Privacy policy — MotorLocal

In short: we only collect what you send us, through the forms on this site, by email or on WhatsApp. We use it to prepare the audit you ask for, to consider your application if you apply to work with us, and to talk to you about it, keep it in our Google Workspace account and never sell it. This site shows no ads and uses analytics cookies only if you accept them.

Who is responsible: Sergey Bratchikov, self-employed (autónomo), trading as MotorLocal, Torrevieja, Spain. Contact: [email protected].
What for: preparing the free audit you ask for and contacting you about it, considering your application if you apply to work with us and, if you accept analytics cookies, measuring how the site is used.
Legal basis: steps you ask us to take before a contract, and your consent where you give it.
Who else handles it: Google, which provides our email, our storage and, if you accept cookies, our site analytics; our hosting provider; and, if you message us there, WhatsApp. Nobody buys it.
Your rights: access, correction, deletion, objection and more, in the EU and in the US. Write to us to use them.

Who is responsible for your data

The controller of your personal data is Sergey Bratchikov, a self-employed professional (autónomo) trading as MotorLocal (“MotorLocal”, “we”), tax ID (NIE) Y2710323V, Calle del Palangre, 23, 03182 Torrevieja (Alicante), Spain.

For anything about your data, write to [email protected].

What data we collect

When you ask for a free audit. The forms on this site ask for:

your business name, type of business and city or area;
your name and email address (the short form on the home page asks only for the email address);
optionally, your phone number, your website and the search you want to rank for.

Along with your request we record the date and time, the page you sent it from and the language of the site. Please don’t put sensitive information, such as health data, in the fields.

When you email us. Your email address, your name and whatever you choose to write.

When you message us on WhatsApp. Your phone number, your WhatsApp profile name and whatever you choose to write.

When you apply to work with us. The form on the careers page asks for your name and email address, and optionally where you’re based, a link to your LinkedIn profile or portfolio, your CV and a message. Please don’t include sensitive information, such as health data or your ID number, in your CV.

When you browse the site. Like any website, the servers of our hosting provider log technical data for each request: IP address, browser and device type, the page requested and the time. We don’t use these logs to identify you or to build profiles.

If you accept analytics cookies. Google Analytics records how you use the site: the pages you view and for how long, how you got here (for example, from a search or a link), your device, browser and screen size, your approximate location (country and city, worked out from your IP address, which Google Analytics doesn’t store) and a random ID kept in a cookie. It doesn’t receive your name, your email address or anything you type into the forms.

To keep spam out, the form also checks how quickly it was filled in and whether a hidden field that only bots fill in was used. The check runs when you send the form, and its result is not stored.

Why we use it and on what legal basis

What we do	Legal basis under the GDPR
Prepare and send the audit you asked for, and contact you about it	Steps taken at your request before entering into a contract (Art. 6(1)(b)) and, where you tick the consent box, your consent (Art. 6(1)(a))
Consider your job application and contact you about current or future projects	Steps taken at your request before entering into a contract (Art. 6(1)(b)) and your consent, which you give with the tick box on the form (Art. 6(1)(a))
Reply to your emails and WhatsApp messages	Our legitimate interest in answering people who write to us (Art. 6(1)(f)), or steps before a contract when you ask about our services (Art. 6(1)(b))
Keep the site secure and working, and block spam	Our legitimate interest in protecting the site (Art. 6(1)(f))
Measure how the site is used with Google Analytics	Your consent, given in the cookie banner, which you can withdraw at any time (Art. 6(1)(a))
If you become a client: provide our services and invoice them	Performance of the contract (Art. 6(1)(b)) and our legal obligations, such as tax law (Art. 6(1)(c))

We don’t use the details from the forms for newsletters or advertising, we don’t build profiles, and we don’t make decisions about you by automated means.

We don’t sell your personal data or share it for advertising. Only these providers handle it on our behalf, under data processing agreements:

Google, through Google Workspace (Gmail, Google Sheets and Google Apps Script). Requests from the forms go straight to our Google Workspace account, where they are emailed to us (job applications with the CV attached) and saved in a spreadsheet that only our team can open. If you accept analytics cookies, Google Analytics also receives the usage data described above.
Our hosting provider, which serves this site and keeps the technical logs described above.

If you message us on WhatsApp, the messages also go through WhatsApp, a service of WhatsApp Ireland Limited (Meta), which handles them under its own terms and privacy policy.

We may also disclose data when the law requires it, for example to tax authorities or courts.

