Privacy Policy
Note: This privacy policy has been adapted to be globally applicable. While it references GDPR principles where relevant (as these are often considered best practices), it is written to be compatible with privacy laws in multiple jurisdictions. You should review this with legal counsel to ensure compliance with all applicable privacy laws in the jurisdictions where you operate, including but not limited to GDPR (EU/EEA), CCPA/CPRA (California), PIPEDA (Canada), LGPD (Brazil), and other regional data protection laws.
Table of Contents-
1. Scope
2. Name and Contact Information of the Controller
3. Contact Information for the Data Protection Officer
4. Data Security
5. Provision of the websites
6. Cookies, pixels and similar technologies
7. Special Features for the dryve.world Apps
8. Social Media/Social Networks
9. Data Processing During Registered Use of dryve.world Services and Booking Rides
10. Payment & Fraud Prevention
11. Communication with dryve.world
12. E-mail Advertising, Newsletter
13. Involvement of Data Processors by dryve.world
14. Rights of Data Subjects
15. Automated decisions
16. Data Erasure and Storage Duration
17. Amendment or Update of this Privacy Policy
18. Privacy Notice to Call Attendees
1. Scope
We, dryve.world ("dryve.world"), take the protection of your personal data seriously and protect your privacy when processing them in accordance with applicable data protection and privacy regulations.
This privacy policy informs you as a visitor of the dryve.world websites, as a user or customer of the online platform of dryve.world, a dryve.world App or other services of dryve.world (together also "dryve.world Services") which of your personal data is processed by dryve.world and for which purpose. The dryve.world Services are not aimed at minors.
Information on the processing of personal data of chauffeurs can be found in the Chauffeur Privacy Policy (e.g. in the DW Chauffeur App).
2. Name and Contact Information of the Controller
The controller for the processing of data within the meaning of applicable data protection regulations is:
DRYVE/CSI/Cuatro Sons Inc
Attn: Legal Department 38-24 24th
Street Long Island City, NY 11101
Email: legal@dryve.world
You can find further information on dryve.world in the Legal Notice
3. Contact Information for the Data Protection Officer
Our data protection officer is:
DRYVE/CSI/Cuatro Sons Inc
Email: legal@dryve.world
You can contact our data protection officer confidentially by mail to the above-mentioned address. Alternatively, you can contact our data protection officer and our data protection crew by e-mail to:
Email: legal@dryve.world
4. Data Security
dryve.world uses appropriate technical and organizational security measures to ensure a level of protection for personal data appropriate to the risk, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and the degree of risk. The transfer of personal data between your end device and dryve.world is generally carried out in an encrypted form (TLS encryption). You can identify an encrypted connection for example by the lock symbol in the address line of your browser.
If you communicate with us by e-mail, access by third parties cannot be ruled out. dryve.world also uses transport encryption for e-mails in general. But in the case of confidential information, dryve.world recommends using the postal way or fully encrypted e-mail communication (PGP). Please let us know if you would like to correspond with us by e-mail in an encrypted form so that we can give you information on the relevant addresses and public keys.
5. Provision of the websites
When visiting dryve.world websites for information purposes, i.e. even without your registration, data is automatically collected regarding the usage through your browser (hereinafter "surf data"). This includes your IP address, the status code, the dryve.world websites visited, date and time of the server request, browser type and browser version, referrer (website visited beforehand), files transferred and data volume. The surf data is stored by dryve.world in so-called log files. If you visit dryve.world websites without having a dryve.world account, we will not know who you are.
We inform you about the cookies and analysis services used by dryve.world in section 6. Otherwise, your surf data will not be provided to third parties. The processing of surf data is mainly carried out to establish and maintain the technical connection when surfing the internet. This data is also used by dryve.world in a pseudonymized or anonymized form in order to analyze the use of our websites, to design and improve the dryve.world services to meet demand, to recognize and eliminate technical or process-related disruptions and problems and to prevent illegal use of the dryve.world services (e.g. fraudulent booking, cyberattacks).
Stored log files are erased or anonymized, provided they are no longer required to ensure the general functionality of dryve.world services. dryve.world retains the log files only insofar as you have consented to this or if there are legal retention obligations.
The legal basis for the processing of personal data when providing websites includes our legitimate interest in providing and improving our services. Insofar you are a dryve.world user or customer, the legal basis is also contract performance (see otherwise below number 9.). If you have consented to an extended usage of your surf data, the legal basis is your consent. You can revoke your consent at any time.
6. Cookies, pixels and similar technologies
When using dryve.world services, cookies, pixels or similar methods may be used. This is common for most large websites.
