text messages, is always based on your consent, unless the marketing concerns products or services similar to those you have already purchased from us. In such cases, we may use your previously provided contact details without separate consent, but you always have the right to object to this type of marketing at any time.

You have the right to object at any time to the processing of your personal data for direct marketing purposes, including any profiling related to the targeting of marketing communications. You can withdraw your consent easily, for example by using the unsubscribe link included in each marketing email or by contacting us directly.

Newsletter and search alerts

When you subscribe to Kamux’s newsletter or order the search alert service, we process the contact details you provide, such as your email address, as well as any other information you choose to provide voluntarily (for example your name, telephone number, postal code, and areas of interest).

When you subscribe to the newsletter, your personal data is used to send you newsletters and to tailor their content based on your stated interests and, where relevant, your geographical location. This allows us to provide you with up-to-date information, news, and offers relating to Kamux’s services and products.

When you subscribe to the search alert service, we process your email address and any search criteria you define, such as vehicle make, model, price range, or location. This enables us to notify you when a vehicle matching your search criteria becomes available for sale.

The purpose of this processing is to provide you with relevant information and offers that correspond to your stated interests and, where applicable, your geographical location.

Legal bases for the processing: The processing of your personal data is based on your consent, which you may withdraw at any time, for example by using the unsubscribe link included at the end of each message or by contacting us directly.

Compliance with legal obligations

We also process your personal data in order to comply with legal obligations applicable to our operations. In these cases, the processing of personal data is based on legal requirements, rather than on a contract or your consent.

For example, we retain documents related to vehicle transactions, such as sales agreements and payment records, in accordance with applicable accounting legislation. Accounting laws require us to retain certain documents for a minimum of six (6) years following the end of the financial year.

We also process personal data for the purposes of vehicle registration and transfer of ownership where we are legally required to submit information to Traficom or other competent authorities. In these situations, we may process your name, personal identity number, contact details, and vehicle identification details.

In addition, we may process your personal data for other statutory purposes, such as taxation, responding to requests from public authorities, or complying with anti-money laundering legislation, where required under the laws applicable to our business.

Legal bases for the processing: The legal basis for processing your personal data is compliance with a legal obligations to which we are subject, in accordance with Article 6(1)(c) of the GDPR. These obligations arise from, among other things, accounting legislation, vehicle registration regulations, tax laws, and anti-money laundering requirements, as well as obligations to provide information to competent authorities when required by law.

Sharing personal data within the Kamux Group

Personal data may be shared between companies within the Kamux group where this is necessary, for example, to handle matters related to the buying or selling of vehicles, to provide the most appropriate service to you, and to carry out internal reporting, statistics, and analytics.

We may share the personal data you provide with other companies within our group where this is necessary to handle matters related to the sale of a vehicle. The purpose of such data sharing is to enable the assessment and promotion of your vehicle for sale within the group company whose market, location, or business operations are best suited to the specific vehicle. This may, for example, speed up contact with you and improve the quality of the offer you receive.

Legal bases for the processing: The processing of personal data and the sharing of data between group companies is based on our legitimate interest. This legitimate interest consists of organising vehicle purchase and sales activities efficiently within the group, providing you with the service that is best suited to your needs, and producing internal reporting, statistics, and analytics.

MyKamux Customer Portal

MyKamux is a self-service portal through which registered customers can view their own customer data, manage their marketing consents, and purchase additional products and services related to a vehicle they have previously purchased.

To create a MyKamux account, you provide your name and contact details (email address or phone number). We verify your identity during registration using a one-time confirmation code sent to the contact details you provided. Login is also possible using strong electronic identification.

Viewing your customer data and purchase history held by Kamux requires strong electronic identification using Finnish online banking credentials or another approved method. Following successful strong identification, your MyKamux account is linked to your existing Kamux customer record, after which you can view the contact details Kamux holds about you. Through the portal, you can also view and change the marketing consents you have given. In addition, through the portal you can purchase additional products and services related to the use of your vehicle, for the processing of which we need your contact details, payment details, and order information in order to fulfil and deliver the order and to handle related customer service.

Legal bases for the processing: The primary legal basis for the processing is the performance of a contract and the taking of pre-contractual steps at the data subject's request, including creating and maintaining the account and processing purchases made through the portal. Linking the account to the Kamux customer record following strong identification is necessary in order to provide the MyKamux service you have requested. With regard to viewing customer data, the processing is additionally based on our legitimate interest in enabling you to access, without undue effort, the data we hold on the basis of an existing customer relationship. The strong electronic identification service is provided by a third-party identification service provider, which processes your personal data as an independent controller in accordance with its own terms and privacy policies.

3.       Personal data processed and the sources of personal data

We collect and process only such personal data that are relevant and necessary for the purposes described in this privacy notice.

When you order or purchase Products or Services from Us, enter into an agreement with Us, or when we are subject to a legal obligation to request your personal data, we process your personal data in order to perform the contract or comply with applicable legal requirements. In each such situation, we will inform you which personal data is mandatory to provide.

Personal identity numbers are processed only for purposes permitted by law, where reliable identification of the individual is necessary. Such situations may include, for example, the sale or purchase of vehicles, or matters relating to credit arrangements or debt collection. For direct marketing purposes addressed to potential or former customers, we process contact details only, as well as the marketing-related data described above.

We collect personal data from several sources. Most commonly, we collect data directly from you, for example when you contact us, visit one of our premises, use our Products or Services (including online services and social media), participate in our marketing activities, or enter into an agreement with us or order our Products or Services.

We also collect certain data automatically when you use our Products or Services, such as when you access or interact with our online services. In addition, we may receive personal data from service providers, such as vehicle repair services, vehicle information service providers, and marketing service providers, where this is necessary for the provision of our services.

In some cases, we obtain personal data from third parties, including population register services, local vehicle registration authorities, and other public or private registers. This may also include information from publicly available sources, such as contact information services, vehicle information services, and credit reference agencies.

Finally, we may process recordings from CCTV systems located on our premises for security and safety purposes.

4.       Retention of Personal data

We retain the personal data we collect only for as long as necessary to fulfil the purposes described in this privacy notice, unless a longer retention period is required by law (for example, under accounting or reporting obligations) or the data is needed to establish, exercise, or defend our legal rights. Once the applicable retention period has expired, personal data is deleted or anonymised.

Retention periods vary depending on the purpose of processing and the type of personal data involved.

Details of the personal data we process and the applicable retention periods are set out in the table below.

5.       Recipients of Personal data

Your personal data may be processed by business units within the Kamux Group in different countries to the extent necessary for providing services, managing customer relationships, and developing our business.

In addition, we disclose personal data to selected external service providers and other third parties where this is necessary for the provision and maintenance of services, ensuring security, or complying with legal obligations. The categories of recipients to whom personal data may be disclosed include the following:

6.       Transfers of personal data to third countries

Some of the service providers we use, or their subcontractors, are located outside the EU/EEA. This means that in certain situations, your personal data may be transferred to and processed in countries outside the European Union, so-called third countries.

When personal data is transferred to third countries, we ensure that an adequate level of data protection is maintained. This is achieved, for example, by using the European Commission’s Standard Contractual Clauses (SCCs) or other appropriate safeguards in accordance with applicable data protection legislation.

Below are examples of situations in which your personal data may be transferred to a third country, as well as the safeguards applied to protect your personal data.