Overview
- We process data so that you can use our website, book and pay for driving lessons or courses, communicate with us and—if you choose—use optional features.
- To deliver the service, we share the necessary data with driving instructors, schools, course organisers, payment providers and IT service providers.
- Optional analytics and advertising technologies follow your cookie preferences. You can change your choice at any time in the cookie banner.
- For access, correction, deletion or withdrawal of consent, contact us at
info@drivelab.ch.
1. Controller and scope
The controller for the processing described in this policy is:
DriveLab GmbH
CHE-313.205.027
Lauriedhofweg 12
6300 Zug
represented by Dario Lichtensteiger
Email: info@drivelab.chThis policy applies to the drivelab.ch website, our booking, contact, partner and support services, and the related communication and administration processes. Independent third-party services (for example, a selected payment provider or an offer from a Sovendus partner) are also governed by their own privacy notices.
2. Data we process
Depending on how you use our services, we process in particular the following categories:
| Situation | Data categories |
|---|---|
| Website and security | IP address, browser and device information, time, page viewed, referrer, error and security events, cookie/session identifiers and consent status. |
| Account, basket, order and payment | Name, contact, billing and delivery address, account/order data, selected service, price, voucher, payment and transaction status, and technical order attribution. Depending on the payment method, payment data are also processed directly by the payment provider. |
| Booking, driving lesson and course | Contact, appointment, service and booking data, and information necessary for a course or to provide the service. Where required by the form, this can include date of birth, gender or learner-permit information. |
| Communications | Information in contact, support, partner or application forms, email correspondence, attachments and voluntary free-text fields. |
| Support chat | Chat inputs, responses, a limited chat history, session identifier, language, the help page viewed and timestamps. Please do not enter sensitive or unnecessary personal data there. |
| Lesson estimator | Answers, reaction/perception measurements, result/estimate, voluntary email address, IP address, user agent and—if you voluntarily agree—information in the one-off follow-up. |
| Partners, instructors, applicants and referrers | Contact, contract, service, billing and evidence data, referral/affiliate identifiers and, for applications, submitted documents. |
| Reviews and external content | Review content, technically necessary connection data when a widget loads, and data generated when you deliberately open embedded or linked third-party content. |
We normally receive the data directly from you. Technical data arise when you use the website. Booking, payment or course data may also be reported back by the responsible partner, payment provider or course organiser where needed to complete the service.
3. Purposes and legal grounds for processing
We process data to:
- provide the website securely and reliably;
- answer enquiries, manage accounts, and handle orders, payments, bookings, driving lessons and courses;
- provide instructors, partners and course organisers with the information needed to deliver their services;
- prevent or investigate misuse, fraud, technical faults and security incidents;
- provide support, the lesson estimator, reviews and voluntary additional services;
- measure or optimise reach, use, advertising and advertising success with your voluntary cookie consent; and
- meet legal obligations or assess, establish, exercise or defend legal claims.
Under Swiss data-protection law, we process data for these purposes in accordance with the applicable statutory requirements. Where the GDPR applies to a processing operation, we rely as appropriate on steps taken before entering into or performance of a contract, legal obligations, our legitimate interests (in particular security, operations and documentation), or your consent for voluntary features. You may withdraw consent at any time with effect for the future.
4. How we use data
4.1 Website, hosting and security
When you open the website, technical connection and log data are generated. We use them for delivery, stability, security analysis and troubleshooting. The website and its databases are operated by Hostpoint; technical connection and hosting data may be processed in doing so.
4.2 Account, order, booking and service delivery
We use WooCommerce and Amelia to manage accounts, baskets, orders, payments, appointments and bookings. If a booking is delivered by a driving instructor, driving school or course organiser, that party receives the data necessary for planning, delivery, communication and billing. We do not share more data than are required for the particular service.
4.3 Payments
We use PostFinance Checkout for payment processing. On the reviewed configuration, it offers E-Finance, TWINT, PostFinance Card, credit/debit card, invoice and PostFinance Pay; the payment methods displayed in the checkout can vary by booking. PostFinance Checkout and, depending on the payment method, the participating payment providers receive the order, contact, transaction and payment data needed for authorisation, processing, fraud prevention and follow-up. Further information about processing by PostFinance Checkout and the relevant payment providers is available in their privacy notices, which are accessible in the checkout or from the payment provider.
