Privacy Policy
1) Introduction and Contact Details of the Responsible Party
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data by which you can be personally identified.
1.2 The responsible party for data processing on this website in terms of the General Data Protection Regulation (GDPR) is Bike-Evolution GmbH, Jakob-Sieben-Str. 1, 55130 Mainz, Germany, Tel.: +49 1577 0426590, Email: info@bikeevolution.de. The responsible party for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which are technically necessary for us to display the website:
- The website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you reached the site
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
This processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to retrospectively check the server log files if specific indications point to unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
3) Cookies
To make the visit to our website attractive and to enable the use of certain functions, we use cookies. These are small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find out the storage duration from the overview of cookie settings in your web browser.
If personal data are processed by individual cookies used by us, this processing is carried out according to Art. 6 Para. 1 lit. b GDPR for the performance of the contract, according to Art. 6 Para. 1 lit. a GDPR in the case of granted consent, or according to Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser to inform you about the setting of cookies and to decide individually about their acceptance or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting Us
In the context of contacting us (e.g., via contact form or email), personal data are processed - exclusively for the purpose of processing and responding to your inquiry and only to the extent necessary.
The legal basis for processing these data is our legitimate interest in responding to your inquiry according to Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been conclusively resolved and provided there are no legal retention obligations.
5) Data Processing for Opening a Customer Account
According to Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary when you provide them to us for opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.
You can delete your customer account at any time, which can be done by sending a message to the above address of the responsible party. After deleting your customer account, your data will be deleted, provided all contracts made through it have been completely processed, no legal retention periods apply, and we have no legitimate interest in further storage of the data.
6) Use of Customer Data for Direct Advertising
6.1 Registration for our Email Newsletter
When you subscribe to our email newsletter, we regularly send you information about our offers. The only required information for sending the newsletter is your email address. The provision of additional data is voluntary and is used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you receive newsletters only after you have explicitly confirmed your consent to receive them by clicking on a verification link sent to the provided email address.
By activating the confirmation link, you give us your consent for the use of your personal data according to Art. 6 Para. 1 lit. a GDPR. We store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration to trace any possible misuse of your email address at a later date. The data collected by us at the time of newsletter registration is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.
6.2 Klaviyo
The dispatch of our email newsletters is carried out by this provider: Klaviyo, 225 Franklin St, Boston, MA 02110, USA.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data provided during newsletter registration according to Art. 6 Para. 1 lit. f GDPR to this provider, so they can carry out the newsletter dispatch on our behalf.
Subject to your explicit consent according to Art. 6 Para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure opening rates and specific interactions with the content of the newsletter. End device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its transfer to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on an adequacy decision by the European Commission.
7) Data Processing for Order Processing
7.1 To the extent necessary for contract processing, including delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If, based on a corresponding contract, we owe you updates for goods with digital elements or digital products, we process the contact details you provided during the order (name, address, email address) to personally inform you about upcoming updates within the legally prescribed period, as part of our statutory information obligations under Art. 6 Para. 1 lit. c GDPR. Your contact details are strictly used for the purpose of notifications about updates owed by us and are processed by us only to the extent necessary for each notification.
Furthermore, for the processing of your order, we work with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data are transmitted to these service providers according to the following information.
7.2 Use of Payment Service Providers (Payment Services)
- Paypal
On this website, one or more online payment methods of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When you choose a payment method of the provider where you pay in advance, your payment data communicated during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about the contents of your order are passed on to them in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary.
When selecting a payment method where we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data on an alternative payment method) during the order process.
To preserve our legitimate interest in determining your creditworthiness in such cases, these data are forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted in terms of payment and/or default risks.
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may continue to process your personal data if necessary for contractual payment processing.
8) Retargeting/Remarketing and Conversion Tracking
Facebook Pixel for Creating Custom Audiences with Advanced Data Matching (with Cookie Consent Tool)
Within our online offering, we use the service "Facebook Pixel" of the following provider in the mode of advanced data matching: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
When a user clicks on an advertisement we have placed on Facebook, the URL of our linked page is extended by a parameter using "Facebook Pixel". This URL parameter is then entered into the user's browser via a cookie that our linked page sets itself. In addition, this cookie captures specific customer data such as the email address that we collect on our webpage linked to the Facebook ad for processes like purchase completions, account logins, or registrations (advanced data matching). The cookie is then read out and enables the transmission of data including the specific customer data to Facebook.
We use "Facebook Pixel" with advanced data matching to make our Facebook advertisements (so-called "Facebook Ads") more effective and to ensure that they correspond to the interests of users or exhibit certain characteristics (e.g., interests in specific topics or products determined based on visited web pages), which we transmit to Facebook (so-called "Custom Audiences").
Furthermore, we analyze the effectiveness of our ads by tracking whether users are redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Facebook Pixel," the advanced data matching function helps us better measure the effectiveness of our advertising campaigns by capturing more associated conversions.
All data transmitted are stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes according to Facebook's data usage policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and off Facebook.
All the processing described above, especially setting cookies to read information on the used end device, is only carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
The information generated by Facebook is usually transferred to a server of Facebook and stored there; in this context, it may also involve transmission to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on an adequacy decision by the European Commission.
9) Tools and Miscellaneous
Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain effective user consents for cookies that require consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users as an interactive user interface when they visit the site, where consents for specific cookies and/or cookie-based applications can be granted by ticking checkboxes. By using this tool, all consent-required cookies/services are loaded only when the respective user grants corresponding consents by ticking checkboxes. This ensures that such cookies are set on the user's end device only in the case of granted consent.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) are processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our internet presence.
Another legal basis for processing is Art. 6 Para. 1 lit. c GDPR. As the responsible party, we are legally obliged to make the use of technically non-essential cookies dependent on the respective user consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
10) Rights of the Data Subject
10.1 The applicable data protection law grants you the following rights as a data subject with respect to the processing of your personal data by the controller (rights to information and intervention), for which the respective exercise requirements refer to the stated legal basis:
- Right of access according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consent given according to Art. 7 Para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
10.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS DUE TO OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
11) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data based on explicit consent according to Art. 6 Para. 1 lit. a GDPR, the affected data is stored until you revoke your consent.
If there are legal retention periods for data that are processed within the framework of legal transactions or obligations similar to legal transactions based on Art. 6 Para. 1 lit. b GDPR, these data are routinely deleted after the retention periods expire, provided they are no longer necessary for the fulfillment or initiation of a contract and/or there is no longer a legitimate interest on our part in their continued storage.
When processing personal data based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.
When processing personal data for direct marketing purposes based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 Para. 2 GDPR.
Unless otherwise stated in the other information of this statement on specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.