The personal data collected on the website https://driveberry.fr is processed by:

DB.IA SAS

Bureau B3 – 6 Rue des Bateliers

92110 Clichy – France

Email : contact@driveberry.fr

DB.IA SAS only collects the data strictly necessary to provide its services. Below are the details of the processing operations carried out:

Identity and contact details

Data concerned: name, email, phone number.

Purpose: account creation, contact and customer support.

Legal basis: performance of the contract.

Retention period: duration of the contractual relationship + 3 years.

Vehicle information

Data concerned: registration number, make, model, mileage.

Purpose: provision of the automotive diagnostic service.

Legal basis: performance of the contract.

Retention period: 5 years from the last service.

Diagnostic and maintenance data

Data concerned: analysis results, diagnostic reports, maintenance history.

Purpose: analysis by artificial intelligence, building the vehicle history and improving the models.

Legal basis: legitimate interest and/or user consent.

Retention period: 5 years from the last service.

Appointment history

Data concerned: dates, selected garages, services performed.

Purpose: tracking of services and relationship with partner garages.

Legal basis: performance of the contract.

Retention period: 5 years.

Browsing data

Data concerned: pages visited, visit duration, clicks, browsing behaviour.

Purpose: audience measurement and service improvement.

Legal basis: user consent.

Retention period: 13 to 14 months depending on the tool used.

Technical data

Data concerned: IP address, technical identifiers, connection logs.

Purpose: systems security and fraud prevention.

Legal basis: legitimate interest.

Retention period: 12 months.

Billing data

Data concerned: billing details, amounts, transaction references.

Purpose: compliance with legal accounting obligations.

Legal basis: legal obligation.

Retention period: 10 years.

The website uses Axeptio as its consent management solution. No non-essential cookie is placed without your prior agreement.

Strictly necessary cookies (no consent required)

• Session and authentication cookies
• Cookie for storing consent preferences (Axeptio)

Analytics and measurement cookies (subject to consent)

Google Analytics 4 (Google LLC)

• Purpose: audience measurement, analysis of visitor behaviour
• Data transmitted: anonymised browsing data, truncated IP address
• Retention: 14 months
• Transfer outside the EU: Yes – United States (EC standard contractual clauses)
• Learn more: https://policies.google.com/privacy

Google Tag Manager (Google LLC)

• Purpose: centralised management of tracking tags and scripts
• Note: GTM does not collect data directly but may trigger other tools subject to consent
• Transfer outside the EU: Yes – United States (EC standard contractual clauses)
• Learn more: https://policies.google.com/privacy

Microsoft Clarity (Microsoft Corporation)

• Purpose: behavioural analysis, recording of anonymised sessions, heatmaps
• Data transmitted: anonymised user interactions, browsing data
• Retention: 13 months
• Transfer outside the EU: Yes – United States (EC standard contractual clauses)
• Learn more: https://privacy.microsoft.com/fr-fr/privacystatement

Axeptio (Axeptio SAS)

• Purpose: management of cookie consent, storage of user preferences
• Data transmitted: consent identifier, timestamp, user choice
• Retention: 12 months
• French provider – data hosted in Europe
• Learn more: https://www.axeptio.eu/fr/privacy

Managing your preferences

You can change or withdraw your consent at any time via the Axeptio cookie manager available at the bottom of the website.

Data is retained for the period strictly necessary for the purposes for which it was collected, in compliance with the applicable regulations:

• User account data: duration of the contractual relationship + 3 years
• Diagnostic and appointment history: 5 years from the last service
• Browsing data and analytics cookies: 13 to 14 months depending on the tool
• Customer support data: 3 years from the last contact
• Billing data: 10 years (legal accounting obligation)

Security logs: 12 months

Data may be passed on to the following categories of recipients:

• Partner garages – as part of appointment booking and services
• Technical service providers – hosting (OVHcloud), analytics tools (Google, Microsoft, Axeptio)
• Competent authorities – upon legal or judicial request

DB.IA SAS does not sell any personal data to third parties.

Some service providers (Google LLC, Microsoft Corporation) are established in the United States. These transfers are governed by the standard contractual clauses approved by the European Commission, in accordance with Article 46 of the GDPR, and where applicable by the EU-United States Data Privacy Framework.

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

• Right of access – obtain a copy of your data
• Right to rectification – correct inaccurate data
• Right to erasure – request the deletion of your data
• Right to object – object to certain processing
• Right to restriction – temporarily restrict a processing operation
• Right to portability – receive your data in a structured format
• Right to withdraw consent – at any time, without retroactive effect

How to exercise your rights?

By email: contact@driveberry.fr

By post: DB.IA SAS – Bureau B3, 6 Rue des Bateliers, 92110 Clichy

We undertake to respond within 1 month of receiving your request.

If you are not satisfied with the response, you have the right to lodge a complaint with the CNIL:

Commission Nationale de l’Informatique et des Libertés

3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07

www.cnil.fr

DB.IA SAS implements the following technical and organisational measures:

• Encryption of data in transit (HTTPS/TLS)
• Restricted access to data by internal teams
• Anonymisation or pseudonymisation of analytics data
• Monitoring and logging of access

DB.IA SAS reserves the right to update this policy at any time. The date of the last update is indicated at the top of the page. In the event of a substantial change, users will be informed by email or via a notification on the website.

For any question relating to this policy or to the exercise of your rights:

DB.IA SAS

Bureau B3 – 6 Rue des Bateliers

92110 Clichy – France

Email : contact@driveberry.fr

Site : https://driveberry.fr