Privacy Policy

By disclosing your personal information to us or using our Site, you understand and agree that Hyundai may collect, transfer, use, and disclose your personal information in accordance with this Privacy Policy. For example, you consent to Hyundai’s transfer to and retention of your information within South Korea, which may have less protections for your personal information than the jurisdiction where you live. If required by applicable law, we will obtain your consent to our collection, use, transfer and disclosure of your personal information. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY OR OUR TERMS, THEN PLEASE DO NOT DISCLOSE PERSONAL INFORMATION TO US OR USE THE Site.

We and our third party services providers also automatically collect usage data when you use the Site via cookies, web beacons, and other tracking technologies; web analytics; and log files. We may combine the information we collect from these various sources. For more information about cookies, see our Cookies Policy.

Certain privacy laws, such as the California Consumer Privacy Act (“CCPA”), require that we disclose the categories of personal information that we may collect about individuals. While the actual information we collect varies depending upon the circumstances, generally we may collect the following categories of personal information:

Identifiers: such as a IP address and online identifiers, or other unique personal identifiers. We collect this information when you fill out a form on or otherwise visit our Site.

Internet or other electronic network usage data: including, but not limited to, browsing history, clickstream data, search history, and information regarding your interactions with an internet website, application, or advertisement, including access logs and other usage data related to your use of the Site. We collect this information through the use of cookies and other tracking technologies.

Hyundai uses the information collected above in several different ways. And we may use your information individually or combine it with other information to generate aggregate statistical information. The primary uses of your information include:

• Running our business and providing our products and services: to provide, maintain and improve our products, services, and Site; to authenticate users; to perform technical operations; to communicate with you about our services, to respond to your requests; to provide technical support; and for other customer service and support purposes.
• Analyzing and improving our services and offerings: to better understand how users access and use our products, services, and Site; for research and analytical purposes, such as to evaluate and improve our products, services, Site, and business operations; to develop new features, products, or services; and to otherwise improve our Site and user experiences.

Anonymous and De-identified Information. We also may de-identify information and create anonymous and aggregated data sets and reports to assess, improve, and develop our business, products, and services; prepare benchmarking reports; and for other research and analytics purposes.

We disclose personal information to third parties to provide and improve our Site, products, and services; to reach you with more relevant information and offers; to provide you with information about third party offers you may be interested in; and to honor your consent or authorization. We also disclose personal information to the entities listed and for the purposes set out below:

• Affiliates and Subsidiaries: Hyundai may share your personal information with Hyundai subsidiaries and affiliates located in your country or region for operational, analytic, and compliance purposes.
• Service providers and suppliers: We may disclose personal information to our vendors, service providers, suppliers, contractors, or agents who use such data in order to perform functions on our behalf. These entities are contractually required to use the personal information we disclose exclusively to provide their respective services, and not for their own independent purposes.
• Protecting rights and interests: We may disclose your information to protect or defend the safety, rights, property, or security of Hyundai, third parties, or the general public, including to protect the Services, to detect, prevent, or otherwise address fraud, security, technical issues, or other activity which we, in our sole discretion, consider to be, or to pose a risk of being, illegal, unethical, or legally actionable activity. We may also use personal information as evidence in litigation in which we are involved, and as necessary to enforce this Privacy Policy, our Terms of Use, and other applicable agreements with you.
• Legal compliance and lawful requests: We may disclose your information to comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, in response to a subpoena, warrant, court order, or other legal process, or to cooperate with investigations or lawful requests, whether formal or informal, from law enforcement or government entities.
• De-identified and Aggregated Data: We may share aggregate or de-identified information with third parties for research, analytics, and other purposes, provided such information does not reasonably identify you.

Categories of Personal Information Disclosed. Certain privacy laws, such as the California Consumer Privacy Act, require that we tell you about the categories of personal information that we have disclosed for a business purpose, as well as the categories that we have “sold.” Please review the section Categories of Personal Information Collected above for further descriptions of each category of personal information. This information is not limited to California users.

