Privacy Policy of Moto M1 SA

In this Privacy Policy, we, Moto M1 SA,
explain how we collect and process personal data.

We attach great importance to the security of your data.
We therefore process your personal data exclusively in accordance with the data protection laws applicable to us.

  1. Contact details

The data controller for the purposes of data protection is Moto M1 SA, unless otherwise stated.

Moto M1 SA
Via Campagna 3
6595 Riazzino – Switzerland
Tel. +41 91 859 05 05
Email: info@mm1.ch

Contact person: Lorenzo Lang
Company number: CHE-158.237.695

VAT no.: CHE-158.237.695 VAT

Please send any data protection-related requests in writing to:

Moto M1 SA
Via Campagna 3
6595 Riazzino

or by email to: info@mm1.ch

  1. Processing of your personal data

When you visit this website, use our services or apply for a job with us, your personal data is collected and processed. This concerns, in particular, the data listed below and takes place in the situations described for the purposes indicated.

We use the personal data we collect to conclude and perform contracts with you, in particular in the context of vehicle trading, repairs, financing and vehicle rental, the purchase of products and services from suppliers and subcontractors, and to comply with our legal obligations. We also process personal data on the basis of our legitimate interests.

2.a Website

When you visit our website, we and service providers engaged by us process your personal data in order to provide our services and to optimise and further develop our offering.

When you use the website, our system automatically records data and information, including:

• information about the type and version of the browser used
• the user’s operating system
• information about the type of device
• the user’s internet service provider
• the user’s IP address
• date, time and duration of access
• websites from which the user’s system accesses our website
• websites accessed by the user’s system via our website

We process this connection data on the basis of our legitimate interest in the optimal provision of our website, in particular to analyse how visitors use our site. The data is also evaluated for statistical purposes and used to improve security and quality.

Cookies and analysis/tracking tools

We use cookies on our websites to recognise your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the browser you use when you visit our website or install our app. At the start of your visit, you can select your preferred cookies in our preference centre and give your consent to data processing. You may withdraw your consent at any time with effect for the future by blocking the storage of cookies in your browser settings or by changing your preferences in the cookie settings.

Google Analytics

To analyse the use of our website and optimise our advertising measures, we use Google Analytics.

Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google processes usage data of the website on our behalf and is contractually obliged to take measures to ensure the confidentiality of the processed data. As the European Court of Justice has found that the USA does not offer an adequate level of data protection, data transfers involve certain risks (e.g. access by US authorities, lack of effective remedies). EU Standard Contractual Clauses have therefore been concluded as safeguards.

During your visit to the website, in particular the following data is collected:

• pages viewed
• your behaviour on the pages (e.g. time spent, clicks, scroll behaviour)
• technical information such as browser, internet provider, device and screen resolution
• source of your visit (i.e. via which website or advertising medium you accessed our site)

Your IP address is anonymised.

The data collected is stored together with a randomly generated user ID, which allows pseudonymous user profiles to be analysed. Such user-related data is automatically deleted after 2 months. Other data may be stored in aggregated form for an indefinite period.

If you do not agree with this data collection, you can prevent it by installing the browser add-on to deactivate Google Analytics or by rejecting cookies in our cookie settings.

Google Maps

Our websites may integrate the mapping service Google Maps of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The integration of Google Maps establishes a direct connection between your browser and Google’s servers. This enables the Google Maps map to be displayed. By integrating and using Google Maps, your IP address and certain usage information are transmitted to Google for its own data processing purposes. Google also processes search terms entered by you (e.g. place names, postal codes) and your current location, provided you have expressly consented to this in the Google Maps application. Google Maps also integrates Google Fonts (fonts provided by Google). For this purpose, your browser connects to a Google server and your IP address is transmitted to Google for its own processing purposes. Further information on data processing and possible transfers of personal data to third countries (e.g. USA) can be found in Google’s privacy policy.

Adobe Analytics

This website uses the web analytics service Adobe Analytics from Adobe Systems Software Ireland Limited, 4–6 Riverwalk Drive, Citywest Business Campus, Cooldown Commons, Dublin 24, D24 DCW0, Ireland, to analyse user access to the website. Data processing is based on your consent given in the cookie settings.

