Data privacy
Your Cookie settings
Privacy policy
Thank you for your interest in our website. The protection of your privacy is very important to us. When you visit our MOTUL online shop, we process personal data (any information relating to an identified or identifiable natural person) to the extent that we are permitted to do so by law or with your consent. This privacy statement shows you the details of our processing of your personal data (hereinafter also referred to as just "data processing") and your rights as a data subject.
Table of contents
A. Person responsible for data processing
The person responsible for data processing on this website is:
Hatraco GmbH
Peutestr. 22a
D-20539 Hamburg
Tel.: +49 (0) 40 22 63 07 086
Fax: +49 (0) 40 22 63 07 330
E-mail: en.info@de.motul.com
B. Contact details of our data protection officer
You can reach our data protection officer at:
Data protection officer of
Hatraco GmbH
Peutestr. 22a
D-20539 Hamburg
E-mail: datenschutz@hatraco.de
C. Operation and hosting of our website
The data processing on this website takes place on the servers of a hosting service provider who connects the website to the Internet on our behalf. The service provider is based within Germany.
D. Overview of our data processing
We process data in the following contexts:
- When you make a purchase from us, we process data from you that is necessary for the establishment and performance of a purchase contract ("contract performance") (details below under E.);
- When you call up and surf our website ("website use"), we process data from and on your terminal device, some of which could enable us to identify you personally (details of this below under F.);
- Finally, we process your data if you wish to contact us ("communication"), for example by subscribing to our newsletter, rating an article or sending us a message via the communication channels provided by us (details on this below under G.).
E. Performance of the contract
I. General information on data processing
In the course of your purchase in our online shop, we ask you for the following individual details about yourself:
- First name;
- Surname;
- Billing/delivery address;
- e-mail address;
- Bank details or credit card details.
II. scope and purposes of processing
The personal data requested from you will be processed by us for the following purposes:
- to email you the confirmation of receipt and, if applicable, the order confirmation with the legally required information as well as status reports on the dispatch of the ordered goods;
- to process your payment;
- to send you the invoice for an order;
- to deliver the ordered goods to you and
- if necessary, to assign revocations, complaints and other post-contractual enquiries from you to your person and order and to be able to process your request.
If you have voluntarily created a customer account under "My customer account - Register now", we also process this data in order to register you as a customer of the MOTUL online shop for future potential visits or purchases in our online shop, so that you do not have to enter this data, which is necessary for the fulfilment of the contract, again for each further order and can view purchases already made in your customer account at any time. After registering, you can also save products from our online shop as favourites in your customer account so that you can buy them later if necessary.
III. Data transfer/recipients
The recipient of your data is the hosting service provider of our website (see above under C.). Insofar as it is necessary for the fulfilment of the contract, your data will also be passed on to companies commissioned by us with the receipt and processing of your order. These are in detail:
- Shipping service providers for the purpose of dispatch, delivery or collection of goods;
- the banking company/credit institution commissioned with the payment in each case.
If you have selected one of the PayPal payment methods purchase on account, direct debit or credit card, it is necessary to transmit the following personal data to PayPal (Europe) S.á.r.l. & Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for the further processing of your payment and, in the case of the payment method purchase on account, also in the context of the assignment of our payment claim to PayPal:
- Invoice number;
- Invoice amount;
- Name and delivery address;
- name and billing address.
IV. storage period
If you do not create a customer account, your data will be blocked after fulfilment of the individual purchase contract, i.e. they will only be processed by us to a limited extent. On the one hand, this is necessary in the event that you assert claims against us within the statutory limitation periods (usually three years), which we must assign to your person and the business transaction with you. On the other hand, we are obliged under commercial and tax law to retain business documents that may contain your data for a maximum period of ten years. As soon as these purposes have been fulfilled or the periods have expired, your data will be deleted by us.
If you have voluntarily created a customer account, we will process your data in it until you have had the customer account deleted by us.
V. Legal basis for processing
The data processing is carried out because it is necessary for the fulfilment of the contract (Art. 6 para. 1 b DSGVO).
In part (sending of an acknowledgement of receipt and communication of mandatory information in distance selling), it is also carried out to fulfil a corresponding legal obligation to which we are subject.
If you have created a customer account, we will also process your data on the basis of your consent given to us at the same time (Art. 6 Para. 1 a DSGVO).
VI. right of revocation
You can revoke your consent for data processing in the context of managing your customer account at any time with effect for the future by notifying us at one of the contact addresses listed under A. above. We will then delete your customer account.
F. Website use
Each time you visit our website, we process certain personal data from and in some cases also on your computer/end device. This data processing can be divided into the following categories:
- Logging of your visit/use of functional cookies (details below under I.)
- Website usage analysis with Google Analytics (details below under II.)
- Use of tracking technologies for interest-based Internet advertising (details below under III.)
- Use of so-called "social plug-ins" for linking to social media (for details, see IV. below)
- Integration of YouTube videos (details below under V.)
- Use of Google reCAPTCHA (for details see VI. below)
I. Logging of your visit/use of functional cookies
1. General information on data processing
Each time you visit our website and each time you download a file from one of our websites, the following log data is automatically processed by us:
- Host name of your computer/end device (IP address);
- date and time of the call/download;
- the page called up;
- if applicable, the name of the downloaded file;
- type of browser used;
- operating system of your terminal device;
- the website from which you are visiting us.
In addition, we use functional cookies to operate our website. These are small text files that are stored by us on your computer/end device. Firstly, these are so-called session cookies, which are only set for the duration of your visit to our website. Secondly, so-called persistent cookies are used. They remain on your computer/end device for longer. Both types of cookies contain a characteristic alphanumeric character string which, in the case of persistent cookies, can enable your browser to be recognised on a subsequent visit to our website.
2. Scope and purposes of processing
The data is processed by us for the following purposes:
- To identify and defend against attacks on our website;
- to determine whether your internet browser supports cookies;
- to prevent pop-ups from being displayed to you more than once;
- to show you the selected language of our website;
- to store products you have placed in your shopping basket; and
- to show you the version of our website for the country of delivery you have selected.
3. data transfer/recipient
The recipient of your data is the hosting service provider of our website (see above under C.).
4. storage period
The data will be stored for the following duration:
- Log data: until the purpose is achieved, maximum three months;
- Session cookies: until the browser is closed;
- persistent cookies: one year.
5. Legal basis of the processing
The data processing is based on our interest in the functionality and security of our website. After our consideration, this legitimate interest does not conflict with any overriding interests or fundamental rights and freedoms of data subjects (Art. 6 (1) f DSGVO). Upon request, we will provide you with further information about our balancing of interests.
6. Right of objection
have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process this data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the assertion, exercise or defence of legal claims. You can submit your objection to us using the contact details provided in A. above. Alternatively, you can control whether or which types of cookies may be set via the settings of your internet browser. Insofar as you do not accept the use of functional cookies, this may lead to restrictions in the functionality of our website.
II. Website usage analysis with Google Analytics
1. General information on data processing
We use Google Analytics, a web analytics service provided by Google Ireland Limited ("Google").
Google uses cookies. These are text files that are stored on your computer/device and enable an analysis of your use of our website. The following information is processed:
- Browser type
- Operating system
- Last visited website
- Hostname of your computer/device (IP address, truncated)
- Time of the request to our server
2. Scope and purposes of data processing
On our behalf, Google will process the information collected through the cookie to evaluate your use of our website and compile reports on website activities. We refrain from processing data that could identify you. In particular, the set cookie does not contain a user ID. The truncated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
3. Data transmission/recipients
The information generated by the cookie about your use of our website is transferred to Google Ireland Limited and usually also to a server of the affiliated Google LLC in the USA and stored there. The transfer is based on standard data protection clauses of the EU Commission. By deactivating the user ID function and activating IP anonymization (truncating the IP address by the last octet), the data can no longer be associated with your connection or computer/device.
4. Storage duration
The processed data is stored for a period of 14 months and then deleted by Google.
5. Legal basis for processing
The processing is based on your consent (Art. 6(1)(a) GDPR).
6. Right to withdraw consent
Your consent is valid until revoked, which you can do at any time with effect for the future. You can prevent the collection of data generated by the cookie and related to your use of the website by adjusting the slider for analytics after clicking on "Cookie Settings" in the cookie banner or at the top of this page from right (green) to left (gray), or by downloading and installing the browser plug-in available at the following link: [link not provided]. Finally, you have the option to address your revocation to one of our contact addresses provided above in section A, or to prevent the setting of cookies in your browser settings. If you do not accept the use of functional cookies, this may result in limitations to the functionality of our website.
III. Use of tracking technologies for interest-based internet advertising
1. General information about processing
If you have given us your consent when accessing our website, we use tracking technologies such as cookies or pixel tags from third-party providers for interest-based internet advertising.
