1. Introduction
Protecting your personal data is a priority for AutoMoto. This privacy policy informs you about how we collect, use, share, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and French data protection law.
By using our site and services, you accept the practices described in this policy.
2. Data controller
Controller: [Nom de la société]
Address: [Adresse complète]
Email: dpo@motortrack.app
Data Protection Officer (DPO): [Nom du DPO]
3. Personal data collected
We collect the following data when you use our services:
- Identification data: last name, first name, email address
- Connection data: IP address, date and time of connection, browser type
- Vehicle data: license plate, VIN, mileage, make, model, associated events and defects
- Cookies and trackers: necessary, analytics, and marketing cookies (based on your consent)
4. Purposes of processing
Your personal data is processed for the following purposes:
- Managing your user account and authentication
- Providing fleet management services (vehicles, events, defects)
- Improving our services and analyzing site usage (with your consent for analytics cookies)
- Legal compliance and fraud prevention (legal basis: legal obligation)
- Communicating updates and information about the service (legal basis: legitimate interest)
5. Legal basis for processing
The processing of your data relies on the following legal bases:
- Performance of a contract: managing your account and providing the services
- Consent: analytics and marketing cookies
- Legitimate interest: improving our services and communication
- Legal obligation: retaining data for tax and accounting compliance
6. Data retention period
- Account data: for the duration of your use of the service + 3 years after account closure (legal limitation period)
- Connection data: 1 year maximum (in accordance with the law)
- Analytics cookies: 13 months maximum
- Cookie consent: indefinite (until consent is withdrawn)
7. Data sharing and transfer
Your personal data is never sold to third parties. It may be shared with:
- Technical service providers: site hosting, maintenance, technical support (under confidentiality agreement)
- Analytics tools: Umami, a self-hosted audience measurement tool (only if you have consented to analytics cookies)
- Payment: Stripe, Inc. (card payment processing for paid plans)
- Legal authorities: in the event of a legal request (court order)
Transfers outside the European Union
Some of our subprocessors are based outside the European Union. Data transfers to third countries are governed by appropriate safeguards:
- Stripe, Inc. (USA) — payment processing. Transfer to the United States. Safeguard: SCC + PCI DSS certification. Stripe Policy
8. Your rights (GDPR)
In accordance with the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request the deletion of your data (under certain conditions)
- Right to restriction of processing: temporarily restrict processing
- Right to data portability: receive your data in a structured format and transfer it to another controller
- Right to object: object to processing based on legitimate interest
- Right to withdraw consent: for processing based on consent (cookies)
To exercise your rights, contact us at dpo@motortrack.app specifying your request and attaching a copy of your ID.
You also have the right to lodge a complaint with the CNIL (French Data Protection Authority) at www.cnil.fr.
9. Cookies and trackers
We use three categories of cookies:
- Necessary cookies: essential for the site to function (authentication, security). They do not require consent.
- Analytics cookies: to analyze site usage (Umami). Require your consent.
- Marketing cookies: to display personalized ads. Require your consent.
You can manage your cookie preferences at any time via the consent banner (icon at the bottom of the page) or by changing your browser settings. For centralized management, you can also go to Settings if you are logged in.
Trackers used
The following trackers and third-party services may be used depending on your consent:
- Umami — purpose: measuring the sign-up and onboarding journey (home page view, click on “Create my account”, email confirmation, dashboard access, opening and submitting the add-vehicle form) blog readership (blog pages viewed) and where home page and blog visitors come from (referring site and utm_* campaign parameters). Self-hosted on our OVHcloud infrastructure (European Union), with no transfer to a third party. Data collected: event name, page concerned (without URL parameters other than utm_* campaign parameters, and without vehicle identifier), referring site, browser, operating system, device type, country; no cookies, no IP address or account identifier stored, and no entered data (make, plate…). Retention: 13 months maximum. Conditional loading: Umami is only loaded after you consent to analytics cookies.
Note: Umami is self-hosted on our infrastructure; no third-party provider is involved in audience measurement. For payments, Stripe has its own privacy policy and its own procedures for exercising your rights.
Withdrawing consent and disabling trackers
You can withdraw or change your consent at any time:
- Cookie banner: open the banner via the link at the bottom of the page and change your preferences.
- Account settings: if you are logged in, go to Settings to manage your preferences.
- Contact the DPO: send us an email at dpo@motortrack.app to request revocation and the possible deletion of associated data.
- Manually deleting cookies: you can delete cookies from your browser settings. See your browser's official documentation (Chrome, Firefox, Safari) for instructions.
After withdrawing consent, we will disable the relevant trackers. Depending on the case, some data already collected by third parties (e.g. Google) may remain with those providers; to request its deletion, contact us or reach out directly to the provider, specifying the identifiers and the period concerned.
10. Data security
We implement appropriate technical and organizational measures to protect your data against loss, theft, unauthorized access, disclosure, alteration, or destruction. These measures include encryption of sensitive data (JWT, HTTPS), strict access controls, and regular security audits.
11. Changes to this policy
We reserve the right to modify this privacy policy at any time. Any change will be published on this page with the update date. We encourage you to check this page regularly to stay informed.
12. Contact
For any question regarding this privacy policy or the processing of your personal data, contact us: