SILVERNUTS s.r.o., Company ID No. 01697056, with its registered office at Na staré vinici 418/20, 140 00 Prague 4, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 210503 (hereinafter referred to as the “Controller”, “we” or the “Company”), operates the online platform Drivers Cave available at driverscave.com.
This Privacy Policy informs website visitors, registered users, vehicle buyers, customers, business partners, and other individuals about how we process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and related applicable legislation.
This Privacy Policy explains in particular:
- what personal data we process,
- for what purposes and on what legal basis we process personal data,
- who may have access to personal data,
- how long personal data is retained,
- what rights you have as a data subject.
If you have any questions regarding the processing of personal data, you may contact us at:
team@driverscave.com
1. Scope of personal data processing
The scope of personal data we process depends on how you use our services.
1.1 Website visitors
When you visit our website, we may process technical information related to your use of the website, including:
- IP address,
- information about the device you use,
- internet browser type,
- operating system,
- language settings,
- information about your visit to our website,
- data collected through cookies.
We use this information primarily to ensure the secure operation of the website, its proper functionality and, where applicable, to analyse its use and improve our services.
1.2 Contact form for vehicle listings
If you contact us through a contact form related to a vehicle offered on the Drivers Cave platform, we may process in particular:
- first name and surname,
- email address,
- telephone number (if provided),
- content of your message,
- information relating to the specific vehicle you are interested in.
The purpose of processing is primarily:
- facilitating communication between the interested party and the seller,
- responding to enquiries,
- providing services related to vehicle listings.
The legal basis for processing is primarily the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR, consisting of enabling communication between platform users and providing our services.
1.3 Sale of a vehicle through Drivers Cave
If you use our service related to selling your vehicle through SILVERNUTS s.r.o., we may process in particular:
- first name and surname,
- email address,
- telephone number,
- vehicle information,
- vehicle make and model,
- vehicle VIN,
- vehicle registration number,
- photographs and other information provided for the purpose of creating a vehicle listing.
The purpose of processing is:
- preparation and publication of a vehicle listing,
- communication with interested buyers,
- administration of the sale process,
- fulfilment of contractual obligations.
The legal basis for processing is primarily:
- performance of a contract or taking steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR,
- legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR.
1.4 User account registration
If you create a user account on the Drivers Cave platform, we may process:
- first name and surname,
- email address,
- telephone number,
- login credentials,
- information about your activity on the platform,
- content you upload to the platform.
The purpose of processing is:
- creation and administration of your user account,
- enabling use of platform features,
- securing your account,
- communication related to the operation of the service.
The legal basis is primarily:
- performance of a contract pursuant to Article 6(1)(b) GDPR,
- legitimate interest of the Controller in ensuring the secure operation of the platform pursuant to Article 6(1)(f) GDPR.
1.5 Content published by users on the platform
Drivers Cave allows users to publish information related to vehicles, such as vehicle listings, photographs, technical specifications, and other content.
If a user uploads personal data into publicly available sections of the platform, the user acknowledges that such data may be accessible to other visitors and users of the platform.
Users are responsible for ensuring that:
- they have the right and authority to publish the submitted information,
- they do not upload personal data of third parties without an appropriate legal basis,
- they comply with the rules governing the use of the platform.
SILVERNUTS s.r.o. publishes only information necessary for the operation of the service and may allow users to control the extent of publicly displayed contact information.
1.6 Customers and business partners
If you are our customer, supplier, or business partner, we may process in particular:
- first name and surname,
- date of birth or company identification number,
- business name or represented company,
- billing and contact details,
- telephone number,
- email address,
- job position,
- bank account details,
- information necessary for fulfilling contractual obligations,
- vehicle identification data (such as VIN or registration number), where necessary for the provided service.
The purpose of processing is:
- entering into and performing contracts,
- maintaining accounting and tax records,
- communication with customers and business partners,
- protection of the Company’s legitimate interests.
1.7 Newsletter and marketing communications
If you subscribe to the Drivers Cave newsletter, we process:
- email address,
- potentially information about your interaction with newsletters.
We send newsletters only based on your consent pursuant to Article 6(1)(a) GDPR, unless another legal basis applies under applicable legislation.
You may withdraw your consent at any time:
- by clicking the unsubscribe link included in every newsletter,
- by sending a request to: team@driverscave.com
2. Cookies
Our website uses cookies and similar technologies.
Cookies are small text files stored on your device that enable the proper functioning of the website, remember your preferences, and help us analyse website usage.