"Tracking cookies" are text files that are stored on your computer/device. "Tracking pixels" are small graphics in the header of our website. Both technologies allow the recognition of your browser on other websites. In particular, we use the following tracking technologies from the following third-party providers, with the following information processed:
Google AdWords Remarketing by Google Ireland Limited (Google):
- Browser type
- Operating system
- Preferred language
- Visit to our website, including date and time
- Last Google search query, including date and time
- Hostname of your computer/device (IP address, truncated)
- Alphanumeric user identifier (User-ID)
We log the granting of your consent in a logfile. The following information is processed:
- Hostname of your computer/device (IP address)
- Consent text
- Activation of the "Agree" slider
- Date and time of consent (timestamp).
2. Scope and purposes of processing
We use tracking technologies from Google to recognize your browser based on the data logged under 1. when visiting other websites in the case of Google and to present you with advertisements from us there based on your presumed interests. Your presumed interests are derived from a pseudonymous profile. The pseudonymous profile is created from information collected via the respective cookies/pixels about your internet usage behavior. For example, if you have shown interest in specific products on our site, we can use the mentioned third-party cookies to present our products of this kind to you on their affiliated websites as well. This also serves to prevent annoying and irrelevant advertising.
You can find out the categories for which you are shown interest-based advertising in the Google Display Network by clicking on the "i" button or visiting the Google page "Why am I seeing this ad?" in relation to the specific ad displayed. Further information on data processing by Google can be found here hier.
The logging of your consent is done so that we can provide evidence of it.
3. Data transmission/recipients
The recipient of the data is Google Ireland Limited and the affiliated Google LLC in the USA. The transfer is based on standard data protection clauses of the EU Commission.
4. Storage duration
The duration of the respective cookie storage and thus the processing of your data for the above-mentioned purposes can be found in the security settings of your browser. We store the log data about your consent until revoked and then for the duration of the statute of limitations for your claims (three years) plus a security surcharge for court deliveries of one month, for a total of 37 months.
5. Legal basis for processing
The data processing is based on your consent (Art. 6(1)(a) GDPR).
6. Right to withdraw consent
Your consent to the use of tracking cookies for interest-based advertising in the Google Display Network is valid until revoked, which you can declare at any time with future effect, for example, by clicking on the "Cookie Settings" slider in the cookie banner or at the top of this page from right (green) to left (gray), or by moving the slider for "Personalized ads on the web" and/or "Personalized ads on Google Search" to the left in the Google-ad settings. You can also find out how to block ads or individual advertisers separately here. Whether tracking cookies are stored at all can also be controlled via the settings of your browser by rejecting cross-website tracking.
IV. Use of Social Plugins
We use so-called social plugins ("plugins") from the social networks Facebook, Google+, Pinterest, and Twitter on our website.
To ensure the protection of your data, the plugins are not directly embedded but are only included in the page using an HTML link (the so-called "Shariff solution" by c't). This ensures that when you visit one of our pages that contain such plugins, no connection is established with the servers of the provider of the respective social network. When you click on one of the buttons, a new window of your browser opens and calls up the page of the respective social network, where you can (if necessary, after entering your login data) click the Like or Share button, for example.
The purpose and scope of data collection and the further processing of data by the providers, as well as your related rights and options for protecting your privacy, can be found in the data protection notices of the providers.
Data protection notice from Facebook: http://www.facebook.com/policy.php
Data protection notice from Google: https://policies.google.com/privacy?hl=de&gl=de
Data protection notice from Pinterest: https://policy.pinterest.com/de/privacy-policy
Data protection notice from Twitter: https://twitter.com/de/privacy
V. Embedding of YouTube Videos
1. General information about data processing
We have embedded YouTube videos into our website, which are stored on the YouTube.com platform of Google Ireland Limited (YouTube) and can be viewed directly on our website.
2. Scope and purposes of data processing
The videos are embedded in "extended data protection mode." This means that no personal data is transmitted to YouTube unless you start the videos. If you play the videos, the following data is processed:
- Hostname of your computer/device (IP address);
- Date and time of access/download;
- The accessed page with the embedded YouTube video;
- Possibly, the name of the downloaded file;
- Browser type used;
- Operating system of your device;
- The website from which you are visiting us.
If you have a Google user account and are logged in, additional personal data about you may be processed. This depends on the agreement between you and Google.
For more information on the scope and purposes of data processing by YouTube, please refer to this link here.
3. Data Transmission/Recipient
The recipient of the data is YouTube, represented by Google Ireland Limited, and its affiliated Google LLC in the USA. The transmission is based on standard data protection clauses of the EU Commission.
4. Data Retention
The processed data is stored by YouTube/Google until the purpose is achieved and then deleted. For more information on data storage by YouTube, please refer to the privacy policy of Google Ireland Limited.
