Last Updated: March 2026
This policy supplements our main Privacy Policy and provides additional information required under the General Data Protection Regulation (GDPR) for individuals in the EEA and UK.
GDPR Privacy Policy
For visitors and customers in the European Economic Area (EEA) and United Kingdom
1. Data Controller
The data controller responsible for your personal data is:
EITA LLC
Website: e-ita.org
Support: support.e-ita.org
2. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance (Article 6(1)(b)): Processing your International Driver's License application, creating your documents, providing customer portal access, and delivering your order. This processing is necessary to fulfill our contract with you.
- Legitimate Interest (Article 6(1)(f)): Improving our website and services, analyzing usage patterns, preventing fraud and unauthorized access, and ensuring the security of our systems.
- Consent (Article 6(1)(a)): Sending marketing emails and renewal reminders, placing advertising and analytics cookies on your device. You may withdraw consent at any time.
3. Data We Collect
We collect the following categories of personal data:
- Identity Data: Full name, date of birth, place of birth, home country
- Contact Data: Email address
- Identity Documents: Driver's license images (front and back), passport-style headshot photograph
- Payment Data: Processed by our third-party payment processor. We do not store card details.
- Technical Data: IP address, browser type, operating system, pages visited, referring URL
- Cookie Data: As described in our Cookie Policy
4. Data Retention
- Identity documents (driver's license photos, headshot photographs) and other non-identifying application data are automatically deleted every 90 days.
- Name and email address are retained for as long as your account is active, to provide customer portal access and send renewal reminders.
- Analytics data is anonymized and retained per Google Analytics' default settings.
- You may request deletion of all your data at any time (see Section 5).
5. Your Rights Under GDPR
As a data subject in the EEA or UK, you have the following rights under the GDPR:
- Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
- Right to Rectification (Article 16): You have the right to request correction of any inaccurate or incomplete personal data.
- Right to Erasure / Right to Be Forgotten (Article 17): You have the right to request deletion of your personal data. We will comply unless we have a legal obligation to retain it.
- Right to Restrict Processing (Article 18): You have the right to request that we limit how we use your personal data in certain circumstances.
- Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another controller.
- Right to Object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe your data protection rights have been violated.
6. International Data Transfers
EITA LLC is based in the United States. When you use our services, your personal data is transferred to and processed in the United States.
We take appropriate safeguards to ensure your data receives an adequate level of protection in accordance with GDPR requirements, including the use of standard contractual clauses where applicable.
7. Data Security
- SSL/TLS encryption on all pages to protect data in transit
- PCI-compliant third-party payment processing
- Automatic deletion of identity documents every 90 days
- Access to personal data restricted to authorized personnel only
- Regular security reviews of our systems and processes
8. Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. All IDL applications are reviewed and processed by our team.
9. How to Exercise Your Rights
To exercise any of your rights under the GDPR, please contact us at support.e-ita.org.
We will respond to your request within 30 days. If your request is complex or we receive a large number of requests, we may extend this by an additional 60 days, in which case we will inform you.
We may ask you to verify your identity before processing your request to protect your privacy and security.
10. Changes and Contact
We may update this GDPR Privacy Policy from time to time. Changes will be posted on this page with an updated date.
EITA LLC — e-ita.org — support.e-ita.org