Information on the collection and processing of personal data pursuant to Article 13 of the EU Regulation 2016/679
Byebike S.r.l. wishes to inform you that General Data Protection Regulation (EU) 2016/679 (GDPR) established persons rights concerning the collection and processing of personal information.
In accordance with the above mentioned law, use of collected data will be based on the principles of accuracy, legality, safety and transparency in order to protect your privacy and rights.
According to Article 13 (par. 1) of GDPR, therefore, we wish to inform you that:
- DATA CONTROLLER
The data controller is Byebike S.r.l. – Via M. Mencattelli 40/B – 53045 Montepulciano (SI) Italy, in the person of its legal representative.
The data controller may be contacted, in addition to the address indicated in the previous point, by email: firstname.lastname@example.org.
- LEGAL BASIS
The legal basis for the processing of your personal data is your request for the provision of our services (bike rental and possible equipment and services).
- PURPOSES OF THE PROCESSING
Data you provide will be processed exclusively for the purposes related to the contents of the lease of bicycle and equipment (as a non-exhaustive example, reservation management, contract administrative management, billing activities, management of possible legal disputes, the request of expressing the level of customer satisfaction and/or of making a review in order to improve our services, and so on). Therefore, data providing is necessary. Failure to provide required data will entail the failure to be provided with the services requested.
- CATEGORIES OF COLLECTED AND PROCESSED PERSONAL DATA
Data communicated by users
Sending an email, making a reservation and contacting us by any means entail the acquisition of your contact information as necessary to provide a reply as well as of any and all the personal data communicated in that manner. In these cases we collect exclusively data strictly necessary to provide our services: name, email address, phone number and possibly some customer physical data such as the height. At the time of the contract signing it will be necessary to acquire also the details of an identity document and of your credit card, the place of residence and temporary domicile and some data related to other people who will use our services.
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.
This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data are necessary to use web-based services and are also processed in order to:
– extract statistical information on service usage (most visited pages, visitors by time/date, geographical areas of origin, etc.);
– check functioning of the services.
No cookies are used to profile users nor are other user tracking systems implemented. So-called session (non-persistent) cookies are used exclusively to the extent that is necessary to enable secure, efficient browsing. Storage of session cookies in terminal equipment or browsers is under the user’s control.
- DATA RECIPIENTS
Data won’t be communicated to other subjects, nor will be make public, with the only exception of name, surname and e-mail address that can be communicated to PayPal Holdings, Inc. in the event that you choose to use a credit card for deposit payment. We process the personal data collected in strict compliance with the purposes and methods here described. No commercial or advertising use will be shared.
- PROCESSING METHODS
Personal data provided will be processed with automated and/or paper means. Specific security measures are implemented to prevent the data from being lost, used unlawfully and/or inappropriately, and accessed without authorisation.
- DATA RETENTION PERIOD
Collected data are kept for no longer than is necessary to achieve the purposes for which they have been collected, relating to the bike rental contract. For example, if you make a reservation we’re going to keep your information for the period necessary to provide the requested services and later for the time necessary to manage or respond to any complaint or consultation related to the booking. Some data relating to the accounting and tax aspects of the relationship must be kept for a longer period, imposed by current tax legislation. For the entire retention period, the data will be kept duly secure. We will actively review the data in our possession and delete them securely upon expiry of the terms from time to time applicable, deleting them from both paper and informatic supports.
- DATA SUBJECTS’ RIGHTS
We wish to inform you that, by demonstrating your identity (by means of a legal document), you are entitled at any time to obtain access to your personal data as well as rectification or erasure of such data or the restriction of the processing concerning them, and to object to the processing (pursuant to Articles 15 to 22 of the Regulation). These rights can be exercised for free. All requests should be emailed to email@example.com
- RIGHT TO LODGE A COMPLAINT
If a data subject considers that the processing of personal data relating to him or her as performed infringes the above mentioned Regulation, he or she has the right to lodge a complaint with the Italian data protection Authority, pursuant to Article 77 of the Regulation.
According to Article 6 (par. 1 – b) and to Article 7 (par. 4) of the EU Regulation 2016/679, the consent to data collection and processing, in the manner and for the purposes above defined, will be considered as expressed when you, after reading this information (available on our website www.bye.bike and at our office), confirm the request of our services. If you do not confirm your request, any data collected will be deleted.