5. Legal Basis for Processing
he data processing is carried out based on our interest in enhancing the attractiveness of our website by embedding YouTube videos. In our assessment, this legitimate interest does not override the overriding interests or fundamental rights and freedoms of the data subjects (Art. 6 (1)(f) GDPR). Upon request, we can provide you with further information about our balancing of interests.
6. Right to Object
You have the right to object to this processing at any time for reasons arising from your particular situation. We will no longer process this data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims. You can submit your objection using the contact details provided under A. above.
VI. Use of Google reCAPTCHA
1. General Data Processing
In the context of form inquiries on our website, we use the reCAPTCHA service of Google Ireland Ltd. (Google). The following data is processed from you:
- Browser type and settings;
- Operating system;
- Visit to the web page with the form inquiry, including date and time;
- Hostname of your computer/device (IP address, truncated);
- Mouse movements and clicks when solving reCAPTCHA tasks
2. Scope and Purpose of Data Processing
We use the service to ensure, based on the data collected as mentioned above and any image recognition tasks provided, that the subsequent form inputs come from a natural person and not a bot.
For more information about the scope of data processing and data protection when using Google products, please refer to this link.
3. Data Transmission/Recipient
The recipient of the data is Google Ireland Limited and its affiliated Google LLC in the USA. The transmission is based on standard data protection clauses of the EU Commission.
4. Data Retention
The data is stored until the purpose is achieved and then deleted.
5. Legal Basis for Processing
The data processing is carried out based on our interest in the security of our website and the prevention of abusive automated entry of fake data. In our assessment, this legitimate interest does not override the overriding interests or fundamental rights and freedoms of the data subjects (Art. 6 (1)(f) GDPR). Upon request, we can provide you with further information about our balancing of interests.
6. Right to Object
You have the right to object to this processing at any time for reasons arising from your particular situation. We will no longer process this data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims. You can submit your objection using the contact details provided under A. above.
G. Communication
I. Newsletter
1. General Information on Processing
You can voluntarily subscribe to our email newsletter service on our website by entering your personal information, including your email address, into the input field and then clicking the "Subscribe" button described.
The newsletter order and the consent required for it only become effective when you confirm it by clicking on the link we send you via the email address you provided (so-called double opt-in procedure).
The granting of your consent is logged by us. The following information is processed:
- Entered email address;
- Consent text;
- Click on the "Subscribe" button;
- Date and time of consent (timestamp).
2. Scope and Purpose of Data Processing
We process the email address you confirmed to inform you periodically with our email newsletter in accordance with your consent.
The logging of your consent is done so that we can prove it.
3. Data Transmission/Recipient
The recipient of the data is the hosting service provider of our website (see above under C.) and a newsletter sending service provider (Art. 28 GDPR) appointed by us, located in the European Union.
4. Data Retention
We store your email address and the log data about your consent until you unsubscribe from the newsletter. The log data is then retained for the statute of limitations period for your claims (three years) plus an additional month for judicial service, totaling 37 months.
5. Legal Basis for Processing
The processing is based on your consent (Art. 6 (1)(a) GDPR).
6. Right to Withdraw Consent
Your newsletter consent is valid until revoked, which you can do at any time with future effect, for example, by notifying us using the contact information provided above under A. or by clicking the unsubscribe link at the end of each newsletter.
II. Contact
1. General Information on Processing
You can contact us using the contact information provided above under A. or through our contact form. We will process the data you provide to us in your message to us, including your specific request, and, in the case of email inquiries, your email address, your postal address in letters, your phone number for phone calls, and, when using our contact form, the subject of the inquiry (business or private), your name, and your email address.
2. Scope and Purpose of Data Processing
We process your data to handle your request and to get in touch with you for the purpose of responding.
3. Data Transmission/Recipient
The recipient of the data is the hosting service provider of our website (see above under C.).
4. Data Retention
We will store your data until we have answered your inquiry.
5. Legal Basis for Processing
Processing is based on the legal basis of performing pre-contractual measures or fulfilling a contract (Art. 6 (1)(b) GDPR). If it is not a pre-contractual or contractual matter, the legal basis is our legitimate interest in processing your request. We assume that there are no overriding interests or fundamental rights and freedoms on your part (Art. 6 (1)(f) GDPR). Upon request, we can provide you with further information about our balancing of interests.
6. Right to Object
You have the right to object to this processing at any time for reasons arising from your particular situation. We will no longer process this data for these purposes and may not respond to your request. You can submit your objection using the contact details provided above under A.
III. Article Rating
1. General Data Processing
You can share your opinion on individual articles in our online shop by clicking on the "Rate Now!" link. The following data will be processed:
- Number of stars you give to the article;
- Your email address;
- Your comment.
2. Scope and Purpose of Data Processing
We process your data to publish your rating on our website. We process your email address to ensure that the rating is authentic, meaning it comes from a human and not a computer program (bot).
3. Data Transmission/Recipient
The recipient of the data is the hosting service provider of our website (see above under C.).
4. Data Retention
Your rating will be stored in the online shop for an indefinite period. However, your email address will be anonymized after two months.
5. Legal Basis for Processing
Data processing is carried out based on our interest in enhancing the attractiveness of our product presentation by adding customer experiences. We believe that there are no overriding interests or fundamental rights and freedoms of yours against this legitimate interest (Art. 6 (1)(f) GDPR). Upon request, we can provide you with further information about our balancing of interests.
6. Right to Object
You have the right to object to this processing at any time for reasons arising from your particular situation. We will no longer process this data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims. You can submit your objection using the contact details provided above under A.
IV. Notification Service "Article Availability"
1. General Information on Processing
If an article displayed in our online shop is temporarily out of stock, you can leave an email address via the Notify function, to which we will send an automated email notification when the relevant article becomes available again. When using the Notify function, the following data is processed:
- Your email address;
- The article in question.
Providing your data is voluntary. However, if you do not provide this data, we cannot offer the Notify function.
2. Scope and Purpose of Data Processing
We process your personal data to process your request and contact you for this purpose.
3. Data Transmission/Recipient
The recipient of the data is the hosting service provider of our website (see above under C.).
4. Data Retention
We will store the data you provided to us until we have responded to you. If the article in question is not available again within six months, your data will be automatically deleted, and no notification will be sent.
5. Legal Basis for Processing
Processing is carried out because it is necessary to take pre-contractual measures (Art. 6 (1)(b) GDPR). If it is not a pre-contractual matter, the legal basis is our legitimate interest in processing your request. We assume that there are no overriding interests or fundamental rights and freedoms on your part (Art. 6 (1)(f) GDPR). Upon request, we can provide you with further information about our balancing of interests.
6. Right to Object
You have the right to object to this processing at any time for reasons arising from your particular situation. We will no longer process this data for these purposes and may not respond to your request. You can submit your objection using the contact details provided above under A.
H. Your Further Rights as an Affected Person
Regarding your personal data, you have the following additional rights, in addition to those already mentioned in the context of each data processing:
-
Right to information: You can request information from us about the personal data we process about you. Details about the extent of your right to information can be found in Art. 15 GDPR and § 34 BDSG (2018).
-
Right to rectification: You can request that we correct inaccurate and complete incomplete personal data about you. Details about the extent of your right to rectification can be found in Art. 16 GDPR.
-
Right to erasure: Under certain conditions, you can request that we delete your personal data. Details about the extent of your right to erasure can be found in Art. 17 GDPR.
-
Right to restriction: Under certain conditions, you can request that we restrict the processing of your personal data. Details about the extent of your right to restriction can be found in Art. 18 GDPR.
-
Right to data portability: Under certain conditions, you can request that we transfer your personal data that you have provided to us to you or another controller in a commonly used, machine-readable format. Details about the extent of your right to data portability can be found in Art. 20 GDPR.
-
Right to withdraw your consent: If we ask you for your consent for the processing of personal data, you have the right to withdraw this consent at any time with effect for the future. Further details about your right to withdraw consent can be found in Art. 7 (3) GDPR.
-
Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with a supervisory authority. Details about your right to lodge a complaint can be found in Art. 77 GDPR.
- Right to object to direct marketing: You have the right to object to the processing of your personal data for direct marketing purposes at any time, including profiling to the extent that it is related to such direct marketing. We will no longer process this data for these purposes. You can submit your objection, for example, using the contact details provided above under A. Further details about your right to object can be found in Art. 21 (2) GDPR.
J. Data Security
The personal data we request from you on our website is transmitted to us over a secure SSL connection ("Secure Socket Layer") with 256-bit encryption to protect it from unauthorized access.
In addition, we have implemented further technical and organizational security measures to prevent data loss, destruction, and misuse. Access to your potentially created customer account, for example, is only possible by entering your personal password. You can contribute to the protection of your data by choosing a password that is as difficult to decipher as possible (e.g., by combining letters, numbers, and characters) and keeping it strictly confidential.