A1. Scope and Operator
These Organizer Terms govern the relationship between MotoAuto.ch (the "Platform"), operated by Rafał Sołtys, Steckborn, Switzerland (info@motoauto.ch), and any person or entity ("Organizer") who creates and manages events on the Platform.
By creating an event on MotoAuto.ch, the Organizer accepts these terms in full, including the Data Processing Agreement in Section A6.
A2. Platform Role
MotoAuto.ch provides technology infrastructure: event creation, ticket sales, QR code generation, ticket delivery, scanner tool, and organizer dashboard. MotoAuto.ch is a technology provider only and is not the event organizer.
Unless explicitly stated on the event page, MotoAuto.ch:
- Does not organize, produce, or operate events
- Does not provide on-site staff or security
- Does not obtain required permits
- Is not liable for event cancellation, modification, or failure
A3. Organizer Obligations
The Organizer is solely responsible for:
- Accuracy and completeness of all event information
- Obtaining all required permits, licenses, and insurance
- Event safety, security, and logistics
- Providing their own entry staff
- Notifying ticket holders of any changes, postponements, or cancellations
- Setting and honoring any refund policies
- Compliance with all applicable laws including data protection
- Not using attendee personal data for unsolicited marketing
- Ensuring their staff members who access the Scanner comply with the DPA in Section A6
A4. Financial Conditions
- Commission rates, service fees, and payout schedules are displayed in the Organizer Panel before publishing the event
- MotoAuto.ch may withhold payouts in case of suspected fraud, chargebacks, or disputes pending resolution
- The Organizer bears financial responsibility for refunds to ticket buyers in the event of cancellation or material changes
A5. Scanner Access & Staff
- The Organizer may invite staff members to access the Scanner for their event
- Access is limited to the specific event and automatically revoked after the event ends or upon manual revocation
- The Organizer is responsible for ensuring only authorized persons receive scanner access
- Each scan is logged: timestamp, result, and the scanning account
- Scanner staff must treat personal data of attendees (name, email, ticket number) with strict confidentiality and use it only for entry control purposes
A6. Data Processing Agreement (DPA)
Legal basis: Swiss nDSG art. 9 (commissioned data processing) and EU GDPR art. 28 (processor obligations). This section constitutes a binding Data Processing Agreement.
A6.1 — Roles
- Controller: The Organizer — determines the purposes of personal data processing (selling tickets to their attendees)
- Processor: MotoAuto.ch (Rafał Sołtys) — processes personal data on behalf of the Controller to provide the ticketing technology service
A6.2 — Personal Data Processed
MotoAuto.ch processes the following personal data of the Organizer's event attendees on behalf of the Organizer:
- Buyer name — as provided during ticket purchase
- Buyer email address — for ticket delivery and confirmation
- Ticket number — unique identifier per ticket
- QR code token — cryptographic identifier for admission validation
- Purchase timestamp, ticket type, price paid
- Check-in status and scan timestamp — recorded when the QR code is scanned at the event
- Scanner identity — account that performed the scan
A6.3 — Purpose and Legal Basis
Personal data is processed exclusively for the purpose of:
- Ticket issuance and delivery to the buyer
- Admission control at the event (QR code validation)
- Providing the Organizer with their event dashboard and statistics
- Fraud prevention and payment processing
A6.4 — Organizer Obligations as Controller
- Ensure a valid legal basis for processing attendee personal data exists (e.g. consent, contract)
- Inform attendees that MotoAuto.ch processes their data for ticketing (via event listing)
- Not instruct MotoAuto.ch to process data for purposes beyond those stated above
- Not export, copy, or retain attendee personal data after the event beyond what is legally required
- Ensure scanner staff treat personal data confidentially and use it solely for admission control
- Not use attendee email addresses or names for unsolicited marketing without a separate, explicit legal basis
- Respond promptly to data subject requests from attendees regarding their personal data
A6.5 — MotoAuto.ch Obligations as Processor
- Process data only on documented instructions of the Organizer
- Implement appropriate technical and organizational security measures
- Not engage sub-processors without informing the Organizer (current sub-processors: Supabase Inc. — database hosting, Stripe Inc. — payment processing)
- Delete or return personal data upon termination of the relationship
- Notify the Organizer without undue delay of any data breach affecting attendee data
- Assist the Organizer in fulfilling data subject rights requests where technically feasible
A6.6 — Data Retention
- Ticket and order data: retained for the period required by Swiss accounting law (minimum 10 years for invoices) for tax and legal purposes
- Scan logs: retained for 12 months after the event
- On deletion request from the Organizer: data is anonymized or deleted where not required by law
A6.7 — Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database hosting & authentication | USA (EU region available) |
| Stripe Inc. | Payment processing | USA / EU |
| Vercel Inc. | Application hosting | USA / EU Edge |
A7. Liability
MotoAuto.ch is liable for technical failures in ticket delivery or QR generation to the extent caused by MotoAuto.ch. The Organizer is liable for all event-related issues, cancellations, and refund obligations. MotoAuto.ch is not liable for the Organizer's failure to comply with data protection obligations as Controller.
A8. Termination
MotoAuto.ch may suspend or terminate organizer access for material breaches of these terms, including data protection violations. Upon termination, scanner access is immediately revoked and data handling follows Section A6.6.
A9. Governing Law
These terms and the DPA are governed by Swiss law. Jurisdiction is determined by applicable Swiss procedural law. Mandatory provisions of any applicable EU law remain unaffected.
Contact: Rafał Sołtys · MotoAuto.ch · Steckborn, Switzerland · info@motoauto.ch