Information for the data subject under Article 13 of Regulation (EU) 2016/679 (GDPR). Version of 23 August 2026.
The controller of your personal data is Visa Light Group (the "Controller"), registered office: Riga, Latvia, [street address to be added], registration number: [to be added]. Person responsible for data protection: [to be added]. Contact email: visalite.group@gmail.com. A data protection officer has not been appointed.
TIMDRIVE (timdrive.online) is an online service that matches truck drivers with transport companies: a driver fills in a profile, the system shows companies whose requirements match it, and both parties can exchange messages inside the service. The service is intended for drivers and companies in the European Union / EEA and is not directed at users in other jurisdictions.
Drivers: name, phone number, email address, password (stored as a hash), citizenship, country of residence, driving licence categories, Code 95 / driver qualification card, work experience, desired routes and pay, photo (avatar), scanned documents you upload (licence, passport pages, certificates), Telegram ID if you register through the bot, messages you send through the service.
Companies and partners: company name, contact person's name, phone, email, Telegram ID, requirements for drivers, messages.
Technical data: IP address, browser type, date and time of visits, service cookies (see section 10), error reports from your browser (page address and error text, without contents of forms).
Depending on the data and purpose: your consent (given at registration and withdrawable at any time — section 11); performance of a contract or steps at your request prior to entering into it (providing the matching service); the Controller's legal obligations (accounting, responses to authorities); and the Controller's legitimate interest in the security of the service and in preventing abuse.
Companies registered on TIMDRIVE. The matching result (percentage and matching criteria) and a depersonalised summary of your profile are shown to matching companies. Your full name and contact details are disclosed to a company only after you have agreed to start a conversation with it or after a deal has been confirmed by both sides.
Partners. A partner whose link you used sees the fact of your registration and the status of your matches, not your documents.
Service providers acting on our instructions: hosting provider (server located in Riga, Latvia, EU); email delivery service Resend (verification codes and notifications); Telegram (if you use our bot); AI provider Anthropic, whose models help our staff process and answer messages; accounting and legal advisers if needed.
Authorities — courts, law enforcement, tax and other state authorities in cases provided by law.
Your data is stored on a server in the EU (Latvia). Some service providers (Resend, Anthropic) are established in the USA; transfers to them are based on the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses. Messages sent to AI processing are limited to what is needed to answer you.
Profile data is stored while your account is active. An account with no sign-ins for 2 years is deleted together with all profile data and uploaded documents. You can delete your account at any time by writing to the email in section 1; deletion is performed within 30 days. Messages are kept for as long as the account exists. Accounting documents are kept for 5 years as required by Latvian law. Server logs are kept for up to 90 days.
Under the GDPR you have the right to:
To exercise any right, write to visalite.group@gmail.com. We respond within one month.
The service uses only essential cookies: vlg_session — keeps you signed in (30 days); tim_lang — remembers your interface language (1 year); vlg_ref — remembers the partner link you came from (1 year). We do not use advertising trackers or third-party analytics. Your acknowledgement of the cookie notice is stored in your browser's local storage, not in a cookie.
You may withdraw your consent at any time, in full or in part, by emailing the address in section 1. Withdrawal does not affect the lawfulness of processing carried out before it. If the withdrawn consent was necessary for providing the service, your account will be closed.
The matching percentage between a driver and a company is calculated automatically from the criteria in both profiles (licence categories, Code 95, citizenship requirements, experience, etc.). This is a recommendation only: whether to start a conversation or conclude a deal is always decided by people — the driver, the company and our staff. No decision with legal effects on you is made solely by automated means.
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work or place of the alleged infringement. Supervisory authority for the Controller: Data State Inspectorate of the Republic of Latvia (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, Latvia, email pasts@dvi.gov.lv, www.dvi.gov.lv.
You are not obliged to provide personal data or to consent to its processing. However, without the data marked as required in the registration form and your profile, we are unable to create an account and provide the matching service.
We may update this policy; the current version is always available at timdrive.online/privacy with the date of the latest revision at the top.