EU/EEA Residents

GDPR Privacy Policy

Effective Date: July 1, 2026 | Applicable to residents of the European Union (EU) and European Economic Area (EEA)

Important Notice for EU/EEA Residents: This GDPR Privacy Policy supplements our general Privacy and Security Policy and applies specifically to individuals located in the European Union (EU) and European Economic Area (EEA). It explains your rights under the General Data Protection Regulation (GDPR) (EU) 2016/679.

1. Data Controller

For the purposes of the GDPR, the data controller responsible for your personal data is:

International Automotive Association - IAA

1500 N Grant St Ste R Denver CO 80203 US

License Number: 20261424385

Email: support@iaalicences.com

2. Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal bases:

Contractual Necessity (Article 6(1)(b))

Processing necessary to fulfill your IDP application, process payments, and deliver our Services to you.

Legitimate Interests (Article 6(1)(f))

Processing necessary for improving our Services, preventing fraud, and ensuring network security. We have balanced these interests against your rights and freedoms.

Consent (Article 6(1)(a))

Where you have given explicit consent, such as for marketing communications or non-essential cookies. You may withdraw consent at any time.

Legal Obligation (Article 6(1)(c))

Processing required to comply with applicable laws, regulations, or court orders.

3. Your Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15)

Obtain confirmation of whether we process your data and access to that data.

Right to Rectification (Art. 16)

Request correction of inaccurate or incomplete personal data.

Right to Erasure (Art. 17)

Request deletion of your data ("right to be forgotten") under certain conditions.

Right to Restriction (Art. 18)

Request limitation of processing under specific circumstances.

Right to Portability (Art. 20)

Receive your data in a structured, commonly used format and transmit it to another controller.

Right to Object (Art. 21)

Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, contact us at support@iaalicences.com. We will respond within 30 days as required by Article 12(3) of the GDPR.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements:

Data Category Retention Period
IDP Application Data3 years from last application
Account InformationDuration of account + 2 years after closure
Payment Records7 years (legal requirement)
Customer Support Communications3 years
Website Analytics Data26 months

5. International Data Transfers

As we are based in the United States, your personal data will be transferred to and processed outside the European Economic Area (EEA). We ensure appropriate safeguards for such transfers through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data processing agreements with all third-party service providers
  • Regular data protection impact assessments
  • Technical and organizational measures to ensure data security during transfer

6. Right to Lodge a Complaint

If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in your EU member state of residence, place of work, or place of the alleged infringement.

We encourage you to contact us first at support@iaalicences.com so we can address your concerns directly.

7. Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Article 22).

8. Contact Our Data Protection Officer

For questions about this GDPR Privacy Policy or to exercise your data subject rights, contact our Data Protection Officer:

Data Protection Officer: support@iaalicences.com

Address: 1500 N Grant St Ste R Denver CO 80203 US

Response Time: We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days.