For each of these categories of individuals, this Privacy Statement will explain why we collect and how we use the Personal Data we collect. We will ensure that we keep all Personal Data provided in accordance with our obligations under applicable data protection laws. We will update this Privacy Statement from time to time to reflect any material changes in technology, legislation or our data use practices which may materially affect the way in which we process Personal Data.

This is not an exhaustive statement of all our data protection practices and we may apply specific policies within certain environments. We might include a separate privacy notice at the point of capturing data on a new service and any specific consents obtained or information provided in this way will apply specifically to that service and will supplement this Statement. You will always find the most up to date version on our website.

Personal Data is any information relating to a living individual that allows for the identification of that individual. Personal Data can include a name, address, contact details, an identification number, IP address, CCTV footage, etc.

In circumstances where we control Personal Data by deciding why and how that Personal Data is processed, we will be a "Data Controller". Any entity that processes Personal Data controlled by us and does so on our behalf and with our instruction, is a "Data Processor". Data Processors may include third party service providers engaged by us (for example communications providers, or marketing agencies). As required by applicable data protection law, when we appoint a Data Processor, we will ensure that appropriate contractual protections are in place.

If you have any questions about this data protection statement, including any request to exercise your legal rights, please contact us by writing to our Data Compliance Officer, OHM Group, Clonlara Rd, Baldonnell Business Park, Dublin, D22 or emailing us at dco@ohm.ie .

The below sections of the Privacy Statement set out the type of Personal Data collected by us, the purposes for which such Personal Data is collected and processed and the lawful justifications for such processing in the context of our websites and for the provision of our products and services when engaging directly with our retailer Polestar Dublin who operates as a joint controller in this instance.

We collect, use, store and transfer various kinds of personal data about you which we have grouped together as follows:

·         Identity Data includes first name, last name, username or similar identifier, title, and gender.

·         Contact Data includes email address, telephone number(s) and postal address.

·         Financial data includes bank details, finance on a vehicle and salary details, employment history and marital status

·         Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, chosen language, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

·         Profile Data includes your interests, preferences, and feedback.

·         Usage Data includes information about how you use our website and services.

·         Marketing and Communications Data includes your preferences in receiving marketing from us our retailer , third parties and your communication preferences.

We also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose.  Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy statement.

It is not our intention to collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor is it our intention to collect any information about criminal convictions and/or offences. However, if we are required to collect such special category data, we will request your explicit consent to do so.

We use different methods to collect data from and about you through the following methods.

Direct interactions

You may give us your identity and contact data by filling in forms or by corresponding with us by email or otherwise. This includes personal data you provide when you

·         request our services; (booking a test drive or when you configure a vehicle)

·         subscribe to our publications;

·         create an account;

·         request marketing to be sent to you;

·         provide feedback; or complete a survey with a retailer;

·         complete a finance application form;

·         apply for a job with the business;

·         enter competitions;

·         attend brand events;

·         when you visit our premises CCTV imagery is obtained;

·         manage your personal data preferences.

Automated technologies or interactions

As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. When you visit our website all cookies apart from strictly necessary cookies will require your consent.

Third parties or publicly available sources

We may receive personal data about you from various third parties such as; 

·         the retailer where you purchased your vehicle

·         the manufacturer of your vehicle -  Polestar Performance AB

·         advertising networks which we utilise and to which you might engage with

·         interactions with social media sites

·         recruitment agencies when you apply for a role within our business

We are not responsible for the privacy practices of any external websites, manufacturer, or platforms which may be accessed or used in connection with a person’s use of our website or social media pages. They are subject to their own privacy statements which may materially differ from those of ours so visitors should review them for further information.

We collect various types of Personal Data when a person uses our website or social media platforms and when they engage with our digital marketing communications. The following are examples of Personal Data collected by us;

1. Our website uses cookies, web beacons, device identifiers, social plugins, tracking pixels, etc. “Cookies” are small pieces of information stored by your internet browser that collect data such as your browser type, your operating system, web pages visited, time of visits, content viewed, advertisements viewed, and other click stream data. We use cookies to help us tailor our websites to your needs, to deliver a better, more personalised service and to remember certain choices you have made so you do not have to re-enter them. We do this through the utilisation of Google Analytics, and other technology service providers that helps us better understand our website visitors experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) this enables us to build and maintain our service with user feedback and to also identify traffic to our website including pages visited, visitor numbers and traffic paths taken. We also use an AI-supported analytics tool developed by our website partner Vyro to better understand customer sentiment and enhance the personalisation of your buying experience. This tool also helps us measure and improve our website’s performance. All data collected is retained on a first-party basis and with your consent. This data is not shared with any third parties or external platforms. Please note we do not deploy un-necessary cookies on our website, such as analytics, marketing, targeting, or profiling/behavioural cookies without your consent. Please see our Cookie Policy for further details on all cookies that are utilised Cookie Policy

   
   

2. If you subscribe to receive digital marketing communications, we utilise technology such as UTM codes which are included via links within the communication and which directs you to our website, this allows us to review what digital campaign you initially engaged with. We utilise this type of aggregate data internally to measure a campaign’s effectiveness, it also supports in designing future campaigns that are relevant to our subscribers.

