Privacy.

Controller

What data we collect

When you register your interest we collect what you enter in the form: name and email address, and optionally postal code, city, country, age range, driving licence categories, interest in an A1 licence, preferred way to buy, preferred dealer and the vehicle versions you are interested in. We also store the language and the time of registration. When you subscribe to the newsletter, we also store your IP address and your browser's identifier as proof of your consent.

What we use the data for

We store the data and process it for sales and analysis purposes: to send you news about Herri until the start of production, to contact you about purchase options, and to evaluate interest, regions and requested versions.

Legal basis

Processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future.

Processing by service providers and AI models

For storage, analysis and delivery we use service providers based in the EU. Your details are also processed systematically by AI models whose providers are based in the US and the EU. The data is sent to these models, cached there only for the duration of processing and deleted afterwards. Beyond that, the data remains in our system and is not passed on to these providers.

Transfers to providers in the US are based on the EU Commission's standard contractual clauses or a certification under the EU-US Data Privacy Framework.

Sharing with dealers and sales partners

We pass your details on to authorised Herri dealers and sales partners so that they can contact you about the Herri Moto 9.5. If you name a preferred dealer, that dealer receives your name, contact details and interest in the Herri Moto 9.5. We do not pass on your data for third-party advertising.

Retention

We store your details for as long as your consent exists, but at most until twelve months after the start of series production of the Herri Moto 9.5. After that we delete them, unless you have consented again or a contract with you exists. If you withdraw your consent or ask for deletion, we delete your details without undue delay.

If you unsubscribe from the newsletter, we delete your newsletter data within 30 days.

We keep records of your consent and its withdrawal until three years after the end of the year of deletion, in order to be able to prove that the processing was lawful (Art. 17(3)(e), Art. 6(1)(f) GDPR).

Contact form

If you use the contact form in the legal notice, we process your name, email address and message solely to answer your enquiry. The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) or, where the enquiry concerns a contract, Art. 6(1)(b) GDPR.

Your message is transmitted via Amazon Web Services (AWS Lambda and Amazon SES, region Frankfurt, Germany) and delivered to our mailbox. It is not stored in the form service. To prevent abuse, a non-reversible hash of your IP address is kept for two days to limit the number of messages per day.

We delete enquiries once they have been dealt with, unless statutory retention duties apply.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent. You can unsubscribe from our emails at any time with the link in each email. On the page below you can request a secure link by email to view, change, download or delete your data yourself. For anything else, contact datenschutz@herri-moto.com or the postal address above. You may also lodge a complaint with a data protection authority, for example the Bavarian State Office for Data Protection Supervision.

Manage your data

Visiting the website

This website uses no cookies and no tracking. If you choose a language, your browser stores this choice locally on your device so that the website appears in that language on your next visit (Section 25(2) no. 2 TDDDG). The choice is not transmitted to us.

The website is hosted on our behalf by Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg); the content is stored in the eu-central-1 (Frankfurt) region and delivered through the Amazon CloudFront network. In doing so, technical access data is processed in server logs: IP address, time, requested page, browser identifier and referring page.

We process this data to deliver the website securely, to detect errors and abuse, and to evaluate access in aggregated form. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). The logs are deleted after 30 days.

Where access from the US is possible in this context, it relies on Amazon's certification under the EU-US Data Privacy Framework and on the EU Commission's standard contractual clauses.