Privacy Policy – MotoXPricambi.com

Last updated: July 28, 2026

This Privacy Policy describes how MotoXPricambi collects, uses, stores, and protects the personal data of users who visit www.motoxpricambi.com, request information, create an account, or purchase products.

Personal data is processed in accordance with Regulation (EU) 2016/679, known as the GDPR, applicable Italian law, and, where necessary, the laws in force in the countries to which MotoXPricambi sells and ships its products.

MotoXPricambi sells and ships products in Italy, throughout the European Union, and worldwide.

1. Data Controller

The Data Controller is:

Gianluca Rigo
Vicolo Caprera 19
37014 Castelnuovo del Garda (VR), Italy

VAT number: IT03854060237
E-mail: [email protected]
Certified e-mail (PEC): [email protected]
Telephone: +39 045 2820387

2. Personal Data Collected

MotoXPricambi collects only the data necessary to respond to enquiries, manage accounts, process orders, handle payments, comply with tax obligations, and organise shipments.

Customers residing in Italy

For customers residing in Italy, the following data may be collected:

• first name and surname;

• billing address;

• shipping address;

• e-mail address;

• telephone number;

• Italian tax identification number, when required for invoicing or other obligations under Italian law;

• VAT number, company name, SDI recipient code, or certified e-mail address in the case of purchases made by companies or professionals;

• account and order information;

• information required to customise products.

Customers residing outside Italy

For customers residing outside Italy, the following data is normally collected:

• first name and surname;

• full billing and shipping address;

• e-mail address;

• telephone number;

• account information;

• order information;

• information required to customise products.

An Italian tax identification number is not requested from customers residing outside Italy.

For foreign business customers, the company name, VAT number, or foreign tax identification number may be requested when required for invoicing or tax purposes.

For some international shipments, the courier or customs authorities in the destination country may require additional identification or tax information. In these cases, only the data strictly necessary for customs clearance and delivery will be collected.

Order and customisation data

The following information may be collected:

• products ordered;

• motorcycle model and year;

• requested colours and graphics;

• racing numbers;

• logos and sponsor names;

• production instructions;

• photographs;

• reference images;

• graphic files;

• messages and communications relating to the order;

• information relating to returns, complaints, and warranties.

The user must ensure that they have the right to use and provide any images, trademarks, logos, or graphic files sent to MotoXPricambi.

Users are requested not to provide unnecessary personal data or sensitive information.

Browsing data

During normal browsing, the website may automatically collect:

• IP address;

• access date and time;

• browser type;

• operating system;

• device type;

• pages visited;

• duration of the visit;

• referring page;

• technical information;

• security and website operation logs.

This data is used to enable the website to function properly, ensure security, prevent unlawful use, and obtain statistics on the use of services.

3. Payment Data

Payments may be processed through:

• PayPal;

• Stripe;

• banks;

• card payment networks;

• any other providers indicated during the checkout process.

Full card details are normally entered directly into the secure systems of the payment providers.

MotoXPricambi does not normally store:

• the full card number;

• the CVV or CVC security code;

• personal PayPal or banking login credentials.

MotoXPricambi may receive and store limited transaction information, including:

• amount;

• currency;

• payment date;

• payment method;

• transaction outcome;

• transaction identification number;

• the last digits of the card, where applicable;

• information required for refunds, disputes, or fraud prevention.

Payment providers also process personal data in accordance with their own privacy policies and may act as independent data controllers.

4. Purposes and Legal Bases of Processing

Responding to enquiries

Personal data is used to respond to requests for information, quotations, product compatibility, customisation options, and production times.

Legal basis: taking steps at the user’s request before entering into a contract.

Creating and managing an account

Personal data is used to create and manage the customer account, provide access to the personal area, and allow the user to view their order history.

Legal basis: performance of a contract or pre-contractual measures.

Managing orders

Personal data is used to:

• receive and confirm orders;

• verify payments;

• manufacture and customise products;

• communicate with the customer;

• prepare commercial documentation;

• organise shipments;

• provide assistance;

• manage returns, complaints, and warranties.

Legal basis: performance of the sales contract.

Tax, accounting, and customs obligations

Personal data is used to issue invoices, retain accounting records, prepare shipping documentation, complete customs declarations, and comply with legal obligations.

Legal basis: compliance with a legal obligation.

Security and fraud prevention

Personal data may be used to protect the website and user accounts, prevent unauthorised access, fraudulent payments, unlawful disputes, and unauthorised use.

Legal basis: the legitimate interest of the Data Controller in ensuring security and protecting its rights.

Protection of legal rights

Personal data may be used to manage disputes, recover debts, defend legal claims, respond to authorities, or retain evidence relating to orders and communications.

Legal basis: the legitimate interest of the Data Controller in protecting its rights.

