Privacy policy

Last updated: 16 June 2025

This policy aims to inform users of the website www.bering-moto.com (hereinafter the “Website”) about how the Publisher processes their personal data as data controller.

Data concerning users and, where applicable, customers collected while using the Website and when placing orders are processed by the Publisher under the terms set out below.

The Publisher’s full contact details appear in the legal notice.

The Publisher has appointed a Data Protection Officer (DPO), who can be contacted:

  • by email: dpo@trophy-group.com
  • by post: TROPHY – DPO, 1, Avenue Eiffel, 78420 Carrières-sur-Seine, France

Description of the processing carried out

In operating the Website and its business, the Publisher may collect and process personal data as data controller, under the conditions detailed below.

Creating an account

  • Data collected: first name, last name, email address, password (not stored in plain text), login history, preferences, account creation date; data collected when placing an order and order history.
  • Purpose: managing registration and the customer account.
  • Legal basis: the Publisher’s legitimate interests in enabling account creation and allowing users to retrieve their information.
  • Retention period:
    • Active database: retained for as long as the account is active and until the account is deleted by the user or after 2 years of inactivity. The Publisher will notify users of any account inactive for more than 2 years that the account will be deleted unless the user responds within 90 days. If there is no response, the Publisher will delete the account and archive the data.
    • Archive database: 5 years from the date the account is deleted, based on the Publisher’s legitimate interests (establishment, exercise, or defense of legal claims).
    • Connection logs: kept only while the account is active.
  • Mandatory nature: certain data are necessary for the purposes described above. Otherwise, the user will not be able to create an account.

Ordering products

  • Data collected: account data and, in addition, first name, last name, billing and (if different) shipping address(es), payment method, order details, delivery method, exchanges and correspondence about the order.
  • Purposes: performance of obligations linked to the order (delivery, invoicing, warranties, after-sales service); handling returns and recalls; preparing sales statistics (data anonymized for analysis).
  • Legal basis: performance of the contract (terms and conditions of sale) and legal obligations related to invoicing, accounting, and warranties; legitimate interests for statistics.
  • Retention period:
    • Active/archive databases: as per account retention above.
    • Invoices: 10 years (accounting obligations).
    • Contracts over €120: 10 years (legal obligation).
  • Mandatory nature: certain data are necessary to process the order; otherwise, it cannot be placed.

Contact form

  • Data collected: request category, subject, last name, first name, email, phone number, country, city, and—optionally depending on the subject—product serial number, defect details, attachment, comment.
  • Purposes: responding to messages sent via the form and creating a contact file.
  • Legal basis: the Publisher’s legitimate interests in the context of its commercial prospecting activity.
  • Retention period: 3 years from the last contact or until objection.
  • Mandatory nature: certain data are necessary to process the request.

Sending newsletters

  • Data collected: email address, newsletters sent, opens/clicks and, if available (account creation or order), first name, last name, purchase history.
  • Purpose: sending news and promotional offers about the Publisher.
  • Legal basis: legitimate interests for customers; consent for non-customers.
  • Retention period: 3 years from the last contact or until objection or withdrawal of consent.

Customer reviews

  • Data collected: first name or pseudonym, email, rating (stars), free-text comment, submission date, reference of the reviewed product.
  • Purposes: public display of reviews; moderation and verification; improving products and services; internal product statistics.
  • Legal basis: legitimate interest (transparency and useful information for customers).
  • Retention period: 3 years after publication for verification/moderation. Reviews may remain online as long as they are relevant to listed products and published anonymously via a pseudonym or first name.
  • Mandatory nature: certain data are necessary to publish a review.

User-generated content (UGC)

  • Data collected: social account identifier (name/handle), shared content (photo, video, text), metadata (publication date, any visible location, mentions), explicit consent or dedicated hashtag: #BeringMoto.
  • Purposes: featuring content on the site, social networks, newsletters, and communication media; community recognition; marketing and product inspiration.
  • Legal basis: explicit consent (e.g., use of the #BeringMoto hashtag, rights-transfer form) or legitimate interest for unsolicited public shares that include the #BeringMoto hashtag.
  • Retention period:
    • Content may be used for up to 5 years after publication.
    • Personal metadata (social account, mentions, private messages) are kept for up to 3 years as proof of consent or for potential contact.
  • Mandatory nature: certain information is necessary to share content.

Cookies and trackers

Data are collected via cookies placed on users’ browsers when they visit the Website, as described in the cookie management console.

Additionally, personal data may be collected and processed via cookies as described below.

Technical data

  • Data collected: IP address, browser type, language, operating system, timestamp, referrer URL, device type.
  • Purposes: ensuring site security, bug resolution, adapting the display to screen types.
  • Legal basis: legitimate interests (operation and security of the Website).
  • Retention: 12 months from collection.

