Data processing notice - bike availability request

Data controller

The controller is GEMYNY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Kalwaryjska 29, 30-504 Kraków, Poland, NIP 6762623754, REGON 522869410.

For data protection matters, contact [email protected].

Data, purposes and legal basis

To handle the availability request, we process your name, phone number, optional email, selected bike, city, preferred date, language and source page URL.

The legal basis is GDPR Article 6(1)(b): steps taken at your request before a possible contract. Name, phone and date are necessary to handle the request; email is optional.

Marketing is separate

We send commercial information by email or by phone/SMS only under separate, voluntary consents. Refusing marketing consent does not affect your availability request.

You may withdraw consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of earlier processing.

Recipients and international transfers

Authorised staff and providers of hosting, CRM, IT support, email and SMS services may receive data only as needed to provide their services.

If a provider processes data outside the EEA, we use the legal basis and safeguards required by GDPR, including an adequacy decision or Standard Contractual Clauses.

Retention

We retain request data for up to 90 days after the preferred rental date, unless a rental begins or longer storage is necessary to establish, exercise or defend legal claims.

Marketing data is processed until consent is withdrawn. We may retain minimal suppression information so that we do not contact you against your decision.

Your rights

You may request access, rectification, erasure, restriction, portability, withdrawal of consent and object to direct marketing.

You may lodge a complaint with the President of the Polish Personal Data Protection Office. This form does not use solely automated decisions or profiling.

Age

The form is intended for adults. A minor should contact us through a parent or legal guardian.