Privacy policy

1. Controller

The controller responsible for data processing on this website (Art. 4(7) GDPR) is:

This applies to every domain this catalogue is available under, including brand domains such as ducati-add-ons.com.

2. Hosting and server logs

The website runs on a rented server of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The server is located in a data centre in Germany. We have concluded a data processing agreement with netcup (Art. 28 GDPR).

With every request the server processes technically necessary data and writes it to logs (server logs), in particular your IP address, the date and time, the requested address (URL), the HTTP status code and the identifier of your browser (user agent). We need this data to deliver the website, find errors and fend off attacks. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). We do not combine this data with other data.

The server logs are kept for 7 days and then deleted automatically.

If a software error occurs, the website sends an error report to a self-hosted error tracker (Bugsink). The report contains technical details of the error, such as the error message, the requested URL and the time, but no IP addresses, no cookies and no form input. The legal basis is Art. 6(1)(f) GDPR. Bugsink also runs on a server at netcup in Germany. Error reports are kept for 90 days and then deleted automatically.

3. Audience measurement with Plausible Analytics

To understand which pages are used, we use Plausible Analytics. We host Plausible ourselves at plausible.fuerstenberg.biz; the data is not passed on to Plausible Insights OÜ or any other third party. This server is also located at netcup in Germany.

Plausible sets no cookies, stores nothing on your device and creates no user profiles. To count visits, Plausible derives an identifier from the IP address and user agent that changes daily and cannot be reversed; the IP address itself is not stored. Plausible records the page visited, the referring page, country and region, browser, operating system and device type. We also count the following events:

• search: the search term entered and the number of results,
• click on a shop link: product, brand, category, motorcycle and page,
• page not found (404): the requested address.

All values are only evaluated in aggregate. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR). As Plausible neither stores nor reads anything on your device, no consent under Section 25 of the German TDDDG is required. More on how it works: Plausible data policy.

4. Cookie “viewed_motorcycles”

When you open the page of a motorcycle, the website stores the cookie viewed_motorcycles in your browser. For up to 50 motorcycles it contains their internal number, how often you opened the page and when you last did so. This lets the homepage show the motorcycles you viewed most often under “Recently viewed”.

• Purpose: showing your recently viewed motorcycles (a convenience feature), no analytics and no advertising.
• Duration: 1 year from the last visit to a motorcycle page.
• The cookie is signed, cannot be read by scripts (HttpOnly) and is only sent to this website. We do not store its content on the server and do not pass it on.

The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. You can delete the cookie at any time in your browser settings; the “Recently viewed” list is then empty.

In addition, the website sets technically necessary cookies in two cases:

• locale_hint: If your browser prefers another language that this page is also available in, the website points this out. If you switch the language via this notice or close it, your browser remembers this in this cookie. It only contains the chosen language (for example “de”) or the value “dismissed” and is only evaluated in your browser. Duration: 1 year.
• Session cookie: It is only set when you submit the form for the email notification or open a link from our notification emails (confirmation or unsubscribe). It carries the feedback on your subscription over to the next page and protects the forms against misuse. It is encrypted, cannot be read by scripts (HttpOnly) and is deleted when you close your browser.

The legal basis for both is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. The website sets no other cookies for visitors.

5. Email notification about new add-ons

On the motorcycle pages you can ask to be notified by email when there are new add-ons for a motorcycle. For this we store your email address, the motorcycle, the language of the page, the time of your subscription and of your confirmation, and the time of the last notification.

We use the double opt-in procedure: after subscribing you receive an email with a confirmation link. Your subscription only becomes active once you confirm it via this link. We automatically delete unconfirmed subscriptions once they are older than 7 days. This happens once a week.

After that we send you at most one email per week, and only when new add-ons have been added for the motorcycle. Every email contains a link to unsubscribe. When you unsubscribe, we delete this subscription together with your email address. A subscription applies to one motorcycle; you unsubscribe from each one separately.

To prevent misuse, we count the subscriptions per IP address for one hour in the server's memory. We do not store the IP address in the database.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time, most easily via the unsubscribe link. We send the emails via the mail server of our hosting provider netcup in Germany.

6. Saved items and sign-in in “Discover”

In “Discover” you can save products and motorcycles. Only when you click “Save” for the first time or sign in does the website set the cookie visitor_token. It contains a random, signed identifier that lets us find your saved items again.

• Purpose: your saved items and matching recommendations in “Discover”
• Content: a random identifier, no information about you
• Duration: 1 year

For this identifier we store which entries you saved, opened or clicked through the shop button, each with the time. From this we work out which brands and categories you see more often. Without the cookie we store none of this. Identifiers without saved entries are deleted after 6 months without a visit.

Optionally you can sign in with your e-mail address, without a password: we send you a link that works once and for 20 minutes. We store the e-mail address to send you the link and to show your saved items on several devices. If the link is never used, we delete the address after one day. To prevent abuse, we count the requests per IP address for 15 minutes in the server’s memory.

The legal basis is providing the function you asked for (Art. 6(1)(b) GDPR, § 25(2) no. 2 TDDDG). “Sign out” deletes the cookie; you can ask us at any time by e-mail to delete your saved items and your e-mail address.

7. Product images from manufacturers

Some product images are loaded directly from the servers of the respective manufacturer. For technical reasons the manufacturer receives your IP address and the identifier of your browser. The legal basis is our legitimate interest in presenting the products completely (Art. 6(1)(f) GDPR). The manufacturer's privacy policy applies to the processing on its side.

8. External links and affiliate links

The website links to websites of manufacturers and shops. Some links to shops are affiliate links: if you buy something there, we may receive a commission; the price does not change for you.

We take part in the following affiliate programmes:

• Awin (Awin AG, Eichhornstraße 3, 10785 Berlin, Germany): Awin privacy policy
• Amazon PartnerNet (Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg): Amazon privacy notice

When you click such a link, the network may set cookies to attribute a purchase to our link. The privacy policy of the respective network applies to this.

Shop links first go through our address /out/…, which counts the click (product, motorcycle and position on the page) and then redirects you. We store no data about you in the process. As soon as you open another website, its privacy policy applies; the shop or the affiliate programme may set its own cookies there to attribute the purchase to our link. Exception: in “Discover” we store the click with your identifier if you have the cookie visitor_token (see section 6).

9. Contact by email or phone

If you write to us or call us, we process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for this and no statutory retention obligations apply.

10. Your rights

You have the right to

• access to the data stored about you (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

To exercise them, please use the contact details above. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us, the Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (Thuringia, Germany).