Privacy Policy

How we collect, use and protect your personal data

Last updated: March 2026

1. Data Controller

The data controller for this website is: Limone Bike Rental Via IV Novembre, 20 — 25010 Limone sul Garda (BS), Italy Phone: +39 347 5970850 Email: [email protected] This website is operated at gardacyclepath.com and limonebikerental.com.

2. What Data We Collect

We may collect the following personal data: • Contact information (name, email, phone number) when you contact us via WhatsApp, phone or email. • Navigation data automatically collected by our servers (IP address, browser type, pages visited, time and date of visit). This data is used solely for statistical purposes and to ensure the proper functioning of the site. • Cookies and similar technologies (see Cookie Policy below).

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes: • To respond to your enquiries and booking requests (legal basis: contract performance or pre-contractual measures, Art. 6(1)(b) GDPR). • To improve the website and analyse traffic (legal basis: legitimate interest, Art. 6(1)(f) GDPR). • To comply with legal obligations (legal basis: legal obligation, Art. 6(1)(c) GDPR). We do not use your data for automated decision-making or profiling.

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: • Contact/booking enquiries: up to 2 years from last contact. • Navigation logs: up to 12 months. • Data required by law (e.g. invoicing): as required by Italian fiscal law (typically 10 years).

5. Data Sharing

We do not sell, rent or share your personal data with third parties for marketing purposes. Data may be shared with: • Technical service providers (hosting, analytics) acting as data processors under written agreements. • Public authorities when required by law. All processors are bound by confidentiality obligations and GDPR-compliant data processing agreements.

6. International Transfers

Some of our technical service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR (e.g. Standard Contractual Clauses).

7. Your Rights

Under the GDPR and Italian Privacy Code (D.Lgs. 196/2003 as amended), you have the right to: • Access your personal data (Art. 15 GDPR) • Rectify inaccurate data (Art. 16 GDPR) • Erase your data ("right to be forgotten") (Art. 17 GDPR) • Restrict processing (Art. 18 GDPR) • Data portability (Art. 20 GDPR) • Object to processing (Art. 21 GDPR) • Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it To exercise your rights, contact us at: [email protected]

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no internet transmission is completely secure and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the last update is shown at the top of this page. Continued use of the website after any changes constitutes acceptance of the updated policy.