We use the following categories of cookies:
Essential cookies
These cookies are necessary for the basic operation of our website and cannot be disabled through our cookie management system.
We use them, for example, for:
- proper website functionality,
- security purposes,
- storing cookie preferences.
The legal basis for processing is the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR.
Analytics cookies
Analytics cookies are used only based on your prior consent.
They are used primarily for:
- measuring website traffic,
- understanding how users interact with our website,
- improving our services.
For example, we use:
Google Analytics 4
Provider:
Google Ireland Limited
Purpose:
Analysis of website traffic and user behaviour.
Marketing cookies
Marketing cookies are used only based on your consent.
They may be used, for example, for:
- measuring the effectiveness of advertising campaigns,
- displaying more relevant content,
- evaluating traffic originating from advertising sources.
3. Overview of used cookies and third-party services
The specific cookies used may change over time depending on the technologies implemented and the settings of our website.
The current overview of cookies is available through the cookie management tool provided on our website.
Overview of essential cookies
| Cookie name | Provider | Type | Purpose |
|---|---|---|---|
| To be completed | driverscave.com | Essential | Storing the user’s cookie preferences |
| To be completed | driverscave.com | Essential | Ensuring technical operation of the website |
| To be completed | driverscave.com | Essential | Storing language settings or user preferences |
3.1 Third-party services used
Google Tag Manager
We use Google Tag Manager, a service that allows us to technically manage measurement and marketing tools used on our website.
Google Tag Manager itself is not used for analytical measurement of website traffic but enables the loading of other tools according to the user’s settings and consent preferences.
Google Analytics 4
We use Google Analytics 4, provided by Google Ireland Limited.
Google Analytics is used for:
- analysing website traffic,
- evaluating the use of individual parts of the website,
- improving user experience.
Google Analytics is activated only if you provide your consent through the cookie banner.
Brevo
We may use the Brevo service for sending newsletters and business or informational communications.
Through this service, we may process in particular:
- email address,
- information about delivery and opening of sent messages,
- basic technical information related to email distribution.
We use Brevo for:
- managing newsletter subscriptions,
- customer communication,
- sending information where you have provided consent or where applicable legislation allows such communication.
4. Refusing and managing cookies
You may refuse cookies or change your cookie preferences at any time through the cookie management tool available on our website.
You may also manage cookies through your internet browser settings.
Please note that restricting or disabling certain cookies may limit the functionality of some parts of the website.
5. Purposes of processing and legal bases
We process personal data only to the extent necessary for specific purposes.
Website visitors
We process your data primarily for the purpose of:
- ensuring secure operation of the website,
- ensuring proper functionality of the platform,
- analysing website usage,
- improving our services.
The legal basis is:
- legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR for necessary technical data,
- your consent pursuant to Article 6(1)(a) GDPR for analytics and marketing cookies.
Drivers Cave platform users
We use your data primarily for:
- creating and managing user accounts,
- enabling publication of vehicle listings,
- communication between users,
- ensuring platform security,
- preventing misuse of the service.
The legal basis is primarily:
- performance of a contract pursuant to Article 6(1)(b) GDPR,
- legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR.
Customers and business partners
We process data primarily for:
- entering into and performing contracts,
- providing services,
- invoicing,
- fulfilling legal obligations,
- protecting legal claims.
The legal basis is:
- performance of a contract,
- compliance with legal obligations,
- legitimate interest of the Controller.
6. Who has access to your personal data
Access to personal data is granted only to persons who require such access for the performance of their work or contractual obligations.
To the extent necessary, we may disclose your personal data to:
- providers of server, hosting, and cloud services,
- IT infrastructure providers,
- accounting service providers,
- legal service providers,
- marketing and analytics service providers,
- other suppliers who assist us in operating the platform.
All such providers process personal data only to the extent necessary for providing the relevant services and based on appropriate contractual arrangements ensuring adequate protection of personal data.
7. Disclosure of data within the platform
Due to the nature of the Drivers Cave service, certain information may be made available to other users of the platform.
This may include information necessary for the operation of the automotive marketplace, such as:
- vehicle information,
- vehicle photographs,
- technical specifications,
- information provided for the purpose of offering a vehicle,
- contact details, if the user actively chooses to publish them.
Before publishing a vehicle listing, the user is informed about the scope of information that will be publicly available.
8. Transfer of personal data to third countries
If the use of services provided by our suppliers involves the transfer of personal data outside the European Economic Area, such transfers are carried out only in accordance with Chapter V of the GDPR.
