Privacy Policy
Privacy Policy
1. Controller
Controller within the meaning of the General Data Protection Regulation (GDPR) is:
Motorrad Venture MV GmbH
Am Schlag 1b
35580 Wetzlar
Germany
Phone: +49 170 447 59 45
Email: order@motorradventure.eu
2. General Information on Data Processing
The protection of your personal data is important to us. We process personal data exclusively within the framework of the applicable legal provisions, especially the GDPR, the Federal Data Protection Act, and the TDDDG.
Personal data means all information relating to an identified or identifiable natural person.
We process personal data especially for the following purposes:
• to provide our website and online shop
• to carry out pre-contractual measures and contract processing
• to handle inquiries
• for payment processing
• for shipping processing
• to fulfill legal obligations
• to ensure IT security
• for reach measurement and marketing purposes, provided that the corresponding consent is given
3. Legal Grounds for Processing
Unless otherwise regulated in this privacy policy, we base the processing of personal data in particular on the following legal grounds:
• Art. 6 para. 1 lit. a GDPR, if you have given us your consent
• Art. 6 para. 1 lit. b GDPR, if the processing is necessary to fulfill a contract or to carry out pre-contractual measures
• Art. 6 para. 1 lit. c GDPR, if the processing is necessary to fulfill a legal obligation
• Art. 6 para. 1 lit. f GDPR, if the processing is necessary to protect our legitimate interests and no overriding interests, fundamental rights, or freedoms of the data subject oppose it
Our legitimate interests lie in particular in the secure and economical operation of our online shop, in abuse and fraud prevention, in optimizing our offer, as well as in the legally compliant documentation of consents.
4. Hosting and Shop System via Shopify
Our online shop is operated via Shopify. The provider of the shop platform for European merchants is Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
As part of providing the shop infrastructure, Shopify processes personal data on our behalf or on its own responsibility, insofar as this is necessary for certain technical or regulatory functions.
Data processing via Shopify includes hosting, provision of the shop system, shopping cart and checkout functions, customer accounts, security features, as well as technical analysis and logging functions.
If personal data is transmitted to third countries in this context, this is done exclusively in compliance with the legal requirements of Articles 44 et seq. GDPR.
Further information on data protection at Shopify can be found at:
https://www.shopify.com/de/legal/datenschutz
5. Website access and server log files
When visiting our website purely for informational purposes, data is automatically transmitted to the server by the browser. These include in particular:
• IP address
• date and time of access
• time zone difference to Greenwich Mean Time
• accessed page
• access status
• amount of data transferred
• referrer URL
• browser type and browser version
• operating system
• language and version of the browser software
These data are processed to ensure the functionality, stability, and security of the website, to defend against attacks, and to analyze technical errors.
The legal basis is Art. 6 para. 1 lit. f GDPR.
6. Orders and contract processing
When you order through our online shop, we process the data necessary for contract processing. This includes in particular:
• first and last name
• billing and delivery address
• email address
• telephone number
• ordered products
• payment data or payment-related information
• order history
• shipping and delivery information
• communication content related to the order
Processing is carried out to execute the contract, process payments, deliver goods, communicate with customers, handle inquiries, returns, and warranty cases, as well as to fulfill commercial and tax law obligations.
The legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR.
7. Customer account
If you create or use a customer account, we process the data you provide for this purpose, in particular:
• master data
• login data
• order history
• saved addresses
• wish lists or comparable convenience features, if available
Processing serves to provide the customer account and simplify future orders.
The legal basis is Art. 6(1)(b) GDPR.
You can delete a customer account at any time subject to technical and legal possibilities. Legal retention obligations remain unaffected.
8. Contact via email, phone, or contact form
When you contact us, we process the data you provide, for example:
• name
• email address
• telephone number
• address data
• content of your message
• other voluntarily provided information
Processing is carried out to handle your request, to communicate with you, and if necessary, to initiate or execute a contract.
The legal basis is Art. 6 para. 1 lit. b GDPR if the inquiry is related to a contract or concerns an existing contract. Otherwise, processing is based on Art. 6 para. 1 lit. f GDPR.
9. Newsletter and promotional communication
If you sign up for our newsletter, it is sent via Shopify Email or an email service provided by Shopify. We process your email address and, if applicable, other voluntary information to send you information about products, news, offers, or promotions.
Registration is generally only done on the basis of your explicit consent. If legally required, we use a double opt-in procedure for this. We store the registration time, confirmation time, and the technical protocol data used as proof of consent.
The legal basis is Art. 6 para. 1 lit. a GDPR.
You can revoke any consent given at any time with effect for the future, in particular via the unsubscribe link in the respective email or by contacting us.
If we send you advertising for our own similar products in connection with the sale of goods or services based on legal requirements, this is done on the basis of Art. 6 para. 1 lit. f GDPR in conjunction with applicable competition law provisions. You can object to this use at any time.
