CHANGE OF ACTIVITY
WE HAVE BECOME CGI FINANCE
On July 1, 2023, GY&LF Ltd transferred its activity (and all its employees) to the UK branch of CGL, Compagnie Generale de Location d’Equipements S.A, the finance company which works with and owns GY&LF Ltd.
This branch, called Compagnie Generale de Location d’Equipements UK (trading under the name of CGI FINANCE), is authorised by the Financial Conduct Authority (FRN: 959023) to carry out brokering and lending activities in the UK.
We hope that this change, brought about by the UK leaving the E.U., will be a positive development for all clients.
CGI FINANCE will continue to assist you in the same way as GY&LF Ltd.
Please note that our email addresses have also changed from name.surname@gylf.co.uk to name.surname@cgifinance.co.uk
CGI FINANCE contact details are:
Compagnie Generale de Location d’Equipements UK – CGI FINANCE
First Floor, 55 High Street, Lymington, Hampshire, SO41 9AH, UK
Tel: 01590 610689
CGI FINANCE looks forward to continuing to provide the quality service you expect and to supporting the UK marine activity moving forward.
However, should you have any complaints regarding any of the services that GY&LF Ltd has previously provided to you, please note the following:
COMPLAINTS
Our aim is to provide you with a professional and confidential service that delivers the highest possible standards. However, there may be occasions where you feel this has not been achieved and should you wish to make a complaint about any aspect of the service we provided to you, you can do this by writing to our Complaints Manager at General Yachting & Leisure Finance Limited, First Floor, 55 High Street, Lymington, Hampshire, SO41 9AH, or by emailing us on complaints@gylf.co.uk or by telephoning us on 01590 610689 where we will try to resolve your concern at the earliest time possible.
If you cannot settle your complaint with us, you may be entitled to refer it to the Financial Ombudsman Service at www.financial-ombudsman.org.uk or by contacting them on 0800 023 4 567.
Terms of Business
1. AUTHORISATION
General Yachting & Leisure Finance Limited is authorised and regulated by the Financial Conduct Authority (FCA). The Financial Conduct Authority (FCA) regulates financial services in the UK and you can check our authorisation and permitted activities on the Financial Services Register by visiting the FCA’s website www.fca.org.uk/firms/systems-reporting/register or by contacting the FCA on 0800 111 6768.
2. DATA PROTECTION
We are the data controller of the information we hold about you under the Data Protection Act 1998 and other applicable data protection laws such as the General Data Protection Regulation.
References to (a) “we“, “us“, or “our” mean General Yachting & Leisure Finance Limited, and (b) “you”, or “your” refer to you. References to “your information” includes but is not limited to your personal data.
Your rights
In this section, we have summarised the rights that you have under applicable data protection laws. Some of the rights are complex, and not all of the details have been included in our summaries below. Accordingly, you should read the applicable data protection laws and guidance from the UK Information Commissioner for a fuller explanation of these rights. You can do so by using this link https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulationgdpr/individual-rights/.
You may exercise any of your rights below in relation to your personal data by writing to our Data Officer at: dataofficer@gylf.co.uk or by post: Data Officer, General Yachting & Leisure Finance Limited First Floor, 55 High Street, Lymington, Hampshire, SO41 9AH.
Your principal rights under the applicable data protection laws are:
(a) the right to access: You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee. We may ask for documentary evidence to prove your identity before we provide you with requested information;
(b) the right to rectification: You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed. You can ask us to make any necessary changes to ensure that your personal data is accurate and kept up to date;
(c) the right to erasure: In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; the processing is for direct marketing purposes; and the personal data has been unlawfully processed. However, there are certain general exclusions of the right to erasure. Those general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation to which we are subject; or for the establishment, exercise or defence of legal claims;
(d) the right to restrict processing: In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
(e) the right to object to processing: You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims;
(f) the right to data portability: To the extent that the legal basis for our processing of your personal data is consent, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others;
(g) the right to complain to the UK Information Commissioner: If you consider that our processing of your personal data infringes the applicable data protection laws, you have a legal right to lodge a complaint with the UK Information Commissioner (www.ico.org.uk) which is the UK data protection regulatory body; and
(h) the right to withdraw consent: To the extent that the legal basis for our processing of your personal data is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
If you want to request the Credit Reference Agencies (“CRAs”) and/or the Fraud Prevention Agencies(“FPAs”) we use (see below to find out who these are) to provide you with information that they hold about you, you must contact them directly to do this.
The above CRAs are Experian (registration number 00653331 with registered office at The Sir John Peace Building, Experian Way, Ng2 Business Park, Nottingham, NG80 1ZZ) and Dunn & Bradstreet (registration number 00160043 with registered office at Marlow International, Parkway, Marlow, Bucks, SL7 1AJ).
The above FPA is SmartSearch (registration number 05534508 with registered office at Mayfield House, Lower Railway Road, Ilkley, Leeds, LS29 8RL).
