Your Privacy Matters: Under the General Data Protection Regulation (GDPR), you have comprehensive rights regarding your personal data. This page explains those rights and how to exercise them.
1. What is GDPR?
The General Data Protection Regulation (GDPR) is a European Union law that protects the privacy and personal data of EU citizens. It gives you control over your personal information and how organizations use it.
2. Data Controller
Motoristi.EU is the data controller for your personal information.
You can receive your data in a machine-readable format and transfer it to another service.
Available formats: JSON, CSV, XML
How to request: Email [email protected] with subject "Data Export Request"
Includes:
Profile information
Ride history and tracks
Chat messages
Forum posts
Photos and media
3.6 Right to Object (Article 21)
You can object to processing of your data for:
Direct marketing (opt out anytime)
Legitimate interests (we must stop unless we have compelling reasons)
Research or statistical purposes
3.7 Right Not to Be Subject to Automated Decision-Making (Article 22)
We do not use automated decision-making or profiling that produces legal effects or significantly affects you.
4. Lawful Basis for Processing
We process your data based on:
Consent (Article 6(1)(a)):
Marketing communications
Optional features (location sharing, analytics)
Cookies (except essential ones)
Contract Performance (Article 6(1)(b)):
Account creation and management
Providing services (chat, forum, rides)
Payment processing (if applicable)
Legitimate Interests (Article 6(1)(f)):
Site security and fraud prevention
Service improvement
Analytics (anonymized)
Legal Obligation (Article 6(1)(c)):
Tax records
Law enforcement requests
Compliance reporting
5. Data We Collect
5.1 Personal Data
Email address
Display name
Password (encrypted with bcrypt)
IP address (for security)
Device information
5.2 Riding Data
GPS tracks (if you enable tracking)
Ride statistics
Motorcycle information (brand, model, year)
5.3 Community Data
Chat messages
Forum posts
Comments
Photos uploaded
6. Data Sharing
We DO NOT sell your data.
We share data only with:
Other Users: Public profile info, posts, rides (as per privacy settings)
Service Providers: Hosting, email (with DPAs in place)
Legal Authorities: When required by law
7. Data Retention
Data Type
Retention Period
Active account data
While account is active
Deleted account data
30 days (then anonymized/deleted)
Backup data
90 days
Legal records
As required by law (typically 5-7 years)
Analytics (anonymized)
2 years
8. Data Security
We protect your data with:
HTTPS encryption (TLS 1.3)
Password hashing (bcrypt)
Database encryption
Regular security audits
Access controls
Firewall protection
DDoS mitigation
9. International Data Transfers
Your data is stored in the European Union (Bulgaria). If transferred outside EU:
We use EU-approved Standard Contractual Clauses
Or rely on EU adequacy decisions
Your rights remain protected
10. Children's Privacy
We do not knowingly collect data from children under 16. If you're under 16, you cannot use our service. Parents can contact us to delete any collected child data.
11. Breach Notification
In case of a data breach that risks your rights:
We'll notify authorities within 72 hours
We'll notify affected users promptly
We'll provide details and mitigation steps
12. Supervisory Authority
You have the right to lodge a complaint with your data protection authority: