Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Drive Consulting GmbH, Kimplerstraße 294, 47807 Krefeld, Germany.

Represented by: Alexandra Mitroci. Phone: +49 【enter phone number】. E-mail: info@driveconsulting.international.

2. General information on data processing

We process personal data only to the extent necessary to provide a functional website and our content and services, or when you contact us. Processing is carried out in accordance with the GDPR and the German Federal Data Protection Act (BDSG). Depending on the processing operation, we rely on the following legal bases:

Art. 6 (1) (a) GDPR – your consent; Art. 6 (1) (b) GDPR – performance of a contract and pre-contractual measures (e.g. handling your enquiry); Art. 6 (1) (c) GDPR – compliance with legal obligations; Art. 6 (1) (f) GDPR – protection of our legitimate interests (e.g. secure operation of the website).

3. Hosting and server log files

Our website is hosted by an external service provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the website, information is automatically processed that your browser transmits and that is technically necessary to display the website to you and to ensure its stability and security.

This includes in particular: IP address, date and time of access, page/file requested, amount of data transferred, referrer URL, as well as browser type and operating system.

The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the hosting provider. Storage period: 【enter log file retention period, e.g. 7–30 days】.

As the provider may also process data in the USA, this is done on the basis of appropriate safeguards (EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework).

4. Contact and contact form

Our website offers a contact form. If you use it or contact us by e-mail or telephone, we process the information you provide in order to handle your enquiry. The following information is collected: name (mandatory), company (optional), e-mail address (mandatory), phone number (optional) and message (mandatory).

The form is only submitted after you have consented to the processing of your information. Your enquiry is transmitted to us by e-mail and processed accordingly.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures or initiation of a contract) and – where you have given your consent – Art. 6 (1) (a) GDPR. Otherwise, we rely on our legitimate interest in responding to enquiries (Art. 6 (1) (f) GDPR).

We store your data until your enquiry has been fully processed and then delete it, unless statutory retention obligations apply. You may withdraw any consent given at any time with effect for the future.

Please do not submit any particularly sensitive data (e.g. health or banking data) via the contact form.

5. Recipients and processors

Your data is transferred to third parties only to the extent necessary, in particular to technical service providers (e.g. hosting and e-mail providers) that process data exclusively on our behalf and on the basis of a data processing agreement (Art. 28 GDPR), and where we are legally obliged to do so.

6. Transfer to third countries

Insofar as we use service providers based outside the EU/EEA or data is transferred there, this only takes place where an adequate level of data protection is ensured – for example on the basis of an adequacy decision by the EU Commission (e.g. the EU-U.S. Data Privacy Framework) or by means of EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

7. Your rights as a data subject

Under the GDPR, you have in particular the following rights:

right of access (Art. 15 GDPR); rectification of inaccurate data (Art. 16 GDPR); erasure (Art. 17 GDPR); restriction of processing (Art. 18 GDPR); data portability (Art. 20 GDPR); objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR); withdrawal of consent with effect for the future (Art. 7 (3) GDPR).

To exercise your rights, an informal message to the contact details listed under section 1 is sufficient.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). The supervisory authority responsible for us is:

North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. Website: www.ldi.nrw.de

9. Validity and changes

This privacy policy is currently valid. As our website develops or due to changed legal or regulatory requirements, it may become necessary to amend it. The current version is always available on this page.