Privacy policy

As of: 16.09.2026

Privacy policy for the MOTURO online shop

Below we inform you which personal data we process when you visit the shop, place orders, make payments, receive deliveries, send contact requests and when cookies or similar technologies are used.

1. Controller

No data protection officer has been appointed. Data protection requests can be sent to the email address given above.

2. Accessing the shop and technical log data

When our online shop is accessed, technically necessary data are processed in order to deliver the shop, ensure security, provide cart and order functions and prevent misuse. These may include the IP address, date and time of access, browser and device information, pages accessed, referrer URL, language settings and technical log data.

The legal basis is Art. 6(1)(f) GDPR, insofar as the processing is necessary for the secure and functional provision of the shop, and Art. 6(1)(b) GDPR, insofar as the processing is necessary for taking pre-contractual measures or for performing a contract.

3. Technical shop platform and operation of the online shop

Our online shop is operated using external technical infrastructure. This includes in particular hosting, the shop interface, cart, checkout, customer account functions, security functions, fraud prevention, technical analysis and interfaces to payment and shipping processes.

Depending on how the shop is used, order, contact, payment status, shipping, device, usage and log data may be processed in this context. The technical service providers used process data either on our behalf on the basis of data protection agreements or, insofar as they fulfil their own legal obligations, under their own responsibility.

4. Orders, customer account and contract processing

When you order in the shop, we process the data required for the order and the processing of the contract, in particular name, billing and delivery address, email address, telephone number if provided, order data, payment status, shipping data, communication, return information and complaint information.

The legal basis is Art. 6(1)(b) GDPR. Insofar as statutory retention obligations exist, the legal basis is Art. 6(1)(c) GDPR.

5. Payment service providers

We use external payment service providers to process payments. You can see which payment methods and payment service providers are available at checkout before placing the order. Depending on the payment method selected, payment, order, contact, device and transaction data are transmitted to the respective payment service provider insofar as this is necessary for processing the payment, for fraud prevention and for performing the contract.

The legal basis is Art. 6(1)(b) GDPR, for legally required checks Art. 6(1)(c) GDPR and for fraud prevention Art. 6(1)(f) GDPR. The respective payment service provider is itself responsible for its own processing operations; its privacy notices apply in addition.

6. Shipping service providers and delivery communication

For delivery, we pass on the data required for this purpose to shipping service providers, in particular name, delivery address, shipment data and, insofar as necessary for shipping notifications or delivery, email address or telephone number. Depending on the shipping method, parcel and letter service providers as well as other service providers used in the shipping process may be involved.

The legal basis is Art. 6(1)(b) GDPR. Insofar as shipping service providers provide their own tracking or notification services, their privacy information may apply in addition.

7. Contact, fit enquiries and customer service

If you contact us, we process the information you provide in order to handle the enquiry. This may include name, email address, order number, vehicle, model or engine data, comparison numbers, photos of old parts, communication content and processing notes.

The legal basis is Art. 6(1)(b) GDPR, insofar as the enquiry is related to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR.

8. Vehicle selection in the browser

If you select a vehicle in the vehicle finder, this selection is stored in the local storage of your browser so that it is retained as you continue to use the shop. The selection can be changed or deleted in the shop. When you search for parts, the selected vehicle parameters are transmitted to the shop as part of the search request and may be contained in technical log data.

Local storage is necessary for the vehicle finder you have expressly requested. The legal basis for storing or reading is § 25(2) no. 2 TDDDG; further processing takes place under Art. 6(1)(b) GDPR for pre-contractual measures or Art. 6(1)(f) GDPR for secure technical provision.

9. Customer account

The order area can be accessed via an access code sent to the email address used. There, in particular order history, order status as well as return and cancellation information are processed. The processing takes place to perform the contract under Art. 6(1)(b) GDPR. We handle deletion requests in accordance with the statutory requirements and retention obligations.

10. Newsletter and marketing communication

We only send newsletters or promotional emails if consent has been given for this or a statutory permission exists. Consent can be withdrawn at any time with effect for the future.

The legal basis is Art. 6(1)(a) GDPR in the case of consent or Art. 6(1)(f) GDPR, insofar as legally permissible advertising to existing customers is involved.

11. Cookies, similar technologies and consent

We use technically necessary cookies and similar technologies so that the shop works, cart and checkout are provided, security is ensured and language, market or consent settings can be saved.

For non-essential cookies and analytics, marketing, personalisation or pixel technologies, we obtain your consent where required. The legal basis for technically necessary operations is § 25(2) TDDDG and Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR. For technologies requiring consent, the legal basis is § 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time via the cookie settings in the shop.

12. Cookie banner, consent settings and opt-out

The shop uses consent functions to separate technically necessary cookies from optional analytics, marketing, personalisation or pixel technologies and to save your choice.

Optional technologies are only loaded in accordance with your consent decision. This also applies to pixels and embedded services of third-party providers.

13. Other embedded services

We only use other analytics, marketing, review, support, security, translation or other embedded services insofar as they are activated in the shop and the legal requirements are met. Non-essential tracking or marketing technologies are only activated after consent, where this is required.

If we introduce new payment, marketing or analytics functions, we will update this privacy policy.

14. Recipients, processors and transfers to third countries

Recipients of personal data may in particular be technical shop, hosting, inventory management and process service providers, payment service providers, shipping service providers, IT security service providers, tax advisers, authorities, banks and communication service providers.

A transfer to countries outside the European Union or the European Economic Area may occur in particular with internationally active platform, payment, analytics or support service providers. It only takes place insofar as there is an adequacy decision, appropriate safeguards such as EU standard contractual clauses or a statutory exception.

15. Storage period

We only store personal data for as long as is necessary for the respective purposes or as statutory retention obligations exist. We retain documents relevant under commercial and tax law in accordance with the statutory periods, regularly for up to six or ten years.

We store data from enquiries, returns, complaints and warranty cases for as long as this is necessary for processing them and for preserving or defending legal claims.

16. Rights of data subjects

Subject to the statutory requirements, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection. Insofar as processing is based on consent, you can withdraw this consent at any time with effect for the future.

Right to object: Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you can object to this processing at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving particular reasons.

You also have the right to lodge a complaint with a data protection supervisory authority. For Kay GmbH, the competent supervisory authority is in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

17. Obligation to provide data

The provision of certain data is necessary for ordering, payment, delivery, returns or customer service. Without these data we cannot perform the contract, or cannot perform it in full.