Statistics and website improvement

MotoXPricambi may use aggregated data or statistical tools to understand how the website is used and to improve products and services.

Statistical tools that are not strictly necessary are activated only after the user has given consent.

Legal basis: legitimate interest where permitted, or user consent.

Advertising and remarketing

Subject to the user’s consent, the website may use tools such as:

• Google Analytics;

• Google Ads;

• Meta Pixel;

• conversion tags;

• remarketing tools;

• similar advertising technologies.

These tools may be used to:

• measure visits and purchases;

• assess campaign performance;

• display personalised advertisements;

• create custom audiences;

• show advertisements again to users who have visited the website.

Legal basis: user consent.

Refusal to provide consent does not prevent users from browsing the website or making purchases.

Newsletter

If the user subscribes to the newsletter, their e-mail address may be used to send promotions, news, and commercial communications relating to MotoXPricambi products.

Legal basis: user consent.

Consent may be withdrawn at any time by using the unsubscribe link included in the communications or by writing to [email protected].

5. Provision of Personal Data

Providing the personal data required to manage the order, payment, production, invoicing, and shipment is mandatory.

For customers residing in Italy, the Italian tax identification number may be requested when necessary to comply with Italian tax and administrative obligations.

For customers residing outside Italy, the following data is normally requested:

• first name;

• surname;

• address;

• telephone number;

• e-mail address.

Any additional tax or identification data is requested only when necessary for:

• business purchases;

• invoicing;

• customs procedures;

• requirements of the destination country;

• requests from the courier or competent authorities.

Without the necessary data, MotoXPricambi may be unable to process the order, manufacture the product, arrange shipment, or comply with tax and customs obligations.

Providing data for newsletters, personalised advertising, and non-essential cookies is optional.

6. International Shipments

MotoXPricambi ships products within Italy, throughout the European Union, and worldwide.

To complete delivery, the necessary data may be disclosed to:

• couriers;

• freight forwarders;

• logistics operators;

• companies affiliated with the courier;

• customs brokers;

• subcontracted carriers;

• operators responsible for delivery in the destination country;

• tax and customs authorities.

The data disclosed may include:

• first name and surname;

• address;

• telephone number;

• e-mail address;

• description and value of the goods;

• commercial invoice;

• tracking number;

• any required tax or customs identification numbers.

The disclosure of this data is necessary to:

• perform the contract;

• prepare the shipment;

• complete customs clearance;

• calculate any applicable taxes and duties;

• contact the recipient;

• deliver the order.

For shipments to countries outside the European Economic Area, the necessary data may be transferred to the country selected by the customer as the shipment destination.

7. Recipients of Personal Data

Personal data may be disclosed, to the extent necessary, to the following categories of recipients:

• hosting and IT infrastructure providers;

• website technicians and developers;

• e-mail service providers;

• management software providers;

• administrative, tax, and legal advisers;

• PayPal, Stripe, banks, and payment networks;

• couriers, freight forwarders, and logistics operators;

• customs brokers and customs authorities;

• fraud prevention service providers;

• statistical and advertising service providers;

• public, tax, administrative, or judicial authorities.

Where required by law, service providers processing data on behalf of MotoXPricambi are appointed as data processors.

Some parties, such as payment providers, couriers, advertising platforms, and public authorities, may process data as independent data controllers.

MotoXPricambi does not sell, rent, or disclose customer data lists for third-party commercial purposes.

8. Transfers Outside the European Economic Area

The use of technology providers, payment platforms, advertising tools, and international couriers may involve the transfer of personal data to countries outside the European Economic Area.

Where the transfer is not strictly necessary to complete the shipment requested by the customer, one or more of the following safeguards are used, depending on the circumstances:

• adequacy decisions adopted by the European Commission;

• Standard Contractual Clauses;

• the EU-US Data Privacy Framework, where the US recipient is validly certified;

• additional safeguards provided for under the GDPR.

For international shipments, the transfer of certain personal data to the courier, local operators, and authorities in the destination country may be necessary to perform the contract entered into with the customer.

The data subject may request further information about the safeguards used by writing to [email protected].

9. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected.

In particular:

• order data and tax documents: up to 10 years;

• invoices, credit notes, and accounting documents: for the period required by applicable tax law;

• data relating to complaints, returns, warranties, and disputes: for the time required to manage the matter and for the subsequent applicable limitation period;

• information requests and quotations not followed by an order: up to 24 months;

• customer account data: until the account is deleted or, in the event of inactivity, for up to 5 years from the last login or purchase;

• photographs, graphics, and customisation files: up to 5 years, unless earlier deletion is requested or the data is needed to manage warranties, disputes, or repeat orders;

• technical and security logs: normally up to 12 months;

• newsletter data: until consent is withdrawn;

• consent records: for the period necessary to demonstrate proper collection and management of user preferences;

• cookies: according to the retention periods specified in the Cookie Policy.

