Privacy Policy

Privacy Policy

This Privacy Policy explains how CycleCraft Parma processes personal data in connection with its website and bicycle repair workshop services.

Data collected only as described in this policy
Your rights and options are detailed below
Questions handled via our contact channel
Privacy Office

Contact Details

Email contact
Telephone contact
+39 312 717 9390
Postal address
Borgo Riccio da Parma 17, 43121 Parma
Privacy contact
User Rights

Your Rights

Individuals may exercise data protection rights by using the contact details in this policy. We may need to verify identity before responding, and some requests may be limited where processing is necessary for legal compliance, recordkeeping, or the establishment, exercise, or defence of claims.

Requests are handled in line with applicable data protection rules and identity checks where needed.
Requests

How to Make a Request

To make a rights request, provide enough detail to identify the relevant data and the right being exercised. We will review the request, respond within the legal timeframe, and explain any refusal or partial response where applicable.

We may ask for information needed to confirm identity and understand the request.
Data Retention

Data Retention

We keep personal data only for as long as it is needed for the relevant purpose, including booking administration, workshop records, accounting, dispute handling, and compliance with legal obligations. When data is no longer required, it is deleted, anonymised, or archived in a limited form where retention is still necessary.

Retention is based on the purpose of the record, legal duties, and the need to resolve service matters.
Policy Updates

Policy Changes

If we make material changes, we will update the policy text on the website and may provide an additional notice where appropriate. The version in force is the one published at the time of use, unless a later effective date is stated.

We review this policy when our processing practices, legal obligations, or website functions change.
01 · Collection

Data We Collect

We may process identification and contact details, bicycle and service information, appointment and intake details, payment and billing records, communication content, and technical data such as device and usage information. Where relevant, we also process information needed to assess the condition of a bicycle, prepare a quote, carry out repairs, and provide a service summary.

The categories of data depend on the way a person uses the website, booking channels, and workshop services.
02 · Sources

Sources of Data

We collect data when a user submits an inquiry, books a service, brings in a bicycle for intake, communicates with the workshop, or completes a payment. We also receive limited technical information automatically from the website and may generate internal records during inspection, repair, quality check, and collection of the bicycle.

Information is obtained from direct interactions and from technical systems used to operate the site.
03 · Cookies

Types of Cookies

The site may use essential cookies to support navigation and form submission, functional cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose and lifespan.

Cookie use is limited to categories that support operation, measurement, and user preferences.
04 · Controls

Cookie Controls

We use cookies and similar technologies for essential site functions, basic analytics, and preference storage. Non-essential cookies may be limited by browser settings or by any consent controls presented on the site. Disabling some cookies may affect website performance or certain features.

Cookie preferences can be adjusted through browser settings and, where available, site controls.

Purposes of Processing

We use personal data to respond to inquiries, manage bookings, receive and return bicycles, assess service needs, prepare and confirm quotes after inspection, carry out repairs and adjustments, provide service summaries, process payments, maintain records, operate the website, and meet legal and accounting obligations. We may also use limited technical data to secure the site, diagnose problems, and improve basic functionality.

Processing is limited to purposes connected with the website, bookings, and workshop operations.

Sharing With Partners

We may disclose personal data to trusted service providers that support website hosting, communications, record management, payment processing, or other operational functions. These parties act under instructions or contractual obligations appropriate to their role and may not use the data for unrelated purposes.

Service providers receive only the data needed to perform their assigned functions.
GDPR

Regulation

GDPR Overview

We act as a controller for personal data processed through the website and related workshop operations, unless a different role is clearly stated for a specific processing activity. Processing is carried out on a lawful basis such as performance of a contract, steps before entering a contract, legal obligation, legitimate interests, or consent where required.

Where GDPR applies, it governs our processing of personal data of individuals in the European Economic Area in connection with this website and workshop services.
This section is intended for individuals whose data is processed under the GDPR.

GDPR-aware data handling

GDPR Rights

Where the GDPR applies, individuals may have rights of access, rectification, erasure, restriction, objection, and data portability, as well as the right to withdraw consent where processing is based on consent. A person may also lodge a complaint with the competent supervisory authority if they consider that their rights have been infringed.

The rights described here apply subject to the conditions and limits set by law.