PRIVACY POLICY - MOTORO.ch
Version 1.0 - January 2025
GDPR Compliant (General Data Protection Regulation)
1. DATA CONTROLLER
Controller: Motoro.ch
Legal form: Sole proprietorship
Email: info@motoro.ch
DPO: info@motoro.ch
2. DATA COLLECTED
2.1 Registration data
- Mandatory data: Email, password, first name, last name
- Optional data: Profile photo, phone number, address
2.2 Usage data
- Navigation: Pages visited, session duration, clicks
- Technical: IP address, browser type, device used
- Geolocation: Approximate position for local searches
2.3 Content data
- Ads: Photos, descriptions, prices, vehicle characteristics
- Messages: Conversations between users
- Documents: Commercial register (professionals)
2.4 Payment data
- Subscriptions: Billing information via Stripe, Apple IAP, Play Pay
- History: Transactions, invoices, refunds
3. PROCESSING PURPOSES
3.1 Main service
- Connecting buyers/sellers
- User account management
- Ad display and search
- Messaging system
3.2 Additional services
- Customer support: Technical assistance, complaints
- Security: Fraud prevention, moderation
- Improvement: Statistical analysis, A/B testing
- Marketing: Newsletters, recommendations (with consent)
3.3 Legal obligations
- Retention for tax obligations
- Response to requests from competent authorities
- Anti-money laundering (professionals)
4. LEGAL BASES
| Processing | Legal basis |
|------------|-------------|
| Contract execution | Art. 6(1)(b) GDPR |
| Advertising consent | Art. 6(1)(a) GDPR |
| Legitimate security interest | Art. 6(1)(f) GDPR |
| Legal obligation | Art. 6(1)(c) GDPR |
5. DATA RECIPIENTS
5.1 Internal recipients
- Motoro technical team
- Customer service
- Moderation team
5.2 Processors
- Hosting: Supabase (database), Infomaniak (Web)
- Payment: Stripe (payment processing), Apple IAP, Play Pay
- Analytics: Google Analytics (anonymized statistics)
- Email: TkMail (Infomaniak, Switzerland)
- Push notifications: Firebase Cloud Messaging
5.3 Authorized third parties
- Judicial authorities (upon request)
- Other users (public ad data)
6. INTERNATIONAL TRANSFERS
Some processors may be located outside EU/EEA:
- United States: Transfers based on standard contractual clauses
- Guarantees: Privacy Shield certification or protection clauses
7. RETENTION PERIOD
| Data type | Retention period |
|-----------|------------------|
| Active account | As long as account exists |
| Deleted account | 30 days then deletion |
| Messages | 3 years after last activity |
| Payment data | 10 years (legal obligation) |
| Technical logs | 12 months |
| Marketing data | Until consent withdrawal |
8. YOUR RIGHTS
8.1 Access and portability rights
- Obtain a copy of your data
- Export your data in structured format
8.2 Rectification and deletion rights
- Correct inaccurate data
- Request deletion of your data
8.3 Opposition and limitation rights
- Object to processing for legitimate interest
- Limit processing in certain cases
8.4 Right to withdraw consent
- Withdraw consent for newsletters
- Disable non-essential cookies
8.5 Exercising rights
Email: info@motoro.ch
Response time: 30 days maximum
Supporting documents: Copy of ID required
9. DATA SECURITY
9.1 Technical measures
- Encryption of sensitive data (TLS/SSL)
- Strong authentication (2FA available)
- Secure daily backup
- Firewall and 24/7 monitoring
9.2 Organizational measures
- Staff training on data protection
- Restricted access on least privilege principle
- Incident response procedures
- Regular security audits
9.3 Breach notification
In case of personal data breach, we commit to:
- Notify supervisory authority within 72h
- Inform users if high risk
- Take immediate corrective measures
10. COOKIES AND TRACKERS
10.1 Essential cookies (exempt from consent)
- User authentication
- Shopping cart/favorites
- Language preferences
10.2 Cookies subject to consent
- Analytics: Google Analytics (site performance)
- Advertising: Google AdSense (ad personalization), Google AdMob
- Social networks: Sharing buttons
10.3 Cookie management
- Configuration via consent banner
- Modification possible in account settings
- Deletion via browser settings
11. MINOR DATA
Motoro is intended for adults. We do not knowingly collect data from minors under 16.
12. POLICY MODIFICATIONS
This policy may be modified to comply with legal or technical developments. Important modifications will be notified by email.
13. COMPLAINTS
In case of disagreement on data processing:
1. Contact us: info@motoro.ch
2. Contact supervisory authority:
- Switzerland: Federal Data Protection Commissioner (FDPC)
- EU: Competent authority in your country of residence
14. CONTACT
Data Protection Officer:
Email: info@motoro.ch
Support: Contact via email only: info@motoro.ch
Last update: January 2025