What we collect
Dragon Drive Baltic OÜ (hereafter Dragon Cars) collects the following categories of personal data:
When you submit a form
- Name, email, phone, message — necessary to contact you (pre-contract interest, GDPR Art. 6(1)(b))
- Technical data: IP address, browser, operating system, referrer URL (legitimate interest in fraud prevention, GDPR Art. 6(1)(f))
- Traffic source: UTM tags, country, city (via Cloudflare) — legitimate interest in marketing analytics
- For sell requests, additionally: registration number, VIN, public MNT/LKF data, uploaded photos
When you visit the site — always
- First-party cookie
dc_visitor_id(2-year lifetime, HttpOnly): links your visits and form submissions into one journey. Legitimate interest. - Page views, form starts/submits — legitimate interest (measuring site usage).
When you visit the site — only with consent
If you click "Accept all" in the cookie banner, we additionally record:
- Viewed cars and models, configurator changes
- Adding to favorites, searches, filters
- Scroll depth and time on page
- Google Analytics 4 (anonymized IP)
You can change your choice at any time or clear cookies from your browser.
How long we retain data
- Visitor journey data: up to 24 months
- Form data (test drive, inquiry, sell request, etc.): up to 7 years (accounting and customer relations)
- Newsletter subscription: until you unsubscribe
Who we share data with
- Cloudflare — site security and CDN (US-EU data transfer under standard contractual clauses)
- Google Analytics — only if you have given consent
- Email service provider — for receiving form submissions
- We do not sell your data to third parties.
Your rights
You have the right to:
- Access the data we hold about you
- Request correction or deletion
- Object to profiling or processing based on legitimate interest
- Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee)
Send requests to: info@dragoncars.ee
Controller
Dragon Drive Baltic OÜ
Estonia
Last updated: 17.05.2026