Privacy Policy (GDPR)

For workshop users' data and the contractual relationship, the controller is [NOMBRE DEL OPERADOR, S.L.] (contact: privacidad@motori.app).

For the workshop's CUSTOMERS' data (people whose vehicles are serviced), the CONTROLLER is the workshop itself, and Motori's operator acts as PROCESSOR on the workshop's behalf.

Identification and contact data (name, phone, email), fiscal data (tax ID, address), vehicle data and service history, and vehicle images (intake/exit photos).

Special categories of data are not intentionally processed.

Workshop management and service provision: performance of a contract.

Invoicing and accounting retention: legal obligation (tax law).

Service notices (e.g. vehicle ready, roadworthiness reminder) via WhatsApp or other means: legitimate interest or the customer's consent.

Marketing communications: only with consent.

Documents with fiscal effect (invoices) are retained for the legal periods (generally 4–6 years). Other data is retained while the relationship lasts and then deleted or anonymised.

The workshop can exercise a customer's right to erasure through the anonymisation feature, which erases personal data while retaining the fiscal records required by law.

Technology providers needed to deliver the service (hosting). When the workshop uses the WhatsApp integration, communication takes place through the user's own messaging app and the relevant provider (Meta).

Data is not sold to third parties.

If any provider involves transfers outside the EEA, appropriate safeguards under the GDPR (e.g. standard contractual clauses) apply.

You may exercise the rights of access, rectification, erasure, objection, restriction and portability. Regarding the workshop (as controller of the customer's data), by contacting the workshop directly. The Platform offers export and anonymisation features to facilitate this.

You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es). Privacy contact: privacidad@motori.app.

Technical and organisational measures apply: role- and permission-based access control, data isolation between workshops, hashed passwords and protected communications.