Cookies are small text files and pixels are small graphic files which can be stored on the user's end device. You will find comprehensive information on the cookies, pixels and similar methods used by dryve.world in our Cookie Policy.
As part of your use of dryve.world Services, dryve.world sets the cookies that are necessary for dryve.world to provide a feature you request (e.g., language, login status, cookie consent). dryve.world also uses, where you have consented, its own and third party cookies to analyze and improve the use of the dryve.world Services, to improve and personalize functionality to you, to detect and correct malfunctions and problems of a technical or process nature, to prevent unlawful use of the dryve.world Services (e.g. fraudulent booking, cyber-attacks) and for marketing purposes. (including the measurement, analysis and evaluation of advertising). The details of this can be found in our Cookie Policy. Your consent to the setting and use of cookies by dryve.world is documented electronically via a Consent Management Tool or Consent Management Platform (CMP) used by dryve.world. You can revoke your consent at any time with future effect or change your cookie settings; the easiest way to do this is to change your cookie settings as you wish in the CMP used by dryve.world.
Additionally, you can prevent the storage of cookies and delete existing cookies at any time in the settings of your browser. However, this may lead to the fact that individual functions of the dryve.world Services are not or only partially available. The storage period varies per cookie and can be viewed in your browser in our Cookie Policy.
The legal basis for the processing of personal data when using cookies, pixels and similar procedures includes your consent and our legitimate interest (in the case of necessary cookies for the functionality of our services).
7. Special Features for the dryve.world Apps
dryve.world's apps are another access point to dryve.world services. Similar processing of personal data is generally carried out via the dryve.world apps as via the dryve.world websites (see number 5 above) or in the case of registered use of the dryve.world Services (see number 9).
When using the dryve.world apps, dryve.world may also access additional data in relation to the app or to your end device, such as e.g. the device name, device manufacturer, model, operating system, app or SDK version, mode.
There are also push notifications in the dryve.world apps, i.e. notifications provided by dryve.world in the app of your end device. You will only receive push notifications if you have given your consent to this on your end device. The legal basis for the data processing is your consent.
There is a special dryve.world App ("DW Chauffeur") for drivers or driving service providers working with dryve.world. You can find information on the processing of personal data carried out by means of DW Chauffeur in the Chauffeur Privacy Policy.
Please refer to the applicable Privacy Policy.
8. Social Media / Social Networks
8.1 dryve.world's Social Media Presence
dryve.world maintains pages in social networks such as Twitter, LinkedIn or Facebook. The respective provider of the social network provides detailed information about which personal data is processed and how. In addition, please see our notes on our pages on the respective platforms.
8.2 Facebook, Facebook Messenger and Facebook Connect
dryve.world uses services of the social network Facebook, operated by Meta Platforms, Inc. ("Facebook" or "Meta"). You can access Facebook's data protection information here: https://www.facebook.com/about/privacy/
You can contact us and exchange messages with dryve.world via Facebook Messenger.
dryve.world also provides the option of logging in to the dryve.world account using Facebook Connect. In order to do this, you will be sent to a Facebook page where you may log in using your Facebook user information. If you log in to the dryve.world account using Facebook Connect, certain personal data will be transferred by Facebook to dryve.world. Facebook will inform you regarding what data will be transferred, for the purpose of which you may grant or refuse explicit consent. Personal data will not be transferred by Facebook to dryve.world without this consent. Facebook can also determine from your login via Facebook Connect that you have logged in with us and when you have done so. dryve.world uses the data transmitted by Facebook in order to identify you.
If you actively choose to log in via Facebook, you consent to dryve.world processing, in a personalized form, the data transmitted by Facebook to identify you in connection with your account. This consent may be revoked at any time without any additional costs and with effect for the future.
You also have the option at any time to adjust the usage of Facebook Connect and log in to your dryve.world account in another manner.
dryve.world uses, where you have consented to this, Facebook Custom Audiences from lists to show you targeted advertising via Facebook. dryve.world would utilize contact data stored in our CRM system **[SPECIFY CRM]**, this data is synced between **[CRM]**/Facebook for data security. Once synced it is compared with Facebook's existing list of Facebook users. The matches are then added to dryve.world's Custom Audience. Facebook does not collect any new personal data.
The legal basis for the processing of personal data when using Facebook Connect is your consent.
We will inform you in our Cookie Policy about Facebook's cookies, pixels and similar technologies which are used by dryve.world.
8.3 Google Customer Match
dryve.world uses the Customer Match service of Google LLC ("Google").
