Privacy policy
What data we collect, why, how long we keep it and what your rights over it are.
1. Who we are
This Site is operated by [Company legal name], with registered office at [Full address], registered under number [Company / VAT number] (hereinafter “Drivat”, “we”). Drivat acts as the controller of the personal data collected via the website www.drivat.com (the “Site”), in accordance with Regulation (EU) 2016/679 on the protection of personal data (“GDPR”) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
For any question relating to the protection of your data, you can contact us at: contact@drivat.com.
2. Data we collect
Depending on how you use the Site, we collect in particular:
- Account data: last name, first name, email address, password (encrypted), telephone number, role (customer, professional, vendor).
- Profile and listing data: description of the business, photos, location, opening hours, published professional contact details.
- Transaction data: booking history, orders, amounts, payment status (the bank details themselves are processed directly by our payment providers; Drivat has no access to them).
- Communication data: messages exchanged via the built-in messaging, enquiries sent via the contact form.
- Technical data: IP address, browser type, pages viewed, cookies (see section 7).
- Reviews and ratings: ratings and comments published on listings.
3. Purposes and legal bases for processing
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Creating and managing your account | Performance of the contract (Art. 6.1.b) |
| Direct connection between customers, professionals and vendors, management of bookings and orders | Performance of the contract (Art. 6.1.b) |
| Processing payments | Performance of the contract (Art. 6.1.b) |
| Customer support, responding to requests | Performance of the contract / legitimate interest (Art. 6.1.b and f) |
| Improving the Site, usage statistics | Legitimate interest (Art. 6.1.f) |
| Marketing communications (newsletter, offers) | Consent (Art. 6.1.a), which you can withdraw at any time |
| Fraud prevention and compliance with legal obligations | Legal obligation (Art. 6.1.c) |
4. Data sharing
Your data may be shared with:
- The professionals, providers or vendors you come into contact with via the Site (to the extent necessary to complete the booking or the order);
- Our technical providers (hosting, online payment, email sending), acting as processors within the meaning of Article 28 of the GDPR, bound by contractual clauses guaranteeing the protection of your data;
- The competent authorities, where the law requires it.
Drivat never sells your data to third parties for commercial purposes.
5. Transfers outside the European Union
If some of our providers are located outside the European Economic Area, these transfers are governed by appropriate safeguards (European Commission standard contractual clauses or an adequacy decision).
6. Retention period
Your data is kept for the duration of your contractual relationship with Drivat, then archived for the periods required by law (in particular for accounting and tax purposes), before being deleted or anonymised.
7. Cookies and similar technologies
The Site uses cookies strictly necessary for its operation (authentication, cart, language preferences) as well as, subject to your consent, audience measurement and possibly advertising cookies. You can manage your preferences at any time through your browser settings or the Site’s cookie management banner.
8. Your rights
Under the GDPR, you have the following rights over your data:
- Right of access;
- Right to rectification;
- Right to erasure (“right to be forgotten”);
- Right to restriction of processing;
- Right to data portability;
- Right to object;
- Right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent carried out before that withdrawal.
To exercise these rights, contact us at contact@drivat.com. You also have the right to lodge a complaint with the Data Protection Authority (DPA) in Belgium (www.autoriteprotectiondonnees.be) or with the competent authority of your country of residence.
9. Data security
Drivat implements the appropriate technical and organisational measures to protect your data against any unauthorised access, loss or alteration.
10. Changes to this policy
This policy may be updated at any time. The applicable version is the one published on the Site on the date you consult it. Last updated: 11 septembre 2026.
11. Contact
For any question about this privacy policy: contact@drivat.com — Contact form.