You are here: / Privacy Policy

Privacy Policy

Last updated: 3 November 2026

Johnny Drives respects your privacy. This Privacy Policy explains how personal data may be processed when you use johnnydrives.com.

1. Data controller

Johnny Drives is operated by TheBlackbox.org BV, Belgium. For privacy-related questions or requests, contact: info@theblackbox.org.
Full company details are available in our Legal Notice.

2. Information we process

Website and security data

When you visit Johnny Drives, our website infrastructure or hosting provider may automatically process technical information such as:

  • IP address
  • browser and device information
  • operating system
  • requested pages
  • date and time of access
  • referring page
  • technical and security information

This information is processed where necessary to operate, secure and maintain the website.
The legal basis is our legitimate interest in providing a secure and reliable website.

Communications

If you contact Johnny Drives by email or through a contact form, we process the information you provide, such as your name, email address and message.
This information is used to respond to your enquiry and any necessary follow-up.
Depending on the nature of your request, processing is based on our legitimate interest in responding to communications or on taking steps at your request before entering into an agreement.

3. Analytics, cookies and external content

Johnny Drives may use analytics tools, cookies and third-party content such as embedded videos.
Where these technologies are not strictly necessary, they are only activated after the required consent has been provided.
Details about the technologies currently used, their purposes, providers and retention periods are available in our Cookie Policy and Cookie Settings.

4. Who receives personal data

Personal data may be processed by service providers where necessary to operate Johnny Drives, including:

  • hosting and infrastructure providers
  • website security and technical service providers
  • analytics providers, where enabled
  • providers of embedded third-party content
  • professional advisers where necessary
  • public authorities where disclosure is legally required
  • Service providers acting on our behalf may only process personal data for the purposes for which they have been engaged.

Johnny Drives does not sell personal data.

5. International transfers

Some service providers may process personal data outside the European Economic Area.
Where such a transfer is subject to the GDPR, an appropriate legal transfer mechanism is used where required, such as an adequacy decision or Standard Contractual Clauses.
Further information relating to specific third-party services is provided through the Cookie Policy where applicable.

6. How long we keep personal data

Personal data is kept only for as long as necessary for the purpose for which it was collected.
Technical and security information is retained according to the operational and security requirements of the website and its hosting infrastructure.
Communications are retained for as long as reasonably necessary to respond to the enquiry and deal with relevant follow-up.
Information that must be retained for legal, administrative or accounting reasons may be kept for the applicable statutory period.

7. Your rights

Depending on the circumstances, the GDPR gives you the right to:

  • access personal data we hold about you
  • correct inaccurate or incomplete data
  • request deletion of personal data
  • request restriction of processing
  • object to certain processing
  • receive certain data in a portable format
  • withdraw consent where processing is based on consent
  • withdrawal of consent does not affect processing that lawfully took place before consent was withdrawn.

To exercise your rights, contact info@theblackbox.org. We may request information necessary to verify your identity. Requests will normally be answered within one month as required by the GDPR.

8. Complaints

You have the right to lodge a complaint with the competent data protection authority.

For TheBlackbox.org BV, the lead supervisory authority is the Belgian Data Protection Authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données 
You may also contact us directly first so that we can address your concern.

9. Automated decision-making

Johnny Drives does not use personal data to make solely automated decisions that produce legal or similarly significant effects on visitors.

10. Security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration or disclosure.

11. Updates

This Privacy Policy may be updated when the website, the services we use or applicable legal requirements change.
The date at the top indicates the latest revision.