Privacy Policy.

2.1 Website Usage Data

When you visit our Site, we automatically collect technical information sent by your device, including your IP address, browser type and version, operating system, geographical region, pages visited, time and date of visit, referral sources, and navigation paths. This data is used in aggregate to analyse how users interact with our Site and to improve our services.

2.2 Forms & Enquiries

When you complete a contact form, request a test ride or dealer appointment, or subscribe to our newsletter, we collect the personal data you provide. This may include your first name, last name, email address, phone number, country, city, the Energica model you are interested in, and the content of your message.

2.3 Motorcycle Ownership

When you purchase an Energica motorcycle through an authorised dealer, the dealer may share your contact details with us to register your warranty, send you relevant service updates, and inform you of product news pertaining to your model. Ownership history is retained to support ongoing service obligations.

2.4 Employment Applications

If you apply for a position at Energica, we collect the personal data included in your application, including your CV, contact details, and any other information you provide. This data is used solely for recruitment purposes.

2.5 Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on our Site. For full details, please refer to our Cookie Policy.

We use your personal data for the following purposes:

• To respond to your enquiries and provide requested information about our motorcycles, dealers, and services.
• To process test ride requests and connect you with an authorised Energica dealer in your area.
• To register your motorcycle warranty and send you relevant safety, service, and recall notifications.
• To send you our newsletter and marketing communications, where you have given your consent.
• To improve our Site, products, and services by analysing usage data in aggregate.
• To comply with our legal and regulatory obligations.
• To process employment applications.

We will not use your personal data for purposes incompatible with those described above without your prior consent.

We process your personal data on the following legal grounds under the GDPR:

• Consent — for marketing communications, newsletters, and profiling activities. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual necessity — to perform a contract with you or take pre-contractual steps at your request, such as processing a test ride enquiry or warranty registration.
• Legitimate interests — to improve our products and services, maintain Site security, and communicate with you about products similar to those you have already purchased (within the limits of applicable law).
• Legal obligation — to comply with applicable legal and regulatory requirements, including tax and accounting obligations.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law:

• Website log data is retained for up to 6 months.
• Contact and enquiry data is retained for up to 3 years from your last interaction with us.
• Warranty and ownership data is retained for the duration of the warranty period and up to 10 years thereafter in accordance with applicable legal obligations.
• Marketing data is retained until you withdraw consent or request deletion.
• Recruitment data is retained for 12 months following the conclusion of a recruitment process unless you are offered and accept employment.

When your data is no longer required, it will be securely deleted or anonymised.

We do not sell your personal data. We may share your data in the following circumstances:

• Authorised dealers and distributors — to facilitate test ride bookings, warranty registration, and after-sales service in your region.
• Service providers — third-party companies acting as data processors on our behalf (e.g. email platforms, analytics providers, CRM systems). These parties are contractually bound to process your data only in accordance with our instructions.
• Legal authorities — when disclosure is required by applicable law, regulation, or court order.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

Data processors we engage include, but are not limited to: Salesforce (CRM), Google Analytics (website analytics), HubSpot (marketing automation), and Mailchimp (email communications). All processors are bound by data processing agreements compliant with GDPR.

Some of our service providers or partners may be located outside the European Economic Area (EEA). Where we transfer personal data to countries that do not provide an equivalent level of data protection to that required under EU law, we take appropriate safeguards — including the use of Standard Contractual Clauses approved by the European Commission — to ensure your data remains protected.

You may request further information about such transfers by contacting our Data Protection Officer at the address below.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — to request deletion of your data where there is no legitimate reason for us to continue processing it.
• Right to restrict processing — to request that we limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at privacy@energicamotor.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

Energica takes appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encryption, access controls, and regular security assessments.

While we strive to protect your data, no transmission over the internet is entirely secure. You transmit data to us at your own risk. Once we receive your data, we apply strict procedures to prevent unauthorised access.

This Site is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us immediately at privacy@energicamotor.com and we will take steps to delete such data.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically. Continued use of the Site following any changes constitutes your acceptance of the updated Policy.

For any questions, requests, or concerns about this Privacy Policy or the processing of your personal data, please contact us:

Energica Motor Company S.p.A.
Via Cesare della Chiesa 44, 41122 Modena, Italy
privacy@energicamotor.com