Privacy

Last updated: 20 August 2026.

Who is responsible for your data

GHM Motorcycle Parts S.L., NIF B27576305, P.I. Santa Bárbara 5, Javalí Nuevo, 30832 Murcia, Spain, is the controller of the personal data collected through aprilia-parts.nl. You can reach us at info@aprilia-parts.nl about anything on this page.

What we collect, why, and on what legal basis

To handle an order, we collect your name, email address, delivery and billing address, and telephone number where you give one. The legal basis is performance of the contract you enter into with us. Without these we cannot deliver anything.

To issue and keep invoices, we process the same data plus the amount and content of your order. The legal basis is our legal obligation under Spanish commercial and tax law.

If you open an account, we store your email address and a hashed password. The legal basis is performance of the contract. A password is never stored in a readable form.

If you apply for a trade account, we also process your company name, address and VAT number, and we validate that VAT number against the European Commission's VIES service. The legal basis is performance of the contract and our legal obligation to apply the correct VAT treatment.

When you contact us by email or WhatsApp, we process what you send us in order to answer. The legal basis is our legitimate interest in providing customer service.

Our servers keep technical logs containing IP addresses and request data. The legal basis is our legitimate interest in keeping the site secure and working.

Who else sees it

• Mollie B.V. (Netherlands) processes payments. Your card or bank details are entered on Mollie's systems and are never seen or stored by us.
• Carriers receive the name, address and telephone number needed to deliver your parcel.
• Hetzner Online GmbH (Germany) hosts the website and its databases.
• Our email provider transmits order confirmations and correspondence.
• The European Commission's VIES service receives a trade account's VAT number for validation only.
• Meta Platforms Ireland processes WhatsApp messages if you choose to contact us that way. If you would rather not use it, email us instead.

We do not sell your data, and we do not share it for advertising.

Transfers outside the EEA

Hosting and payment processing take place inside the European Union. WhatsApp is the exception: Meta may transfer message data to the United States under the European Commission's adequacy decision for the EU-US Data Privacy Framework.

How long we keep it

• Invoices and accounting records: six years, as required by Spanish commercial law.
• Order and delivery data: as long as needed to handle the order, any warranty claim and any dispute.
• Account data: until you ask us to delete the account.
• Support correspondence: up to two years.
• Server logs: up to twelve months.

Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we process it, and to receive it in a portable form. Where processing rests on consent, you may withdraw that consent at any time without affecting what was done before.

Write to info@aprilia-parts.nl. We may ask you to identify yourself so that we do not disclose one customer's data to another. We answer within one month.

If you are not satisfied with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the supervisory authority of the country you live in.

Automated decisions

We do not make decisions about you by automated means, and we do not profile you.

Security

The site is served over HTTPS, passwords are stored hashed, and payment details never reach our systems. No system is perfectly secure, but we take appropriate technical and organisational measures.