What information do you collect and use about me?
We collect and use the following information about you (a) your name, address, phone numbers, email address, date of birth, nationality, residential address, employment, banking and financial details (e.g. your income), (b) details of the loans you may already have and may have had with our loan partners (CGI Finance) and all transactions, and (c) any other information which we reasonably need to comply with our legal obligations.
How do you collect my information?
We collect information about you in a number of ways (a) information you provide to us and (b) information you provide through communications with us.
How do you use my information?
We process your information to:
(a) search CRAs’ records to verify your credit status. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract;
(b) search FPAs’ records to verify your identity. The legal basis for this processing is for our compliance with a legal obligation to which we are subject;
(c) screen your loan application. We do this before we make your loan application to our loan partners (CGI Finance) and to check the information we hold about you irrespective of whether this information was provided to us by you. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract;
(d) share your information, loan application, and search results. We share these with our loan partner (CGI Finance) who made credit decisions about you, evaluated your loan application, assessed lending risks and to checked the details that you let us and others have. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract;
(e) identify, develop or improve our products and services. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business as well as to monitor our business, products and services;
(f) carry out, monitor and analyse our business. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business;
(g) design and hosting of our software by our software provider. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business;
(h) share your applicant information, and personal data, application and your search results with other firms, organisations or persons we use. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business, the collection of payments or the provision of a product or service on your behalf;
(i) operate and manage your file and manage any loan application, agreement or correspondence you may have with our loan partners (CGI Finance). The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract;
(j) carry out, monitor and analyse our business. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business;
(k) identify, prevent, detect or tackle fraud, money laundering, terrorism and other crimes. The legal basis for this processing is for our compliance with a legal obligation to which we are subject;
(l) create a limited profile of you as an individual as part of your loan application. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract;
(m) carry out market research (e.g. surveys), business and statistical analysis (e.g. develop statistical models). The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business as well as to monitor and improve our business;
(n) provide information to independent external bodies such as governmental departments and agencies and similar to carry out research. Where we are legally compelled to provide the information, the legal basis for this processing is for our compliance with a legal obligation to which we are subject. Where we are not legally compelled to provide the information, the legal basis for this processing is our legitimate interests, namely to provide information that can be highly useful to such external bodies and beneficial to society at large;
(o) carry out audits. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business as well as to monitor and improve our business and services;
(p) perform other administrative and operational purposes. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business;
(r) trace your whereabouts. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business and to communicate with you;
(s) retain, store and archive the information. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. From the point when we are no longer involved with your finance file (i.e. until the mortgage is secured if the file is paid out or until you discontinue the finance request or is refused finance), the legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business, to comply with our legal and regulatory obligations, and the protection and assertion of our legal rights, your legal rights and the legal rights of others.
(t) to delete it when the information is no longer retained by us. The legal basis for this processing is our legitimate interests, namely the proper administration and operation of our business and our compliance with a legal obligation to which we are subject;
(u) when and to the extent necessary to comply with our legal and regulatory obligations; and (v) (where necessary) for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
Your information may also be used for other purposes for which you give your permission, where we are permitted to do so by law, or it is in the public interest to disclose the information or is otherwise permitted under the terms of the Data Protection Act 1998 and other applicable laws such as the General Data Protection Regulation.
With whom do you share my information with?
We may share information about you for the sole purposes above with:
(a) our corporate affiliates, Compagnie Generale de Location d’Equipements (CGI Finance), Société Générale, the Société Générale Group;
(b) any firm, organisation or person who help us to administer and operate our brokering business to collect payments or to provide a product or service on your behalf. These are PSD Group (information cloud storage and IT) and Is It Meant To Do That? Ltd.(quotation platform and this website). These providers have limited access to your information to perform these tasks on our behalf and are contractually obligated to use it consistent with this Paragraph 5;
(c) government or regulatory authorities when are ordered or required to do so in order to identify, prevent, detect or tackle fraud, money laundering, terrorism and other crimes – this is to ensure our compliance with a legal obligation to which we are subject to (Article 6(1)(c), General Data Protection Regulation);
(d) any firm, organisation or person to whom we sell or transfer (or enter into negotiations to sell or transfer) our business or any of our rights or obligations under any agreement we may have with you. If the transfer or sale goes ahead, the transferee or purchaser may use your information in the same way as us. However, use of your personal data will remain subject to this Paragraph 5;
(e) a successor in interest as part of a corporate re-organisation or purchase of our business or company or in the unlikely event of an insolvency event such as a liquidation, insolvency, bankruptcy or administration. In the case of an insolvency event, our customer database may be sold separately from the rest of our business, in whole or in a number of parts. It could be that the purchaser’s business is different from ours too;
(f) regulatory and governmental authorities, ombudsmen, or other authorities, including tax authorities where we are requested by them to do so; and/or
(g) CRAs and FPAs or any similar organisation which provides a centralised application matching service that collects information from and about credit applications, for the purpose of preventing and detecting fraud.
