This Hyundai Privacy Policy (this "Privacy Policy") describes how we collect, use, and share your personal information through our global website at https://hyundai-way.com/ including users who provide information through any of our website's contact forms, and any features, promotions, offers, or services provided by this website (collectively the "Site"). This Privacy Policy also describes, as applicable, your rights regarding access, deletion, opting-out, and correction of your personal information.
Not Covered by this Policy: This Policy only applies to the Site and not to any other Hyundai website or online service, unless specifically indicated. It does not apply to any third-party websites even though we may link to these sites on our Site
User Consent
By disclosing your personal information to us or using our Site, you understand and agree that Hyundai may collect, transfer, use, and disclose your personal information in accordance with this Privacy Policy. For example, you consent to Hyundai's transfer to and retention of your information within South Korea, which may have less protections for your personal information than the jurisdiction where you live. If required by applicable law, we will obtain your consent to our collection, use, transfer and disclosure of your personal information. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY OR OUR TERMS, THEN PLEASE DO NOT DISCLOSE PERSONAL INFORMATION TO US OR USE THE Site.
Personal Information We Collect and How We Collect It
We collect information about you from several sources: directly from you, from third parties, and automatically through your use of our Site and interactions with us. For example, we collect personal information that you provide directly by completing one of the forms on our Site or by signing up for our newsletter. We and our third party services providers also automatically collect usage data when you use the Site via cookies, web beacons, and other tracking technologies; web analytics; and log files. We may combine the information we collect from these various sources.
Categories of Personal Information Collected
Certain privacy laws, such as the California Consumer Privacy Act ("CCPA"), require that we disclose the categories of personal information that we may collect about individuals. While the actual information we collect varies depending upon the circumstances, generally we may collect the following categories of personal information:
- Identifiers: such as a real name, alias, IP address and online identifiers, email address, or other unique personal identifiers. We collect this information when you fill out a form on or otherwise visit our Site.
- Internet or other electronic network usage data: including, but not limited to, browsing history, clickstream data, search history, and information regarding your interactions with an internet website, application, or advertisement, including access logs and other usage data related to your use of the Site. We collect this information through the use of cookies and other tracking technologies.
Use of Personal Information
Hyundai uses the information collected above in several different ways. And we may use your information individually or combine it with other information to generate aggregate statistical information. The primary uses of your information include:
- Analyzing and improving our services and offerings: to better understand how users access and use our Site; for research and analytical purposes, such as to evaluate and improve our Site; to improve our Site and user experiences.
- Complying with legal requests and obligations: to comply with the law or legal proceedings. For example, we may use information in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements.
- Anonymous and De-identified Information: we also may de-identify information and create anonymous and aggregated data sets and reports to assess, improve, and develop our business, products, and services; prepare benchmarking reports; and for other research and analytics purposes.
Disclosure of Personal Information
We disclose personal information to third parties to provide and improve our Site, products, and services; to reach you with more relevant information and offers; to provide you with information about the third party offers you may be interested in; and to honor your consent or authorization. We also disclose personal information to the entities listed and for the purposes set out below:
- Affiliates and Subsidiaries: Hyundai may share your personal information with Hyundai subsidiaries and affiliates located in your country or region for operational, analytic, and compliance purposes. For example, if you contact us via the "Get involved!" webform with an inquiry, complaint, suggestion, or compliment, we may communicate the content of your message and your personal information to a Hyundai subsidiary located in your country or region in order to take action on or respond to your communication.
- Service providers and suppliers: We may disclose personal information to our vendors, service providers, suppliers, contractors, or agents who use such data in order to perform functions on our behalf. These entities are contractually required to use the personal information we disclose exclusively to provide their respective services, and not for their own independent purposes.
- Legal compliance and lawful requests: We may disclose your information in accordance with applicable law to comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, in response to a subpoena, warrant, court order, or other legal process, or to cooperate with investigations or lawful requests, whether formal or informal, from law enforcement or government entities.
- De-identified and Aggregated Data: We may share aggregate or de-identified information with third parties for research, analytics, and other purposes, provided such information does not reasonably identify you.
Categories of Personal Information Disclosed. Certain privacy laws, such as the California Consumer Privacy Act, require that we tell you about the categories of personal information that we have disclosed for a business purpose, as well as the categories that we have "sold." Please review the section Categories of Personal Information Collected above for further descriptions of each category of personal information. This information is not limited to California users.
European Data and United Kingdom Protection Rights
If the processing of personal information about you is subject to European Union or United Kingdom data protection law because it was collected from you as a European Union or United Kingdom resident, you have certain rights with respect to that personal information:
- You can request access to, and rectification or erasure of, personal information;
- If any automated processing of personal information is based on your consent or a contract with you, you have a right to transfer or receive a copy of the personal information in a usable and portable format;
- If the processing of personal information is based on your consent, you can withdraw consent at any time for future processing;
- You can object to, or obtain a restriction of, the processing of personal information under certain circumstances; and
- For residents of France, you can send us specific instructions regarding the use of your data after your death.