Session cookie

  • Data collected: temporary session identifier.
  • Purposes: keeping the session open; secure browsing.
  • Legal basis: legitimate interests (operation of the Website).
  • Retention: duration of the session.

Performance cookies

  • Data collected: load times, errors, user journeys, time spent, bounce rate.
  • Purposes: understanding user behavior, optimizing content, improving performance.
  • Legal basis: consent.
  • Retention: up to 13 months.

Functionality cookies

  • Data collected: display preferences, language, user options.
  • Purposes: personalizing the experience based on user choices and preferences.
  • Legal basis: consent.
  • Retention: 6 to 13 months depending on the preference.

Preference cookies

  • Data collected: language choice, region, products viewed.
  • Purposes: offering personalized browsing and saving user choices.
  • Legal basis: consent.
  • Retention: 6 to 13 months, renewable upon new interaction.

Audience measurement cookies

  • Data collected: pages viewed, time spent, clicks, traffic source.
  • Purposes: analyzing website traffic and improving the user experience.
  • Legal basis: consent.
  • Retention: up to 13 months.

Targeting or advertising cookies

  • Data collected: advertising identifiers, browsing history, products viewed, clicks.
  • Purposes: adapting marketing campaigns to users’ interests, tracking browsing habits, linking with social networks, measuring campaign effectiveness.
  • Legal basis: consent.
  • Retention: up to 13 months.

Third-party cookies: the Publisher and its partners act as joint controllers for personal data collected via partners’ cookies. Information about partners is provided in the cookie management console.

Cookies used on our site

The site uses different cookies to ensure proper operation, improve the user experience, and comply with data protection requirements (GDPR/CCPA). Below is a non-exhaustive list of cookies placed by our partners:

Provider Cookie name Retention Function
Shopify _shopify_essential 150 days Technical cookie essential for site operation and security
_shop_app_essential 12 months Used by Shop Pay to secure and facilitate payment
cart 30 days Keeps the current cart information
cart_currency 14 days Remembers the user’s chosen currency
localization 12 months Stores language and location preferences
keep_alive Session Keeps the user session active
shopify_pay_redirect 27 days Used to redirect the user to Shop Pay
_shopify_s Session Session identifier for internal analytics
_shopify_y 1 year Visitor identifier for internal analytics
_landing_page 14 days Records the landing page of the visit
_orig_referrer 14 days Stores the original referral URL
_tracking_consent 12 months Stores the cookie consent status
Google _ga 13 months Unique identifier for audience measurement (Google Analytics)
_ga_D0FHK0HV4Z 13 months Additional cookie for Google Analytics 4
AMP client ID 13 months Identifier used to measure audience on AMP pages
Meta (Facebook) _fbp 3 months Used for advertising retargeting and measuring Meta campaigns
Klaviyo __kla_id 13 months Visitor tracking and marketing attribution from emails
Axeptio (CMP) axeptio_cookies 6 months Stores cookie consent choices
axeptio_all_vendors 6 months List of partners for whom consent was given
axeptio_authorized_vendors 6 months List of partners authorized according to consent
Various / Shopify shopify_pay_redirect 27 days Manages redirection to Shop Pay

Recipients of personal data

  • Data controller: the Publisher (full contact details in the legal notice).
  • Recipients (as needed): authorized Publisher staff (Website management, commercial management, contract follow-up, order fulfillment, after-sales service), technical providers (hosting, IT), payment institutions, delivery providers, and the Publisher’s advisers.

Users’ rights over their personal data

  • Right of access: obtain confirmation that personal data are processed and information about such processing (as provided in this policy).
  • Right to rectification: have inaccurate or incomplete personal data corrected.
  • Right to erasure (“right to be forgotten”): have personal data erased when no longer necessary for the purposes for which they were collected or in case of a valid objection. The right to erasure does not apply in the cases provided for in Article 17(3) GDPR, including when data are necessary to provide the service or comply with legal obligations.
  • Right to restriction of processing: obtain restriction, in particular where accuracy is contested or when retention has ended but data are needed for legal claims.
  • Right to data portability: receive data provided to the Publisher in a readable format, or request transmission to another controller.
  • Right to object: object at any time, on grounds relating to your particular situation, to processing based on the Publisher’s legitimate interests, unless compelling legitimate grounds prevail.
  • Right to withdraw consent: withdraw consent for processing based on consent, with future effect.
  • Right to lodge a complaint: with the CNIL (French Data Protection Authority) if you consider that processing infringes your personal data.
  • Right to define post-mortem instructions: regarding the fate of your personal data after death.

How to exercise your rights
by email: customer.care@bering-moto.com
by post: TROPHY – DPO, 1, Avenue Eiffel, 78420 Carrières-sur-Seine, France

Updates to this policy

This policy may be amended to reflect legal, technical, or operational changes. In the event of material changes, the Publisher will inform users by appropriate means. The date of the last update appears at the top of this document.