Privacy Policy of the Ducati Connect App

The company Ducati Motor Holding S.p.A. (Ducati and/or “we” or “us”) is pleased that you are visiting our mobile applications (“Online Offer”) and that you are interested in our company and our products.

We view the protection of your private sphere during the processing of personal data and the security of all business data to be important considerations which we take into account in our business processes. We process personal data collected during your visit to our online offers on a confidential basis and only in compliance with the statutory provisions. Data protection and information security are part of our company policy.

1. Data controller and contact

Ducati is responsible for the processing of your data; exceptions are explained in this privacy policy.

Our contact details are as follows:

The Controller of personal data processing is Ducati Motor Holding S.p.A, with headquarters in Via Cavalieri Ducati 3 - 40132 Bologna (BO), Italy. The Data Protection Officer is domiciled at the headquarters of the Data Controller and can be contacted at the following email address: privacy@ducati.com.

2. Children

The Ducati Connect App is not intended for children under the age of 16.

3. Processing of personal data

3.1 Categories of data processed

  • Communication data (e.g. IP address).
  • Contact information (e.g. name, telephone number, email address, address) in the scope of the use of the "Contacts" function
  • Calendar entries in the scope of the use of the "Calendar" function
  • Your personal data (e.g. name, telephone number, email address, address), provided that these are provided voluntarily as part of a support request.
  • Position data

3.2 Processing principles

Personal data means any information relating to an identified or identifiable natural person which express the identity of an individual person, for example, their name, addresses, telephone numbers or email addresses.

Some of the data that we process is information which is not readily attributable to a specific individual person. With regard to this information, we do not have any interest in the identification of a natural person, nor do we have the necessary knowledge or the legally permissible means to establish a reference to an individual person. We can use this non-personal data to improve our products, for example.

We only collect, process and use personal data if there is a statutory basis to do so or if you have granted us your consent in this regard; in the course of a registration, for example.

3.3 Purposes of the processing and legal basis

We and the service providers commissioned by us will process your personal data for the following processing purposes:

3.3.1 To provide the functions of Ducati Connect

Legal basis: The fulfillment of the contract.

3.3.2 For the detection/elimination of faults and for security reasons

Legal basis: The fulfillment of our statutory obligations in the area of data protection as well as a justified interest in the elimination of faults and the security of Ducati Connect.

Further information: To use Ducati Connect, it is not necessary for you to enter your name and/or other contact data, for example. Of course, you can provide us with this data voluntarily, for example, by email as part of a support request if you require help and support with the app. For the purpose of troubleshooting on our part, technical data such as crash reports may be passed onto third parties (e.g. external development partners) in anonymous form. No conclusions can be drawn about your person from this technical information.

3.3.3 Safeguarding and defense of our rights

Legal basis: Legitimate interest on our part in the assertion and defense of our rights.

3.3.4 Your inquiry to Ducati

Legal basis: Performance of the contract or completion of pre-contractual measures; justifiable interest on our part in the consideration and clarification of inquiries made by our customers.

3.3.5 Consent

If we wish to process or use personal data in the future for purposes other than the fulfillment of the contract and this is not permitted by law, we will make this dependent on your prior consent. You can actively give your consent in good time, i. e. before the respective collection, processing and use of your personal data. This can take place during the installation or the start of the app or at a later point in time during the activation of additional functions or services. We consider the following confirmatory actions, for example, to be consent:

  • The entry and confirmation of personal data
  • Clicking on a check box during the installation or use of our app
  • Selection of the technical settings for the services offered by us which lead to the processing of personal data
  • Any other statement or conduct on your part that expresses and indicates your consent to the proposed processing of your personal data

4. Collection and processing of personal data by Ducati Connect

Depending on your choice of smartphone settings, the following personal data are processed by Ducati Connect to enable the specialist functions of Ducati Connect (apps integrated in the Ducati Connect, such as the calendar, contacts, music, telephone, vehicle search):

4.1 Integrated "Contacts" app

If you activate access to your stored telephone contacts, Ducati Connect will transfer them to the integrated "Contacts" app and save them locally only. If you want to navigate to an address which is stored in your contacts, you can start the navigation process directly from the contacts. An address is then transferred to the navigation app installed on your smartphone (if available). Ducati is not responsible for third-party apps that access and use this position data. Please refer to the privacy policy of the provider of your navigation app. You can deactivate access to your telephone contacts at any time.

