EAGLE DRIVEAWAY

Privacy Policy

Last updated: 9/14/2026. This document has been drafted to reflect our actual operations and should still be reviewed by a qualified lawyer before you rely on it as your final policy.

1. Data controller

The data controller responsible for the personal data described in this policy is Eagle di Leandro Ramos (VAT number / Partita IVA: IT02849680034), operating the Eagle Driveaway platform for vehicle transportation and repositioning services across the European Union.

For any privacy request, contact: eagle.driveaway@gmail.com. Our registered business address is not published here for personal safety reasons, but is available upon legitimate request and is included on formal documents such as invoices and contracts.

2. What data we collect

• Account data: name, email, phone number, role (driver, client, admin)
• Driver application data: date of birth, nationality, driving licence details, tax status, identity and licence documents
• Client/company data: company name, VAT number, address, contact person
• Ride data: pick-up/delivery addresses, GPS coordinates, vehicle photos, fuel level, mileage, digital signatures, selfies
• Real-time location data while a ride is in progress

3. Purpose and legal basis

We process this data to perform the transport contract between us (Art. 6(1)(b) GDPR). Biometric-adjacent data such as selfies and signatures are processed based on explicit consent given during the check-in/check-out process (Art. 9(2)(a) GDPR).

4. Where your data is stored

Our data is hosted with Supabase, in the EU West (Ireland) region. Your personal data therefore stays within the European Union and is not transferred to countries outside the EU/EEA as part of our standard operations.

5. Retention periods

• Transport documents (DDT) and financial records: 10 years (fiscal obligations)
• Photos and selfies: 24 months
• Geolocation data: 12 months

6. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data, subject to our legal retention obligations described above
• Receive a copy of your data in a portable format
• Object to certain processing

Logged-in drivers and clients can exercise the right to access/portability and request deletion directly from their dashboard ("Privacy & data" section).

7. Data security

Data is stored with Supabase, which encrypts data at rest and in transit, and access is restricted by role-based permissions (Row Level Security) so that each person only accesses their own data.

8. Contact and supervisory authority

For any question about this policy or your data, contact eagle.driveaway@gmail.com. As we operate across the European Union, you have the right to lodge a complaint with the supervisory authority of your own country of residence. As our business is established in Italy, our lead authority is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).