This page describes how the website www.b2-ride.com is managed with regard to the processing of the personal data of users who consult it. Personal data provided by users are treated with confidentiality and used solely to fulfill requests sent and to allow navigation, in compliance with Regulation (EU) 2016/679 (hereinafter “GDPR”).

1. DATA CONTROLLER

The Data Controller referred to in this privacy policy is Auriga SpA, with registered office in Altamura (BA) at Via Selva n.101, and operational headquarters in Bari at Via Don Luigi Guanella 17; VAT number: 05566820725. Contact email address: compliance@aurigaspa.com.

2. PURPOSES AND LEGAL BASIS OF PROCESSING

Data are processed by Auriga S.p.A. for the following purposes:

• Execution of services and website features: To provide, improve, and optimize the performance of the B2-Ride platform, and to manage user requests received through the forms on the website. Legal basis: Performance of a contract or pre-contractual measures (Art. 6, par. 1, lett. b GDPR).
• Statistical analysis and traffic measurement (Matomo and Google Analytics 4): To optimize the user experience and analyze website traffic trends through tracking systems integrated via Google Tag Manager. Legal basis: The explicit Consent of the data subject (Art. 6, par. 1, lett. a GDPR) freely expressed through the cookie banner. The active prior blocking system on the website ensures that no statistical data is collected before the user's consent.
• Security and fraud prevention: To protect the web infrastructure from cyber attacks or unlawful activities. Legal basis: Legitimate interest of the Data Controller (Art. 6, par. 1, lett. f GDPR).
• Marketing activities (subject to consent): Sending promotional and informational material regarding B2-Ride services. Legal basis: The explicit Consent of the data subject (Art. 6, par. 1, lett. a GDPR).

3. TYPES OF DATA PROCESSED

Navigation and Technical Data (Log Files):
During navigation on the Website www.b2-ride.com, information automatically recorded in server log files (hosting) is collected: Internet Protocol (IP) address in anonymized/pseudonymized form, parameters of the device used, internet service provider (ISP) name, date and time of visit, time spent on individual pages, and referral search engine.

Tracking and Statistical Data (Cookies and Measurement Tools):
The website uses Google Tag Manager for the centralized management and conditional unlocking of the following third-party scripts:

• Google Analytics 4 (GA4): A web analysis service provided by Google Ireland Limited. The generated data is used to analyze website usage in an aggregate form. The related statistical cookies are only activated after consent.
• Matomo: A statistical analysis system configured with IP address masking. The script operates in compliance with the prior blocking managed by the CMP (Complianz), subordinating the activation of statistical cookies to the user's positive interaction on the banner.

Data provided voluntarily by the user:
By filling out the “Contact / Request Demo” section, the following personal data are provided: first name, last name, email address, company name (if applicable), job title, and geographic area (Country).

4. DATA RETENTION PERIOD

Auriga SpA will retain the User's personal data only for the time reasonably necessary to fulfill the purposes for which it was collected:

• Data sent via contact or demo request forms will be kept for the time strictly necessary to process the request, and in any case for a period not exceeding 2 years from collection, unless further necessity arises due to legal obligations or compliance purposes.
• Statistical data recorded by Google Analytics 4 and Matomo follow the standard retention expirations of their respective cookie identifiers (ranging from a few months up to a maximum of 14 months), unless the user decides to revoke their consent or delete cookies directly from the browser before their natural expiration.

5. RIGHTS OF THE DATA SUBJECTS

Pursuant to Articles 15-22 of the GDPR, users have the right to exercise the following rights at any time:

• Request confirmation of the existence or non-existence of their personal data and obtain access to it;
• Obtain indications regarding the purposes of the processing, the categories of data, the recipients, and the retention period;
• Obtain the rectification, integration, or erasure of data;
• Obtain the restriction of processing or object to it (e.g., for marketing purposes);
• Obtain data portability in a structured, commonly used, and machine-readable format;
• Withdraw previously expressed consent (withdrawal does not affect the lawfulness of processing based on consent before its withdrawal).

Rights can be exercised by sending a written request to Auriga S.p.A. at the dedicated email address: compliance@aurigaspa.com.

6. DATA DISCLOSURE AND SECURITY

Auriga may disclose the User's personal data – only when necessary for the provision of the service and for the purposes specified – to its employees and/or consultants in their capacity as authorized persons or Data Processors (Art. 28 GDPR). Without the express consent of the user, data may not be transferred to third parties for their own commercial purposes. Data will not be subject to global dissemination.

The Data Controller has adopted adequate technical and organizational security measures pursuant to Art. 32 of the GDPR to protect data against the risk of loss, misuse, or unauthorized access.

7. CHANGES TO THIS PRIVACY POLICY

This privacy policy may undergo changes based on regulatory updates or technical modifications to the platform. It is recommended to check this page regularly to refer to the most updated version.

Last updated: June 2026