Security & Retention
We take appropriate technical and organisational measures to guard against unauthorised or unlawful processing of the information we hold about you and against accidental loss or destruction of, or damage to, such information.
This section sets out our data retention policies and procedures, which are designed to help ensure that we comply with our legal and regulatory obligations in relation to the retention and deletion of personal data. Information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
We will retain your information for 1 year from the date of last action if the file does not proceed or is declined by our loan partners (CGI Finance), and for 6 years from the date of payment of the loan monies in other cases. During these periods your data is kept on-line with our cloud storage provider in the UK. At the end of these periods of retention, your information data will be deleted. However, we may retain your information where such retention is necessary for our compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of others.
No paper versions of your data are collected or retained for any period.
Obligations of the Lender
CGI Finance (the “Lender”) shall receive your information in order to make a decision regarding you finance application. The processing of your information by the Lender will be subject to French law and more particularly the Law 78.17 of January 1978 relating to Personal Data Processing and Data Protection. The Lender will be responsible for the processing of your information. The collection of such information is obligatory. Should you fail to provide complete information, your request may be refused by the Lender. Any false or incorrect declaration may be the subject of special action intended to prevent fraud. This data and any information already held by the Lender relating to your personal, economic, financial and/or banking situation, as the case may be, and any information concerning members of your household, together with any information collected subsequently, will be processed by the Lender for the following purposes: (a) to establish the identity of the persons concerned; (b) to study your request for finance; (c) to assist with the decision to grant financing; (d) for the setting up and management of any guarantees; I to assess and manage credit risks; (f) to develop statistical models; (g) for file management; (h) for customer relations; (i) for recovery matters; (j) to prevent payment incidents and irregularities; (k) for surveys; and (l) to undertake customer promotions, including by electronic means subject to your consent given by ticking the boxes below. The information will be used to update information already held by the Lender. Where your application is refused by the Lender, you can ask to discuss your application with the Lender by writing to the address stated below.
Your information may also be used by the Lender to meet legal, regulatory or administrative obligations. The Lender may transfer your information to authorised companies within the Lender’s Group and to supervisory or judicial authorities dealing with financial management, financial control, the fight against money-laundering, the financing of terrorism and the application of financial sanctions.
Your information will be processed electronically by the Lender. Your telephone conversations with staff may be monitored and recorded to improve the quality of the Lender’s services. Your information may be communicated by the Lender to its subcontractors and duly authorised partners for the sole purposes of implementing the aims stated above. Your information may be transferred to subcontractors established in countries not members of the European Economic Area (EEA). In this case, the Lender will, in order to ensure the security and confidentiality of your information, and with the prior authorisation of the French data protection agency, the Commission Nationale de l’Informatique et des Libertés (“CNIL”), determine the terms and conditions for working with these subcontractors within a detailed contractual framework.
Once finance has been granted, your information will be retained by the Lender for a period of 5 years after the end of the contractual relationship with the Lender. If finance is refused or you do not continue with the finance, your information will only be retained by the Lender for a period of 12 months from the date of the last event. Calls monitored with the Lender’s staff will be kept for a maximum of 6 months.
You have a right of access to your information, rectification of your information and opposition to the Lender maintaining your information. You can, with a valid cause, object to your information being processed. You may also object, at no cost to you, to your information be used for commercial purposes, including by electronic means. Your rights of access, rectification and opposition are exercised by writing to the Lender at PCDP, 69 Avenue de Flandre, 59700 Marcq-en-Barœul, France or by emailing pdcp-cgl@cgifinance.fr for CGI Finance or pdcp-sgb@cgifinance.fr for SGB Finance. For security reasons, your communication must be accompanied by a copy of your proof of identity. Pursuant to the provisions of Article 40-1 of French Law 78.17 of 6 January 1978 relating to personal data processing and data protection, individuals have the right to define the terms relating to the preservation, deletion and the release of their information after death. In relation to your information being treated in the context of the fight against money laundering and the financing of terrorism, any right of access to such information must be exercised by contacting the Commission Nationale de l’Informatique et des Libertés (CNIL).
3. CONFLICT OF INTEREST
General Yachting & Leisure Finance is owned by Compagnie Generale de Location d’Equipements S.A. (CGI Finance), a Societe Generale Group Company. CGI Finance is a trademark owned by Societe Generale and used by Compagnie Generale de Location d’Equipements S.A. We will take steps to manage this conflict effectively and will ensure that we only broker details where we believe it is suitable and appropriate.
4. LAW
This client agreement is governed and shall be construed in accordance with English Law and the parties shall submit to the exclusive jurisdiction of the English Courts.
5. YOUR CONSENT & AGREEMENT
We intend to rely on these Terms of Business for the services we provide to you and request that you hereby provide your agreement and consent to these Terms of Business (including the Data Protection sections) above.