4.4 Appointment management and Google Calendar
Selected Amelia calendars are synchronised with Google Calendar for the planning of driving lessons and courses. Under the configuration reviewed, a customer’s first and last name and email address are sent to Google Calendar as appointment attendees. The calendar event also processes the service/appointment title, start and end time, location and an Amelia appointment ID; invitation email is enabled. Google Meet is not enabled in this configuration and the attendee list is not shown to other attendees.
4.5 Communications, forms and support chat
If you contact us, submit a form or apply as a partner or applicant, we process your information to handle your request, communicate with you and, where relevant, take steps towards a contract. Submitted documents are accessible only to people who need them for that purpose.
The support chat is technically connected to the OpenAI API. To generate a reply, your input, a limited chat history and relevant help context may be sent to OpenAI. Under the current configuration, chat sessions and messages on DriveLab systems are deleted after 90 days. Please do not enter highly personal, confidential or unnecessary data in the chat.
4.6 Lesson estimator
The lesson estimator processes your answers and technical measurements to produce an estimate and improve the feature. An email address is optional. Only if you voluntarily opt in on the form do we send one question about the actual outcome after approximately eight weeks. This request is not newsletter registration and is not an ongoing series of marketing emails. You can withdraw your consent at any time by contacting info@drivelab.ch.
4.7 Partners, applications, referrals and reviews
For partner or application processes, we process contact, evidence, contract and communication data. In a referral/affiliate programme, we use identifiers and referral information to attribute a referral, visit, order or credit. The referral cookies currently used have a lifetime of up to 180 days.
A Trustpilot widget is embedded on the website. Trustpilot may receive technical connection data when the widget loads. Review invitations and publication of reviews are separate processes; we use only the data required and the configuration used for each of them.
4.8 ASA course registration
For certain ASA courses, after a paid booking we transfer the booking and participant data required for registration to the registration process we use and, where necessary, to the responsible ASA or course platform. The transfer is solely for course registration and delivery.
5. Cookies, similar technologies and your choice
We use cookies, local storage and similar technologies. Necessary technologies help, for example, to manage the basket, session, security and your consent preference. Optional technologies help with functionality, analytics, performance or advertising.
On your first visit, you can choose the optional categories you allow in the cookie banner. You can change or withdraw your choice at any time through “Cookie settings” in the banner or on the website. A withdrawal applies to the future and does not affect processing lawfully carried out before it was withdrawn.
Agreeing to a checkout or to cookie categories is not newsletter registration and does not authorise use of your contact details for a new marketing list.
The available categories and their explanations are available in the cookie settings.
Google Consent Mode
The website uses Google Consent Mode with optional storage states denied by default. Depending on the technical operating mode, Google tags may nevertheless send limited cookieless measurement signals carrying a denial signal when optional categories are rejected. This is not the same thing as a new consent.
6. Analytics, advertising and offer benefits
We use optional analytics and advertising services in accordance with the choice made in the cookie banner and the technical configuration. The services, purposes and possible data categories are described separately below.
Google Tag Manager, Google Analytics, Google Ads and AdSense
Google Tag Manager delivers tags. Google Analytics measures use and reach; Google Ads measures and optimises advertising performance; AdSense may serve advertising content. These services may process online identifiers, browser/device data, use and event data, page views, campaign/conversion data and, depending on settings, cookies. The AdSense loader is loaded only after express consent to the advertising category. If you consent to the advertising category, DriveLab may use technical advertising-attribution data (for example a click ID or UTM source) to trace the path to an order.
Meta
Meta Pixel and the Conversions API may be used for measurement, attribution and optimisation. They may process online identifiers, browser/device data and event/purchase data; depending on configuration, hashed contact parameters may also be used. The specific processing depends on the technical configuration and your cookie settings.
TikTok
A TikTok tag is embedded on the website. A TikTok Pixel can process online/cookie identifiers, browser/device data and usage/event data for measurement, retargeting and advertising optimisation. The Pixel is loaded only after you expressly allow the advertising category in the cookie banner. We ask for your consent in the cookie banner before storing or reading non-essential cookies and using advertising functions.
Sovendus
After an order, a voluntary offer-benefit module from Sovendus may be displayed when you consent to the advertising category. The current integration makes available in particular first and last name, email address, street address, postal code, city, country, telephone number, order number, order value, currency, voucher information, time and a hashed session identifier. If you select an offer or use a form of the relevant offer provider, additional data are shared where needed for that offer.
Sovendus and—if you select an offer—the relevant offer provider process these data under their own privacy notices. Neither checkout nor the cookie choice creates a DriveLab newsletter registration.