Cookies are stored on your device and related information is collected and stored on servers of our processor Adobe. Access to such data by Adobe Systems Incorporated in the USA cannot be excluded. EU Standard Contractual Clauses have been concluded as safeguards for data processing in third countries.

Direct personal identification is excluded, as Adobe Analytics uses the settings “Before Geo-Lookup: Replace visitor’s last IP octet with 0” and “Obfuscate IP-Removed”, which anonymise the IP address before storage.

Microsoft Bing Ads

We sometimes use the conversion tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052–6399, USA. A cookie is stored on your computer if you reach our site via a Bing advertisement. We and Microsoft can then see that someone clicked on an ad and was redirected to our website. We only receive the total number of users who clicked a Bing ad and were redirected to a defined conversion page; no personal identification is provided.

You can prevent the use of this cookie by setting your browser accordingly or by using the opt-out provided by Microsoft.

Hotjar

To analyse user behaviour, we use the analysis tool “Hotjar” on our websites. Data processing is based on your consent given in the cookie settings.

Hotjar uses cookies and tracking code to collect user data on our websites on our behalf. The following information is collected, among others:

• IP address of the device
• device type
• screen size
• geographic location
• language used on the website
• referrer domain
• date and time of the visit

Your data is stored on servers in Ireland.

Social media

Our website contains links to our presences on various social networks. These are integrated only as links. Data is transmitted to the social network only when you actively click on the respective icon.

Meta (Facebook and Instagram), Meta Custom Audiences, LinkedIn, TikTok, Pinterest

We use various social media services and pixels (e.g. from Meta, LinkedIn, TikTok, Pinterest) for marketing and analysis purposes. In doing so, pseudonymous usage profiles can be created and used for interest-based advertising. Data may be transferred to countries without an adequate level of data protection (e.g. USA). Details can be found in the privacy policies of the respective providers.

Usage-based online advertising

To display usage-based online advertising (targeting), we store cookies that collect anonymised information about your browsing behaviour (e.g. pages visited, ads clicked). We use tools such as:

• DoubleClick (Google)
• Google AdWords User Lists
• Google Remarketing

You can deactivate personalised advertising via the opt-out mechanisms provided by Google or the Network Advertising Initiative.

2.b Our services

We or third parties engaged by us process your personal data in our customer database in order to be able to offer and provide our services. Data is processed in the context of contract initiation and performance, on the basis of our legitimate interests and, where applicable, your consent.

In certain cases, your data may be transmitted to the following categories of recipients:

• contractual and business partners
• manufacturers
• banks
• insurance companies
• credit agencies
• IT service providers
• marketing service providers
• platforms for vehicle data

eViv – provisional traffic authorisation

To apply for provisional traffic authorisations, we transmit holder data (name, address, insurance, vehicle data) to the competent road traffic authority, based on your consent.

Test drives and quotations

For test drives we process your name, address and contact data and are obliged to check your driving licence. We store this data for up to 12 months to assert possible claims (e.g. traffic fines).

To prepare quotations, we record your contact details in our customer database.

Leasing / financing

If you lease or finance a vehicle through us, we and/or service providers engaged by us process your data in order to draw up and execute the contract and to carry out the legally required creditworthiness check. In this context, the following information may be processed, among others:

• personal data (name, date of birth, marital status, number of children)
• income (salary, maintenance payments, pensions, employer)
• expenses (rent, professional expenses, church tax etc.)
• existing leasing or credit obligations
• credit information, payment history, PEP and sanctions checks

Identification procedure

To comply with legal identification requirements, a digital or video identification procedure (e.g. via Alphera Financial Services or its identification service provider) is used. Identity data, photos and recorded video calls are processed for this purpose. After transmission to Alphera, the data is deleted by us no later than 20 days thereafter.

Location data

Our vehicles may be equipped with GPS trackers or manufacturer chips. In order to enable recovery in the event of theft, vehicles can be located by the manufacturer. Once legal retention periods have expired, we delete your data.

