Drivex Privacy Policy Gdpr Psp Compliant

DRIVEX STUDIOS SL – PRIVACY POLICY

Last updated: May 2026

1. Purpose of this Privacy Policy

This Privacy Policy explains how DRIVEX STUDIOS SL (“DriveX Studios”, “DriveX”, “we”, “our” or “us”) collects, uses, stores, shares and protects personal data in connection with the operation of the DriveX Studios platform, accessible through drivexstudios.com and any related websites, applications, interfaces, services, payment environments or digital products (collectively, the “Platform”).

DriveX Studios operates a professional digital audiovisual platform which may include adult-oriented audiovisual content and services restricted to individuals who are at least eighteen (18) years old. This Privacy Policy is intended to comply with applicable data protection and privacy laws, including:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”);
  • Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights;
  • Spanish Law 34/2002 on Information Society Services and Electronic Commerce;
  • Regulation (EU) 2022/2065 (Digital Services Act), where applicable;
  • applicable consumer protection, cybersecurity, anti-fraud, payment compliance and platform safety requirements; and
  • applicable requirements imposed by payment processors, acquiring banks, financial institutions, card networks and compliance partners.

By accessing or using the Platform, users acknowledge that they have read and understood this Privacy Policy.

2. Identity of the Data Controller

Data Controller:

DRIVEX STUDIOS SL

Tax ID (NIF): B26691774

Registered Address: Calle Valle del Roncal nº 88 28660 Boadilla del Monte Madrid – Spain

Email: privacy@drivexstudios.com

Support: support@drivexstudios.com

Website: drivexstudios.com

3. Categories of Personal Data Collected

Depending on the user’s interaction with the Platform, DriveX Studios may collect and process the following categories of personal data:

3.1 Identification Data

  • full name;
  • username;
  • stage name;
  • date of birth;
  • nationality;
  • government-issued identification documents;
  • selfies or verification images;
  • account credentials;
  • profile information;

3.2 Contact Data

  • email address;
  • telephone number;
  • billing address;
  • correspondence information;

3.3 Payment and Transaction Data

DriveX Studios does not directly store full payment card information.

Payment transactions may be processed through regulated third-party payment service providers, acquiring banks, gateways and financial institutions.

DriveX Studios may process:

  • transaction identifiers;
  • payment status;
  • subscription details;
  • billing history;
  • fraud indicators;
  • chargeback information;
  • payment verification information;
  • partial card information where legally permitted.

3.4 Age and Identity Verification Data

DriveX Studios may process:

  • age verification results;
  • identity verification records;
  • verification metadata;
  • fraud prevention indicators;
  • proof-of-age documentation;
  • professional creator verification records;
  • compliance audit records.

3.5 Usage and Technical Data

  • IP address;
  • browser type;
  • operating system;
  • device identifiers;
  • cookies and tracking technologies;
  • session information;
  • log files;
  • referral URLs;
  • geolocation derived from IP;
  • authentication logs.

3.6 User Content and Communications

  • support requests;
  • reports and complaints;
  • moderation reports;
  • takedown requests;
  • communications with support teams;
  • uploaded documentation;
  • creator onboarding documentation.

3.7 Sensitive and Compliance-Related Data

Where strictly necessary and proportionate, DriveX Studios may process:

  • adult-content compliance records;
  • consent documentation;
  • image-rights authorizations;
  • anti-fraud indicators;
  • illegal-content investigations;
  • law-enforcement cooperation records.

DriveX Studios does not intentionally process special categories of personal data unless legally justified, strictly necessary and supported by an appropriate legal basis.

4. Purposes of Processing

DriveX Studios processes personal data for the following purposes:

4.1 Platform Operation

  • account creation and management;
  • authentication and access control;
  • delivery of digital services;
  • management of subscriptions and purchases;
  • customer support.

4.2 Age and Identity Verification

  • restricting access to adults only;
  • protecting minors;
  • compliance with applicable laws;
  • fraud prevention;
  • platform integrity.

4.3 Payment Processing and Fraud Prevention

  • processing transactions;
  • preventing payment fraud;
  • chargeback prevention;
  • compliance with payment processor requirements;
  • card-network compliance.

4.4 Compliance and Platform Safety

  • content moderation;
  • prevention of illegal content;
  • CSAM prevention;
  • abuse investigations;
  • enforcement of platform rules;
  • responding to legal requests.

4.5 Marketing and Communications

Where permitted by law, DriveX Studios may send:

  • service communications;
  • transactional notifications;
  • promotional communications;
  • marketing messages.

Users may unsubscribe from marketing communications at any time.