At Google Customer Match, dryve.world creates lists in our CRM system defualt CRM of existing contacts and uploads them to dryve.world's Google Account. dryve.world would utilize contact data stored in defualt CRM, this data is synced between defualt CRM/Google for data security. There it is compared with existing Google Accounts. The matches are then added to the dryve.world Audience. On this basis we can display/exclude targeted advertising via Google Ads.
The legal basis for processing personal data when using Google Customer Match is your consent.
We will inform you about cookies and similar procedures of Google, which are used by dryve.world, in our Cookie Policy.
9. Data Processing During Registered Use of dryve.world Services and Booking Rides
dryve.world processes the following personal data provided by you when you register and use dryve.world Services or when you book rides (hereinafter "customer data").
1. Personal master data (form of address, title, first name, last name, company, address, zip code, place, country, password)
2. Contact data (e.g. telephone number, cellphone number, e-mail address)
3. Contract data (e.g. time and manner of registration, status)- Ride-related data (e.g. pickup location, destination, times, flight number, special requests)
4. Status (e.g. bonus program), customer history (e.g. previous rides)
5. Contract invoicing (e.g. invoices, status, invoicing address) and payment data (e.g. last 4 digits of the credit card number).
The customer data will be used for dryve.world services, i.e. for the personalized fulfillment of the framework agreement after registration (creation, storage, administration and support of your dryve.world account), for the procurement of booked rides and for the fulfillment of the contract of carriage for the benefit of the customer with the limousine service provider. dryve.world provides customer data to third parties, if necessary, in particular to the limousine service providers so that the customer can be transported in accordance with their booking and the transport can be processed. If the customer has indicated a bonus program supported by dryve.world, the data required in this regard is transmitted to the bonus program provider. The payment data collected is stored via a payment service provider and transferred to the intermediary financial service provider or bank (see Point 10).
Personal data may be transmitted to service providers in countries where the transport is intended to take place or where services are provided. We take appropriate measures to ensure that your data is protected in accordance with applicable data protection laws. Data transfers may be necessary for the performance of a contract with you or to carry out pre-contractual measures upon your request, or to perform a contract concluded in your interest with another party.
Customers have the possibility to rate a ride arranged by dryve.world e.g. in the dryve.world App. Ratings are stored in the customer's profile and can be communicated to the respective driving service or provider or chauffeur in anonymised form. The customer can view his own reviews, other customers will not see these reviews. The purpose of the data processing within the evaluation system is the handling of the trip or the payment towards the driver or the dispatcher as well as the analysis and improvement of the dryve.world Services, e.g. to monitor the proper execution of trips, to increase the quality and to prevent or combat illegal use. Ratings are usually not stored for more than 2 years and then deleted or anonymised.
The legal basis for the processing of personal data during the registered use of dryve.world Services and during the booking of trips is contract performance. If the data subject provides additional, voluntary information (e.g. flight number, frequent flyer programme, special requests, rating), the legal basis is their consent and our legitimate interest in providing improved services.
In addition, dryve.world processes customer data in order to analyse the use of the dryve.world Services, to design and improve them in a demand-oriented and personalised manner, to advertise the dryve.world Services, to detect, limit and eliminate malfunctions and problems of a technical or process-related nature and to prevent illegal use of the dryve.world Services (e.g. fraudulent booking, cyberattacks). In this respect, the legal basis for the processing of personal data is our legitimate interest in operating and improving our services. Data will not be passed on to recipients in this respect unless to dryve.world's data processors or as far as otherwise permitted by law.
10. Payment & Fraud Prevention
10.1 Payment
All dryve.world bookings can be paid by credit or debit card. The credit card information only has to be stored once upon the first booking and is protected against unauthorized access. For this purpose, a certified payment provider is used whose systems meet the applicable security standards, such as the PCI DSS standard (Payment Card Industry Data Security Standard). For recurring transactions, the card data is stored with our assigned PCI DSS-certified payment provider. The legal basis for the processing is contract performance.
dryve.world itself does not store credit card data or only in abbreviated form for analysis purposes or to prevent fraud. The legal basis for this is our legitimate interest in fraud prevention and service improvement.
Card payments are provided by the payment service provider Stripe/Square/PayPal. The privacy policy for the use of the Stripe/Square/PayPal.
Information on security and verification procedures in connection with payment services can be found at our payment service provider Stripe/Square/PayPal.
