1. Introduction
Protecting your personal data is a priority for AutoMoto. This privacy policy informs you about how we collect, use, share, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and French data protection law.
By using our site and services, you accept the practices described in this policy.
2. Data controller
Controller: [Nom de la société]
Address: [Adresse complète]
Email: dpo@motortrack.app
Data Protection Officer (DPO): [Nom du DPO]
3. Personal data collected
We collect the following data when you use our services:
- Identification data: last name, first name, email address
- Connection data: IP address, date and time of connection, browser type
- Vehicle data: license plate, VIN, mileage, make, model, associated events and defects
- Cookies and trackers: necessary, analytics, and marketing cookies (based on your consent)
4. Purposes of processing
Your personal data is processed for the following purposes:
- Managing your user account and authentication
- Providing fleet management services (vehicles, events, defects)
- Improving our services and analyzing site usage (with your consent for analytics cookies)
- Legal compliance and fraud prevention (legal basis: legal obligation)
- Communicating updates and information about the service (legal basis: legitimate interest)
5. Legal basis for processing
The processing of your data relies on the following legal bases:
- Performance of a contract: managing your account and providing the services
- Consent: analytics and marketing cookies
- Legitimate interest: improving our services and communication
- Legal obligation: retaining data for tax and accounting compliance
6. Data retention period
- Account data: for the duration of your use of the service + 3 years after account closure (legal limitation period)
- Connection data: 1 year maximum (in accordance with the law)
- Analytics cookies: 13 months maximum
- Cookie consent: indefinite (until consent is withdrawn)
7. Data sharing and transfer
Your personal data is never sold to third parties. It may be shared with:
- Technical service providers: site hosting, maintenance, technical support (under confidentiality agreement)
- Analytics tools: Google Analytics, Matomo (only if you have consented to analytics cookies)
- Payment: Stripe, Inc. (card payment processing for paid plans)
- Legal authorities: in the event of a legal request (court order)
Transfers outside the European Union
Some of our subprocessors are based outside the European Union. Data transfers to third countries are governed by appropriate safeguards:
- Google LLC (USA) — Google Analytics / Tag Manager. Transfer to the United States. Safeguard: Standard Contractual Clauses (SCC) adopted by the European Commission, compliant with the EU–US Data Privacy Framework. Google Policy
- Stripe, Inc. (USA) — payment processing. Transfer to the United States. Safeguard: SCC + PCI DSS certification. Stripe Policy
8. Your rights (GDPR)
In accordance with the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request the deletion of your data (under certain conditions)
- Right to restriction of processing: temporarily restrict processing
- Right to data portability: receive your data in a structured format and transfer it to another controller
- Right to object: object to processing based on legitimate interest
- Right to withdraw consent: for processing based on consent (cookies)
To exercise your rights, contact us at dpo@motortrack.app specifying your request and attaching a copy of your ID.
You also have the right to lodge a complaint with the CNIL (French Data Protection Authority) at www.cnil.fr.
9. Cookies and trackers
We use three categories of cookies:
- Necessary cookies: essential for the site to function (authentication, security). They do not require consent.
- Analytics cookies: to analyze site usage (Matomo, Google Analytics). Require your consent.
- Marketing cookies: to display personalized ads. Require your consent.
You can manage your cookie preferences at any time via the consent banner (icon at the bottom of the page) or by changing your browser settings. For centralized management, you can also go to Settings if you are logged in.
Trackers used
The following trackers and third-party services may be used depending on your consent:
- Google Analytics (GA4) — purpose: usage statistics and site improvement. Data collected: anonymized identifiers, page visited, session durations, IP address (pseudonymized depending on configuration). Retention: up to 13 months by default. Conditional loading: we only initialize GA if you have consented to analytics cookies.
- Google Tag Manager (GTM) — purpose: tag management and tracker orchestration. GTM does not send data by itself but allows other scripts to be loaded (e.g. GA). GTM is loaded only after consent.
- Matomo — purpose: self-hosted analytics (optional). Data collected: usage metrics, anonymized IP if configured. Retention: configurable server-side; 13 months by default. Conditional loading based on consent.
Note: third-party providers (Google, Matomo) have their own privacy policies and procedures for exercising rights; we recommend consulting their pages for direct requests regarding data they may process.
Withdrawing consent and disabling trackers
You can withdraw or change your consent at any time:
- Cookie banner: open the banner via the link at the bottom of the page and change your preferences.
- Account settings: if you are logged in, go to Settings to manage your preferences.
- Contact the DPO: send us an email at dpo@motortrack.app to request revocation and the possible deletion of associated data.
- Manually deleting cookies: you can delete cookies from your browser settings. See your browser's official documentation (Chrome, Firefox, Safari) for instructions.
After withdrawing consent, we will disable the relevant trackers. Depending on the case, some data already collected by third parties (e.g. Google) may remain with those providers; to request its deletion, contact us or reach out directly to the provider, specifying the identifiers and the period concerned.
10. Data security
We implement appropriate technical and organizational measures to protect your data against loss, theft, unauthorized access, disclosure, alteration, or destruction. These measures include encryption of sensitive data (JWT, HTTPS), strict access controls, and regular security audits.
11. Changes to this policy
We reserve the right to modify this privacy policy at any time. Any change will be published on this page with the update date. We encourage you to check this page regularly to stay informed.
12. Contact
For any question regarding this privacy policy or the processing of your personal data, contact us: