Data protection

Privacy policy

Transparency about the collection and processing of personal data when you use the Moto Parts website.

Your data privacy

We collect the data needed to manage order requests and operate the website. Below we explain the purposes of processing and your rights.

1. Who processes personal data

The personal data controller is MOTO M PARTS PLOIESTI SRL, tax identification number (CUI) 38056025, with its registered office at Str. Înfrățirii nr. 20, Băicoi, Prahova County, postal code 105200, Romania.

Contact details for data protection requests will be added before the website's commercial launch.

2. What data we collect

When you submit an order request, we may collect your name, phone number, email address, delivery address and any additional information you enter in the form.

For technical and security purposes, information such as your IP address, browser details and information needed to verify requests may also be processed.

We do not ask for bank card details in the order form.

3. Why we use your data

We use the data provided to record and manage requests, check part availability, communicate shipping costs and confirm orders.

After a sale is confirmed, necessary data may be used to prepare delivery and commercial documents, and meet legal obligations.

Technical data may be processed for website security, abuse prevention and service operation.

4. Legal bases

To manage order requests and sales, processing may be based on taking steps at the data subject's request before entering into a contract and performing the contract, under Article 6(1)(b) of the GDPR.

Certain data is processed to comply with legal obligations under Article 6(1)(c) of the GDPR.

For platform security and abuse prevention, some processing may be based on legitimate interests under Article 6(1)(f), following the relevant assessment.

5. Service providers and recipients

The website uses technical services such as Supabase for database management, Vercel for application hosting and Cloudflare Turnstile to protect the form against automated requests.

Depending on the services used, necessary data may be shared with shipping providers, accounting services or other providers involved in processing orders.

We do not sell customers' personal data.

6. International transfers

Depending on the configuration and location of the services used, some data may be processed outside the European Economic Area.

Where international transfers apply, they must meet GDPR requirements and be covered by appropriate legal safeguards.

Specific information about destinations and applicable safeguards will be checked and completed before commercial launch.

7. How long we keep data

Data is retained only for as long as needed for the purposes for which it was collected and to meet applicable legal obligations.

Specific retention periods for unconfirmed requests, completed orders and commercial documents will be established and documented before commercial launch.

8. Your rights

Subject to the conditions set out in the GDPR, you have rights of access, rectification, erasure, restriction of processing, portability and objection, as applicable.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

You have the right to lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP) and to apply to the competent courts.

9. Data security

We apply technical and organizational measures to protect personal data against unauthorized access, loss and misuse.

Access to order information is intended for authorized personnel, and the services used are configured to limit unjustified access.

No security measure can completely eliminate all risks associated with data processing.

10. Cookies and technical services

The website may use local storage technologies or cookies needed for its operation and security, including those provided by technical service providers.

Before launch, we will check the technologies actually used and publish the necessary information about their purposes, duration and providers.

If cookies or technologies requiring consent are introduced, they will be activated only in accordance with the law.

11. Policy updates

This policy may be updated when services, internal procedures or legal requirements change.

The applicable version will be available on this page, together with relevant update information.

Company information

For the controller's official details, please visit the Contact page.

View company details

This policy is being prepared. Contact details, retention periods and information about the technical services and cookies actually used will be completed before commercial launch.