Privacy Policy

Under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the controller is:

• Owner: Elisabet García Martínez (MotoDirecta)
• Tax ID: 03886397-H
• Address: Peña de las Águilas 1351, 03296 Elche (Alicante), Spain
• Email: info@motodirecta.es
• Telephone: +34 622 457 042
• Website: https://motodirecta.es

We collect data through the following channels:

• Contact form: name, email address, optional telephone number and message.
• Motorcycle valuation: contact details, Spanish postcode, motorcycle make, model, year, mileage, condition, expected price and up to six vehicle photographs.
• Vehicle purchase and sale: name, identity document, address, contact details and, where needed, bank account details, registration number and VIN.
• Stock alerts: email address and the motorcycle sought.
• Website use: anonymised browsing data from optional analytics and advertising cookies, only after consent. See our Cookie Policy.

• Answer enquiries and manage customer requests.
• Process motorcycle valuations, including automated market estimates produced with artificial intelligence.
• Manage vehicle purchases, sales, reservations and the related documentation.
• Send commercial communications only where express consent has been given.
• Measure and improve the website through optional analytics.
• Prevent fraud and comply with legal obligations.

• Consent (Article 6(1)(a) GDPR) for forms, optional communications and non-essential cookies.
• Contract or pre-contractual steps (Article 6(1)(b) GDPR) for valuations, reservations and vehicle transactions.
• Legitimate interests (Article 6(1)(f) GDPR) for service security, improvement and fraud prevention.
• Legal obligation (Article 6(1)(c) GDPR) for accounting, tax and consumer-law duties.

Data may be processed by technology providers needed to operate the service:

• OpenAI: vehicle details may be sent to its API to generate an automated estimate. Contact details are not included in that request.
• Google: Analytics and Ads measurement, only after consent.
• Microsoft: Clarity analytics, only after consent and with text masking enabled.
• Vercel and MongoDB: website hosting and database infrastructure.

Personal data is not sold and is not disclosed to other parties unless required by law.

Some providers are based in the United States. Transfers are covered, where applicable, by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

• Contact enquiries: 12 months, unless a commercial relationship follows.
• Valuation requests: 24 months.
• Contracts and transaction records: for the contractual relationship and the legally required accounting, tax and liability periods, generally up to six years.
• Stock alerts: until withdrawal or until no longer required.
• Browsing data: for the periods listed in the Cookie Policy.

Data is deleted or anonymised when the relevant period ends.

You may request access, rectification, erasure, restriction, portability or object to processing. You may also withdraw consent at any time without affecting processing already carried out lawfully.

Send your request to info@motodirecta.es, identifying yourself and the right you wish to exercise. We will respond within one month; this may be extended by two further months where permitted by the GDPR because of complexity or volume.

If you believe your data has not been processed lawfully, you may complain to the Spanish Data Protection Agency (AEPD) at aepd.es, C/ Jorge Juan 6, 28001 Madrid, Spain.

MotoDirecta applies technical and organisational safeguards including HTTPS/TLS encryption, restricted administration access, hashed passwords, multi-factor authentication, rate limits and input validation.

This policy may be updated to reflect legal, technical or service changes. Material changes will be communicated through the website.