International transfers

We are based in Spain. Google, and Meta if you message us on WhatsApp, may process data on servers outside the European Economic Area, including in the United States. These transfers are covered by the EU–US Data Privacy Framework, under which Google LLC and Meta Platforms, Inc. are certified, and by the European Commission’s Standard Contractual Clauses.

If you are in the United States, your data is transferred to the European Union and processed there and by Google, with the safeguards described in this policy.

How long we keep it

Audit requests, emails and WhatsApp messages: as long as we need them to prepare the audit and follow up, and no longer than 12 months after our last contact, unless you become a client.
Job applications: up to 12 months after we receive them, so that we can contact you about projects that come up, unless you ask us to delete them sooner or we start working together.
Clients: for the duration of the contract, and afterwards for as long as the law requires us to keep records (for example, six years for accounting records under Spanish commercial law).
Technical logs: for a short period set by our hosting provider, after which they are deleted automatically.
Analytics data: Google Analytics deletes it after 14 months at most. Its cookies expire after 2 years, and we delete them if you withdraw your consent.

You can ask us to delete your data sooner at any time.

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you and get a copy;
have it corrected if it is wrong or incomplete;
have it deleted;
restrict how we use it;
object to uses based on our legitimate interest;
receive it in a portable format;
withdraw your consent at any time, without affecting what we did before you withdrew it.

To use any of these rights, write to [email protected]. It’s free. We answer within one month and may ask you to confirm your identity.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or to the data protection authority where you live or work. We’d appreciate the chance to sort it out with you first.

Notice for US residents

This section adds to the rest of the policy for visitors and clients in the United States, including under the California Online Privacy Protection Act (CalOPPA) and the consumer privacy laws of California and other states, where they apply to us.

What we collect. In the past 12 months we have collected the data described in “What data we collect”: identifiers (name, email address, phone number, IP address), information about your business (name, type, location, website), internet activity (the technical logs and, if you accept analytics cookies, how you use this site) and, for job applicants, professional information from the CV. We collect it directly from you and from your use of the site, for the purposes described above, and share it only with the providers listed in “Who we share it with”.

No sale, no sharing, no sensitive data. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We don’t collect or use sensitive personal information.

Your rights. Depending on your state, you may have the right to know what personal information we hold about you, to get a copy, to correct it and to delete it, and to opt out of its sale, targeted advertising and profiling, none of which we do. To make a request, email [email protected]; an authorized agent can also make it for you. We verify requests by matching the details you give us with those we hold, answer within the deadlines set by your state’s law, and won’t treat you differently for using your rights. If we turn down your request, you can appeal by replying to our answer.

Do Not Track and Global Privacy Control. This site doesn’t track you across other websites. Google Analytics runs only if you accept it in the cookie banner, and it isn’t used for advertising. If your browser sends a Do Not Track or Global Privacy Control signal, we treat it as a refusal: the banner doesn’t appear and analytics stays off, unless you turn it on yourself in the cookie settings.

Cookies

This site uses cookies only for Google Analytics, and only if you accept them in the banner shown on your first visit, as Article 22(2) of the LSSI-CE requires. Until you accept, nothing is loaded from Google Analytics and no cookies are set. If you accept, Google Analytics sets two cookies:

_ga (expires after 2 years): recognizes your browser on later visits by a random ID.
_ga_4MSKS60FJ3 (expires after 2 years): keeps the state of your current visit.

Google Analytics shows us how people find and use the site: which pages they visit, where they come from and what devices they use. We have turned off Google signals and ad personalization, so the data isn’t used for advertising or linked to your Google account.

We keep your answer in your browser’s local storage, not in a cookie, so the banner doesn’t ask again on every page. It holds nothing but your answer and stays until you clear your browser’s data. If your browser sends a Do Not Track or Global Privacy Control signal, we take it as a no and don’t show the banner. You can change your answer at any time; if you withdraw consent, we delete the analytics cookies.

Fonts and images are served from our own server. Your browser contacts Google when you send one of the site’s forms (an audit request or a job application) and, if you accept analytics cookies, on each page you view. To show plan prices in euros or dollars, the services page reads your browser’s time zone; this happens only in your browser, and nothing is sent or stored.

Children

Our services are for businesses, and the site is not meant for children. We don’t knowingly collect personal data from anyone under 16.

Security

Your data is kept in our Google Workspace account, protected by Google’s security measures, and only the people who handle audit requests and applications can open it. The site and its forms send data over encrypted connections (HTTPS).

Changes to this policy

If we change how we handle personal data, we’ll update this page and the date at the top. If a change is significant, we’ll say so on the site or tell you directly when we can.