Privacy Policy
MotoTradingB2B Privacy Policy
1) Data Controller
- Controller: AD Servizi Automotive S.r.l.
- Registered office: Viale Battista Bardanzellu 77n
- VAT / Tax ID: IT16871591000
- Privacy contact email: adserviziautomotive@gmail.com
- PEC (if applicable): adserviziautomotive@legalmail.it
- Website and domains covered by this notice: mototradingb2b.com and subdomains
2) Types of data processed
- Identification and contact data: first and last name, email, phone, role/function, company, office, VAT/tax code (if natural person or sole proprietorship).
- Browsing data: IP addresses, logs, device identifiers, URL and timestamp, user agent, origin/referrer (collected automatically through IT systems).
- Data collected via forms: free text message, commercial interests, country, dealer type.
- Data for authentication/restricted area (if active): credentials, access logs, security events.
- Cookies and similar technologies: see Cookie Policy.
- Data for newsletters/marketing communications (if active): preferences, interactions (open/click) in aggregate form.
3) Purposes and legal bases (art. 6 GDPR)
| Purpose | Legal basis | Details |
|---|---|---|
| Handling requests via contact form and B2B pre-contractual steps |
art. 6(1)(b) – performance of pre-contractual measures | Responding to requests, sending quotations, dealer qualification. |
| Fulfilment of administrative/accounting obligations | art. 6(1)(c) – legal obligation | Invoicing, tax records, regulatory compliance. |
| Website security and abuse prevention | art. 6(1)(f) – legitimate interest | Technical logging, bot/DDOS mitigation, anti-fraud; controller’s interests balanced with the rights of data subjects. |
| Aggregated statistics on site traffic/use | art. 6(1)(f) (if analytics with IP anonymized and configurations equivalent to technical cookies) or art. 6(1)(a) – consent (for non-anonymized or third-party analytics) |
See Cookie Policy for conditions and preferences. |
| Direct B2B marketing (emails to business contacts) | art. 6(1)(f) (legitimate interest, with simple opt-out) or art. 6(1)(a) (if consent is required) |
Limited to communications about related products/services; unsubscribe always available. |
| Newsletter (if active) | art. 6(1)(a) – consent | Voluntary subscription; revocable at any time. |
| Judicial protection | art. 6(1)(f) | Establishment, exercise or defense of legal claims in judicial or out-of-court proceedings. |
Special categories of data under art. 9 GDPR are neither requested nor processed. No decisions based solely on automated processing with legal effects are carried out (art. 22 GDPR), except for non-significant technical security/anti-fraud features.
4) Nature of provision
- Mandatory for data necessary to handle requests, comply with legal obligations and ensure security: failure to provide such data prevents service delivery.
- Optional for purposes based on consent (e.g., non-technical cookies, newsletters, advertising profiling): failure to provide consent does not affect essential browsing.
5) Recipients / categories of recipients (art. 13.1(e), 28–29 GDPR)
- Internal personnel duly authorized and instructed.
- Processors (art. 28): providers of hosting/[CDN], IT maintenance, emailing/[newsletter], CRM, analytics and anti-abuse (e.g., [EU hosting provider], [Google Ireland Limited for enabled Google services], etc.).
- Other recipients: consultants (tax/legal), authorities and public bodies for legal obligations or requests.
- The updated list of processors is available on request at the address indicated in point 1.
6) Transfers outside the EEA (Chapter V GDPR)
Data are mainly processed within the EU/EEA. Where some providers involve transfers to third countries (e.g., the USA):
- if the recipient adheres to an adequacy mechanism (e.g., the EU–U.S. Data Privacy Framework for certified entities), the transfer is based on that;
- otherwise, Standard Contractual Clauses (SCCs) are used and, where necessary, supplementary technical/organizational measures are applied, following a transfer impact assessment.
Details and references are available in the Cookie Policy and on request.
7) Retention periods (art. 13.2(a))
- Business/B2B contacts: up to 24 months from the last meaningful contact, unless objected;
- Administrative/accounting records: 10 years (legal obligation);
- Security/Logs: 6–12 months unless security events occur;
- Newsletter/marketing based on consent: until withdrawal;
- Cookies: according to durations indicated in the Cookie Policy (and user preferences). Terms may be extended in case of disputes or authority requests.
8) Data subjects’ rights (arts. 15–22 GDPR)
Data subjects have the right to access, rectification, erasure, restriction, portability, objection to processing for reasons related to their particular situation (for processing based on legitimate interest), and withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal.
Exercising rights: by writing to adserviziautomotive@gmail.com
Complaint to the supervisory authority: Italian Data Protection Authority (www.garanteprivacy.it).
Judicial remedies: remain unaffected.
9) Security (art. 32 GDPR)
Technical and organizational measures appropriate to risk are adopted: encryption in transit (HTTPS), server hardening and monitoring, access control and least-privilege policy, logging, backups, security patching, supplier assessments, data minimization and limited retention.
10) Changes to this notice
This notice may be updated due to regulatory/technical adjustments. Material changes will be communicated via a notice on the site. The update date will be indicated at the bottom.