GDPR Privacy Policy

1. Scope

This policy applies to personal data of natural persons resident in the European Union, European Economic Area, or United Kingdom, processed by International Automobile Council in connection with our services. It supplements our general Privacy Policy.

2. Lawful bases for processing

We rely on the following lawful bases under GDPR Article 6:

• Article 6(1)(b) — contract: processing necessary to translate your license, issue and deliver your permit, and provide customer support.
• Article 6(1)(c) — legal obligation: processing necessary to comply with tax, accounting, and other legal requirements.
• Article 6(1)(f) — legitimate interests: fraud prevention, keeping the service secure, and improving the service.
• Article 6(1)(a) — consent: marketing emails and any optional cookies. Consent can be withdrawn at any time without penalty.

3. Special category data

We do not knowingly collect special category data (Article 9), and we ask that you do not upload documents containing health information, religious affiliation, or political opinions when applying. If you do, we will treat such data as if you had given explicit consent under Article 9(2)(a), only for the purpose of processing your application.

4. International transfers

Where personal data of EU, EEA, or UK residents is processed outside those regions, we rely on appropriate safeguards recognized under GDPR Chapter V — such as an adequacy decision or the European Commission’s Standard Contractual Clauses — together with technical measures including encryption of data in transit and at rest.

5. Your GDPR rights

Under GDPR you have the right to:

• Access (Article 15) — receive a copy of all personal data we hold about you;
• Rectification (Article 16) — correct inaccurate or incomplete data;
• Erasure (Article 17) — request deletion, subject to legal retention requirements;
• Restriction (Article 18) — pause processing while a complaint is reviewed;
• Portability (Article 20) — receive your data in a machine-readable format;
• Objection (Article 21) — object to marketing and profiling at any time;
• Withdraw consent — at any time, without penalty; and
• Lodge a complaint with your local supervisory authority.

Email support@internationalautomobilecouncil.com from the email address on your account to exercise any right. We respond within 30 days; complex requests may take longer, in which case you will be informed.

6. Automated decision-making

We do not make decisions about you using fully automated processing that produces legal effects or similarly significant effects. Applications are reviewed by a person before any decision affecting you is made.

7. EU and UK contact

We handle all EU and UK privacy matters centrally. Contact support@internationalautomobilecouncil.com for any EU- or UK-specific request, including requests under this policy. If we appoint a local representative in the EU or UK, we will publish their details on this page.