10. Shopping cart abandonment, product and availability information
If corresponding functions are activated in our shop, we may process personal data to remind you of an unfinished purchase or to inform you about the availability of a product. This may include, in particular, name, email address, shopping cart information or specific product inquiries, as well as technical shipping and delivery information.
If prior consent is required, processing is carried out exclusively based on Art. 6 para. 1 lit. a GDPR. Otherwise, processing is carried out, as far as legally permissible, based on Art. 6 para. 1 lit. b or lit. f GDPR.
11. Payment processing
To process payments, we pass the necessary data to the payment service provider you selected. Depending on the payment method offered at checkout, this may include:
• Shopify Payments or the payment processors used for this
• PayPal
• Klarna
• Shop Pay
• Apple Pay
• Google Pay
• additional payment methods specifically displayed at checkout
The following can be processed in particular:
• name
• Billing address
• email address
• order amount
• currency
• order reference
• payment status
• depending on the payment method, additional payment information required for processing
Processing is carried out to execute the payment process, prevent fraud, and fulfill legal obligations.
The legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR.
Please note that the respective payment service provider may process your data under its own data protection responsibility. The data protection provisions of the respective payment service provider apply additionally.
12. Shipping Processing
For shipping, we transmit the data necessary for delivery to the shipping and shipping management service providers we use, especially DPD and Sendcloud, as far as required for label creation, shipping processing, shipment tracking, return processing, or delivery communication.
The following data are processed in particular:
• name
• delivery address
• email address
• phone number, if required for delivery information
• order and shipment data
• tracking and return information
The legal basis is Art. 6(1)(b) GDPR.
13. Inventory Management, Accounting, and Internal Business Processes
To handle orders, invoicing, accounting, inventory management, and internal business processes, we use external systems, especially Billbee.
The data processed are those necessary for the respective function, especially master, order, billing, shipping, and communication data.
Processing is based on Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR. If external service providers act on our behalf, processing is based on a contract for order processing according to Art. 28 GDPR.
14. Fraud Prevention and Abuse Detection
To prevent abuse, fraud, payment defaults, IT attacks, and other security-relevant incidents, we and our technical service providers may process certain risk-related data, such as:
• IP address
• Device and browser information
• order and transaction data
• irregularities in the ordering process
• technical security features
Processing is carried out to protect our shop, our systems, and our economic interests, as well as to prevent unlawful actions.
The legal basis is Art. 6(1)(f) GDPR. Where processing is legally required, it is also based on Art. 6(1)(c) GDPR.
15. Cookies, Similar Technologies, and Consent Management
Our website uses cookies as well as comparable technologies, especially pixels, tags, web beacons, local storage techniques, and similar mechanisms that can store or read information on your device.
We distinguish in particular between the following categories:
a) Technically Necessary Technologies
These are necessary to technically provide the website and online shop, operate the shopping cart, enable logins, save language settings, ensure security, or provide functions you desire.
The legal basis for the subsequent processing of personal data is Art. 6 para. 1 lit. f GDPR. If storing or reading information on your device occurs and no consent is required, we rely on the legal exceptions of the TDDDG.
b) Analytics and Statistics Technologies
These help us measure the reach, usage, and performance of our website and improve our offerings.
We only use such technologies if you have explicitly consented beforehand.
The legal basis is Art. 6 para. 1 lit. a GDPR.
The legal basis for storing or reading information on your device is § 25 TDDDG.
c) Marketing and Personalization Technologies
These serve to control marketing measures, measure advertising success, create target groups, deliver personalized advertising, or analyze interactions with advertising campaigns.
We only use such technologies if you have explicitly consented beforehand.
The legal basis is Art. 6 para. 1 lit. a GDPR.
The legal basis for storing or reading information on your device is § 25 TDDDG.
d) Management of Your Consent
You can adjust or revoke your selection at any time with effect for the future via our consent management. The legality of processing carried out until the revocation remains unaffected.
We store information about granted, denied, or revoked consents as far as necessary to fulfill our documentation obligations.
16. Shopify Customer Privacy and Consent-Based Control
Where technically available, we use the privacy and consent mechanisms of Shopify or a compatible consent management system to control whether non-essential analytics and marketing technologies are loaded or activated.
Non-technically necessary cookies, pixels, or comparable tracking technologies are only activated after obtaining the appropriate consent.
17. Google Analytics 4 (GA4)
If you have given your consent, we use Google Analytics 4 (GA4), a web analytics service from Google. Google Analytics allows us to analyze user behavior on our website and evaluate reach, interactions, and conversion processes.
The following data may be processed in particular:
• Shortened IP address or technical online identifiers
• Device and browser information
• Usage data
• Page views
• Duration of stay
• Interactions
• Referrer information
• Approximate location data
• Conversion data
Google Analytics is only activated after your explicit consent.
The legal basis is Art. 6 para. 1 lit. a GDPR.