Deleting an account does not result in the deletion of data that must be retained for tax, customs, contractual, or legal defence purposes.

At the end of the retention period, personal data is deleted, anonymised, or retained only where required by law.

10. Cookies and Tracking Technologies

The website uses technical cookies necessary for:

• website operation;

• shopping cart management;

• account access;

• security;

• storage of essential preferences;

• order management.

These cookies do not require consent when used exclusively for necessary technical purposes.

Subject to consent, the website may also use:

• statistical cookies;

• Google Analytics;

• Google Ads;

• Meta Pixel;

• advertising cookies;

• remarketing tools;

• profiling tools.

Non-essential tools must remain disabled until the user has made a choice.

The cookie banner must allow the user to:

• accept all cookies;

• reject non-essential cookies;

• customise preferences;

• subsequently change or withdraw consent.

Simply browsing the website, scrolling the page, or closing the banner does not constitute consent to non-essential cookies.

Options relating to non-essential cookies must not be preselected.

Users may change or withdraw their preferences at any time through the “Manage cookie preferences” function available on the website.

The updated list of cookies, providers, purposes, and retention periods is available in the Cookie Policy.

11. Profiling and Automated Decision-Making

Subject to consent, advertising tools may create segments based on:

• pages visited;

• products viewed;

• products added to the cart;

• purchases;

• interactions carried out on the website.

This information may be used to display personalised advertisements and measure campaign performance.

MotoXPricambi does not normally make decisions based solely on automated processing that produce legal effects or similarly significantly affect the user.

Payment providers and fraud prevention systems may use automated procedures in accordance with their own privacy policies.

12. Data Security

MotoXPricambi adopts appropriate technical and organisational measures to protect personal data against:

• loss;

• destruction;

• alteration;

• unauthorised access;

• unlawful disclosure;

• misuse.

The website uses secure connections, access control systems, technical updates, and security procedures.

However, no IT system or internet transmission can guarantee absolute security.

13. Children’s Data

The website and MotoXPricambi products are not specifically intended for children.

Purchases must be made by adults or by persons legally authorised to enter into a contract.

MotoXPricambi does not knowingly collect children’s personal data for purposes based on consent.

If a parent or guardian believes that a child has provided personal data without authorisation, they may contact MotoXPricambi to request verification and, where possible, deletion.

14. Data Subject Rights

Where provided for by applicable law, the data subject may exercise the following rights:

• obtain confirmation as to whether personal data is being processed;

• access their personal data;

• request correction or updating;

• request deletion;

• request restriction of processing;

• object to processing;

• obtain data portability;

• withdraw consent;

• object to direct marketing;

• request information regarding international transfers;

• lodge a complaint with the competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Deletion cannot be carried out where the data must be retained for:

• tax or accounting obligations;

• customs obligations;

• performance of a contract;

• management of disputes;

• establishment, exercise, or defence of legal claims.

15. How to Exercise Your Rights

Requests may be sent to:

Gianluca Rigo
Vicolo Caprera 19
37014 Castelnuovo del Garda (VR), Italy

E-mail: [email protected]
Certified e-mail (PEC): [email protected]
Telephone: +39 045 2820387

Before responding, the Data Controller may request the information necessary to verify the identity of the person making the request.

The data subject may also lodge a complaint with the Italian Data Protection Authority or with the competent supervisory authority in their country, where provided for by applicable law.

16. Laws Applicable to Users Outside Italy

MotoXPricambi sells and ships products to many countries worldwide.

The availability of shipping to a particular country does not automatically result in the full application of every local privacy law.

Where a foreign privacy law applies based on the activities carried out, the market concerned, applicable thresholds, or the nature of the processing, MotoXPricambi will comply with the obligations required by that law.

Users residing outside Italy may contact MotoXPricambi to request information or exercise the rights granted under applicable law.

17. Changes to This Privacy Policy

MotoXPricambi may update this Privacy Policy as a result of:

• changes in the law;

• changes to services;

• the introduction of new providers;

• technical website updates;

• the introduction or removal of tracking technologies;

• changes to data processing methods.

The updated version will be published on this page together with the date of the latest update.

In the event of significant changes, a notice may be displayed on the website or sent to registered users.

18. Contact Details

For questions, clarification, or requests relating to the processing of personal data:

Gianluca Rigo
Vicolo Caprera 19
37014 Castelnuovo del Garda (VR), Italy

VAT number: IT03854060237
E-mail: [email protected]
Certified e-mail (PEC): [email protected]
Telephone: +39 045 2820387

Last updated: July 28, 2026