PRIVACY POLICY

Last updated: July 17, 2026

This privacy policy describes the processing of personal data carried out through the website https://arctic-leopard.it (hereinafter, the “Site”), which is dedicated to the presentation and online sale of electric motorcycles, spare parts, and related services under the Arctic Leopard Italia brand.

1. DATA CONTROLLER AND CONTACT INFORMATION

The controller of the treatment is

DC Model, owned by Domenico Calabrese, operating under the trade name “Arctic Leopard Italia” Headquarters: Corso Giacomo Matteotti 51/A, 89125 Reggio Calabria (RC), Italy VAT Number 02686000809 Email: info@arctic-leopard.it Phone / WhatsApp: +39 346 6238950 02686000809 E-mail: info@arctic-leopard.it Telephone / WhatsApp: +39 346 6238950

For any inquiries regarding the protection of personal data, please contact the Data Controller at the email address listed above.

2. TYPES OF DATA PROCESSED

2.1 Browsing and Security Data

While browsing, the computer systems that enable the Website to function may collect technical data such as IP address, date and time of the request, pages visited, referring page address, browser type and version, operating system, device identifiers, diagnostic information, and data contained in server logs.

This data is processed to provide the Site, guarantee security and stability, prevent abuse and fraud, diagnose technical problems and ascertain any liability in the event of attacks or crimes.

2.2 Data Provided Through the Contact Form

When a user submits a request through the “Contact” form, the following information may be collected:

Name and Surname
Email address
Phone number
Message content
IP Address and device info
Optional data

Please refrain from providing specific categories of personal data, such as health data, biometric data, information regarding racial or ethnic origin, political opinions, religious beliefs, or other data not necessary for the request.

2.3 Data relating to purchases and orders

When an order is placed, even as a guest, the following may be processed:

Name and Surname
• billing and shipping address;
• email and telephone number;
• any company name, VAT number, tax code or recipient code, if requested or provided;
• products purchased, quantity, price, discounts and order information;
• payment method and status;
• delivery and shipping information;
• communications regarding the order, assistance, returns, guarantee or disputes;
• IP address, user agent and technical information connected to the formation of the order;
• information on the origin of the visit or conversion, if the relevant attribution tool is active and allowed.

At the time of drafting this information, payment by bank transfer is active on the Site. The Site does not collect the user's banking credentials; the data relating to the originator and the operation may, however, be made known to the Data Controller through normal bank statements and flows.

If payments via card, PayPal, WooPayments or other providers are activated in the future, these entities will process the data necessary for payment according to their own information. This Privacy Policy will need to be updated before the new method is activated.

2.4 Customer Account

If a customer account is made available, the Site may process protected credentials, order history, saved addresses, preferences and profile information. Passwords are not stored in clear text. At the time of writing, guest checkout is permitted and self-registration of new customer accounts is not enabled.

2.5 Assistance, returns and warranty

In case of assistance, return, refund, warranty or complaint, contact details, order data, photographs or videos of the product, chassis or serial numbers, technical information, purchase documents and any other information necessary to manage the request may be processed.

2.6 Cookies and similar technologies

The Site uses cookies, local storage and similar technologies. For further details see section 10.

3. PURPOSE, LEGAL BASIS AND NATURE OF THE PROVISION

Personal data is processed for the following purposes:

a) Navigation, operation of the Site, cart and security Legal basis: execution of measures requested by the user and legitimate interest of the Owner in providing a safe and functioning service, pursuant to art. 6, par. 1, letters b) and f), of Regulation (EU) 2016/679 (“GDPR”).

b) Response to requests for information and quotes Legal basis: execution of pre-contractual measures requested by the interested party, pursuant to art. 6, par. 1, letter b), GDPR; for non-contractual requests, legitimate interest in responding to communications received, pursuant to art. 6, par. 1, letter f), GDPR.

c) Management of orders, payments, shipments, returns, assistance and guarantees Legal basis: execution of the contract or pre-contractual measures, pursuant to art. 6, par. 1, letter b), GDPR.

d) Fiscal, accounting, administrative and regulatory obligations Legal basis: fulfillment of legal obligations, pursuant to art. 6, par. 1, letter c), GDPR.

e) Prevention of fraud, abuse and protection of rights Legal basis: legitimate interest of the Data Controller in security, prevention of fraud, debt collection and defense of his rights, pursuant to art. 6, par. 1, letter f), GDPR.

f) Sending promotional communications or newsletters, if introduced. Legal basis: consent of the interested party, pursuant to art. 6, par. 1, letter a), GDPR and the legislation applicable to electronic communications. Failure to consent does not prevent you from purchasing or requesting assistance. Consent can be revoked at any time.

g) Use of cookies or tools that are not strictly necessary, including any analytical tools not comparable to technical or profiling ones. Legal basis: prior consent of the user, pursuant to art. 6, par. 1, letter a), GDPR and art. 122 of the Legislative Decree. 196/2003.