If IP anonymization or IP shortening is technically set up, this is done according to the specific configuration. Regardless, personal data processing by Google may occur.
18. Social media presences and external links
On our website, you will find links to external services and social networks, especially Facebook, Instagram, and YouTube.
If you click such a link, you leave our website. The data processing on the websites of the respective providers is solely their responsibility.
An automatic transmission of personal data to these providers does not generally occur through mere linking. It may be different if embedded content, plugins, pixels, or other active third-party components are loaded on individual pages. Such non-essential third-party components are only integrated by us based on your consent, as required by law.
19. Embedded content, especially videos
If we embed videos or other content from third-party providers, such as YouTube, on individual pages, loading this content may result in the transmission of personal data to the respective third party, especially your IP address and other technical usage data.
If the integration is not technically necessary, such content is only loaded after your consent.
The legal basis is Art. 6 para. 1 lit. a GDPR.
Where technically possible, we use the extended privacy mode on YouTube via youtube-nocookie.com.
20. Recipients of personal data
Recipients of your personal data may include, in particular:
• Shopify as the shop and hosting platform
• Payment service providers according to the payment method selected at checkout
• Shipping and shipping management service providers, especially DPD and Sendcloud
• Accounting and inventory management service providers, especially Billbee
• IT and security service providers
• Analysis and marketing service providers, insofar as you have given consent
• Public authorities and agencies, insofar as there is a legal obligation
• Advisors, lawyers, insurers, or courts, insofar as this is necessary for legal prosecution or defense
As far as service providers act as processors for us, processing takes place exclusively on the basis of a contract according to Art. 28 GDPR.
21. Third-Country Transfers
In the context of using certain services, personal data may be transferred to recipients in countries outside the European Union or the European Economic Area, especially to Canada or the United States.
Such a transfer only takes place if the special conditions of Arts. 44 et seq. GDPR are met. Depending on the situation, this can be based in particular on:
• an adequacy decision of the European Commission
• the standard contractual clauses of the European Commission
• other legally permissible guarantees or exceptions
Please note that in the case of third-country transfers, despite contractual and organizational protective measures, a level of data protection may exist that does not fully correspond to that within the EU.
22. Retention Period
We store personal data only as long as necessary for the respective purposes or as we are legally obliged to do so.
The following principles apply in particular:
• Server log files are generally stored only for a limited period, as far as required for security and error analysis.
• Order, invoice, and tax-relevant data is stored according to statutory retention periods, usually up to ten years.
• Data from customer inquiries is stored until final processing and beyond only as far as necessary to fulfill legal obligations or for legal defense.
• Data on consents is stored until withdrawal and beyond, as far as necessary to fulfill legal retention obligations or for legal defense.
• Newsletter data is stored until you unsubscribe or withdraw your consent.
• Data from a customer account is generally stored until the account is deleted, subject to any conflicting legal obligations.
• We store analysis and marketing data according to the respective cookie duration or until you withdraw your consent, unless a longer retention period is required for legal reasons.
23. Automated Decisions and Profiling
An exclusively automated decision-making process within the meaning of Art. 22 GDPR, which has legal effects on you or similarly significantly affects you, does not generally take place through us.
Automated security and fraud prevention mechanisms of technical service providers remain unaffected, provided they serve only to avert danger and do not have such a significant effect within the meaning of Art. 22 GDPR.
24. Revocation of Given Consents
If personal data is processed based on your consent, you can revoke this consent at any time with effect for the future.
Data processing already carried out until the time of revocation remains unaffected.
You can declare the revocation especially via our consent management or by sending a message to the contact details mentioned above.
25. Your Rights
You have the following rights in accordance with legal provisions:
• Right to information according to Art. 15 GDPR
• Right to rectification according to Art. 16 GDPR
• Right to deletion according to Art. 17 GDPR
• Right to restriction of processing according to Art. 18 GDPR
• Right to data portability according to Art. 20 GDPR
• Right to object according to Art. 21 GDPR
• Right to revoke given consent with effect for the future
• Right to file a complaint with a data protection supervisory authority
Right to Object
If we process personal data based on Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising. This also applies to related profiling.
26. Right to Complain to a Supervisory Authority
You have the right to file a complaint with a data protection supervisory authority.
Our company is particularly responsible for:
The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
65021 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
Phone: +49 611 1408-0
Regardless, you can also contact any other data protection supervisory authority.
27. Obligation to Provide Data
The provision of personal data is partly legally or contractually required or necessary for concluding a contract. Without providing the data required for ordering, payment, delivery, or communication, concluding or executing a contract may not be possible.
28. Amendment of this Privacy Policy
We reserve the right to amend this privacy policy with effect for the future, especially in the event of changes to legal requirements, the services used, or our offerings.
Status: 07/10/2026
This is a courtesy translation. In the event of any discrepancy or inconsistency, the German version shall prevail.