In addition to card payment, you can pay for your bookings via PayPal in our mobile apps (Android / iOS). In this case, personal data such as the e-mail address of your PayPal account and information about your mobile device (e.g. Device ID) will be transmitted by us to PayPal for the purpose of fulfilling the contract. For more information on data processing by PayPal, please visit: https://www.paypal.com/privacy
10.2 Fraud Prevention
To ensure that a payment instrument is used by its rightful owner and to prevent fraud, IP addresses, e-mail addresses, payment data and card information may be transmitted to one or more external fraud prevention service providers. This transmission may also contain additional personal data. The external fraud prevention service providers process these personal data on behalf of dryve.world. The legal basis for this processing is our legitimate interest in fraud prevention.
In the course of the authentication of the cardholder, it may also be necessary for individual transactions that dryve.world requires a copy of an additional identification document (e.g. identity card, passport, drivers' licence) or a copy of the credit card. dryve.world will ask you to black out any data that is not required (e.g. the credit card number except the last four digits). The legal basis for this is contract fulfillment, your consent, and our legitimate interest in fraud prevention.
11. Communication with dryve.world
If you contact dryve.world (e.g. by phone, contact form, feedback form, chat, messenger, e-mail or social media (Facebook, Instagram, Twitter)), the data you provide will be processed to handle your request and to answer your inquiry. The legal basis is your consent and contract fulfillment or initiation.
Contact data is also used by dryve.world - pseudonymised or anonymised if possible - to design and improve dryve.world services according to your needs, to identify and eliminate malfunctions and problems of a technical or process-related nature and to prevent illegal use of dryve.world services (e.g. fraudulent booking, cyberattacks). The legal basis for the processing of personal data is our legitimate interest in improving our services.
dryve.world also uses external services and tools, e.g. messenger services or chat support tools, to communicate with the customer. The legal basis for the processing of personal data is our legitimate interest in providing customer service. Agreements on commissioned data processing exist with the respective providers - where necessary.
In this context, we use intercom as a communication medium, either by e-mail or by messages within our products.
dryve.world also offers customers different feedback channels, also via external platforms. Such customer feedback is also used to process your request and also - if possible pseudonymized or anonymized - to design and improve dryve.world Services according to your needs, to recognize and eliminate malfunctions and problems of a technical or process-related nature and to prevent illegal use of dryve.world Services (e.g. fraudulent booking, cyberattacks).
The legal basis for the data processing is your consent (if you have separately and explicitly agreed) or our legitimate interest in service improvement. With the respective providers of feedback tools there are again - as far as necessary - agreements on commissioned data processing. The respective feedback tool may contain additional information about which data is collected and in which way data is processed.
12. E-mail Advertising, Newsletter
If you have agreed to receiving advertising or if dryve.world otherwise has the right under applicable law, we will use your customer data to send you personalized advertising or general newsletters. The following data is mainly affected: Form of address, name, e-mail address. The purpose of the data processing is for dryve.world to inform you regarding current offers and to draw attention to features of dryve.world services.
E-mail advertising and newsletters may contain pixels. In this case, a graphic file is inserted into the e-mail sent in HTML format, based on which a statistical evaluation may be carried out. By using pixels, dryve.world can detect whether and when e-mails have been opened and links contained therein clicked. The legal base for the data processing is your consent (insofar as you have separately and expressly consented) or our legitimate interest in marketing our services where permitted by applicable law.
Where permitted by applicable law, dryve.world may use the e-mail address which you have provided regarding a booking to advertise its own similar products or services. If you do not wish to receive advertising from dryve.world for similar products or services, you may at any time revoke the corresponding use of your e-mail address. To this end, you can use the unsubscribe link contained in any mail or you can write an e-mail to us using the above-mentioned e-mail addresses (see section 2).
13. Involvement of Data Processors by dryve.world
As far as dryve.world involves third parties in its data processing, e.g. technical service providers or other dryve.world subsidiaries, this is always done on behalf of dryve.world and only if these processors offer sufficient guarantees that suitable technical and organisational measures are carried out in such a way that the processing is in accordance with applicable data protection requirements and guarantees the protection of the rights of the data subject. If processors are located in other countries, we comply with applicable data protection requirements for international data transfers. As a rule, the appropriate safeguards for international transfers are established by means of adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under applicable law.
14 Rights of Data Subjects
If your personal data is processed by dryve.world, you have rights in relation to your personal data under applicable privacy laws. The specific rights available to you may vary depending on your location and the applicable privacy laws. These rights may include:
14.1 Right to Access
You have the right to obtain confirmation from us as to whether personal data is processed; if this is the case, you have a right to access this personal data and further information on the data processing.
14.2 Right to Rectification
You have the right to obtain from us the rectification or completion of inaccurate personal data without undue delay.
14.3 Right to Erasure
You have the right to request the erasure of your personal data where the data is no longer needed, you withdraw consent, you object to the processing, the personal data was processed unlawfully, or there is otherwise a legal ground for erasure, subject to applicable legal exceptions.
