GDPR Notice

Overview

If you are located in the European Economic Area (EEA), the United Kingdom or Switzerland, the EU GDPR (Regulation 2016/679) and/or the UK GDPR apply to our processing of your personal data. This page explains what we do, our lawful bases, and how to exercise your rights.

Our role under GDPR

• Controller: When you visit our website, sign up directly, or otherwise interact with EZLeads as a customer or prospect, we act as Controller.
• Processor: When we process leads and end-customer data on behalf of a dealership using the EZLeads platform, we act as Processor under our DPA.

Lawful bases

We rely on the following GDPR Article 6 bases:

• Performance of a contract (Art. 6(1)(b)) — to provide the Services to customers.
• Legitimate interests (Art. 6(1)(f)) — to maintain security, prevent fraud, and run ordinary business operations such as B2B marketing to dealerships, balanced against your rights.
• Consent (Art. 6(1)(a)) — for cookies that are not strictly necessary, marketing emails to consumers, and certain optional features.
• Legal obligation (Art. 6(1)(c)) — for tax, accounting, fraud-prevention and similar requirements.

Your rights

Under the GDPR, you have the right to:

• Be informed about our processing — fulfilled by this notice and our Privacy Policy;
• Access your personal data;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict processing;
• Receive your data in a portable format;
• Object to processing based on legitimate interests, including direct marketing;
• Not be subject to a decision based solely on automated processing that produces a legal or similarly significant effect (we do not currently make such decisions);
• Withdraw consent at any time, where consent is the legal basis.

International transfers

EZLeads is headquartered in the United States and our infrastructure is located there. Where Personal Data is transferred from the EEA, UK or Switzerland to the U.S., we rely on the European Commission's Standard Contractual Clauses (Module 2 — Controller to Processor) and, where applicable, the UK International Data Transfer Addendum, supplemented by appropriate technical and organisational measures. Customers can request a copy of the executed clauses by emailing privacy@ezleads.io.

EU / UK representatives

If we are required to designate a representative under GDPR Article 27 / UK GDPR Article 27, contact details will be published here. Until then, EU/UK individuals may contact our Privacy Office directly.

How to exercise your rights

• Use the Data Deletion Request form;
• Email privacy@ezleads.io with subject "GDPR request";
• Call us at (786) 755-0991 during US business hours.

We respond within 30 days and may extend by 60 days for complex requests.

Right to lodge a complaint

You may lodge a complaint with your local data protection authority. A directory of EU authorities is available on the EDPB website. UK residents may complain to the Information Commissioner's Office. Swiss residents may complain to the FDPIC.