Legal information
Privacy policy
This personal data processing policy is in force from 01.11.2026 and will be updated regularly to reflect any changes in how we handle your personal data or any changes in the applicable laws. The Romanian version is the reference version.
- When does this policy apply?
- What personal data do we process and where do we get it?
- For what purposes and on what legal grounds?
- Vehicle data, location and driver data
- How long do we keep the data?
- How do we keep the data secure?
- Who has access to your data?
- What are your rights?
- How to contact us
Your privacy matters to us and we strive to provide a high level of protection when processing personal data, in line with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Under the applicable data protection laws, GoDrive S.R.L. (tax ID 34239283, trade register J40/2741/2018, registered office Splaiul Independenței 319H, London Office Building, et. 15, Sector 6, Bucharest) is the controller of your personal data as described below. If you have questions about this information or want to exercise any of your rights, you can contact us using the details at the end of this page.
When does this policy apply?
This policy explains how personal data is processed on the godrivecarbox.com website and in the GoDrive CarBox service. It is also general information for our clients, partners, collaborators, consultants, suppliers, subcontractors, prospective employees, public authorities and the employees and collaborators of all of them.
This policy does not cover personal data processed by other companies, individuals, authorities or institutions referred to on our website.
What personal data do we process and where do we get it?
We collect personal data of clients, GoDrive CarBox users, website visitors, suppliers, business contacts, employees and prospective employees. Where we collect data not listed in this policy, we will give the people concerned (when required by law) a specific notice about that data and how it will be used.
“Personal data” means information that, directly or indirectly, relates to you as a natural person. The personal data we process:
| Category | Details |
|---|---|
| Personal, contact and identification details | First and last name, the company you represent, contact details (email, phone number, address, city) and our correspondence with you, including quote requests sent through the website form (number and makes of cars, the plan you want, your message). |
| Vehicle and usage data | Operating parameters read through the OBD-II port (such as engine speed, coolant temperature, battery voltage, speed), fault codes, diagnostics history, vehicle and device identifiers, the vehicle’s location (GPS position), routes, mileage, and the time and duration of trips. |
| Job and professional information | Current position and employer, and for candidates, their CV and employment documents. |
| Cookies, connection data | IP address, operating system, browser and, only with your consent, Google Analytics and LinkedIn cookies. See the cookie policy. |
We get this data directly from you (for example when you fill in the quote form or write to us), from the GoDrive CarBox device fitted to the vehicle, or from the company that provides you with the vehicle. We may also get it from public sources (registers or the internet), clients, suppliers or public authorities.
For what purposes do we process the data and on what legal grounds?
Processing means any operation we or a third party perform on personal data, including but not limited to collecting, recording, correcting, storing and deleting it. Data is processed only for the stated purposes and is not further processed for any other purpose, except as allowed by the General Data Protection Regulation.
| Purpose | Legal ground |
|---|---|
| Answering quote requests and messages sent through the website, by email or by phone | Steps taken at your request before entering into a contract, and the consent given in the form |
| Providing the GoDrive CarBox service: collecting vehicle data, comparing it with vehicles of the same make and model, alerts and diagnostics | Necessary to perform the contract to which you or your company are a party |
| Negotiating, concluding and managing the contractual relationship | Necessary to conclude and perform a contract |
| Meeting legal obligations (financial, tax, archiving) and answering requests from authorities | Necessary to comply with a legal obligation |
| Improving the security and operation of the website, networks and data | Our legitimate interest in keeping the website, networks and data secure |
| Statistics on how the website is used (Google Analytics) | Your consent, which you can withdraw at any time from “Cookie settings” |
| Measuring the results of our LinkedIn campaigns (LinkedIn Insight Tag) | Your consent, which you can withdraw at any time from “Cookie settings” |
| Resolving disputes | Our legitimate interest in defending our rights before courts or other authorities |
If we ever need to process your personal data for a purpose that legally requires your consent, we will ask for it before starting that processing.