Disclosed for a business purpose. In general, we may disclose the following categories of personal information for the business purposes described above:

We do not disclose personal information through the Site to third parties in exchange for direct monetary compensation from such third parties. We may disclose or make available personal information collected through the Site to third parties to receive certain services or benefits from them—for example, when we allow third party tags to collect information such as browsing history on our Site to improve and measure our ad campaigns. This disclosure can be considered a sale under certain laws, like the CCPA, and the information “sold” in this manner includes: identifiers, customer records, commercial information, Internet or other electronic network usage data, and profiles and inferences to affiliates and subsidiaries, and analytics providers. These entities are contractually required to use the personal information we disclose exclusively to provide their respective services, and not for their own independent purposes.

If you are a California resident, please be sure to review the section Additional Information for California Residents below for important information, as required by California privacy laws, about the categories of personal information we collect and disclose and your rights under California privacy laws, including your right to submit a “Do Not Sell My Info” request (i.e., to opt out of the sale of your personal information).

If the processing of personal information about you is subject to European Union or United Kingdom data protection law because it was collected from you as a European Union or United Kingdom resident, you have certain rights with respect to that personal information:

1. You can request access to, and rectification or erasure of, personal information
2. If any automated processing of personal information is based on your consent or a contract with you, you have a right to transfer or receive a copy of the personal information in a usable and portable format
3. If the processing of personal information is based on your consent, you can withdraw consent at any time for future processing
4. You can object to, or obtain a restriction of, the processing of personal information under certain circumstances
5. For residents of France, you can send us specific instructions regarding the use of your data after your death

To make such requests, please email [email protected]. The controller of your personal information is Hyundai Motor Company, [12, Heolleung-ro, Seocho-gu, Seoul, Republic of Korea]. If you are a European Union resident, you have the right to lodge a complaint with a supervisory authority of the European Member state in which you reside. If you are a resident of the United Kingdom, you can submit a complaint to the Information Commissioner Office (see https://ico.org.uk/make-a-complaint/). However, we encourage you to first contact us with any questions or concerns.

We rely on different lawful bases for collecting and processing personal information about you, for example, with your consent and/or as necessary to provide the products and services you use, operate our Site, business, and meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.

You may request access to, correction, or deletion of certain of your personal information by contacting us at [email protected]. We will endeavor to respond to those requests in the time periods required by applicable laws. We may request certain information from you to verify your identity before responding to a request. We offer these options to you as general rights, but you may have further specific rights that are outlined in our jurisdiction-specific sections below (for example, residents of California, Brazil, China, Saudi Arabia, the European Union and the United Kingdom should refer to jurisdiction-specific sections within this Privacy Policy).

Opting-Out of Certain Communications. Hyundai offers you the opportunity to opt-out from marketing communications from Hyundai, and to opt out of certain disclosures of personal information to third parties.

You may opt-out of marketing emails or manage your subscription preferences for emails from us at any time by using the unsubscribe mechanism within any marketing email we send to you. If you wish to opt-out, you may do so by submitting a request to [email protected].

If you have opted out of receiving future emails from us, we will implement your opt-out request within ten (10) business days of receiving the opt-out request.

We use security policies, procedures, and tools which are reasonably designed to safeguard the personal information we collect. However, the security of information transmitted through the Internet can never be guaranteed regardless of the level of security. We are not responsible for any interception or interruption of any communications through the Internet or for changes to or losses of data. Users of our Site are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of any of our website. In order to protect you and your data, we may suspend your use of any of the Site, without notice, pending an investigation, if any security issue arises. Access to and use of password protected and/or secure areas of any of the Site, if any, are restricted to authorized users only. Unauthorized access to such areas is prohibited and may lead to criminal prosecution or civil action.

We may offer links to or from our Site to other websites within the Hyundai family as well as to websites, services, and resources operated by third parties. We offer links to third party websites so that you can conveniently visit our vendors and advertisers or locate other content likely to be of interest to you. We are not responsible for the privacy practices, content, or policies of websites operated by third parties and urge you to inquire about their privacy and information sharing practices before providing any personal information. In the event that you provide personal information to any third-party website or service, you understand that Hyundai is not responsible for such third parties’ use or misuse of your personal information. You further acknowledge and agree that Hyundai shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such content, goods or services available on or through any such third-party website, service, or resource.

No parts of our products or services are directed to or designed to attract anyone under the age of thirteen (13). We do not knowingly collect or maintain personal information from any person under the age of thirteen. If you are under the age of thirteen, please do not provide us with your personal information. If you are a parent of someone under the age of thirteen, please do not provide us with their personal information.