The provision of data marked as mandatory is necessary to manage the request or conclude and execute the contract. In the absence of such data it may not be possible to respond, complete the order, make deliveries or fulfill legal obligations. The provision of data for optional purposes, such as marketing, is free.

4. PROCESSING METHODS AND SAFETY

The processing takes place with IT and, when necessary, paper tools, according to principles of lawfulness, correctness, transparency, minimization, accuracy and limitation of conservation.

The Data Controller adopts technical and organizational measures appropriate to the risk, such as access control, authentication, security updates, backup copies, encryption of communications via HTTPS where available and limitation of access to authorized parties only. However, no system is able to guarantee absolute safety.

5. RECIPIENTS OF THE DATA

The data may be processed by personnel and collaborators authorized by the Data Controller and, to the extent necessary, communicated to the following categories of subjects:

• hosting and infrastructure provider: IONOS with servers in the European Union
• maintenance, security, backup, email and IT support providers;
• banks and payment institutions involved in the operation;
• couriers, transporters, logistics operators and subjects in charge of delivery;
• accounting, tax, legal and insurance consultants;
• manufacturers, importers or assistance centers, when necessary for warranty or technical support;
• public authorities, law enforcement agencies or other subjects to whom communication is required by law or order of the authority;
• external service providers referred to in section 9.

When required by law, suppliers who process data on behalf of the Data Controller are designated data controllers pursuant to art. 28 GDPR. The subjects who independently determine the purposes and means of the processing act as independent data controllers.

Personal data is not sold.

6. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA

Some technology providers may process data in countries outside the European Economic Area, including the United States. In such cases the transfer takes place in compliance with Chapter V of the GDPR, on the basis of an applicable adequacy decision, the recipient's adherence to a recognized framework, standard contractual clauses approved by the European Commission or other guarantee provided by law.

The user can request further information on the guarantees applied by contacting the Owner.

7. STORAGE TIMES

The data are stored for a period no longer than is necessary for the purposes for which they were collected, except for legal obligations or the need for judicial protection. In particular:

• contact request data: up to 24 months from the closure of the request, unless a contractual relationship is established or there is a need for further conservation;
• order data, invoices and tax or accounting documentation: normally 10 years, or longer when necessary for investigations, disputes or regulatory obligations;
• data relating to returns, assistance and guarantee: for the duration necessary to manage the request and subsequently for the applicable limitation period;
• data of any accounts: until the account is canceled or for the period necessary to manage relationships and obligations still pending;
• technical and security logs: normally up to 90 days, unless necessary for investigation of accidents, fraud or offences;
• cart and session data: for the duration of the session or for the technical period configured in the system;
• data processed on the basis of consent: until the revocation or the purpose ceases, the evidence of consent is retained for the time necessary to demonstrate compliance and protect the rights of the Data Controller.

Upon expiration, the data is irreversibly deleted or anonymized, unless further conservation is required by law.

8. RIGHTS OF THE INTERESTED PARTY

In the cases provided for by the GDPR, the interested party can exercise the following rights:

• obtain confirmation as to whether or not processing is underway and access your data;
• request the rectification of inaccurate data or the integration of incomplete data;
• request the deletion of data;
• request the limitation of processing;
• receive the data provided in a structured, commonly used and machine-readable format and, if technically feasible, transmit them to another owner;
• object to processing based on legitimate interest, for reasons related to your particular situation;
• oppose direct marketing at any time;
• revoke consent at any time, without prejudice to the lawfulness of the processing carried out before the revocation;
• not be subjected to decisions based solely on automated processing that produce legal or similarly significant effects, except in cases permitted by law.

To exercise your rights you can write to info@arctic-leopard.it. The Data Controller may request reasonable information to verify the identity of the applicant and responds within the terms established by the art. 12 GDPR.

The interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data, according to the methods indicated above https://www.garanteprivacy.it/diritti/come-agire-per-tutelare-i-tuoi-dati-personali/reclamo, or to contact the competent judicial authority.