   
   

3. We will collect your personal data from Contact Forms, (such as booking a test drive, vehicle enquiry and vehicle configuration) this enables us to deal with your request in a timely manner. We will also collect and retain your data when you create an account on our website, the purpose of this processing is to allow you to retain information regarding vehicle configuration, or a vehicle that you have liked and for the purpose of managing your vehicle order and its progress.

   
   

4. We offer an online card payment service on our website to facilitate a deposit or full payment of your chosen vehicle. We use Stripe for payments, analytics, and other business services. Stripe may collect your personal data this will include data via cookies and similar technologies. The personal data Stripe collects may include transactional data and identifying information about devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection, loss prevention, authentication, and analytics related to the performance of its services. You can learn more about Stripe and read its Privacy Statement at https://stripe.com/privacy

   
   

5. We will collect your data when you complete a finance application form through our website. Finance Ireland provides this service. Please note Finance Ireland is a Data Controller and will make decisions regarding your personal data independently from PDIL. For further information on how Finance Ireland will process your data please be sure to read their Privacy Statement

   
   

6. You may choose to trade in your current vehicle against a new Polestar. PDIL provides an online service to which you can obtain details of the trade in value of your vehicle. This service is provided through Tradebid (trade-bid.ie)

   
   

7. Competitions: When a person enters a competition, we may collect and use the entrant’s name and contact details (including postal address, email address, telephone number) in connection with the competition (including mobile competitions). Where we operate competitions in conjunction with a third-party commercial partner, subject to the competition rules and notices, that partner may collect and use the data.

   
   

8. Social Media Pages: Content such as messages and photographs, that are posted on social media pages on which we have a presence may be made publicly available and may be used in connection with the operation and promotion of our social media pages, services, and this website. Data such as the name of your internet service provider, the website you visited us from, the parts of our site that you have visited, the date and duration of your visit, and information from the device (e.g., device type, operating system, screen resolution, language, country location, and web browser type) used during your visit. We may process this usage Data to facilitate access to our website (e.g., to adjust our website to the devices that are used). If inappropriate content is posted to our social media platform and is deemed to be in breach of this Privacy Statement or the policies operated by such websites or social media platforms, such content may be removed by or at the request of PDIL or the operators of those social media platforms. If such inappropriate content is posted to a social media page that we control, you can report it at the following address dco@ohm.ie and we will endeavour to ensure that appropriate action is taken in accordance with our policies and the policies of the relevant social media platforms such as Facebook, Instagram and LinkedIn.

9. We may use advertising networks to help present advertisements or other content on our website and other websites that display our advertisements. Advertising networks use cookies, web beacons, or similar technologies on your computer or mobile or other device to serve you advertisements or content tailored to interests you have shown by building a profile of your internet browsing on this website and other websites you have visited.

We collect and process the Personal Data described below for a variety of purposes. Below is a summary of these purposes and the lawful justifications that support them:

1. To enter into and perform a contract with you. 

   We will process your information in order to enter into a contract with you or to provide you with a service which you have requested from us or our retailer Polestar Dubin. For example, we need to process your personal information in order to enable you to purchase a vehicle or to provide you with a brochure or information about a product or service where you have requested it.

2. To comply with our legal obligations  

   We are required to process your personal information to comply with certain legal and regulatory obligations to which we are subject. For example, we are required to obtain certain business records in accordance with company and revenue law which may include your personal information.

3. For our legitimate business interests  

   We may use your personal information for the purposes of carrying out activities that are in our legitimate interests (or those of a third party). Where we process your information for our legitimate interests, we ensure that there is a fair balance between our legitimate interest and your fundamental rights and freedoms.

    

   If you are a consumer customer, we may use your information to send you communications on products and service that may interest you and that you would reasonably expect to receive, you can at any stage easily opt out of these communications by contacting us on dco@ohm.ie

    

   If you are a business customer or prospective business customer, we may use your information to send you communications on products and services that may interest you and that you would reasonably expect to receive. You have the right to object to this at any time by unsubscribing via the link that will be provided in the communication.

