Privacy Policy

1. Who we are

Motobud ("we", "us", "our") operates the Motobud platform — a motorcycle community and events service available at motobud.eu. For questions about this policy, contact us at [email protected].

2. What data we collect

We collect the following categories of personal data:

• Account data — name, email address, username, and password (hashed).
• Profile data — optional profile photo, bio, and motorcycle information you choose to share.
• Usage data — pages visited, features used, and interactions within the platform.
• Location data — approximate location used to show nearby events (only when you grant permission).
• Communications — messages or emails you send us for support.
• Driving-school enquiries — the details you enter when you ask a driving school for information through Motobud (see section 10).

3. Legal basis for processing (GDPR)

We process your personal data on the following legal grounds under the GDPR:

• Contract — processing necessary to provide our service under our Terms of Service.
• Legitimate interests — improving our platform, preventing fraud, and ensuring security.
• Consent — optional features such as marketing emails or location access, which you can withdraw at any time.
• Legal obligation — complying with applicable laws and regulations.

4. How we use your data

• Providing and improving the Motobud platform.
• Showing motorcycle events relevant to your location.
• Sending transactional emails (account, bookings, alerts).
• Sending marketing communications, only with your explicit consent.
• Detecting and preventing fraud or abuse.
• Complying with legal obligations.

5. Data sharing and third parties

We do not sell your personal data. We share it only with trusted processors to operate our service:

• Hosting & infrastructure — cloud providers that store and serve the platform.
• Email delivery — a transactional email provider to send account and notification emails.
• Analytics — anonymised or pseudonymised usage analytics to understand platform performance.
• Payment processing — if applicable, a PCI-DSS compliant payment provider (we never store card details).
• Driving schools — when you send an enquiry, the driving school you chose receives your request (see section 10). This is not a processor: the school uses the data for its own reply.

All processors are bound by data processing agreements and may only process your data on our documented instructions.

6. International transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the European Commission — to protect your data to EEA standards.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide services. If you delete your account, we delete or anonymise your data within 30 days, except where retention is required by law (e.g., financial records kept for 7 years under Belgian law).

8. Your rights under GDPR

As a data subject in the EEA, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure— request deletion of your data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw consent for consent-based processing at any time without affecting prior processing.

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority — in Belgium, the Data Protection Authority (GBA/APD).

9. Driving-school directory

Motobud publishes a directory of driving schools in Belgium that the regions have approved, so that riders can find a school for their motorcycle licence.

What we publish.For each branch of a school: the business name, the address and its location on a map, and the approved licence categories from the official list (in Brussels, also the phone number and the teaching language of the official list). When the school's own website names the branch, we also show its brand name, logo, website, phone number, e-mail address, motorcycle prices, motorcycle offer and enrolment page. Many driving schools are companies, but some are sole traders. For a sole trader, these business details can be personal data.

Where the data comes from.

• Flanders:the open dataset "Erkende rijscholen in Vlaanderen" of the Flemish Government (Department of Mobility and Public Works).
• Wallonia: the list of approved driving schools published by SPW Mobilité et Infrastructures.
• Brussels: the list of approved driving schools published by Brussels Mobility.
• The schools' own websites: contact details, prices and offer. We record the page and the date of each value. We do not use review sites, commercial directories or the content of social media posts.

Each school page shows its sources and the date we last checked the data.

Legal basis.Legitimate interest (Article 6(1)(f) GDPR). Riders have an interest in finding an approved driving school and comparing them. Schools have an interest in being found. We publish only business data that is already public in official lists or on the school's own website, and nothing about the private life of the people behind a school.

How a school updates or removes its listing.Use the link "Is this your school?" on the school's page, or e-mail[email protected]. We check that the request comes from the school, and then:

• Update: we correct the details. Details from the official list (name, address, approved categories) also change when the official list changes.
• Remove: we take the page offline. A sole trader can object to the processing at any time (Article 21 GDPR). We keep a minimal record (the name of the school, the source and the date of the request) so that the next update of the official list does not publish the page again.

When a school no longer appears in the official list, we take its page offline.

Change requests. When you send an update or removal request, we process your name, role, e-mail address, phone number (if you give it) and message to handle the request (legitimate interest, Article 6(1)(f) GDPR). We keep them as long as we need them to handle the request. You can ask us to delete them at any time.

10. Enquiries to driving schools

On a school's page, you can ask that school for information with the form "Request info".

Purpose. We forward your request to the driving school you chose, so that it can answer you.

What we process. Your name, your e-mail address, the licence category, your preferred start month, your message, the language of the page, the date and time of your consent, and a hashed (one-way encoded) version of your IP address. We use the hashed IP address only to limit the number of requests and to prevent abuse.

Legal basis. Your consent (Article 6(1)(a) GDPR), which you give with the checkbox on the form. For the hashed IP address: our legitimate interest in preventing spam and abuse (Article 6(1)(f) GDPR).

Recipient.Only the driving school you chose. We first check each request for spam. Then we send your request to that school's e-mail address. When the school has no e-mail address on Motobud, we forward your request through another channel of the school, for example its Facebook page or by phone. The reply goes straight from the school to you. From then on, the school is responsible for the data it received from you. We do not send your request to other schools, and we do not use your data for advertising. Our e-mail provider processes the e-mail on our behalf (see section 5).

Retention. We keep your request as long as we need it to forward it and to answer questions about it. You can ask us to delete it at any time.

Your rights. You can access, correct or delete your request, and you can withdraw your consent at any time. Withdrawing your consent does not affect the request that was already sent: to have it deleted at the school, contact the school directly. You can also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be). See section 8 for all your rights.

Contact.[email protected]

11. Cookies

We use strictly necessary cookies to operate the platform (authentication sessions). We may use optional analytics cookies only with your consent. You can manage cookie preferences through your browser settings.

12. Security

We use industry-standard security measures including encryption in transit (TLS), hashed passwords, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by a prominent notice on the platform at least 30 days before the changes take effect. The "last updated" date at the top of this page reflects the latest revision.

14. Contact

For any privacy-related questions or to exercise your rights, contact us at [email protected].