4.2 Integrated “Calendar" app

If you activate access to your stored calendar entries, Ducati Connect will transfer these to the integrated “Calendar" app and save them locally only. If you want to navigate to an address which is stored in a calendar entry, you can start the navigation process directly from the Ducati Connect calendar. An address is then transferred to the navigation app which is installed on your smartphone (if available). Ducati is not responsible for third-party apps that access and use this position data. Please refer to the privacy policy of the provider of your navigation app. You can deactivate the access to your calendar entries again at any time.

4.3 Integrated “Music” app

If you activate access to your stored calendar entries, Ducati Connect will transfer these to the integrated “Music" app and save them locally only. If you use music streaming services (e.g. Apple Music), Ducati Connect gains access to the media library of the respective streaming service. No transfer takes place from Ducati Connect to Ducati or third parties. You can deactivate the access to your music library again at any time.

4.4 The telephone module of your smartphone

If you activate access to the telephone module of your smartphone, Ducati Connect gains access to the call history stored on your phone and saves it locally only. No transfer takes place from Ducati Connect to Ducati or third parties. You can deactivate the access to the telephone module again at any time.

4.5 Location data of your smartphone and the vehicle to which the smartphone is connected

If we wish to process or use personal data in the future for purposes other than the fulfillment of the contract and this is not permitted by law, we will make this dependent on your prior consent. You can actively give your consent in good time, i. e. before the respective collection, processing and use of your personal data. This can take place during the installation or the start of the app or at a later point in time during the activation of additional functions or services. We consider the following confirmatory actions, for example, to be consent:

4.5.1 Vehicle search

As a location based service, the Ducati Connect App includes the vehicle search option. To be able to offer you these functions, provided that you have activated this function for the Ducati Connect App, we will log the GPS position transmitted by your smartphone after the parking process has been completed. Your parking position will then be stored locally in the Ducati Connect App, but it will not be transferred to us or shared with other third parties. In this context, we expressly point out that we do not create any detailed motion profiles of individual users. You can deactivate and reactivate the GPS function in the operating system settings of your telephone, temporarily deactivate it in pause mode, or withdraw permission from the Ducati Connect App to use the GPS function of your telephone.

4.5.2 Location for third-party apps

If you activate access to the location in Ducati Connect, Ducati Connect provides the possibility for Ducati Connect compatible third-party apps to use the location coordinates of the vehicle with which your smartphone is connected to enable the full functionality of such third-party apps. Ducati is not responsible for third-party apps that access and use this location data. In this respect, please refer to the privacy policy of the provider of the respective third-party app. If you do not want Ducati Connect to pass on the vehicle location to individual apps, you must deactivate the location access of the respective app in the settings of your smartphone.

4.6 IP address/device ID for the technical evaluation of Ducati Connect

Upon the installation of the Ducati Connect App, an anonymous user ID is created. On smartphones with an iOS operating system, a pure random number is created for this purpose; on smartphones with an Android operating system, the IMEI number of your smartphone is also used for this purpose. This user ID is used exclusively when using Ducati Connect and only if your smartphone is connected to the Internet while Ducati Connect is running in order to activate the latest Ducati Connect-compatible apps, to provide you with Ducati Connect news and, after active approval, to analyze the user behavior (in particular the stability and frequency of use of the individual apps). The transmission of your IP address is technically indispensable for establishing contact with our servers. No conclusions can be drawn about your person from this user ID.

5. Collection and processing of technical data

In the following you will find an overview of the technical data to be collected and processed by Ducati Connect. We also collect statistical information about the use of the Ducati Connect App to make it more user friendly and to measure its range. For this purpose, we use the analysis tools described in this section.

5.1 Installation data

The data for the installation of the Ducati Connect App are only saved locally on your smartphone. No conclusions can be drawn about your person from this information.

5.2 Technical vehicle data

Ducati Connect supports the possibility for third-party apps to be able to access specific types of technical vehicle and environmental data (e.g. vehicle movement information, information about the technical equipment of the vehicle and its condition, information about the physical environment of the vehicle and the environmental conditions).

This technical information and data is transmitted without an identification number, i. e. it is completely anonymous and cannot be traced back to the proprietor or owner of the smartphone or the individual user of Ducati Connect.

Ducati is not responsible for third-party apps that access and use the above technical data.

The following technical data are processed by Ducati Connect and can be transferred to our developer's data center or to Amazon Web Services Germany (see Section 6.2):

  • Technical data and related information about your use of Ducati Connect (including the selected region and smartphone language) and third-party materials,
  • Information about the duration of use of Ducati Connect, individual Ducati Connect functions and/or third-party materials
  • Technical data of your smartphone, including information about your smartphone's operating system,
  • Vehicle type and make of the vehicle to which your smartphone is connected.

