Privacy Statement

CASTROL FIRST CARS LOVE STORY

This privacy statement explains who we are, what information we collect about you, how we use it, who we share it with, the lawful basis of the processing, and how long we retain it, in relation to your participation in the First Cars love story campaign.

INFORMATION ABOUT THE CONTROLLER

Lubricants UK Limited, whose registered office is at Chertsey Road, Sunbury On Thames, Middlesex, TW16 7BP (“Castrol”, “we”, or “us”), is responsible for the personal data processed for the First Cars love story campaign via Castrol’s website, including the prize draw.

COLLECTION & USE OF THE PERSONAL DATA

We collect your name, email address and mobile number. Your personal data will only be collected and used for the purposes of (i) administering the prize draw, (ii) contacting you if you win the prize, (iii) where you give us permission to do so, future marketing communications.

We rely on performance of contract for purposes (i) and (ii), and your consent for purpose (iii), in accordance with the registration form and this Privacy Statement. You can withdraw your consent at any time by following the unsubscribe link at the bottom of each Castrol email communication or by emailing GDPREurope@Castrol.com.

COOKIE INFORMATION

We use cookies (and similar technologies e.g. web beacons, pixels, tags, and JavaScript) to collect information about your use of the website, such as using your IP address to log your visit to our website. You can set your browser to refuse all or some browser cookies or to alert you when cookies are set or accessed. If you disable or refuse cookies, please note that some parts of this campaign site may become inaccessible or not function properly. To learn more about cookies, you may visit the following third party website: www.allaboutcookies.org.

RECIPIENTS OF THE PERSONAL DATA

Your personal data may be disclosed to third party service providers we work with in order to administer the prize draw and, where you have consented, to send Castrol email communications. Disclosures to third-party service providers acting on our behalf will be subject to contractual clauses to ensure that the third parties have appropriate technical and organizational privacy and security protections in place. A copy of these clauses is available upon request.

We also reserve the right to disclose your personal data as required by law, or when disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on bp or Castrol. Where applicable, this includes our obligation to comply with any local advertising standards authority’s requirement to publish or make available on request the name and county of prize winners. Such disclosure will be done in accordance with our T&Cs and will contain no other information than the first name, surname, and county of the winner.

TRANSFER OF THE PERSONAL DATA OUTSIDE OF THE EEA

Castrol may disclose your personal data to other BP entities that may be located outside of the EEA. Where this is the case, your personal data shall remain at all-time protected under BP’s comprehensive, flexible, and global compliance framework which implements appropriate measures and safeguards (including EU standard contractual clauses) to ensure that your personal data is protected in accordance with applicable data protection laws.

RETENTION PERIOD

How long we will hold your personal data will vary based on the purpose for which we are using it, however we will not hold it for any longer than two years. We calculate the retention period based on the time the personal data is needed to: (a) fulfil the purposes described in this Privacy Statement, (b) meet the timelines required or recommended by regulatory authorities, professional bodies, or associations, (c) comply with applicable laws, legal holds, and other legal obligations (including contractual obligations), and (d) comply with your requests.

RIGHTS OF ACCESS, RECTIFICATION AND ERASURE

You are afforded all of the rights set out below:

• Access to your personal data. Where applicable, you are entitled to receive a copy of personal data we hold about you.
• Correction of the personal data that we hold about you. You may request that we correct any incomplete or inaccurate data we hold about you, though we may need to verify the accuracy of the new data you provide to us. It is important that the personal data we hold about you is accurate and current.
• Erasure of your personal data. You may request that we delete or remove personal data where there is no overriding reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we have processed your personal data unlawfully or where we are required to erase your personal data to comply with our legal obligations.
• Transfer of certain of your personal data to you or a third party. Where this right applies, we will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format.
• Withdraw consent. Withdrawal will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
• Right to complain to your supervisory authority. We are committed to working with you to obtain a fair resolution of any complaint about our use of your information. You may make a complaint to our privacy teams (including relevant data protection officers) by using the email below.

If you would like to exercise any of your other privacy rights, please contact GDPREurope@Castrol.com.

CHANGES TO THIS PRIVACY STATEMENT

We review this Privacy Statement regularly and may modify it from time to time. This Privacy Statement was last updated in June 2024.