Hyundai reserves the right to change this Privacy Policy at any time. Hyundai will use, share, and disclose all personal and other user information in accordance with the Privacy Policy in effect at the time the information is collected. We will post any changes to this Privacy Policy on this page so check back frequently so that you are always aware of what information we collect, how we use it, and under what circumstances we may disclose it. Continued interaction with us following changes to this Privacy Policy will mean that you accept the changes.

Please contact us at [email protected] if you have any complaints or questions about this Privacy Policy or our information practices.

This section provides information for California residents about their rights regarding their personal information, as required under California privacy laws, including the California Consumer Privacy Act (“CCPA”).

Right to Opt Out (“Do Not Sell”). California residents have the right to opt-out of our sale of their personal information. Hyundai does not sell your personal information for monetary consideration, but may share your personal information with third parties for marketing purposes. You can opt-out of such sharing by submitting a Do Not Sell request at [email protected]. We do not sell or share personal information about California residents who we know are younger than 16 years old without opt-in consent. To opt-out of the sharing, including sales, of personal information with third parties that collect information from our Sites via cookies or similar tracking technologies, you can change cookie settings by clicking on “Cookie Settings” on the “About Cookies On This Site” banner. You will need to adjust these settings on all of the browsers and devices you use to access our websites. If you clear cookies on your browser, you will need to reset these settings. For more information about cookies, see our Cookies Policy.

Verifiable Requests to Delete, and Requests to Know. Subject to certain exceptions, California residents have the right to make the following requests:

1. Right of Deletion: California residents have the right to request deletion of their personal information that we have collected about them, subject to certain exemptions, and to have such personal information deleted, except where necessary for any of a list of exempt purposes.
2. Right to Know: Specific Information. California residents have the right to request a copy of the specific pieces of personal information that we have collected about them in the prior 12 months and to have this delivered, free of charge.
3. Right to Know: Categories of Personal Information. California residents have the right to request that we provide them certain information about how we have handled their personal information in the prior 12 months, including the:
   • categories of personal information collected
   • categories of sources of personal information
   • categories of personal information about them we have disclosed for a business purpose or sold
   • categories of third parties to whom we have sold or disclosed for a business purpose their personal information
   • the business or commercial purposes for collecting or selling their personal information; and
   • a copy of the specific pieces of personal information we have collected about them.
4. Right to Non-discrimination. California residents have the right not to be subject to discriminatory treatment for exercising their rights under the CCPA.

Submitting Requests. You may submit requests to us at [email protected]. In order to make a request, you will need to provide us with your name, email address, telephone number, and mailing address.

Please note that we may require additional information from you in order to verify your request.

Authorized agents may submit requests to us at [email protected]. If you are submitting a request through an authorized agent, the authorized agent must confirm their relationship with you. We may also request that any authorized agents verify their identity, including by providing information about themselves, such as their name, email, phone number, and address. We may reach out to you directly to confirm your own identity or that you have provided the agent with your permission to submit the request on your behalf.

There may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or other permitted purposes. However, we will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request.

Under California’s Shine the Light law (Civil Code Section 1798.83), California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year. To send us a Shine the Light request, please contact us at [email protected].

Please be aware that not all information sharing is covered by the Shine the Light requirements, and only information on covered sharing will be included in our response.

The terms below apply to the processing of personal data in the context of activities of a controller or processor in the European Union as well as to the processing of personal data of data subjects who are in the European Union by a controller or processor not established in the European Union, where the processing activities are related to:

• the offering of goods or services, irrespective of whether payment by the data subject is required, to such data subjects in the Union, or
• the monitoring of data subjects’ behavior as far as their behavior takes place within the Union

We process your personal data for the aforementioned purposes based on the following lawful bases:

