PRIVACY POLICY

Last Updated: April 2026

I. DATA CONTROLLER

Conversational Things, Olivier Heitz
Fabrikstrasse 12
8005 Zurich, Switzerland
UID CHE-210.850.449

Email: support@drive-this.com

II. GENERAL INFORMATION

We take the protection of your personal data seriously and comply with the rules of the General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DSG).

Personal data is only collected to the extent technically necessary and is never passed on to third parties without your consent.

Drive This does not use advertising cookies, cross-site tracking, or profiling. We do not sell data.

III. YOUR RIGHTS

You have the right to:

- Access your stored data (Art. 15 GDPR)
- Rectification of incorrect data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)

Contact for data protection inquiries: support@drive-this.com

IV. DATA PROCESSING IN DETAIL

1. Server Data (Webflow Hosting)

Data collected:

- IP address
- Browser type and version
- Operating system
- Referrer URL (website you came from)
- Date and time of access
- Pages visited

Purpose: Technical operation, security, error analysis
Legal basis: Art. 6 para. 1 lit. f) GDPR (legitimate interest)
Storage duration: 7 days, then automatically deleted
Processor: Webflow Inc., 208 Utah Street, San Francisco, CA 94103, USA
Data transfer to USA: Based on EU Standard Contractual Clauses (SCCs)

More information: https://webflow.com/legal/privacy

2. Analytics (Plausible)

We use Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal data. All data is aggregated and anonymized.

Data collected:

- Page URL
- Referrer URL
- Browser and device type (aggregated)
- Country (derived from IP address, IP not stored)

Purpose: Understanding aggregate website usage
Legal basis: Art. 6 para. 1 lit. f) GDPR (legitimate interest)
Processor: Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia
Data transfer: Data is processed and stored in the EU.

Plausible does not use cookies and does not require consent under GDPR or ePrivacy.

More information: https://plausible.io/privacy

3. Local Storage

We use your browser's local storage to save your favorite events. This data stays on your device and is not transmitted to us.

You can clear this data at any time through your browser settings.

4. Interactive Map (Mapbox)

Purpose: Display of the interactive event map
Legal basis: Art. 6 para. 1 lit. f) GDPR (legitimate interest)
Data: IP address, browser information, map tile requests
Processor: Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, DC 20005, USA
Data transfer to USA: Based on EU Standard Contractual Clauses (SCCs)

More information: https://www.mapbox.com/legal/privacy

5. Weather Data

Weather information shown in event drawers is retrieved from two services:

For dates within the next 5 days: OpenWeather Ltd., London, United Kingdom. https://openweather.co.uk/privacy-policy

For dates beyond 5 days (historical averages): Open-Meteo, operated by Patrick Zippenfenig, Bubikon, Switzerland. Open-Meteo does not require an API key and does not track users. https://open-meteo.com/en/terms

Data transmitted: Coordinates of the event location. No personal data is transmitted.

Legal basis: Art. 6 para. 1 lit. f) GDPR (legitimate interest)

6. Country Flags (flagcdn.com)

In cases where a country flag image is not available through our CMS, we fall back to flagcdn.com to display the correct flag. The service receives the country code and your IP address when loading the image.

Legal basis: Art. 6 para. 1 lit. f) GDPR (legitimate interest)
Processor: flagcdn.com (operated by Vincent Le Goff)

7. Script Delivery (jsDelivr CDN)

Custom JavaScript and CSS files are served via jsDelivr, a free open-source CDN. Loading these files transmits your IP address to the CDN.

Legal basis: Art. 6 para. 1 lit. f) GDPR (legitimate interest)
Processor: Prospect One, Królewska 65A/1, 30-081 Kraków, Poland
Data is processed in the EU and globally via CDN edge nodes.

More information: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net

8. Newsletter (Mailchimp)

If you subscribe to the Drive This newsletter, we process your email address and the date of subscription to send you our newsletter.

Data collected:

- Email address
- Date of subscription
- Open and click statistics (aggregated)

Purpose: Sending the Drive This newsletter
Legal basis: Art. 6 para. 1 lit. a) GDPR (consent)
Processor: Intuit Inc. (Mailchimp), 675 Ponce de Leon Ave NE, Atlanta, GA 30308, USA
Data transfer to USA: Based on EU Standard Contractual Clauses (SCCs)
Storage duration: Until unsubscribe

Subscription is confirmed via double opt-in. A confirmation email is sent to the address you provide, and the subscription is only activated after you confirm.

You can unsubscribe at any time using the link in every newsletter or by writing to support@drive-this.com.

More information: https://mailchimp.com/legal/privacy

9. Contact Inquiries (Email)

Data collected: Name, email, message
Purpose: Answering inquiries
Legal basis: Art. 6 para. 1 lit. b) GDPR (pre-contractual measures)
Storage duration: Until inquiry is fully answered, max. 3 years

10. Social Media Presence

We maintain presences on:

- Instagram (@drive_this_)

When you interact with us on Instagram (comments, direct messages), the privacy policy of Meta Platforms Ireland Ltd. applies. We only receive aggregated, anonymized statistics (reach, clicks). Personal data is only collected when you contact us directly.

More information: https://privacycenter.instagram.com/policy

11. Sponsored Listings (Event Organizers)

If you enter into a Sponsored Listing agreement with us as an event organizer, we process the business contact data required to fulfil that agreement.

Data collected:

- Organization name and legal form
- Contact person name and role
- Business email and phone
- Billing address and VAT/UID number
- Event information submitted for listing
- Invoicing and payment correspondence

Purpose: Contract fulfilment, invoicing, and communication relating to the Sponsored Listing.
Legal basis: Art. 6 para. 1 lit. b) GDPR (contract fulfilment).
Storage duration: For the duration of the contract and ten years after the last invoice, in line with Swiss accounting obligations (Art. 958f OR).

Organizer data is not shared with third parties except for the processors named elsewhere in this policy (hosting, email) and Swiss tax authorities where required by law.

V. DATA SECURITY

We implement technical and organizational measures to protect your data:

- SSL/TLS encryption for all connections
- Regular security updates
- Access restrictions (authorized personnel only)

VI. DATA DELETION

Automatic deletion:

- Server logs: After 7 days

Manual deletion (upon request):

- Newsletter unsubscribe: Anytime via the link in any newsletter or by email to support@drive-this.com
- Processing time: Max. 30 days

VII. CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend this privacy policy to reflect changed legal situations or services.

Current version: Always available at https://drive-this.com/privacy

VIII. CONTACT & COMPLAINTS

Data protection inquiries:
support@drive-this.com

Supervisory authority (Switzerland):
Federal Data Protection and Information Commissioner (FDPIC)
https://www.edoeb.admin.ch

Supervisory authority (EU, if you reside in the EU):
Your local data protection authority