I. PRIVACY POLICY AND DATA PROTECTION
In compliance with current legislation, bicips alquiler de bicicletas y venta de artículos (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.
Laws included in this Privacy Policy
This Privacy Policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
- Royal Decree 1720/2007, of December 21, approving the implementing regulation of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
- Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The data controller of the personal data collected on bicips alquiler de bicicletas y venta de artículos is: VELAIBIKE S.L., with Tax ID (NIF): B-02761252 and registered in the Lugo Commercial Registry with the following registration details: Volume 536, Book 00, Page 83, Sheet LU-20452, Entry 1, whose representative is Diego Vidal Leivas (hereinafter, the Data Controller).
Contact details:
Address: Avenida de Galicia 22 2D, 27730 Abadín – Lugo
Phone: 604070181
Email: alquilerde@bicips.com
Personal Data Records
In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by bicips alquiler de bicicletas y venta de artículos through the forms on its pages will be incorporated and processed in our file in order to facilitate, expedite and fulfill the commitments established between bicips alquiler de bicicletas y venta de artículos and the User, or to maintain the relationship established through the forms completed by the User, or to respond to a request or inquiry from the User.
Likewise, in accordance with the provisions of the GDPR and the LOPD-GDD, unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to its purposes, the processing activities carried out and the other circumstances established in the GDPR.
Principles applicable to the processing of personal data
The processing of the User’s personal data shall be subject to the following principles set out in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:
- Principle of lawfulness, fairness and transparency: the User’s consent will be required at all times following fully transparent information about the purposes for which personal data are collected.
- Principle of purpose limitation: personal data shall be collected for specified, explicit and legitimate purposes.
- Principle of data minimization: personal data collected shall be limited to what is strictly necessary.
- Principle of accuracy: personal data must be accurate and kept up to date.
- Principle of storage limitation: personal data shall be kept only for the time necessary.
- Principle of integrity and confidentiality: personal data shall be processed securely.
- Principle of accountability: the Data Controller is responsible for ensuring compliance.
Categories of personal data
The categories of data processed are only identification data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.
Legal basis for the processing of personal data
The legal basis for processing is consent. bicips alquiler de bicicletas y venta de artículos undertakes to obtain the User’s express and verifiable consent for one or more specific purposes.
The User shall have the right to withdraw consent at any time. Withdrawal shall be as easy as giving consent. As a general rule, withdrawal of consent will not condition the use of the Website.
Whenever the User must or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if the completion of any fields is mandatory because they are essential for the correct execution of the operation.
Purposes of processing
Personal data are collected and managed in order to facilitate, expedite and fulfill commitments between the Website and the User or to maintain the relationship established through forms or to respond to requests or inquiries.
Likewise, the data may be used for commercial purposes of personalization, operational and statistical purposes, and activities related to the corporate purpose, as well as for data extraction, storage, and marketing studies to adapt the Content offered to the User and improve the quality, operation, and navigation of the Website.
At the time personal data are obtained, the User will be informed about the specific purpose or purposes of the processing.
Retention periods of personal data
Personal data will only be retained for the minimum time necessary and, in any case, for a maximum period of 24 months, or until the User requests deletion.
At the time of collection, the User will be informed about the retention period or the criteria used to determine it.
Recipients of personal data
The User’s personal data will be shared with the following recipients or categories of recipients:
If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed at the time of collection, including whether there is an adequacy decision by the European Commission.
Personal data of minors
In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only persons over 14 years of age may lawfully give consent. For minors under 14, parental or guardian consent is required.
Secrecy and security of personal data
bicips alquiler de bicicletas y venta de artículos undertakes to adopt the necessary technical and organizational measures to ensure data security and prevent destruction, loss, alteration, or unauthorized access.
The Website has an SSL certificate ensuring secure and encrypted transmission of personal data.
However, absolute security cannot be guaranteed. In the event of a data breach likely to result in a high risk, the User will be notified without undue delay.
Personal data will be treated as confidential, and this obligation extends to employees and collaborators.
Rights derived from the processing of personal data
The User may exercise the following rights:
- Right of access
- Right to rectification
- Right to erasure (right to be forgotten)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right not to be subject to automated decision-making, including profiling
The User may exercise these rights by written communication to the Data Controller with reference “GDPR-www.bicips.com”, including identification, request details, address, date, and signature.
Address: Avenida de Galicia 22 2D, 27730 Abadín – Lugo
Email: alquilerde@bicips.com
Links to third-party websites
The Website may include links to third-party websites not operated by bicips alquiler de bicicletas y venta de artículos. These websites have their own privacy policies.
Complaints to the supervisory authority
If the User considers that there is a violation, they may file a complaint with the Spanish Data Protection Agency: http://www.agpd.es
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
The User must have read and accepted this Privacy Policy. Use of the Website implies acceptance.
bicips alquiler de bicicletas y venta de artículos reserves the right to modify this policy due to legal or regulatory changes. Users are advised to review it periodically.
This Privacy Policy has been updated in accordance with GDPR and Organic Law 3/2018.