• If we process your data in order to run our business and to provide our products and services, Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR are our the legal bases for processing. We have a legitimate interest in maintaining an online presence in order to provide general information about our company.
• If we process your data for analyzing and improving our services and offerings, Art. 6(1)(f) GDPR is the legal basis. We have a legitimate interest in obtaining information about the use of the Site, products, and services.
• If we process your data for personalizing content and experiences, Art. 6(1)(f) GDPR is the legal basis. We have a legitimate interest in sending or displaying tailored content on the Site in order to offer location customization and personalized help and instructions.
• If we process your data for marketing and promotional purposes, Art. 6(1)(a) GDPR is the legal basis.
• If we process your data in support of our general business operations, Art. 6(1)(f) GDPR is the legal basis. We have a legitimate interest in supporting our general business where necessary to the administration of our general business, accounting, record keeping, and legal functions.
• If we process your data for securing and protecting our rights, Art. 6(1)(f) GDPR is the legal basis. We have a legitimate interest in asserting and defending our rights and in particular to prevent and detect fraud, unauthorized activities, access, and other misconduct.
• If we process your data for complying with legal requests and obligations, Art. 6(1)(f) GDPR is the legal basis. We have a legitimate interest in complying with the law or legal proceedings.

Any use of cookies that is not strictly necessary constitutes data processing that is only permitted with your explicit and active consent pursuant to point Art. 6(1)(a) GDPR. This applies in particular to the use of advertising or analytical cookies. In addition, we will only disclose your personal data processed by cookies to third parties if you have given your explicit consent to do so pursuant to Art. 6(1)(a) GDPR. You can change or withdraw your consent at any time. For more information about cookies, see our Cookies Policy.

We use data processors in the course of processing your data. A processor is a natural or legal person, public authority, agency or other body, which processes personal data on behalf of the controller. Processors do not use the data for their own purposes; instead, they carry out data processing exclusively on the controller’s behalf. Processors only act according to our instructions and have been contractually obligated to comply with data protection regulations in accordance with Art. 28 GDPR.

Where processing in third countries takes place, in certain cases, this occurs only if the adequacy of the level of data protection in the third country has been confirmed by the European Commission in accordance with Article 45 GDPR, based on the EU standard contractual clauses, or if it has otherwise been ensured that the level of protection afforded to data at the recipient's end is adequate.

Our company, our subsidiaries and affiliates (to the extent necessary to process and answer your request), and our third-party service providers (to the extent necessary to process and answer your request).

The terms below apply, regardless of the medium, country or headquarters where the Data are located and regardless of the Data subject's nationality or place of residence, to any processing that:

• Occurs in Brazil
• Is related to the offer or supply of goods and services to individuals located in Brazil
• Refers to individuals located in Brazil, or
• Occurs while the Data subject was in Brazilian territory during collection, LGPD ADDITIONAL PRIVACY NOTICE - August 15, 2020

This section “Disclosure and LGPD Privacy Rights” was last updated on the date set out above and addresses the legal obligations and rights established by the General Data Protection Law of Brazil (“LGPD”). These obligations and rights apply in the four cases highlighted above and do not apply to anonymized data as provided for by the LGPD.

In case of application of any of the above cases, the following provisions also apply to the terms of the Privacy Policy. Any consent required by the LGPD will be requested directly from you.

In compliance with the LGPD, establishing, exercising or defending in legal actions is also a legal basis on which Hyundai may process the Data detailed in the “Data we collect” section of the Privacy Policy.

The processing of your Data for Marketing and Personalized Advertising, necessary for our legitimate interests (or those of third parties), as stated in the Privacy Policy, may be objected to by you.

LGPD grants you certain rights over your personal data, as detailed below. You have the right to exercise the aforementioned rights and, for this purpose, you can submit a request through our Individual Rights Exercise Portal or you can send us an email to [email address] , with details of what you would like to request, such as, for example, if you want more information about the processing of your Data or if you want to request the deletion of the Data:

• request the deletion, blocking or anonymization of your personal data, if you believe that Hyundai is processing your Data unnecessarily, in excess or in non-compliance with the LGPD.
• request the portability of your data,
• request information about the entities, public or private, with which Hyundai has shared your data
• request information about the possibility of denying consent and the consequences of such denial
• file a complaint, in relation to the processing of Data by Hyundai, with the ANPD, as permitted by law
• Request the review of decisions made solely on the basis of the automated processing of personal data that affect your interests, including the creation of personal, professional, consumer or credit profiles or aspects of your personality; and / or
• Request clear and adequate information regarding the criteria and procedures used to make an automated decision.