To make such requests, please email [hyundaiway@hyundai.com]. The controller of your personal information is Hyundai Motor Company, [12, Heolleung-ro, Seocho-gu, Seoul, Republic of Korea].
We rely on different lawful bases for collecting and processing personal information about you, for example, with your consent and/or as necessary services you use, operate our Site, business, and meet our contractual and legal obligations, protect the security of our systems, or fulfill other legitimate interests.
If you are a resident of the European Union, please be sure to review the Additional Information for EU Residents section below for vital information, as required by the GDPR.
Security of Your Information
We use security policies, procedures, and tools which are reasonably designed to safeguard the personal information we collect. However, the security of information transmitted through the Internet can never be guaranteed regardless of the level of security. We are not responsible for any interception or interruption of any communications through the Internet or for changes to or losses of data. Users of our Site are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of any of our Site. In order to protect you and your data, we may suspend your use of any of the Site, without notice, pending an investigation, if any security issue arises. Access to and use of password protected and/or secure areas of any of the Site, if any, are restricted to authorized users only. Unauthorized access to such areas is prohibited and may lead to criminal prosecution or civil action.
Information Retention
We will also take reasonable and practical measures to ensure that unnecessary personal information is not collected. We will only retain your personal information for the period of time necessary to achieve the purposes stated in this Privacy Policy, unless longer retention is required or allowed by applicable law.
How to Contact Us
Please contact us at [hyundaiway@hyundai.com] if you have any complaints or questions about this Privacy Policy or our information practices.
Additional Information for California Residents
This section provides information for California residents about their rights regarding their personal information, as required under California privacy laws, including the California Consumer Privacy Act ("CCPA").
Right to Opt out ("Do Not Sell"). California residents have the right to opt-out of our sale of their personal information. Hyundai does not sell your personal information for monetary consideration, but may share your personal information with third parties for marketing purposes. You can opt-out of such sharing by submitting a Do Not Sell request at [hyundaiway@hyundai.com]. We do not sell or share personal information about California residents who we know are younger than 16 years old without opt-in consent.
Verifiable Requests to Delete, and Requests to Know. Subject to certain exceptions, California residents have the right to make the following requests:
Right of Deletion: California residents have the right to request deletion of their personal information that we have collected about them, subject to certain exemptions, and to have such personal information deleted, except where necessary for any of a list of exempt purposes.
Right to Know: Specific Information. California residents have the right to request a copy of the specific pieces of personal information that we have collected about them in the prior 12 months and to have this delivered, free of charge.
Right to Know: Categories of Personal Information. California residents have the right to request that we provide them certain information about how we have handled their personal information in the prior 12 months, including the:
- categories of personal information collected;
- categories of sources of personal information;
- categories of personal information about them we have disclosed for a business purpose
- categories of third parties to whom we have disclosed for a business purpose their personal information;
- a copy of the specific pieces of personal information we have collected about them
Right to Non-discrimination. California residents have the right not to be subject to discriminatory treatment for exercising their rights under the CCPA.
Submitting Requests. You may submit requests to us at [hyundaiway@hyundai.com]. In order to make a request, you will need to provide us with your name, email address, and mailing address.
Please note that we may require additional information from you in order to verify your request.
Authorized agents may submit requests to us at [hyundaiway@hyundai.com]. If you are submitting a request through an authorized agent, the authorized agent must confirm their relationship with you. We may also request that any authorized agents verify their identity, including by providing information about themselves, such as their name, email, phone number, and address. We may reach out to you directly to confirm your own identity or that you have provided the agent with your permission to submit the request on your behalf.
There may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or other permitted purposes. However, we will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request.
In the past 12 months, we have shared the following personal information with third parties for commercial purposes as follows:
- Digital Analytics Companies: Internet or other electronic network usage data, including, but not limited to, browsing history, clickstream data, search history, and information regarding your interactions with an internet website, application, or advertisement, including access logs and other usage data related to your use of the Site.
- Affiliates and subsidiaries: Identifiers, such as a real name, alias, IP address and online identifiers, email address, or other unique personal identifiers. Commercial information, including vehicle ownership, vehicle type owned, and VIN.
Additional Information for Data Subjects Located in Brazil
This section provides additional information for data subjects located in Brazil about their personal information, as required under Brazilian privacy laws, including the Brazilian General Data Protection Law ("LGPD").
International transfer. You consent to Hyundai's transfer to and retention of your information within South Korea, which may have less protections for your personal information than Brazil.