    

   We use information which we collect, including personal information we obtain from publicly available sources such as social media, to help us understand our customers and provide products or services which may be of interest to you, in our legitimate interest.

    

   If you are a business contact, we may acquire your contact data from reputable marketing agencies, which may include your personal data with the intention to provide you with information on products or services which may be of interest to you, in our legitimate interest. We will notify you of any such acquisition and you have the right to object to this at any time.

    

   We use your personal information to manage our everyday business needs, including accounting, internal reporting needs, and market research (surveys) to progress and respond to legal claims, security of our premises and staff through use of CCTV, to process claims, to ensure appropriate IT security and to prevent fraud, to monitor and audit warranty claims. Our legitimate interest is the effective management of our business.

                  

   We use your personal information in an aggregate form to classify our customers and to acquire an aggregated overview of our customer base in our legitimate interest. Such processing does not assess individual characteristics. Our legitimate interest is to grow our business, understand our customer base and provide products and services of interest to our customer base as a whole.

    

   We may also contact you in the event of updates about our business such as ours or our retailers’ opening hours, change in address, updates about our privacy statements and  notices etc. We do this in our legitimate interest in order to keep our customers updated of changes within our organisation.

    

   We provide your personal information from contact forms collected via our website to other OHM organisations and to our retailer Polestar Dublin. We do this in our legitimate interest to keep our customers supported by directing their requests or interests to the vehicle retailer.

    

   We use vehicle tracking in all test drive vehicles. The purpose of installing and using telemetric tracking systems is our legitimate interest in the efficient management of our business assets and ensuring the security and safety of employees, the public, and the assets of our business.

   You have the right in certain circumstance to object to any of the above processing scenarios please contact  us on dco@ohm.ie

4. With your consent

   We will request your consent for the use of all cookies on our websites outside of strictly necessary. You can withdraw this consent at any time by clicking “cookie settings” at the bottom of our webpage, see our cookie policy for further information.

   
   

   Where you are a consumer prospect  we will request your consent for all direct digital marketing communications.

   
   

   You can revoke your consent at any time by contacting dco@ohm.ie or by using the un-subscribe option in the marketing communication.

5. To protect your vital interests

   We will in certain circumstances use your personal information to protect your vital interests, for example we may contact you in the event of a recall or significant safety issue with your vehicle.

Third Party Service Providers: 

We may disclose Personal Data to third parties in certain instances. For example,

we use third party service providers for the processing of Personal Data for a number of purposes, including, security service providers, consultant advisors, IT service providers, printers, debt collection agencies, valuers, marketing companies who carry out marketing campaigns, market research or customer satisfaction surveys on our behalf and providers of security and administrative services. We share your information with organisations who provide services for you to avail of  roadside assistance. These service providers are subject to a contractual obligation to only process Personal Data obtained from us for purposes to which it was obtained and in accordance with our instructions.

We will not provide any personal information to third parties for direct marketing purposes unless you have consented to giving Personal Data to third parties or partners for that purpose. If you opt-out from receiving communications from third parties or partners, we will no longer share your contact details with our partners or third parties. However, you will still need to directly opt-out from communications from the partners to whom we have already provided your personal information.

OHM Group and other OHM Group entities: We are part of the OHM Group, and we may pass your information on to OHM Group entities, for the purpose of administrative efficiencies, for fulfilment of a contract and for storing your data in central IT Systems. https://www.ohm.ie/brands/ We may also convert your information, such as information you provide during a customer satisfaction survey, into statistical or aggregate data in such a way as to ensure that you are not identified or indefinable from it, we may pass this information on to OHM Group and other OHM Group entities, for analytical and statistical purposes.

Website Partner:

We partner with Vyro Pty who support this website and the collection of visitor’s data and customer preferences. Please note Vyro will retain the I.P address of visitors to our website as a Controller of the data for the purposes of security measures and crash analytical reporting. For further information on Vyro Pty please see their Privacy Policy - Vyro

Retailer Within Our Network:

Your personal information is shared with our retailer Sprit Motor Group Limited T/A  Polestar Dublin who operates as a Joint Controller with Polestar Distributors Ireland Limited on the activities outlined in this Privacy Statement.

Insurance Companies:

We may disclose personal data to our insurance providers in connection, with legal claims and prospective legal claims or proceedings.

Polestar Performance AB:

We will share your information with the manufacturer of your vehicle to fulfil orders and transactions, for the purpose of warranty registration and for customer care queries and aftermarket support. We will also share your information with any independent auditor appointed by the manufacturer. For further information on how Polestar Performance AB will process your data see below links.