As explained in this Privacy Policy, as the Digital Services are provided to you by [insert entity], [insert entity] must perform International Transfers of your Data from Brazil to the United States and other countries for the proper operation of the Offerings. Therefore, international transfers of all personal data of Brazilian users are based on:

• Contractual necessity
• Compliance with regulatory or legal obligations to which Hyundai is subject
• Specific and clear consent that distinguishes the international transfer from other data processing purposes or
• The regular exercise of rights in judicial, administrative or arbitration proceedings

Correction and Other Requests. If you have registered for an Offer, you may view and update some of your account, contact and billing information that we have about you by logging into your account on the applicable Offer. You may also exercise the right to request certain information or request access, correction, deletion, revocation, objection, cancellation, limitation and/or other administrative actions with respect to your Data held by us that are subject to this Privacy Notice, to the extent that that such right is expressly provided to you in accordance with applicable data protection laws by contacting us as described below in this section.

Submitting requests. All requests will be subject to our information request requirements, including authentication and identity verification procedures, as well as compliance with applicable law.

Subject to the above terms and conditions, we will, in response to your request to delete your Data subject to this Privacy Notice that we maintain about you, delete such Data to the extent possible, but we may retain it to: provide you with an Offer that you have requested; to perform a contract that we have entered into with you; maintain the functionality or security of our systems and platforms; fulfill or exercise rights provided by law; maintain books and records, including payments, taxes and other records of transactions.

Contact details. To submit your privacy requests under this Privacy Notice in relation to your Data, or if you have any other questions about our privacy practices, you may contact us: [email protected]

Sensitive personal information refers to personal information that, once leaked or illegally used, may easily endanger human dignity or cause harm to persons or property safety. Personal information such as identification card numbers, credit information, driver’s license information, and records of whereabouts, is sensitive personal information. Our Site does not collect information considered sensitive personal information. If we collect this information in the future, we will obtain your separate consent before processing your sensitive personal information.

If you choose to agree to our processing of your personal information, we will ensure your rights over your personal information, as follows, in accordance with relevant PRC laws, regulations, standards, and common practices in other countries and regions.

• The right to access and obtain a copy of your personal information.
• The right to correct your personal information. When you find a mistake in your information that we are processing, you have the right to ask us to correct it.
• The right to delete your personal information. You can submit a request to delete your personal information to us under the following circumstances:
  • If our processing of personal information violates laws or regulations
  • If we collected and used your personal information without your consent
  • If our processing of personal information breaches our agreement with you
  • If you no longer use our products or services or you have cancelled your account or
  • If we no longer provide you with products or services
• The right to change the scope of or withdraw your consent. If the processing of personal information is based on your consent, you can change the scope of or withdraw your consent with respect to future processing at any time. Please note that the withdrawal applies prospectively only. Processing that occurred before the withdrawal of consent is unaffected.
• The right to cancel your account. You can cancel your account at any time. After cancellation, we will stop providing you with any product and service and delete your personal information according to you request
• The right to restrict automated decision-making. If an automated decision-making process (e.g., marketing or push-based information delivery) significantly affects your legal rights and interests, you have the right to ask for our explanation and to refuse our making decisions solely by means of automated decision-making.

You may request to excise your right by emailing us at [email protected]. For security, you might be required to submit a written request or prove your identity by other means. We might ask you to verify your identity before handling your request. We will normally respond in ten (10) business days.

As a global organization, the personal information we collect may be transferred internationally throughout Hyundai’s worldwide organization to our headquarters in South Korea. Some of these foreign jurisdictions may not provide the same level of privacy protection as your local jurisdiction. We will take proper measures to protect your personal information at adequate or comparable levels of protection as your local jurisdiction. By providing personal information through your use of the Site or consenting to this Privacy Policy, you consent to such transfers or disclosures of your personal information.

In the case of an unfortunate personal information security incident, we will, in a timely manner, and in accordance with laws and regulations, inform you of the basic conditions and possible impact of the security incident, the response measures taken or to be taken by us, suggestions for you regarding prevention and risk mitigation, and our remedial measures for you. We will inform you of such information by email, fax, telephone, push notification, etc., and when it is difficult to notify you individually, we will properly and effectively issue a public notice. At the same time, we will also take the initiative to report the handling of personal information security incidents in accordance with regulatory requirements.