After-sales services

In the context of workshop and after-sales services, we or third parties engaged by us generally process:

• name
• address
• contact data
• vehicle data
• billing data
• insurance data

These data are necessary to carry out the requested service and to communicate with you.

Communication via WhatsApp

We use WhatsApp as a communication channel. Personal data (e.g. name, contact details) is transmitted to WhatsApp Inc. in the USA. By using WhatsApp, you consent to this data transfer. The USA currently does not provide an adequate level of data protection. For details, please refer to WhatsApp’s privacy policy.

Courtesy vehicle

If you receive a courtesy vehicle from us, we process your name, address and contact data. GPS trackers installed in the vehicle may record technical data (e.g. mileage, fault messages) and transmit them to us. We store the data for up to 12 months to assert possible claims (e.g. fines). We may transmit your contact and vehicle data to the roadside assistance partner commissioned by AXA or the Touring Club Suisse (TCS).

Rental vehicle

When you rent a vehicle from us, we process your name, address and contact data and check your driving licence. GPS trackers may record technical data (e.g. mileage, faults). We store the data for up to 24 months to assert possible claims (e.g. fines). We may transmit your data to roadside assistance partners (e.g. AXA, TCS).

Tuning / sale of spare parts

When you purchase tuning services or spare parts from our workshop, we process the personal data necessary for the execution of the contract (contact data, vehicle data, payment data) and transmit it to service providers engaged by us where required.

2.c Our digital services

When you contact us via our websites or use our online services, you may register with us. Depending on the service, we or third parties engaged by us process information such as:

• name and contact details
• addresses
• vehicle data
• preferred garages and brands
• payment data
• insurance data
• creditworthiness data
• interests

in our customer database so that we can provide the services offered. Processing takes place on the basis of your consent, a contractual relationship or our legitimate interests.

In certain cases, your data may be transmitted to the following categories of recipients:

• contractual and business partners
• manufacturers
• IT service providers
• marketing service providers

Our service providers process your data in countries including: Switzerland, France, Germany, the Netherlands, Italy, Ireland and Spain.

Contact form, customer centre

You can contact us by contact form or email. We and service providers engaged by us process your name and contact details to respond to your enquiry. Calls to our customer service may be recorded for training and quality purposes.

Online appointment booking

When you use our online appointment booking service, your contact and vehicle data is forwarded to our workshop staff.

Test drive booking

If you use our online “test drive booking” service, your contact data is forwarded to our sales staff.

Online vehicle purchase

If you purchase a vehicle through our website, we and/or our service providers process your contact, address and payment data to conclude and perform the purchase contract.

Claims reporting and handling

If you use our claims handling service, we and the service providers engaged by us process your data to manage the claim and forward it to your insurance company. In certain cases, your vehicle may be transferred to another workshop for repair.

Newsletter

If you register for our newsletter, we and/or our service providers process your contact data based on your consent. You can unsubscribe at any time via the unsubscribe link in the newsletter.

2.d Suppliers

In the context of contractual relationships, we may process the names and contact details of employees of our suppliers.

2.e Sanctions screening

We are legally obliged to carry out sanctions screenings on individuals and companies. For this purpose, we and a service provider engaged by us process your name and compare it with the relevant sanctions lists (SECO, CFSP, EURUDU EU, EURUKM EU, OFAC).

  1. Job applications

If you submit a job application to Moto M1 SA in any form, we process the following personal data in the context and for the purposes of the recruitment process:

• name
• contact details
• date of birth
• cover letter
• curriculum vitae
• references and certificates

The data is forwarded only within Moto M1 SA to the persons responsible for the recruitment process. If no contract is concluded, we delete your data unless you have consented to further storage.

  1. Marketing and data analytics

To provide you with information and offers tailored to your needs and to continuously improve our business processes, we analyse data such as your interests, socio-demographic data (from service providers), data on offers, sales and orders (by model, sales channel, order status, desired variants and equipment). Data originally collected for other purposes may also be used.

We process your data for marketing purposes (newsletters, competitions, events, service information, product news, company information, etc.) only with your consent or where we have a legitimate interest. When completing our forms (online or on paper), the user can choose whether to consent to the use of their contact details for these purposes by ticking the appropriate box. You can withdraw your consent at any time with effect for the future by emailing info@mm1.ch.

