Privacy Policy
GDPR Compliant: This Privacy Policy complies with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). We are committed to protecting your personal data and processing it transparently and lawfully.
Contents
Data Controller
The data controller responsible for your personal data is:
DrivrMe Fahrschule
Karlstraße 42-44, 76133 Karlsruhe, Germany
Phone: +49 721 6197872
Email: farschule-ka@drivrme.de
Website: www.drivrme.de
For any questions or requests regarding your personal data, please contact us using the details above. We will respond to all data-related enquiries within 30 days.
Data We Collect
We collect and process the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, ID/passport number | Provided by you at enrolment |
| Contact Data | Address, phone number, email address | Provided by you at enrolment |
| Training Data | Lesson records, progress notes, exam results, instructor feedback | Generated during training |
| Financial Data | Payment records, invoices, outstanding balances | Provided by you / generated on billing |
| Medical/Health Data | Eyesight certificate, relevant health disclosures (if applicable) | Provided by you (mandatory by law) |
| Website Data | IP address, browser type, pages visited, cookies | Collected automatically when you visit drivrme.de |
We do not collect any data beyond what is necessary for providing our services and complying with legal obligations. We never collect sensitive data such as racial or ethnic origin, political opinions, or religious beliefs.
How We Use Your Data
We use your personal data only for the following purposes:
- Registering you as a student and managing your training contract
- Scheduling and delivering driving lessons and theory sessions
- Submitting your application to TÜV/DEKRA for theory and practical examinations
- Processing payments and issuing invoices
- Communicating with you about your training, appointments, and exam results
- Complying with legal obligations under the German Driving License Ordinance (FeV)
- Responding to enquiries submitted via our website contact form
- Improving our website and services (using anonymised analytics data only)
We will never use your data for unsolicited marketing communications without your explicit consent.
Legal Basis for Processing
Under Article 6 of the GDPR, we process your data on the following legal bases:
- Contract (Art. 6(1)(b) GDPR): Processing is necessary to perform our training contract with you
- Legal obligation (Art. 6(1)(c) GDPR): Processing is required to comply with German traffic and driving license legislation
- Legitimate interests (Art. 6(1)(f) GDPR): For example, maintaining business records, fraud prevention, and website security
- Consent (Art. 6(1)(a) GDPR): For optional services such as newsletters or marketing communications, only where you have given explicit consent
Where we process health data (e.g. eyesight certificates), we rely on Art. 9(2)(b) GDPR — processing necessary for carrying out obligations in the field of employment and social protection law.
Data Retention
We retain your personal data only for as long as necessary for the purpose it was collected, or as required by law:
- Training records: Retained for a minimum of 10 years from the end of the training relationship, as required under German commercial law (§257 HGB)
- Financial records: Retained for 10 years in accordance with §147 AO (German Tax Code)
- Contact form enquiries: Deleted within 6 months if no training relationship arises
- Website analytics data: Retained in anonymised form for up to 26 months
After the applicable retention period, your data is securely and permanently deleted.
Sharing Your Data
We do not sell, rent, or trade your personal data. We may share your data only with the following parties, and only to the extent necessary:
- TÜV / DEKRA: Examination authorities — required to book and submit your theory and practical exam applications
- Fahrerlaubnisbehörde (Licensing Authority): As required by law to process your driving license application
- Payment processors: For secure processing of fees (subject to their own privacy policies)
- IT / hosting providers: Who process data on our behalf under strict data processing agreements (Art. 28 GDPR)
All third parties who process your data on our behalf are contractually bound to handle it securely and only in accordance with our instructions. We do not transfer your data outside the European Economic Area (EEA).
Cookies & Our Website
Our website at drivrme.de uses cookies — small text files stored on your device — to ensure the website functions correctly and to help us understand how visitors use the site.
- Essential cookies: Required for the website to operate (e.g. session cookies). These cannot be disabled.
- Analytics cookies: Help us understand website traffic and user behaviour (e.g. Google Analytics). These are only set with your consent.
- Preference cookies: Remember your settings and choices on return visits.
You can manage cookie preferences at any time via the cookie consent banner displayed on your first visit, or through your browser settings. Disabling non-essential cookies will not affect your ability to use our website.
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data. To exercise any of these rights, contact us at farschule-ka@drivrme.de. We will respond within 30 days.
Right of Access (Art. 15)
Request a copy of all personal data we hold about you.
Right to Rectification (Art. 16)
Ask us to correct any inaccurate or incomplete data.
Right to Erasure (Art. 17)
Request deletion of your data where we no longer have a legal basis to hold it.
Right to Restriction (Art. 18)
Ask us to limit the processing of your data in certain circumstances.
Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Right to Object (Art. 21)
Object to processing based on our legitimate interests.
Right to Withdraw Consent
Withdraw consent at any time where processing is consent-based.
Right to Lodge a Complaint
Complain to the supervisory authority: LfDI Baden-Württemberg, Stuttgart.
Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:
- Secure (SSL/TLS encrypted) data transmission on our website
- Password-protected and access-controlled internal systems
- Physical security of paper-based records stored at our premises
- Regular staff training on data protection obligations
- Data processing agreements with all third-party service providers
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours, and inform affected individuals without undue delay, as required by Art. 33–34 GDPR.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make significant changes, we will notify you by email or by posting a prominent notice on our website.
The date at the top of this page always reflects when the policy was last reviewed. We encourage you to review this page periodically. The most current version is always available at drivrme.de.