Jetpack, Trustpilot and statistical services
Jetpack/Automattic may process technical use data for visitor statistics, CDN/media delivery or other activated website functions. Trustpilot provides the review widget and may process technical connection data when it loads. Information about the optional technologies used in each case, including purpose and storage period, is available in the cookie settings.
7. External content and links
If you deliberately start external content or open a third-party website, that provider’s own rules also apply. This includes maps, videos, social-media services and external links. A connection to a video provider may be made only once you start playback. Google reCAPTCHA, fonts or other directly embedded technical resources may send technical connection data to their provider as soon as a page loads. Where optional technologies are used, the information in the cookie settings also applies.
8. Recipients and categories of recipients
We disclose personal data only where necessary for the purposes stated above, where you have consented, or where there is a legal basis. Depending on the process, recipients include:
- Hostpoint and other IT, hosting and backup providers;
- payment providers and the payment methods involved in the checkout;
- driving instructors, driving schools, course organisers and partners that deliver the booked service;
- Google (including Calendar, Analytics, Ads, Tag Manager, reCAPTCHA or AdSense where used), Meta, TikTok, CookieYes, Automattic/Jetpack, Trustpilot and Sovendus, each only as described above;
- OpenAI for the support chat;
- the registration process used for ASA courses and the ASA/course platform, where required for registration and delivery;
- email, communication, legal, accounting and security service providers, as well as competent authorities where necessary.
Depending on the relationship, a service provider processes data as a processor or as an independent controller. Payment providers, advertising platforms, offer providers and delivery partners may be responsible for their own processing.
9. Processing abroad
DriveLab mainly processes data in Switzerland. Depending on the service, data may also be processed in the EEA, the United States or other countries. The contracting party, processing region and transfer basis vary by service. Where use of a service requires disclosure to a country without an adequate level of protection, it must take place on a basis permitted by the applicable data-protection law; depending on the case, this may include appropriate safeguards (for example recognised standard contractual clauses) or another legal basis. You may request information about the basis relevant to a particular service from us.
10. Retention and deletion
We retain data only for as long as necessary for the relevant purpose, while statutory retention duties apply, or while we need the data to assess, establish, exercise or defend legal claims. The following periods or criteria apply in particular:
| Record | Period or criterion |
|---|---|
| Local support-chat sessions and messages | 90 days under the current configuration. |
| Server-side database backups | 30 days under the backup procedure in use. |
| Referral cookies | Up to 180 days. This is not a general retention period for affiliate data. |
| Orders, bookings, accounts, payment and business records | For the duration of contract performance and the applicable statutory retention duties. |
| Forms, estimator, partner/application records, ASA registrations, email mailboxes and provider logs | For handling the enquiry or business relationship and thereafter where required for legal duties or to assess, establish, exercise or defend legal claims. |
Where data are present in backups, deletion may only take effect once the backup copy is routinely overwritten. Providers may have their own retention periods for logs and legal obligations.
11. Your rights
Within the limits of applicable law, you may request information about personal data we process about you and have inaccurate data corrected. Depending on the applicable law, you may also request deletion, restriction or delivery of certain data, or object to processing. Deletion may be excluded or delayed where, for example, we must retain data because of legal duties or need them to establish, exercise or defend claims.
You may withdraw consent for optional technologies or the one-off estimator follow-up at any time with effect for the future. Change cookie preferences through the cookie settings; for other requests, write to info@drivelab.ch.
If the GDPR applies to you, you may also have the rights provided there, including access, rectification, erasure, restriction, portability, objection and a complaint to a competent data-protection authority. In Switzerland, you may also contact the Federal Data Protection and Information Commissioner (FDPIC).
12. Contact, identity verification and withdrawal
For privacy requests, withdrawals or questions, write to info@drivelab.ch with the subject line Data protection. To avoid disclosing data to an unauthorised person, we may request reasonable proof of identity. We answer requests within statutory deadlines; in Switzerland, access is generally free of charge unless a statutory exception applies.
13. Data security
We take appropriate technical and organisational measures to protect data against unauthorised access, loss, misuse or alteration. No electronic transmission or storage system is absolutely secure, however. We review and adapt our security measures as risks change.
14. Changes to this policy
We may update this policy when our processing activities, services or legal requirements change. The version published on this page with its stated date is authoritative. Material changes to optional advertising or analytics flows are not legitimised by a text change alone; they are reviewed technically and legally before activation.
15. Language versions and date
The German and English versions are published at the same time and are substantively equivalent. If there is an unintended inconsistency, DriveLab will correct it promptly and show the current date.
Version date: 16 July 2026.
