MaxxECU USA is committed to your privacy and the protection of your Personal Data. Personal Data is defined herein as any information that can be used to identify a particular individual under applicable data protection laws, including the General Data Protection Regulation (“GDPR”) (EU) (2016/679), Consumer Privacy Act of 2018 etc. (collectively, “Data Protection Laws). This Privacy Statement describes our privacy practices as required by Data Protection Laws. This Privacy Statement applies where MaxxECU USA is acting as a data Controller with respect to the Personal Data of our customers, partners, resellers, suppliers and website users; in other words, where we determine the purposes and means of the processing of Personal Data.

This privacy statement explains how we protect your personal information and data based on your use of our website, mobile apps, blogs, etc., as well as third party websites, mobile apps, and social media sites (“Sites”).

This Privacy Statement outlines how we collect, share, transfer, retain and protect your Personal Data and the rights you can exercise regarding your information. If you provide us with your Personal Data, or we obtain information about you from other sources, we treat your information according to this Privacy Statement.

What Information Do We Collect About You?

The following describes the general categories of Personal Data that we may process, the purposes for which we may process Personal Data, and the legal bases of the processing. In the case of Personal Data we did not obtain directly from you, we describe the source and specific categories of that data collected.

• We may collect and process information related to your transactions with us. These transactions include purchases of goods and services that you enter into with us and/or through our website or websites linked to our Site, via phone or email interactions with our employees, or retail locations (“Transaction Data”). The Transaction Data may include your contact details (such as company, name, or phone number), and the transaction details. The Transaction Data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests in the proper administration of our website and business.
• We may collect and process data related to your account (“Account Data”). The Account Data may include your name, title, postal and email address as well as payment information. The source of the Account Data may be you or your employer when you are acting in a business capacity for your employer. The Account Data may be processed for the purposes of operating our website, providing our services, ensuring the security of our Sites and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the performance of a contract between you and MaxxECU USA and/or taking steps, at your request, to enter into such a contract.
• We may collect and process information contained in any inquiry you submit to us regarding goods and services (“Inquiry Data”). The legal basis for this processing is our legitimate interests, namely the performance of a contract between you and MaxxECU USA and/or taking steps, at your request, to enter into such a contract.
• We may collect and process data about your use of our Sites and services and in our stores (“Usage Data”). The Usage Data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the Usage Data may be cookies, analytics tracking systems or other technologies. This Usage Data may be processed for the purposes of analyzing your use of our Sites and services. The legal basis for this processing is consent. See below for further details on “Cookies, Web Beacons and Other Tracking Technologies.”
• We may collect process data about you to ensure security of your Personal Data and our IT systems. The legal basis for this processing is our legitimate interests, namely the safe and secure: (1) administration of our Sites, (2) use and storage of business information and, (3) communications with users and customers.
• We may collect and process information that you provide to us for the purpose of providing you with additional information on our goods and services, subscribing to our email notifications, and/or newsletters to keep you up-to-date on MaxxECU USA products, events and news (“Notification Data”). The legal basis for this processing is your explicit consent, or your implicit consent if you are a customer.
• We may collect and process information contained in or relating to any communication that you send to us (“Correspondence Data”). The Correspondence Data may include the communication content and metadata associated with the communication. Our Sites will generate the metadata associated with communications made using the specific Site contact forms. The Correspondence Data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our Sites and business and communications with users and customers.
• We may collect and process your Personal Data where necessary for the establishment, exercise, or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure, an investigation, or other legal matter. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
• We may collect and process your Personal Data where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.
• We may collect and process the personal information included in your personal profile on our Sites or in our stores (“Profile Data”). This Profile Data may include your name, address, telephone number, email address, motorcycle riding style, vehicles owned or of interest, gender, and date of birth, interests and hobbies including social network profiles. The Profile Data may be processed for the purposes of enabling and monitoring your use of our Sites and services. The legal basis for this processing is consent. We may collect and process information, including contact details in our stores or at events (name, postal address, email address, phone number) that you provide to us for the purpose of providing you with additional information on our goods and services, subscribing to our email notifications, newsletters, catalogs, mailings to keep you up-to-date on MaxxECU USA products, events and news (“Notification Data”). The legal basis for this processing is your explicit consent or your implicit consent if you are a customer. Where the processing of your Personal Data is based on your consent only, you have the right to withdraw this consent at any time.

How We Share Your Information

We do not, and will not, sell any of your personal information and/or data to any third party providers. This personal information included data like your name, postal address, email address or credit card information. We believe this is crucial in maintaining trust and providing the best possible experience.

We do however share your data with the following categories of companies as an essential part of being able to provide our services to you, as set out in this statement:

• Companies that perform services to process and deliver your purchases, such as payment service providers, warehouses, order packers, and delivery companies.
• Companies in the Comoto group, as well as affiliates, resellers, suppliers, and service providers as reasonably necessary for the purposes, and on the legal bases, set out in this policy
• Companies that perform services relating to IT and associated infrastructure in order to perform daily operations including communication and security
• Professional service providers, such as marketing agencies, advertising partners and website hosts who support the daily operations of our business.
• Companies approved by you, such as social media sites (if you choose to link your accounts to us) and Marketplace sellers where you place an order and use their payment service.
• Business partners for co-marketing purposes
• We reserve the right to share your personal information in the event we sell or transfer all or a portion of our business or assets. Should such a sale or transfer occur, we will require that the transferee use personal information you have provided in a manner consistent with our privacy policy and the applicable legal framework whenever possible.
• We may share your personal data; where such disclosure is necessary for compliance with a legal obligation to which we are subject, to enforce our Terms of Service, this Policy, or other contracts with you, including investigation of potential violations thereof; to respond to claims that any content violates the rights of third parties; to respond to your requests for customer service; and/or to protect the rights, property or personal safety of MaxxECU USA, our agents and affiliates, its users and/or the public. This includes exchanging information with other companies and organizations for fraud protection, spam/malware prevention, or in order to protect your vital interests or the vital interests of another natural person.
• We may share your personal data; (a) where such disclosure is necessary for compliance with a legal obligation to which we are subject, (b) enforce our Terms of Service, this Policy, or other contracts with you, including investigation of potential violations thereof; (c) respond to claims that any content violates the rights of third parties; (d) respond to your requests for customer service; and/or (e) protect the rights, property or personal safety of MaxxECU USA, our agents and affiliates, its users and/or the public. This includes exchanging information with other companies and organizations for fraud protection, spam/malware prevention, or in order to protect your vital interests or the vital interests of another natural person.

We may disclose your personal data to our insurers and professional advisers as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defense of legal claims, whether in court proceedings or other legal proceedings.

Your Rights

You can inquire about your personal information, ask the following questions, or take the following actions by contacting us via email at info@maxxucu.us or via the address or phone number below to:

• See what information we have about you if any,
• Change/correct any information we have about you,
• Have us delete any information we have about you,
• Express any concerns you have about our use of your information.

Under certain conditions, you may have the right to:

• access your personal data;
• rectification of your personal data;
• erasure of your personal data;
• restrict processing of your personal data;
• restrict processing of your personal data;
• portability of your personal data;
• unsubscribe from marketing material at any time;
• withdraw your consent to certain processing activities;
• request information on the types of organization your information has been shared with for co-marketing purposes.

For more information on the full extent of your rights or to exercise your rights, please contact our Data Protection Officer as described below.