The RCM Group places particular importance on the protection of your personal data. The purpose of this Privacy Policy is to provide you with transparent information about our personal data protection practices.

RCM is committed to processing your personal data in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), as well as the amended French Data Protection Act No. 78-17 of 6 January 1978 (known as the "Informatique et Libertés" Act), which define the conditions under which personal data may be processed.

Any information collected through the website https://www.myrcm.eu/en (hereinafter referred to as the "Website") that allows you to be identified, directly or indirectly, is considered personal data and will be processed in accordance with this Privacy Policy.

1. Data Controller and Data Protection Officer

The data controller responsible for the collection and processing of personal data on our Website is RCM, whose registered office is located at La Flotterie, Zone Actipôle Ouest, 85170 Le Poiré-sur-Vie, France.

The RCM Group is the distributor of the following brands: SAGA Mercedes-Benz, Toyota Toys Motors, Lexus Toys Plus, Centres Porsche Bordeaux, La Rochelle and Bayonne, RCMarine, RCMarine Yachts and Highfield France.

The RCM Group has appointed a Data Protection Officer ("DPO"), who can be contacted at the following email address : rcm@dpo.digitemis.com.

2. Purposes of Processing, Legal Bases and Data Retention Periods

Purpose of processing	Legal basis	Data processed	Data retention period
Management of subscriptions to marketing communications	Consent	First name, last name, email address, selected dealership	For the duration of the data subject's subscription
Customer relationship management (orders, vehicle servicing and maintenance) and marketing	Performance of the contract	First name, last name, email address, phone number, order history, occupation	3 years from the end of the business relationship
Management of requests submitted via the contact form	Legitimate interest Performance of the contract Responding to contact or appointment requests	First name, last name, email address, phone number, selected dealership, recipient department, message	For customers: 3 years from the end of the business relationship For prospects: 3 years from the collection of the personal data or from the last contact initiated by the prospect
Recruitment management (applications for positions advertised on the Website and unsolicited applications)	Pre-contractual measures taken at the candidate's request	First name, last name, email address, phone number, personal data contained in the curriculum vitae (CV)	24 months from the submission of the application
Website audience measurement	Consent	Google Analytics identifier and associated data	13 months after the cookie is placed
Advertising personalisation	Consent	Microsoft Ads identifiers, Google Analytics identifiers and associated data	13 months after the cookie is placed

 

3. Categories of Data Recipients

The data you provide to us may be disclosed to the following recipients:

• Sharing within the RCM Group :

The data collected is intended for the departments and entities concerned by your request and may be shared with other entities within the RCM Group where such disclosure is necessary for the implementation of the processing activities described above.

• Disclosure to data processors :

Data may be transferred to service providers acting as data processors, who are engaged to provide services in connection with the implementation of the processing activities described above.

4. Transfers of Personal Data Outside the European Union

Some recipients of personal data may be located outside the European Union. These recipient countries may either be recognised by the European Commission as providing an adequate level of protection for personal data or may not be covered by an adequacy decision.

In any event, appropriate safeguards are implemented to protect your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR).

If you consent to the placement of cookies, the management of cookies used on the Website involves transfers of data outside the European Union, particularly to the United States. These transfers are carried out in compliance with European data protection regulations.

5. Your Rights Regarding the Use of Your Personal Data

In accordance with the GDPR, you may exercise the following rights :

• Right of access: the right to obtain confirmation as to whether or not your personal data is being processed, and to receive a copy of such data;
• Right to rectification: the right to have inaccurate personal data corrected or incomplete personal data completed;
• Right to erasure: the right to request the deletion of your personal data, where applicable;
• Right to object: the right to object at any time to the processing of your personal data where such processing is based on our legitimate interest;
• Right to withdraw your consent: where the processing of your personal data is based on your consent. You may withdraw your consent at any time without providing any reason;
• Right to restriction of processing: the right to request the restriction of the processing of your personal data for a specified period;
• Right to data portability: the right to receive the personal data you have provided in a structured, commonly used and machine-readable format, and to transmit that data to another controller;
• Right to lodge a complaint: the right to lodge a complaint with the French Data Protection Authority (CNIL) if you believe that your rights have not been respected.

6. How to Exercise Your Rights

To exercise your rights or if you have any questions regarding the processing of your personal data, you may contact us at rcm@dpo.digitemis.com

If, after contacting us, you believe that your rights under the French Data Protection Act have not been respected, you may lodge a complaint with the CNIL.

7. Updates to the Privacy Policy

This Privacy Policy was published on 10 September 2025. If this Privacy Policy is amended, you will be informed of any changes on this page.