4.6 Legal Compliance

  • compliance with GDPR;
  • anti-fraud obligations;
  • consumer protection obligations;
  • payment compliance obligations;
  • legal defense and evidence preservation.

5. Legal Bases for Processing

DriveX Studios processes personal data on one or more of the following legal bases:

  • performance of a contract;
  • compliance with legal obligations;
  • legitimate interests;
  • consent;
  • establishment, exercise or defense of legal claims;
  • protection of users and minors.

Legitimate interests may include:

  • platform security;
  • fraud prevention;
  • moderation;
  • protection against illegal content;
  • business continuity;
  • payment compliance;
  • enforcement of terms and policies.

6. Adult Content and Age Restrictions

The Platform is strictly reserved for individuals who are at least eighteen (18) years old.

DriveX Studios implements reasonable age-verification and identity-verification measures intended to prevent access by minors.

Any attempt to circumvent age-verification controls, provide false information or access the Platform unlawfully may result in account suspension, content removal, reporting to authorities or other enforcement measures.

7. Sharing of Personal Data

DriveX Studios may share personal data with:

7.1 Service Providers

Including:

  • payment processors;
  • hosting providers;
  • cloud providers;
  • fraud-prevention vendors;
  • moderation providers;
  • verification providers;
  • customer-support providers;
  • analytics providers.

7.2 Financial Institutions and Payment Partners

Including:

  • acquiring banks;
  • card networks;
  • payment gateways;
  • payment processors;
  • fraud-monitoring providers.

7.3 Authorities and Legal Requests

DriveX Studios may disclose personal data where legally required or reasonably necessary to:

  • comply with court orders;
  • cooperate with law enforcement;
  • prevent illegal activity;
  • protect minors;
  • investigate fraud;
  • enforce legal rights.

7.4 Corporate Transactions

In the context of mergers, acquisitions, restructuring or asset transfers.

DriveX Studios does not sell personal data to third parties.

8. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where international transfers occur, DriveX Studios will implement appropriate safeguards, including:

  • adequacy decisions;
  • Standard Contractual Clauses;
  • supplementary technical and organizational safeguards;
  • legally recognized transfer mechanisms.

9. Retention Periods

DriveX Studios retains personal data only for as long as necessary for:

  • contractual purposes;
  • legal obligations;
  • fraud prevention;
  • payment compliance;
  • evidence preservation;
  • dispute resolution;
  • moderation investigations.

Retention periods may vary depending on:

  • applicable legal requirements;
  • limitation periods;
  • payment processor requirements;
  • anti-fraud obligations;
  • platform safety considerations.

Some compliance-related records may be retained for extended periods where legally justified.

10. Security Measures

DriveX Studios implements reasonable technical and organizational security measures, including:

  • access controls;
  • encryption;
  • authentication systems;
  • logging and monitoring;
  • restricted compliance access;
  • secure storage;
  • anti-fraud systems;
  • incident response procedures.

No system can guarantee absolute security.

Users are responsible for maintaining the confidentiality of their credentials.

11. User Rights

Subject to applicable law, users may exercise the following rights:

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to restriction of processing;
  • right to object;
  • right to data portability;
  • right to withdraw consent;
  • right not to be subject solely to automated decisions where applicable.

Requests may be sent to: privacy@drivexstudios.com

DriveX Studios may request proof of identity before processing requests.

Some requests may be restricted where necessary to:

  • comply with legal obligations;
  • preserve evidence;
  • prevent fraud;
  • protect platform safety;
  • comply with payment-compliance obligations.

12. Complaints

Users may lodge complaints with the competent supervisory authority.

In Spain, the competent authority is:

Agencia Española de Protección de Datos (AEPD) www.aepd.es

13. Cookies and Tracking Technologies

DriveX Studios uses cookies and similar technologies.

Users may consult the separate Cookies Policy for additional information.

14. Automated Decision-Making and Fraud Detection

DriveX Studios may use automated systems to:

  • detect fraud;
  • identify suspicious activity;
  • prevent payment abuse;
  • support moderation;
  • detect illegal content risks;
  • support platform security.

Human review may occur where appropriate.

15. Third-Party Links and Services

The Platform may contain links to third-party services.

DriveX Studios is not responsible for third-party privacy practices.

Users should review the privacy policies of external services.

16. Changes to this Privacy Policy

DriveX Studios reserves the right to modify this Privacy Policy at any time.

Updated versions will be published on the Platform.

Continued use of the Platform following updates constitutes acceptance of the revised version.

17. Contact

Privacy-related requests and inquiries may be directed to:

privacy@drivexstudios.com

General support: support@drivexstudios.com

DriveX