Privacy Policy

Last updated: 10 June 2026

1. Who we are

Motobud ("we", "us", "our") operates the Motobud platform — a motorcycle community and events service available at motobud.eu. For questions about this policy, contact us at [email protected].

2. What data we collect

We collect the following categories of personal data:

  • Account data — name, email address, username, and password (hashed).
  • Profile data — optional profile photo, bio, and motorcycle information you choose to share.
  • Usage data — pages visited, features used, and interactions within the platform.
  • Location data — approximate location used to show nearby events (only when you grant permission).
  • Communications — messages or emails you send us for support.

3. Legal basis for processing (GDPR)

We process your personal data on the following legal grounds under the GDPR:

  • Contract — processing necessary to provide our service under our Terms of Service.
  • Legitimate interests — improving our platform, preventing fraud, and ensuring security.
  • Consent — optional features such as marketing emails or location access, which you can withdraw at any time.
  • Legal obligation — complying with applicable laws and regulations.

4. How we use your data

  • Providing and improving the Motobud platform.
  • Showing motorcycle events relevant to your location.
  • Sending transactional emails (account, bookings, alerts).
  • Sending marketing communications, only with your explicit consent.
  • Detecting and preventing fraud or abuse.
  • Complying with legal obligations.

5. Data sharing and third parties

We do not sell your personal data. We share it only with trusted processors to operate our service:

  • Hosting & infrastructure — cloud providers that store and serve the platform.
  • Email delivery — a transactional email provider to send account and notification emails.
  • Analytics — anonymised or pseudonymised usage analytics to understand platform performance.
  • Payment processing — if applicable, a PCI-DSS compliant payment provider (we never store card details).

All processors are bound by data processing agreements and may only process your data on our documented instructions.

6. International transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the European Commission — to protect your data to EEA standards.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide services. If you delete your account, we delete or anonymise your data within 30 days, except where retention is required by law (e.g., financial records kept for 7 years under Belgian law).

8. Your rights under GDPR

As a data subject in the EEA, you have the right to:

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure— request deletion of your data ("right to be forgotten").
  • Restriction — ask us to limit how we use your data.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — withdraw consent for consent-based processing at any time without affecting prior processing.

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority — in Belgium, the Data Protection Authority (GBA/APD).

9. Cookies

We use strictly necessary cookies to operate the platform (authentication sessions). We may use optional analytics cookies only with your consent. You can manage cookie preferences through your browser settings.

10. Security

We use industry-standard security measures including encryption in transit (TLS), hashed passwords, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by a prominent notice on the platform at least 30 days before the changes take effect. The "last updated" date at the top of this page reflects the latest revision.

12. Contact

For any privacy-related questions or to exercise your rights, contact us at [email protected].