Retention Period. We will retain personal data for compliance with legal or regulatory obligations. If permitted by law, we may also retain personal data for longer periods of time than required by law if it is in our legitimate interests (or to protect our rights).
Your Rights
Under LGPD, when we act as controller of your personal information, you may exercise certain rights, as described below:
- Right to Confirm and Access. You have the right to obtain confirmation as to whether or not your personal information is being processed by us and, if so, the right to obtain a copy of such information.
- Right to Rectification. You have the right to request the correction of incomplete, inaccurate, or out-of-date personal information.
- Right to Anonymization, Blocking or Erasure. You may request anonymization, blocking or erasure of unnecessary or excessive personal information, or personal information processed in non-compliance with the provisions of the LGPD.
- Data Portability. You have the right to have your personal information transmitted to another service or product provider, subject to the protection of our commercial or industrial secrets.
- Right to Erase. You may request the deletion of your personal information where it is being processed on the basis of your consent. This right does not arise to the extent that we use another legal basis for processing, such as where processing is necessary for compliance with a legal or regulatory obligation.
- Right to Withdraw Consent. When we process your personal information on the basis of your consent, you may withdraw your consent at any time (without incurring any fees or charges) by contacting us as described below.
- Right to Obtain Information About the Possibility of Denying Consent. You have the right to be informed about the possibility of denying your consent and the consequences of such denial.
- Right to Obtain Information About Shared Data. You have the right to obtain information about the entities with which we have shared your personal information.
- Right to Petition. You have the right to petition the Brazilian regulatory authority regarding the processing of your Personal Information.
- Right to Revision of Automated Decision Making. You may request the revision of any decisions that we have taken solely on the basis of automated processing of your personal information that affects your interests.
Submitting Requests. You may submit requests to us at [hyundaiway@hyundai.com]. If you have any concerns about data protection, you can also contact our Brazilian data protection officer: [HMB, Gustavo Ierardi Goulart, através do e-mail [hyundaiway@hyundai.com]. In order to make a request, you will need to provide us with your name, and email address
Please note that we may require additional information from you in order to verify your request.
There may be circumstances in which we will not be able to honor your request. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or for other permitted purposes. However, we will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request.
Additional Information for Residents of the People's Republic of China (PRC)
Separate Consent for Collecting Sensitive Personal Information
Sensitive personal information refers to personal information that, once leaked or illegally used, may easily endanger human dignity or cause harm to persons or property safety. Personal information such as identification card numbers, credit information, driver's license information, and records of whereabouts, is sensitive personal information. Our Site does not collect information considered sensitive personal information. If we collect this information in the future, we will obtain your separate consent before processing your sensitive personal information.
Your Rights
If you choose to agree to our processing of your personal information, we will ensure your rights over your personal information, as follows, in accordance with relevant PRC laws, regulations, standards, and common practices in other countries and regions.
- The right to access and obtain a copy of your personal information.
- The right to correct your personal information. When you find a mistake in your information that we are processing, you have the right to ask us to correct it.
- The right to delete your personal information. You can submit a request to delete your personal information to us under the following circumstances:
o If our processing of personal information violates laws or regulations;
o If we collected and used your personal information without your consent;
o If our processing of personal information breaches our agreement with you;
o If you no longer use our products or services or you have cancelled your account; or
o If we no longer provide you with products or services.
- The right to change the scope of or withdraw your consent. If the processing of personal information is based on your consent, you can change the scope of or withdraw your consent with respect to future processing at any time. Please note that the withdrawal applies prospectively only. Processing that occurred before the withdrawal of consent is unaffected.
You may request to excise your right by emailing us at [hyundaiway@hyundai.com]. For security, you might be required to submit a written request or prove your identity by other means. We might ask you to verify your identity before handling your request. We will normally respond in 30 business days.
Consent to Cross-Border Transfer of Personal Information
As a global organization, the personal information we collect may be transferred internationally throughout Hyundai's worldwide organization to our headquarters in South Korea. Some of these foreign jurisdictions may not provide the same level of privacy protection as your local jurisdiction. We will take proper measures to protect your personal information at adequate or comparable levels of protection as your local jurisdiction. By providing personal information through your use of the Site or consenting to this Privacy Policy, you consent to such transfers or disclosures of your personal information.
Notice of Personal Information Security Incident
In the case of an unfortunate personal information security incident, we will, in a timely manner, and in accordance with laws and regulations, inform you of the basic conditions and possible impact of the security incident, the response measures taken or to be taken by us, suggestions for you regarding prevention and risk mitigation, and our remedial measures for you. We will inform you of such information by email, fax, telephone, push notification, etc., and when it is difficult to notify you individually, we will properly and effectively issue a public notice. At the same time, we will also take the initiative to report the handling of personal information security incidents in accordance with regulatory requirements.