The use of this technical information and data allows us to statistically analyze the use of Ducati Connect and/or third party materials and to provide product support, technical administration and other services (including customer relationship management) in connection with Ducati Connect.

6. Disclosure of data

6.1 Disclosure to other data controllers

In general, we shall only transfer your personal data to other controllers if this is required for the performance of the contract or if the third party has an overriding legitimate interest in the disclosure or if you have provided your consent thereto. Third parties can also be other companies in the Ducati Group. To the extent that data is transferred to third parties on the basis of a legitimate interest, this is explained in this privacy policy. Furthermore, data can be transferred to other data controllers to the extent that we are obliged to do so due to statutory provisions or due to enforceable official and/or judicial orders.

6.2 Disclosure of data to service providers

We commission external service providers with the provision of data hosting and hotline services. We have chosen these service providers carefully and monitor them on a regular basis, in particular their careful treatment and protection of the data stored with them. We oblige all service providers to maintain confidentiality and to comply with the statutory regulations. Service providers can also be other companies in the Ducati Group. However, we can also commission service providers outside the Ducati Group who we can assume will maintain a high standard of data protection and who are able to demonstrate this to us. In this respect, in Europe, we currently use the cloud services of Amazon Web Services.

6.3 Disclosure to recipients outside the EEA

We may also disclose personal data to recipients based outside the European Economic Area, in so-called third countries. In this case, before the disclosure, we shall ensure that the recipient either has an appropriate data protection level in place (on the basis of an adequacy decision by the EU Commission for the country in question or the agreement of so-called EU Standard Contractual Clauses of the European Union with the recipient, for example), or that you have granted your consent to the disclosure.

You can obtain from us an overview of the recipients in third countries and a copy of the specifically agreed rules to ensure an adequate level of data protection. In this respect, please use the details provided in the “Data controller and contact” (see Section 1 above).

7. Duration of storage; retention periods

As a matter of principle, we only store your data for as long as it is necessary to provide the functions of Ducati Connect within the scope of your use (including the data that you provide to us voluntarily within the scope of a possible support request). In all other cases, we shall delete your personal data with the exception of data which we have to keep for the fulfillment of legal obligations or if we are entitled to the continued storage for the enforcement of our legal claims.

8. Data processing by the app stores

The transfer of data such as user name, email address and individual device identification number to an app store (such as Google Play by Google, App Store of Apple, Galaxy App Store of Samsung) in the course of downloading the respective application shall not constitute the collection of data on our part and is outside our scope of responsibility. As the data controller, we do not have any influence over this collection of data or the further processing by the app store.

9. External links

The Ducati Connect App may contain links to the Internet pages or online offers of third parties. After clicking on the link, we do not have any influence over the collection, processing or use of any personal data transferred to the third party by clicking on the link (such as the IP address or the URL of the page which contains the link) as we naturally have no control over the behavior of third parties. We do not assume any responsibility for the processing of such personal data by third parties.

10. Security

Our employees and the service providers acting on our behalf are obliged to maintain confidentiality and comply with the provisions of the applicable data protection laws.

We shall take all of the required technical and organizational measures in order to ensure an appropriate level of protection and to protect your data that we manage against the risks of accidental or unlawful destruction, manipulation, loss, alteration or unauthorized disclosure and/or unauthorized access. Our security measures are subject to continuous improvement according to technological developments.

11. Your rights

Please use the details set out in the “Data controller and contact” section to assert your rights (see Section 1). When doing so, please make sure that we are able to clearly identify you. You can contact Ducati as the Data Controller or Data Protection Manager at the above addresses to get an updated list of our data processors (i.e. our service providers), of the parties to whom the data are disclosed and to exercise the following rights as per art. 15 et seq. of the Regulation; to get access to your data to verify their existence and other information related to them, to obtain their rectification or cancellation, to request data portability, to obtain limitation of processing and to lodge a claim to the Supervisory Authority (the Authority for the Protection of Personal Data). In addition, you may, at any time, object to the processing of your personal data processed for direct marketing purposes and, if required by a particular situation, you may object to the processing of your personal data on the basis of Ducati's legitimate interest unless Ducati has prevailing legitimate reasons for proceeding with processing (e.g. the exercise or defence of a right in court).

12. Changes to the privacy policy

We reserve the right to amend our security and data protection measures to the extent that this is necessary due to technological advancements. In these cases, we will also adjust our data protection information accordingly. Therefore, please note the respective current version of our privacy policy.

Last updated: October 2020