Transfers may take place primarily on the basis of:
- an adequacy decision issued by the European Commission,
- Standard Contractual Clauses approved by the European Commission,
- other appropriate safeguards pursuant to the GDPR.
9. Retention period of personal data
We retain personal data only for as long as necessary in relation to the purpose for which it is processed.
Approximate retention periods:
| Purpose of processing | Retention period |
|---|---|
| Contact forms | Generally no longer than 2 years from the last communication |
| User account | For the duration of the account existence and for a reasonable period thereafter for the protection of legal claims |
| Vehicle listings | For the period during which the listing is published and subsequently for the period necessary to administer the service |
| Newsletter | Until withdrawal of consent or termination of the service |
| Accounting and tax documents | According to statutory retention periods, generally up to 10 years |
| Contractual documentation | For the duration of the contractual relationship and subsequently according to applicable limitation periods |
After the relevant retention period expires, personal data is securely deleted or anonymised.
10. Your rights relating to the processing of personal data
In connection with the processing of your personal data, you have the following rights:
Right of access
You have the right to request confirmation as to whether we process your personal data and to obtain information about such processing.
Right to rectification
You have the right to request correction of inaccurate or incomplete personal data.
Right to erasure
You have the right to request deletion of personal data where such data is no longer necessary for the purposes for which it was collected or where other conditions under the GDPR are met.
Right to restriction of processing
You have the right to request restriction of processing in cases specified by the GDPR.
Right to data portability
Where personal data is processed by automated means based on consent or contract, you have the right to receive such data in a structured, commonly used, and machine-readable format.
Right to object
You have the right to object at any time to processing based on the legitimate interests of the Controller or to processing for direct marketing purposes.
Right to withdraw consent
Where we process personal data based on your consent, you may withdraw such consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
11. Automated decision-making and profiling
We do not use your personal data for decision-making based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
If we use automated processing tools in the future, for example for content personalisation or vehicle recommendations, such processing will only be carried out in accordance with applicable legislation, and users will be appropriately informed about such use.
12. Security of personal data
We consider the protection of personal data to be an important part of operating the Drivers Cave platform.
We implement appropriate technical and organisational measures designed to prevent:
- unauthorised access to personal data,
- loss of personal data,
- misuse,
- unauthorised disclosure,
- unauthorised alteration or damage.
Such measures may include in particular:
- access rights management,
- securing user accounts,
- use of secure communication protocols,
- regular software updates,
- data backups,
- internal rules governing the handling of personal data.
Access to personal data is granted only to persons who require such access for the performance of their work or contractual obligations.
13. Procedure in the event of security incidents
Although we implement appropriate security measures, the risk of a security incident cannot be completely eliminated.
If a personal data breach occurs, we proceed in accordance with the requirements of the GDPR and other applicable legal regulations.
In the event of an incident, we will in particular:
- assess the scope and potential impact of the incident,
- take measures to minimise its consequences,
- notify the Office for Personal Data Protection where required,
- inform affected individuals without undue delay where required by the GDPR.
Information provided to affected persons may include:
- a description of the nature of the incident,
- likely consequences,
- corrective measures taken,
- recommended steps to reduce potential risks.
14. Children’s data protection
The Drivers Cave platform is not intended for persons under the age of 16.
We do not knowingly collect personal data of children without an appropriate legal basis or consent from their legal guardian.
If we discover that we have unintentionally obtained personal data of a child in violation of applicable laws, we will take reasonable steps to delete such data.
15. Contact and exercising your rights
If you wish to exercise any of your rights under the GDPR or have questions regarding the processing of personal data, you may contact us:
SILVERNUTS s.r.o.Na staré vinici 418/20
140 00 Prague 4
Czech Republic
Email: team@driverscave.com
We handle requests without undue delay and no later than one month after receiving them.
In complex cases or where there is a large number of requests, this period may be extended by an additional two months. We will inform you about any such extension.
For the protection of personal data, we may request verification of your identity.
16. Right to lodge a complaint with a supervisory authority
If you believe that we process your personal data in violation of applicable laws, you have the right to lodge a complaint with the relevant supervisory authority.
In the Czech Republic, the competent authority is:
The Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Website: www.uoou.cz
17. Updates to this Privacy Policy
We may update this Privacy Policy from time to time, particularly in connection with changes to our services, technologies used, or legal requirements.
The current version of this Privacy Policy will always be available on: driverscave.com
In the event of significant changes that may substantially affect the way we process your personal data or your rights, we will inform you through an appropriate method, such as email, a notification on the platform, or another suitable form of communication.