Your data, clearly explained

Privacy Policy

This notice explains how personal data is processed when you browse the website, send a reservation request or access the protected administration area.

Last updated: 27 August 2026

Working legal draft based on the GDPR, the Italian Privacy Code and the Italian Data Protection Authority's guidance. The controller remains responsible for keeping this notice aligned with its actual operations.

1. Controller and contact

The controller is Let's go Limone snc di De Morais Luis Gustavo & C., trading as Limone Bike Rental, VAT 03874590981, with registered contact address at Via IV Novembre 20, 25010 Limone sul Garda (BS), Italy. Privacy requests may be sent to info@limonebikerental.com or made by phone at +39 347 5970850.

2. Data we process

When you browse, the hosting infrastructure may process IP address, request time, requested page, browser/device information and technical security logs. When you send a reservation request, we process the details you enter, including name, email, telephone, country, dates, service, bike choices, rider heights, family equipment and notes. Please do not place health, identity-document or other sensitive information in the notes.

Administrator account and session data are processed only to protect the private reservation dashboard.

3. Purposes and legal bases

Reservation data is used to answer your request, check availability and take steps at your request before a possible rental contract (Article 6(1)(b) GDPR). Technical security and service logs are processed to operate, secure and defend the website (Article 6(1)(f) GDPR, balanced against visitors' rights). Where analytics is enabled, it is used only after consent (Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code). Legal and accounting data may be processed to comply with obligations (Article 6(1)(c) GDPR).

We do not use reservation details for newsletters or marketing and do not make solely automated decisions about customers.

4. Recipients and service providers

Access is limited to authorised staff and providers needed to operate the website. Manus / Butterfly Effect Pte. Ltd. provides hosting, database, storage, authentication, operational notifications and optional analytics as a processor for the website owner. Its public privacy policy and Data Processing Addendum describe its safeguards and subprocessors. Authorities or professional advisers may receive data where legally required or necessary to establish or defend claims.

Reservation data is not sold. Links to WhatsApp, Instagram and maps open third-party websites only when you choose to follow them; those services then apply their own notices.

5. International transfers

Some infrastructure providers and subprocessors may process data outside the European Economic Area. The provider documents the use of the European Commission's Standard Contractual Clauses and other GDPR transfer safeguards where required. You may contact the controller for information about the safeguards relevant to your request.

6. Retention

Reservation requests and related correspondence may be retained for up to six years after the last contact, unless a shorter period is sufficient or a longer period is required by law or for legal claims. Security logs are kept only for the period needed for protection and troubleshooting. Cookie choices are retained for up to six months. Data is deleted or anonymised when no longer required.

7. Your rights

Subject to the GDPR conditions, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw analytics consent at any time through Cookie settings without affecting processing already carried out. Contact the controller at info@limonebikerental.com. You may also lodge a complaint with the Garante per la protezione dei dati personali at garanteprivacy.it.

8. Required information and security

Fields marked as required are needed to answer and manage the reservation request; without them the request cannot be processed. Reasonable technical and organisational safeguards are used, including HTTPS, protected administrator access and access limitation, but no internet transmission can be guaranteed risk-free.

9. Changes

This notice may be updated when services, providers or legal requirements change. The date and consent-policy version will be updated, and the cookie banner will be shown again when a material change requires a new choice.

Official references and provider notices