9. THIRD PARTY SERVICES AND CONTENT

9.1 Google Fonts

The Site loads typefaces via Google Fonts. When the resource is requested from Google's servers, the provider may receive technical data such as IP address, browser, device, date and time of the request. The processing is governed by the conditions and privacy information of the supplier. To reduce the communication of data to third parties, the Owner may replace remote uploading with locally hosted fonts.

9.2 Awesome Fonts

The Site uses a Font Awesome kit loaded from the provider's servers to display icons. The request may involve the transmission of IP address, user agent and other technical data to the service provider. The privacy policy of the relevant supplier applies. These resources can also be hosted locally to avoid automatic requests to third parties.

9.3 Google Maps

The contact page contains a link to Google Maps. By opening the link, the user leaves the Site and Google can process data according to its own information. Unless otherwise indicated in the interface, the link does not automatically embed the map on the page.

9.4 Store Software

The Site uses WordPress and WooCommerce for content, cart and order management, as well as technical components for translation, forms, security, SEO and graphic features. The use of the software does not necessarily imply the communication of personal data to the relevant producers; any cloud services or external connections will be evaluated and declared when activated.

10. COOKIE POLICY

10.1 What are cookies

Cookies are small text files that a site can store on the user's device. Similar technologies, such as local storage, session identifiers, and pixels, can perform similar functions.

10.2 Technical and functional cookies

The Site uses or may use tools strictly necessary to:

• maintain the browsing session;
• remember the items placed in the cart;
• update quantity and contents of the cart;
• manage checkout, security and abuse prevention;
• remember the selected language;
• store any preferences requested by the user;
• manage access and authentication of authorized users.

The technical identifiers typically used by WordPress and WooCommerce may include, depending on the actions performed, "woocommerce_cart_hash", "woocommerce_items_in_cart", "wp_woocommerce_session_*", "wc_cart_created", "wc_fragments_*", "wordpress_logged_in_*", "wordpress_sec_*" and an identifier relating to the selected language.

These tools are necessary to provide the requested service and do not require consent, without prejudice to the obligation to provide information.

10.3 Attribution and measurement of order origin

WooCommerce may use first-party identifiers, including those with the “sbjs_” prefix, to store information about the origin of the visit, such as referrer, campaign or UTM parameters, and associate it with a possible order. When these tools are not strictly necessary or cannot be assimilated to technical cookies according to applicable legislation, they must be activated only after the user's consent.

10.4 Analytical, advertising and profiling cookies

As of the update date of this information, no advertising or payment services with active profiling functions have been configured on the Site. If analytical cookies that are not comparable to technical, advertising, remarketing, social or profiling cookies are introduced, they will be blocked until consent is given and this information, the banner and the preferences panel will be updated.

10.5 Consent management

When the Site uses non-technical tools, the user must be able to:

• continue without accepting them, maintaining the default settings;
• accept or reject with the same ease;
• choose by category or individual suppliers;
• subsequently modify or revoke your preferences through a command that is always accessible.

The revocation does not affect the lawfulness of the processing carried out before the revocation.

10.6 Browser Settings

The user can delete or block cookies via their browser settings. Blocking strictly necessary cookies may prevent the cart, checkout, login and other functions of the Site from functioning properly.

11. MINORS

The Site and the sales service are not intended for the conscious collection of data from minors who lack the capacity necessary to complete a purchase. Any requests or purchases by minors must take place with the involvement of the parent or person with parental responsibility, according to applicable legislation.

12. AUTOMATED DECISION-MAKING PROCESSES

The Data Controller does not currently adopt decisions based solely on automated processing that produces legal effects or similarly significantly affects the interested party. Any automatic anti-fraud or security controls are used as support and, when necessary, subjected to human verification.

13. CHANGES TO THE INFORMATION

The Data Controller may update this Privacy Policy in the event of regulatory, organizational or technical changes, activation of new suppliers or changes in processing. The updated version will be published on the Site indicating the date of the last update. In case of substantial changes, further communication may be provided to interested parties.

14. ESSENTIAL REGULATORY REFERENCES

• Regulation (EU) 2016/679 (GDPR): https://eur-lex.europa.eu/eli/reg/2016/679/oj?locale=it
• Legislative Decree. 196/2003, as amended by Legislative Decree. 101/2018 (Personal data protection code)
• Guidelines of the Guarantor for the protection of personal data on cookies and other tracking tools of 10 June 2021: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9677876