Privacy Policy

This privacy policy explains how De Stadsfiets collects, uses, and protects your personal data when you use our online platform. We are committed to protecting your privacy and handling your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Who We Are

De Stadsfiets, located at 157 Oudegracht, Utrecht, Utrecht, 3511 AH, Netherlands, is responsible for the processing of your personal data as described in this policy. We operate this online service to provide information about our services, including sales of city bikes, electric bikes, and accessories, professional bicycle repairs and maintenance, tire changes, brake and gear adjustments, custom bike building, bike fitting services, sale of spare parts and components, and bicycle rentals.

Information We Collect

We may collect personal data from you when you interact with our site, for example, when you:

  • Browse our online platform.
  • Place an order for products or services.
  • Fill out forms on our site (e.g., contact forms, service request forms).
  • Communicate with us directly.

The types of personal data we collect may include:

  • Contact Information: Such as your name, billing address, shipping address.
  • Order Information: Details about products or services you purchase, payment information (which is typically processed by third-party payment providers; we do not store full payment card details), and transaction history.
  • Technical Data: Information about your device and how you use our site, such as your IP address, browser type and version, operating system, referral source, and pages visited.
  • Communication Data: Information you provide when you contact us with inquiries or requests.

How We Use Your Information

We use your personal data for the following purposes:

  • To provide our services: Processing and fulfilling your orders for bikes, accessories, spare parts, or repair services; managing rentals; handling payments; providing customer support.
  • To operate and improve our site: Ensuring the functionality and security of our online platform; analyzing how our site is used to identify trends and improve user experience and content.
  • To communicate with you: Responding to your inquiries, providing information about your orders or service requests.
  • Compliance with legal obligations: Processing data where required by law, such as for tax and accounting purposes.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

  • Performance of a contract: When processing is necessary to fulfill an order or service request you have made, such as processing payment and arranging delivery or carrying out a repair.
  • Legal obligation: When processing is necessary to comply with a legal requirement that applies to us, such as maintaining records for tax authorities.
  • Legitimate interests: When processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. This may include improving our services, preventing fraud, or ensuring the security of our network and information. We conduct a balancing test to ensure our legitimate interests are not detrimental to your rights.
  • Consent: In certain specific situations where other legal bases do not apply, we may rely on your explicit consent to process your data, for example, for sending marketing communications. You have the right to withdraw your consent at any time.

Sharing Your Information

We do not sell your personal data to third parties. We may share your information with trusted third-party service providers who perform functions on our behalf, such as:

  • Payment processors to handle transactions.
  • Shipping and delivery companies to deliver your orders.
  • IT service providers for website hosting, maintenance, and security.

These service providers are required to protect your data and only use it for the specific purposes for which we share it with them. We may also disclose your information if required by law, court order, or other governmental authority.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose of processing. For example, we keep records of transactions for a period required by tax law.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right to access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
  • Right to erasure ('right to be forgotten'): You have the right to request that we delete your personal data under certain circumstances.
  • Right to restriction of processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
  • Right to object: You have the right to object to our processing of your personal data based on our legitimate interests.
  • Right to withdraw consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us in writing at the address provided below. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with a supervisory authority, particularly in the Netherlands, if you believe our processing of your personal data infringes data protection law.

Cookies and Tracking Technologies

Our site uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where visitors come from. Cookies are small text files placed on your device. You can manage your cookie preferences through your browser settings. Please refer to our separate Cookie Policy for more detailed information about the types of cookies we use and how you can control them.

Third-Party Links

Our site may contain links to third-party websites or services that are not operated by us. This privacy policy does not apply to third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by posting the updated policy on our site.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us in writing at:

De Stadsfiets
157 Oudegracht
Utrecht, Utrecht, 3511 AH
Netherlands