14.4 Right to Restriction of Processing
You have the right to request the restriction of processing when applicable conditions are met, such as when the accuracy of the personal data is contested or the processing is unlawful and you oppose erasure.
14.5 Right to Object
Where data processing is based on our legitimate interests or for direct marketing purposes, you have the right to object to the processing of personal data. We will then cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for legal claims.
14.6 Right to Data Portability
You have the right to receive the personal data which you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another service provider, where technically feasible.
14.7 Right to Lodge a Complaint
You have the right to lodge a complaint with the relevant data protection or privacy supervisory authority in your jurisdiction.
14.8 Withdrawal of Consent
Where data processing is based on your consent, you have the right to withdraw your consent at any time. You can do this by sending an e-mail to: consentt@dryve.world. The withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
To exercise any of these rights, please contact us using the contact information provided in section 2. We may need to verify your identity before processing your request.
15. Automated decisions
In certain exceptional cases, you may be subject to an automated decision process if you re-enter a payment method via which a payment has already previously failed or when current indications justify the suspicion that it is a fraudulent booking. In these cases, your request to book a ride with dryve.world will be refused. Such an automatic decision may be necessary to protect our business and other users from fraud. You have the option of contacting us using the contact information provided (see section 2) in order to have an explanation, request human intervention, or express your point of view.
16. Data Erasure and Storage Duration
We will erase your personal data as soon as the legal basis for its processing lapses. However, legal bases may also exist in parallel or a new one may intervene with the lapsing of a legal basis, such as for example the duty to store determined data to fulfill a legal retention obligation (e.g. according to commercial or tax law).
17. Amendment or Update of this Privacy Policy
dryve.world reserves the right to update or amend this privacy policy at any time without giving reasons, as far as this should become necessary, e. g. due to developments in legislation, jurisdiction or regulatory actions or due to further technical developments.
Issued: 1st Jan 2025
---
dryve.world Cookie Policy
dryve.world uses cookies, pixels or similar technologies (e.g. by means of tags, web beacons or gifs). These are small files which are stored on your end device so that we can recognize you or collect information better when you use dryve.world websites or a dryve.world app.
Cookies may be distinguished according to their operating life between session cookies, which are deleted automatically after ending the browser session or permanent cookies, which are stored beyond the individual browser session and enable subsequent recognition of the end device. A distinction is also made between dryve.world's own cookies and those of third parties.
You may prevent the storage of cookies at any time using your browser settings or delete any cookies present. However, this may mean that some functions of dryve.world services may not be available or available only to a limited extent. The storage duration is different depending on the cookie and can be inspected in your browser.
The legal basis for the processing of personal data when using cookies, pixels and similar technologies includes your consent and our legitimate interest in providing the core functionality of our services.
In the context of your visit, dryve.world will set the required cookies, which are technically necessary, to improve functionality or make the use of dryve.world services more user-friendly. This concerns, for example,
1. Your identification and authentication,
2. Storage and user preferences and settings (e.g. language settings), which you have made,- the inclusion of information already provided so that repeated input of information is not necessary,
3. security-related cookies
4. ookies for using multimedia players
dryve.world also uses its own cookies in order to analyze and improve the usage of dryve.world services, to detect and remedy interruptions and problems of a technical or process-related nature and to prevent illegal usage of dryve.world services (e.g. fraudulent booking, cyberattacks). Evaluations by dryve.world take place in pseudonymized or anonymized form as far as is possible.
Additionally, dryve.world uses its own cookies, pixels or similar technologies or those originating from advertising partners (e.g. search engine providers, advertising networks or distribution partners) in order to improve dryve.world services or to measure, evaluate, design and improve advertising measures. dryve.world uses different analysis tools in this regard. In this respect, an evaluation by dryve.world takes place in pseudonymized or anonymized form as far as is possible.
CRITICAL CUSTOMIZATION REQUIRED
This document requires extensive customization including but not limited to:
1. Legal Entity Information: Company name, address, registration details
2. Contact Information: Email addresses, phone numbers, physical addresses
3. Data Protection Officer: Name, company, contact details
4. Payment Providers: Specify your actual payment service providers
5. Fraud Prevention: Specify your actual fraud prevention services
6. CRM System: Replace references to Braze with your actual CRM
7. Communication Tools: Specify your actual tools (Intercom, etc.)
8. Cookie List: Must be completely replaced with YOUR actual cookies and services
9. All Service Descriptions: Verify every service mentioned reflects your actual practices
10. Legal Review: Have this reviewed by qualified legal counsel for GDPR and local law compliance