Finance companies, leasing companies/ brokers: We may receive financial information about your finance agreement with your bank or finance provider in respect of your current vehicle, where we are under an obligation with the bank or finance house to source a dealer to buy back your vehicle at the end of your finance arrangement. You may also choose to apply for finance via our website. Please be aware that Finance Ireland provide this service and operate as independent Data Controllers with regards to your data throughout the application process. Please read their Privacy Statement before proceeding with your application Finance Ireland - Privacy Policy - Finance Ireland

Payment Services Provider: You can pay a deposit or the full amount on your chosen vehicle through our website. This service is provided by Privacy Policy (stripe.com)  who will process and  verify your payment.

Potential Sale or Merger: If we sell any part of our business and/or integrate it with another organisation, your details may be disclosed to our advisers and to prospective purchasers or joint venture partners and their advisers. If this occurs, the new owners of the business will only be permitted to use your information in the same or similar way as set out in this data protection statement.

Garda Síochána, Government or Quasi-Government Bodies, Courts, and Tribunals: We may share your personal information with these organisations and bodies, where required to do so by law.

As a vehicle distributor and retailer we need to collect many categories of personal data (about you and other parties) for the purposes set out in this Privacy Statement.

 The following table is a non-exhaustive list and provides an indication of the categories and types of personal data we use to perform our duties.

The period for which we will keep your personal information will depend on the service you have requested from us. The retention period may be longer than the period for which we are providing services to you where, for example, we have a legitimate interest in retaining such information that is not outweighed by your fundamental rights and freedoms, or where we have statutory or regulatory obligations to retain personal information for a longer period, or where we may need to retain the information in the event of a legal claim.

We endeavour to ensure that Personal Data is retained for an appropriate period and no longer than necessary. Retention of data is detailed in our Data Retention Policy.

We may transfer, store, or process your personal information in countries outside the European Economic Area. Where the laws of such countries do not afford an equivalent level of protection of personal information as the laws of Ireland. We take specific steps in accordance with data protection law to protect your personal information.

We will use one of these safeguards:

·         Transfer to a non-EEA country with privacy laws that give the same protection as the EEA.

·         Put in place a contract (in a form that is approved by the European Commission) with the recipient of the personal information that means they must protect it to the same standards as the EEA.

·         Transfers to organisations that are part of an EU Framework that sets privacy standards for data sent between countries. These frameworks make sure those standards are similar to what is used within the EEA.

We may analyse your personal information by automated means for the purposes of market research, analysing our   customer database and for our marketing activities. 

We operate closed circuit television cameras ("CCTV") throughout our premises covering buildings, internal spaces, car parks, roads, pathways, and grounds. Our CCTV system is implemented in a proportionate manner as necessary to protect our property against theft or pilferage and for the security of employees, customers, and visitors to our premises (to protect their vital interests).  Whilst CCTV footage is monitored by our, senior management, security staff or contractors, access to recorded footage is strictly limited to authorised personnel.

Footage is retained for 60 days, except where incidents or accidents have been identified in which case such footage is retained specifically in the context of an investigation of that issue. CCTV footage may be used in the context of disciplinary proceedings involving PDIL employees and to detect, establish and/or defend legal proceedings (to protect the vital interests of our, employees and affected individuals). CCTV footage is not disclosed to third parties except where disclosure is required by law (such as for the purpose of preventing, detecting, or investigating alleged offences) and in such instance’s disclosure is based on a valid request. Signage indicating that CCTV is in use is displayed throughout our premises. We operate a CCTV policy, and this can be made available upon request to dco@ohm.ie

In accordance with applicable laws, we aim to ensure that all Personal Data controlled by us is held securely using appropriate security measures including the following:

·         Physical measures such as locked filing cabinets and offices containing Personal Data;

·         IT security systems;

·         Restricted access to Personal Data subject to approvals;

·         Time limits on retention of personal data;

·         Provision of targeted data protection training and information security to employees, contractors and other staff who have access to and process Personal Data;

·         Password restrictions on access to Personal Data; and technical measures including:

a.        Encryption on all laptops/portable devices; and

b.       Logging mechanisms to record certain access to Personal Data and alteration and other processing of Personal Data.

c.        Encrypted e-mail services

In the event of a personal data breach, we will comply with applicable reporting and notification obligations under data protection law. A Breach Notification Policy is in place.

This policy [“version 2”] was updated and deemed effective on the 6th of June 2025. We will update this data protection statement from time to time. Any updates will be made available on our website and we would ask that you check regularly.