Privacy Policy

1. Introduction

This Privacy Policy describes how Bike Booking Engine, S.L. ("Bike Booking Engine", "BBE", "we", "us", or "our") processes Personal Data when acting as a Data Controller.

We are committed to processing Personal Data in a transparent, secure and lawful manner, in accordance with applicable data protection legislation.

This Privacy Policy applies to the processing of Personal Data in connection with:

• Accessing and browsing our Website;
• Submitting contact requests;
• Requesting product demonstrations;
• Subscribing to our Services;
• Creating and managing Customer Accounts;
• Providing customer support;
• Billing and administrative management;
• Sending commercial communications where legally permitted; and
• Any other processing activities for which Bike Booking Engine acts as the Data Controller.

This Privacy Policy does not apply to Personal Data processed by Bike Booking Engine solely on behalf of its Customers while providing the SaaS Services.

Where Bike Booking Engine acts as a Data Processor, such processing is governed by the applicable Data Processing Agreement (DPA).

2. Data Controller

3. Categories of Data Subjects

Depending on the relationship maintained with Bike Booking Engine, we may process Personal Data relating to:

• Website visitors;
• Prospective customers;
• Customers;
• Customer representatives;
• Authorized Users of the Platform;
• Individuals requesting product demonstrations;
• Individuals contacting us;
• Subscribers to commercial communications;
• Suppliers;
• Business partners; and
• Job applicants, where applicable.

4. Categories of Personal Data

Depending on how the Website or Services are used, Bike Booking Engine may process categories of Personal Data including:

Identification Data

• First name;
• Last name;
• Company name;
• Job title;
• Business address.

Contact Information

• Email address;
• Telephone number;
• Postal address.

Commercial Information

• Subscribed Services;
• Demo requests;
• Commercial preferences;
• Communications with Bike Booking Engine.

Technical Information

• IP address;
• Browser information;
• Device information;
• Technical identifiers;
• Operating system;
• Activity logs;
• Security-related information.

Billing Information

• Tax information;
• Billing address;
• Payment history;
• Administrative information related to the commercial relationship.

Bike Booking Engine seeks to process only the Personal Data reasonably necessary for each specific purpose.

5. Purposes of Processing

Personal Data may be processed for purposes including:

• Responding to enquiries;
• Managing demonstration requests;
• Entering into contracts;
• Managing Customer Accounts;
• Providing technical support;
• Handling incidents;
• Issuing invoices;
• Complying with legal obligations;
• Improving our Services;
• Preventing fraud;
• Maintaining Platform security;
• Sending commercial communications where legally permitted;
• Preparing aggregated statistical information; and
• Responding to requests concerning data protection rights.

6. Legal Basis for Processing

Bike Booking Engine processes Personal Data only where a valid legal basis exists, including:

• Performance of a contract;
• Implementation of pre-contractual measures;
• Compliance with legal obligations;
• Legitimate interests; and
• The Data Subject's consent, where required.

The applicable legal basis will depend on the specific processing activity.

7. Data Retention

Personal Data will be retained only for as long as reasonably necessary to fulfil the purposes for which it was collected.

Thereafter, Personal Data may be retained where necessary to:

• Comply with legal obligations;
• Establish, exercise or defend legal claims;
• Resolve disputes; or
• Protect Bike Booking Engine's legitimate interests.

Additional retention criteria may be set out in the applicable Backup & Retention Policy or other contractual documentation.

8. Recipients of Personal Data

Bike Booking Engine may disclose Personal Data where necessary to:

• Comply with legal obligations;
• Provide the subscribed Services;
• Respond to lawful requests from competent authorities; or
• Engage specialized technology service providers acting on our behalf.

Where third-party service providers process Personal Data on behalf of Bike Booking Engine, they are contractually required to implement appropriate safeguards consistent with applicable data protection legislation.

9. International Data Transfers

Where the provision of our Services involves international transfers of Personal Data, Bike Booking Engine shall implement the safeguards required by applicable data protection legislation.

Additional information regarding such safeguards may be provided upon request where legally required.

10. Data Subject Rights

Where applicable, Data Subjects may exercise the following rights:

• Right of access;
• Right to rectification;
• Right to erasure;
• Right to object;
• Right to restriction of processing;
• Right to data portability;
• Right to withdraw consent; and
• Any other rights granted under applicable law.

Requests may be submitted to:

info@bikebookingengine.com

Bike Booking Engine may request additional information where reasonably necessary to verify the identity of the requester.

11. Information Security

Bike Booking Engine implements commercially reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, loss, alteration, destruction or unauthorized disclosure.

However, no Internet-connected system can guarantee absolute security.

Additional information regarding our security practices may be found in our applicable Security Policy.

12. Artificial Intelligence

Certain features of our Services may incorporate artificial intelligence technologies in order to improve the user experience, automate operational processes or provide advanced functionality.

Where such technologies involve the processing of Personal Data, Bike Booking Engine will implement reasonable safeguards designed to ensure compliance with applicable data protection legislation and the relevant contractual documentation.

The use of artificial intelligence does not replace the Customer's own decision-making processes and does not constitute solely automated decision-making producing legal or similarly significant effects on individuals, unless expressly stated otherwise and supported by an appropriate legal basis.

13. Changes to this Privacy Policy

Bike Booking Engine may update this Privacy Policy whenever necessary to reflect changes in applicable legislation, technology, security practices, organizational requirements or the evolution of our Services.

The latest version published on our Website shall always be the version in force.

Where changes materially affect Data Subjects, Bike Booking Engine shall endeavor to provide reasonable notice through appropriate communication channels.

14. Contact

For any questions regarding this Privacy Policy or the processing of Personal Data, please contact:

15. Version

Version 2.0

Last Updated: 05/08/2026