Privacy policy

Last updated: 11 October 2026

This policy explains what personal data we collect on MotoStunts.com, why we collect it, where it is stored and what your rights are.

Who is responsible for your data

The controller of your personal data is Delavnica eu, proizvodnja in trgovina, d.o.o., Mestni trg 10, 1000 Ljubljana, Slovenia. Registration No. (Matična številka): 9185364000. Tax No. (Davčna številka): 32122713. Phone: +386 30 679 292.

What data we collect

We collect the data you enter in our forms: the request form at checkout, the custom parts form and the question form on the contact page. When you open the website, the services that run it also process technical data such as your IP address (see “Where your data is stored and who receives it” below).

  • Your name and email address.
  • Your phone number or Telegram username and your preferred way of contact, if you give them.
  • Your country and city (request form at checkout).
  • Your motorcycle and your comment, question or description of the part you need.
  • The parts in your request: name, SKU, colour, bike model, quantity and price at the time of the request.

We do not ask for payment details on the website and we do not accept card numbers or other payment data. You pay after our manager confirms your request, by bank transfer or PayPal. If you pay with PayPal, PayPal processes your payment data under its own privacy policy.

Why we use it

  • To answer your request, confirm price, availability, delivery and lead time, and to prepare and fulfil your order (Article 6(1)(b) GDPR: steps before a contract and performance of a contract).
  • To answer the questions you send us through the contact page (Article 6(1)(f) GDPR: our legitimate interest in answering enquiries).
  • To notify our manager about your request in Telegram, so that we can answer you quickly (Article 6(1)(b) GDPR for requests about an order, and Article 6(1)(f) GDPR: our legitimate interest in handling requests promptly).
  • To keep the records required by accounting and tax law when your request becomes an order (Article 6(1)(c) GDPR).
  • To protect our forms from spam and abuse: when you send a form, a coded (hashed) form of your IP address is kept for a short time, about one hour, to limit how many requests can be sent from one connection (Article 6(1)(f) GDPR: our legitimate interest in keeping the service secure).

We do not use your data for advertising, we do not send newsletters and we do not sell your data.

Where your data is stored and who receives it

  • Supabase (database and product catalogue). Requests are stored in a database operated for us by Supabase in the European Union (Frankfurt, Germany). The product catalogue is loaded from the same service, so when you open the website your browser connects to Supabase servers (through the Cloudflare network) and they process your IP address.
  • Telegram (notifications to our manager). When you send a request, its content — your name, email address, phone number or Telegram username, preferred way of contact, country and city, bike, the parts in the request with prices and your comment — is automatically forwarded to our manager in Telegram (Telegram Messenger), so that we can answer you quickly. Telegram is a service based outside the European Union.
  • Our website hosting provider (website hosting). The website is delivered by a hosting provider based in the European Union or in the United States. When you open the website, the hosting provider processes technical data such as your IP address to deliver the pages and to protect the service.

Requests can be seen by our staff, after signing in to our admin panel, and by our manager in Telegram.

Supabase and Telegram are companies based outside the European Union, and our hosting provider may be too, so your data may be transferred outside the EU. Such transfers are based on the EU–US Data Privacy Framework, where the provider is certified under it, or on the standard contractual clauses approved by the European Commission.

If you choose to talk to us via WhatsApp or Telegram, those services process your data under their own privacy policies.

How long we keep it

We keep a request as long as we need it to handle the request and any order that follows. Requests that do not lead to an order, and the notifications about them in Telegram, are deleted when we no longer need them. Data about completed orders is kept as long as accounting and tax law require.

Cookies and browser storage

This website does not use cookies, analytics or advertising trackers. Your cart and the bike you select are saved only in your browser (localStorage), so they are still there when you come back. This information is not sent to us until you send a request. You can delete it at any time by clearing this website’s data in your browser.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

  • get a copy of the personal data we hold about you;
  • have incorrect data corrected;
  • have your data deleted, or its use restricted;
  • receive your data in a commonly used format (data portability);
  • object to the use of your data based on our legitimate interest;
  • lodge a complaint with a supervisory authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si).

To use your rights, contact us by phone, WhatsApp or Telegram (+386 30 679 292).

Changes to this policy

We may update this policy. The current version is always available on this page.

+386 30 679 292 · WhatsApp · Telegram