Last updated October 29, 2026.
Version 2.0 · Effective from 29 October 2026
Drivebotix MB, company code 307166312, VAT LT100018316017, Eduardo Andrė g. 14-5, LT-02232 Vilnius, Lithuania, is the controller of personal data processed through drivebotix.com.
For any privacy question or to exercise your rights, contact info@drivebotix.com or write to us at the address above. We have not appointed a Data Protection Officer.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering enquiries and issuing documentation or quotations | Name, company, email, telephone, message content, model of interest | Steps at your request before entering into a contract (Art. 6(1)(b)) or our legitimate interest in answering business enquiries (Art. 6(1)(f)) | 24 months after the last contact |
| Processing and delivering orders | Name, company, billing and delivery address, VAT number, email, telephone, order contents, payment status | Performance of a contract (Art. 6(1)(b)) | Order records are kept as accounting records for 10 years |
| Invoicing and tax records | Invoice and payment data | Legal obligation (Art. 6(1)(c)) | 10 years |
| Customer account | Email, name, addresses, order history | Performance of a contract (Art. 6(1)(b)) | Until you close the account; accounts without login for 3 years are deleted |
| Export-control and sanctions screening | Names, company, addresses and end-use data are checked against EU and UN sanctions lists | Legal obligation (Art. 6(1)(c)) and legitimate interest in complying with export-control law (Art. 6(1)(f)) | 5 years after the end of the year of export |
| Website security and abuse prevention | IP address, technical logs, captcha verification result | Legitimate interest in keeping the site available and free from abuse (Art. 6(1)(f)) | Security logs: 90 days |
| Legal claims | Data relevant to a dispute | Legitimate interest in establishing and defending legal claims (Art. 6(1)(f)) | Until the limitation period ends |
| Newsletter | Email address, name | Consent (Art. 6(1)(a)); withdraw at any time | Until you withdraw consent |
| Email offers for similar products to existing customers; business prospecting | Name, company, business email, order history. For prospecting, the source is the public business information or your own contact with us | Legitimate interest in direct marketing (Art. 6(1)(f)), with an opt-out in every message | Until you object |
| Analytics and advertising measurement: Google Analytics 4, Google Ads, Meta Pixel, LinkedIn Insight Tag | Online identifiers, browsing events, device data | Consent only (Art. 6(1)(a)); see the cookies policy | See the cookies policy |
Where Meta and LinkedIn tools are used, they act as joint controllers with us for the collection and transmission of data to them; they are independent controllers for any further use.
Order and enquiry data is provided voluntarily, but without it we cannot process an order or reply to you.
| Recipient | Role | Data | Location and safeguard |
|---|---|---|---|
| Namecheap, Inc. (shared web hosting, cPanel) | Processor | All site data, including orders and account data | Servers in the Netherlands (EU). Namecheap is a US company: data processing addendum with standard contractual clauses or EU-US Data Privacy Framework |
| Stripe | Payment processor; independent controller for fraud checks | Payment and order data | US: EU-US Data Privacy Framework or standard contractual clauses |
| hCaptcha (Intuition Machines) | Processor for bot protection | IP address, device signals | US: standard contractual clauses |
| DPD, Venipak | Independent controllers for delivery | Name, address, telephone, email | European Union |
| Accounting firm and accounting system | Processor | Invoices, payments | European Union |
| Namecheap Private Email | Processor | Correspondence and email addresses | US servers: data processing addendum with standard contractual clauses or EU-US Data Privacy Framework |
| AI service provider (name to be added when selected) | Processor | Enquiry and order content | Covered by standard contractual clauses or the Data Privacy Framework where outside the EEA |
| Google (GA4, Ads), Meta, LinkedIn | Joint or independent controllers; consent only | Identifiers, browsing events | US: EU-US Data Privacy Framework |
| WhatsApp (Meta), if used for support | Independent controller for messages | Telephone number, messages | US: EU-US Data Privacy Framework |
| Export-control lawyer, customs broker, authorities | Recipients when required | Screening and shipment data | European Union |
Processors act on our instructions under written agreements. Where a recipient is outside the European Economic Area, we rely on an adequacy decision (including the EU-US Data Privacy Framework for certified recipients) or on standard contractual clauses. You can ask us for a copy of the safeguards.
Enquiries and orders are triaged and drafted with AI tools under human supervision. The provider acts as our processor (see the table above) and does not use your data for its own purposes.
Subject to the conditions in the GDPR, you may request access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interests. You have the unconditional right to object to direct marketing at any time. Where processing is based on consent, you may withdraw it at any time without affecting earlier processing.
We may ask you to confirm your identity before acting on a request. We respond within one month; where requests are complex or numerous we may extend this by up to two further months and will tell you why. If you are not satisfied, you may complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
We apply technical and organisational measures appropriate to the risk, including encrypted transport, access control and restricted administrative access.
We do not take decisions that produce legal effects solely by automated means. Export-control and sanctions screening may lead us to hold or refuse an order; any hold or refusal is reviewed by a person, and you can contest it by writing to info@drivebotix.com.
The website is intended for business and professional users and is not directed at children.
We may update this policy; the current version, with its number and effective date, is always published on this page, and past versions are archived.
Track orders, download invoices and keep your delivery details ready.
You can order as a guest, or sign in to keep your order history and addresses.
Guest orders can still be tracked by email, while an account keeps everything in one place.