Vehicle data, location and driver data
The data read by GoDrive CarBox describes how the vehicle runs. It becomes personal data when it can be linked to a person: the owner of a private car or the driver using a company car.
- For private users, GoDrive S.R.L. processes this data as controller, to provide the contracted service.
- For fleets, the company that owns the vehicles decides the purposes of the monitoring and is the controller of its drivers’ data, and GoDrive S.R.L. processes it on that company’s behalf under the contract between them. Before the device is fitted, the company must tell its drivers what data is collected, including whether location is collected, for what purpose and for how long it is kept.
- The device collects the vehicle’s location on every trip and has no private mode. Location is used only for the purposes set out in the contract (such as tracking, routes, mileage and optimised routes).
- Under an insurance package, data may be shared with the insurer only with the insured person’s consent and only for the purposes set out in the insurance contract.
How long do we keep the data?
The personal data we process as described above is deleted once the purposes of the processing have been met, and kept only for as long as is reasonable or required by law. Vehicle data is kept for the duration of the GoDrive CarBox contract and for at most 3 years after it ends, unless the contract says otherwise, and quote requests for as long as needed to answer you and to conclude a possible contract.
How do we keep the data secure?
We aim for the highest level of protection for your personal data. To that end we take appropriate technical and organisational security measures against unauthorised access, alteration, disclosure or destruction, and we keep improving them:
- adopting and applying dedicated internal procedures
- limiting processing activities
- restricting access to personal data
- testing and auditing the security of our systems
- backing up information to ensure its integrity
- training our employees who work with your personal data
- including clauses in our supplier contracts that require them to protect the personal data we give them access to.
Who has access to your data?
We may transfer personal data to our service providers, our clients, public authorities and institutions or a third party, as permitted by law.
We may appoint external partners to carry out tasks on our behalf, such as hosting and cloud providers, mobile communications providers for GoDrive CarBox devices, email, archiving, audit or consulting providers, and Google (Google Analytics) and LinkedIn (LinkedIn Insight Tag), only if you have consented to cookies. These services may require our partners to access your personal data. We always sign an agreement with these partners so that your personal data stays well protected and confidential.
We may also disclose your personal data to third parties, such as the police or other public authorities, where it relates to criminal investigations or where we are otherwise required to disclose it by law or by a decision of a public authority, or to establish, exercise or defend our rights or those of another person in court.
Unless you are told otherwise, any transfer of your personal data from the European Economic Area (EEA) to third parties outside the EEA relies on an adequacy decision or is governed by standard contractual clauses. Any other transfers follow appropriate international data transfer mechanisms and standards.
What are your rights?
Under the circumstances, conditions and exceptions set out in the applicable law, you can exercise the following rights regarding your personal data:
- The right to know whether we hold personal data about you and, if we do, to receive information about it and a copy of it
- The right to have your personal data corrected if it is inaccurate or incomplete
- The right to object to processing that is based on our legitimate interests or those of a third party, and the right to have your personal data erased, including when it is no longer needed for the purposes it was collected for
- The right to ask us to restrict the processing of your personal data in the circumstances set out by law
- The right to receive a copy (in a structured, commonly used and machine-readable format) of the personal data you gave GoDrive S.R.L., or to ask us to send it to another controller
- Where you gave consent to a processing activity, the right to withdraw it at any time (without affecting the lawfulness of processing before the withdrawal)
- The right not to be subject to a decision based solely on automated processing (including profiling) that has legal or similarly significant effects on you
- The right to lodge a complaint at any time with the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro) if you believe your personal data was processed in breach of the applicable law, or with the supervisory authority in the country where you live, work or where the alleged breach took place.
How to contact us
To exercise any of these rights or to ask about this policy, contact us at:
GoDrive S.R.L.
Splaiul Independenței 319H, London Office Building, et. 15, Sector 6, Bucharest
office@godrivecarbox.com / 0371 395 028