Privacy Policy

Under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the controller is:

• Owner: Elisabet García Martínez (MotoDirecta)
• Tax ID: 03886397-H
• Email: info@motodirecta.es
• Telephone: +34 622457042
• Website: https://motodirecta.es

We collect data through the following channels:

• Contact form: name, email address, optional telephone number and message.
• Motorcycle valuation: contact details, Spanish postcode, registration number (if provided), motorcycle make, model, year, mileage, condition, expected price and up to six vehicle photographs.
• Vehicle purchase and sale: name, identity document, address, contact details and, where needed, bank account details, registration number and VIN.
• Stock alerts: email address and the motorcycle sought.
• Website use: browsing data used to measure the website and advertising campaigns through Google Analytics and Google Ads. Analytics and advertising cookies are only set after consent. Before you accept (or if you choose “Essential only”), the Google tag still loads with consent denied: it sets no cookies or identifiers, but sends Google cookieless technical signals (the page visited, the browser, events such as clicks on contact buttons and, as with any connection, your IP address), without profiling. See our Cookie Policy.

• Answer enquiries and manage customer requests.
• Process motorcycle valuations, including automated market estimates produced with artificial intelligence.
• Manage vehicle purchases, sales, reservations and the related documentation.
• Send commercial communications only where express consent has been given.
• Measure and improve the website and our campaigns: analytics and advertising cookies only with consent; without it, only the cookieless technical signals described in section 2.
• Prevent fraud and comply with legal obligations.

• Consent (Article 6(1)(a) GDPR) for forms, optional communications and non-essential cookies.
• Contract or pre-contractual steps (Article 6(1)(b) GDPR) for valuations, reservations and vehicle transactions.
• Legitimate interests (Article 6(1)(f) GDPR) for service security, improvement and fraud prevention.
• Legal obligation (Article 6(1)(c) GDPR) for accounting, tax and consumer-law duties.

Data may be processed by technology providers needed to operate the service:

• Artificial intelligence provider (OpenAI, Google, Anthropic or MiniMax, depending on the model configured at the time): only vehicle details — make, model, year, mileage, condition, extras and expected price — are sent, to generate automated estimates and, in the valuation chat, to interpret answers about the motorcycle. Contact details are not included.
• RapidAPI: if you enter a registration number in the valuation form or chat and it is not already in the vehicle lookup database described below, only the registration number is sent, through the RapidAPI platform, to a vehicle data service that returns the vehicle’s technical details (make, model, version, registration date and VIN, among others).
• Vehicle lookup database shared with cochedirecto.es: the registration number looked up and the vehicle’s technical details are stored, with the date of the lookup, in a database that MotoDirecta shares with the cochedirecto.es website, so that the lookup is not repeated when either site receives that registration number again. No name, email address, telephone number or other contact details are stored in it.
• Google: Analytics and Ads measurement. Analytics and advertising cookies are only set after consent; without it, the Google tag receives the cookieless technical signals without identifiers described in section 2 (page, browser, events such as clicks on contact buttons and IP address), without profiling.
• YouTube (Google): on motorcycle pages with a video, the thumbnail is loaded from YouTube’s servers, which receive your IP address. The player only loads if you click the video, in YouTube’s privacy-enhanced mode (youtube-nocookie.com).
• OpenStreetMap Foundation: the contact page and each motorcycle page show a map of MotoDirecta’s location; to display it, your browser downloads the map tiles from OpenStreetMap’s servers, which receive your IP address and the usual technical connection data.
• Sentry: monitoring of technical errors on the website. When something fails it receives technical information (page, browser and error trace) so that it can be fixed. Data is hosted in its European Union region (Germany) and the service is configured not to collect personal data: no form contents, cookies or user identifiers.
• OVHcloud (OVH SAS, France): email server used to send our emails (replies to enquiries, valuation offers and notifications). Data is processed in the European Union.
• Vercel and MongoDB: website hosting and database infrastructure.

Personal data is not sold and is not disclosed to other parties unless required by law.

Some providers are based outside the European Economic Area, mainly in the United States. Transfers are covered by the EU–US Data Privacy Framework for certified providers and, otherwise, by the European Commission’s Standard Contractual Clauses, including for countries without an EU adequacy decision.

No personal data is sent to the artificial intelligence provider: only the vehicle details listed in section 5, with no registration number or contact details. There is therefore no transfer of personal data to that provider, even where it is located in a country without an adequacy decision (such as MiniMax, in Singapore).

• Contact enquiries: for the commercial relationship and, thereafter, for as long as the legitimate interest described below applies.
• Valuation requests: for the commercial relationship and, thereafter, indefinitely as a vehicle valuation history.
• Contracts and transaction records: for the contractual relationship and the legally required accounting, tax and liability periods, generally up to six years.
• Stock alerts: until withdrawal or until no longer required.
• Browsing data: for the periods listed in the Cookie Policy.

Data is deleted or anonymised when the relevant period ends.

Valuation and customer history. MotoDirecta keeps the history of the motorcycles it has valued (make, model, year, mileage, condition, registration plate, photographs and the offer made) together with the contact details of the person who offered them, on the basis of its legitimate interest (Article 6(1)(f) GDPR) in knowing the history of the vehicles and of returning customers, preventing fraud and following up on earlier negotiations. This is customary and expected practice in the professional vehicle trade, limited to identification and contact data, with no profiling or automated decision-making.

You may object to this processing or request erasure at any time by writing to info@motodirecta.es, free of charge and without having to give reasons. We will comply unless a legal retention obligation applies (for example, the tax and accounting obligations arising from a completed sale).

You may request access, rectification, erasure, restriction, portability or object to processing. You may also withdraw consent at any time without affecting processing already carried out lawfully.

Send your request to info@motodirecta.es, identifying yourself and the right you wish to exercise. We will respond within a maximum of 30 days.

If you believe your data has not been processed lawfully, you may complain to the Spanish Data Protection Agency (AEPD) at aepd.es, C/ Jorge Juan 6, 28001 Madrid, Spain.

MotoDirecta applies technical and organisational safeguards including HTTPS/TLS encryption, restricted administration access with signed tokens (JWT), cryptographically hashed passwords, login rate limits and input validation.

This policy may be updated to reflect legal, technical or service changes. Material changes will be communicated through the website.