GDPR & Your Data Rights

Last updated: 13 June 2026

1. Who Is the Data Controller?

The data controller for Drive Planner is KOS IT SERVICES. As data controller, we determine the purposes and means of processing your personal data. For all data-related queries, contact us at info@driveplanner.ie.

2. What Personal Data We Process

We process the following categories of personal data:

• Identity data: Full name, email address, phone number.
• Professional data (instructors): RSA ADI licence number, county, vehicle details.
• Training data (learners): Permit number, EDT hours completed, lesson records.
• Technical data: IP address, browser, login history.
• Communications: Support messages.

3. Legal Basis for Processing

We rely on the following lawful bases under GDPR Article 6:

• Article 6(1)(b) — Contract: Processing necessary to provide the scheduling service you signed up for.
• Article 6(1)(f) — Legitimate Interests: Security, fraud prevention, and service improvement.
• Article 6(1)(c) — Legal Obligation: Compliance with applicable Irish and EU law.
• Article 6(1)(a) — Consent: For optional marketing communications, where applicable.

4. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.

Right to Rectification (Article 16)

You have the right to have inaccurate or incomplete personal data corrected. Most data can be updated directly in your account settings.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data ("right to be forgotten") where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that some data may need to be retained to comply with legal obligations.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g. CSV), and to transmit it to another controller.

Right to Restriction (Article 18)

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is resolved.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. How to Exercise Your Rights

To exercise any of the above rights, submit a request to:

• Email: info@driveplanner.ie
• Subject line: GDPR Data Request — [Your Name]

We will acknowledge your request within 72 hours and respond fully within 30 days. In complex cases, we may extend this by a further 60 days — we will notify you if this is necessary.

We may need to verify your identity before processing the request to protect your data from unauthorised access.

6. Data Transfers

Your data is stored on servers within the European Union. We do not transfer personal data outside the EEA unless required to do so by law, or where appropriate safeguards (such as Standard Contractual Clauses) are in place.

7. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Irish supervisory authority:

• Data Protection Commission (DPC)
• Website: www.dataprotection.ie
• Phone: +353 (0)57 868 4800

We would, however, appreciate the opportunity to address your concern before you contact the DPC.

8. More Information

For full details on data collection and use, see our Privacy Policy and Cookie Policy.