  1. Market research and opinion surveys

To improve our service quality, you may be contacted by service providers engaged by us for satisfaction surveys after the conclusion of a contract or a service.

  1. Processing of personal data from other sources

We or third parties engaged by us may receive personal data for contacting and acquiring customers and for providing services from other sources that are authorised to transfer such data. These may include:

• public sources
• address brokers
• mobility service providers

  1. Use of service providers

The disclosure of personal data within and outside our company is necessary for the provision of our services. We transfer data in particular to:

• our service providers (within Moto M1 SA where permitted by law and to external providers such as banks and insurance companies), including processors (e.g. IT providers)
• dealers, service partners, suppliers, subcontractors and other business partners
• Swiss and foreign authorities, offices or courts
• the public (including visitors to our websites and social media)
• communication partners
• competitors, industry organisations, associations and other bodies
• purchasers and interested parties in business units or companies
• other parties involved in potential or actual legal proceedings

Where necessary for the provision of our services, personal data may be transferred to the above-mentioned recipients in Switzerland and in EU countries. When transferring data to a third country, we ensure an adequate level of protection as required by law, in particular by concluding appropriate contracts (e.g. EU Standard Contractual Clauses) and/or implementing suitable measures. You may request an overview of the service providers and locations where your data is processed by contacting info@mm1.ch.

  1. Video surveillance

We use video surveillance to prevent crime, to secure evidence in the event of an offence and to protect our premises.

Recordings from our video surveillance systems are stored for as long as necessary for evidence purposes. We may retain recordings to comply with legal obligations, to assert our legal claims or in case of suspicion of criminal offences, and may disclose them to competent authorities, in particular law enforcement or judicial authorities.

In principle, we process video recordings and related personal data in Switzerland. We may engage third parties (e.g. specialised service providers) to process such data on our behalf. We ensure that data protection is maintained with these third parties.

  1. Duration of storage of personal data

We process your personal data for as long as necessary to fulfil our contractual and legal obligations or for the purposes for which it was collected, e.g. for the duration of the business relationship (from initiation, performance and termination of a contract, including warranty and post-contractual support) and beyond in accordance with statutory retention and documentation obligations. Personal data may also be stored for as long as claims may be asserted against us and as long as we are otherwise obliged by law or legitimate business interests require it (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above purposes, it will be deleted or anonymised as far as possible. For certain operational data (e.g. system logs), shorter retention periods may apply.

  1. Data security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access and misuse.

  1. Obligation to provide personal data

Within the scope of our business relationship, you must provide the personal data that is necessary for the initiation and performance of the relationship and the fulfilment of the associated contractual obligations (there is generally no legal obligation to provide data). Without this data, we are usually unable to conclude or perform a contract with you (or the entity/person you represent). Our websites can also only be used if certain technical information is provided (such as the IP address).

  1. Rights of data subjects

As a data subject, you have the following rights under applicable data protection law:

Right of access

You have the right to obtain information from us about whether and how we process your personal data.

As a rule, access requests are free of charge. A fee may be charged if the effort involved is disproportionate or in the case of excessive or repetitive requests; in such cases we will inform you in advance.

To exercise your rights, we may require proof of your identity (e.g. a copy of your ID document). Please address your request to the address indicated in section 2.

Right to rectification

You have the right to request the rectification of inaccurate or incomplete personal data concerning you.

Right to erasure

Under certain conditions, you may request the deletion of your personal data, for example if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.

Please send such requests to:

Moto M1 SA
Via Campagna 3
6595 Riazzino
or by email to info@mm1.ch

Right to withdraw consent

You have the right to withdraw any consent you have given at any time with effect for the future. Please send your withdrawal to: info@mm1.ch

Right to lodge a complaint

Data subjects also have the right to assert their rights in court or to lodge a complaint with the competent data protection authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).

  1. Changes

We may amend this Privacy Policy at any time without prior notice. The version published on our website at the time of use shall apply. If the Privacy Policy forms part of an agreement with you, we will inform you of substantial changes where this is feasible without disproportionate effort.