1. Data Controller Information
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the data controller responsible for the processing of your personal data is:
- Controller: Cobra Rental Bike Valencia
- Physical Location: Carrer de la Bosseria, 17, Ciutat Vella, 46001 Valencia, Spain
- Phone / WhatsApp: +34 646 59 47 68
- Privacy Email: info@rentalbikevalencia.com
2. Personal Data We Collect
We process only the personal information strictly necessary to provide bicycle rentals, tours, and luggage storage:
- Inquiries and Pre-Reservations: Name, phone number (for WhatsApp confirmations or voice calls), and email address.
- On-Site Rental Contracts: Full name, official government identification number (Passport, EU ID card, or driver's license), home address or hotel/accommodation in Valencia, and client signature required by Spanish commercial law.
- Payment Information: Handled securely via certified bank POS card readers with SSL/TLS encryption. We do not store credit card numbers.
- Web Browsing: Anonymized analytical data to ensure optimal website navigation and performance.
3. Purpose of Processing
Your personal information is collected and processed for the following clear business purposes:
- Rental and Storage Contract Execution: Managing bike reservations, check-in, check-out, deposit pre-authorizations, and vehicle maintenance tracking.
- Customer Support: Answering inquiries and providing instant booking confirmations and local route recommendations via WhatsApp and email.
- Accounting and Tax Compliance: Invoicing and meeting legal reporting duties under Spanish commercial regulations.
- Physical Facility Security: CCTV video surveillance operated on-site strictly to safeguard guests, rented vehicles, and stored luggage.
4. Legal Grounds for Processing
The legal basis for processing your data under Article 6 of the GDPR is:
- Performance of a Contract (Art. 6.1.b GDPR): Necessary for delivering the requested bicycle hire or luggage storage service.
- Express Consent (Art. 6.1.a GDPR): When you contact us via website forms, email, or WhatsApp.
- Legal Obligation (Art. 6.1.c GDPR): Compliance with statutory tax, civil, and consumer legislation in Spain.
- Legitimate Interest (Art. 6.1.f GDPR): Preventing theft, unauthorized equipment damage, and securing premises via on-site CCTV.
5. Data Retention Period
Personal data will only be kept for as long as needed for its initial purpose:
- Contract and invoice data are retained for statutory legal prescription periods (4 to 5 years under Spanish tax law).
- General customer inquiry messages are deleted once the inquiry is resolved or upon request.
- CCTV footage is automatically overwritten and erased within a maximum of 30 days, unless requested by police or judicial authorities.
6. Data Sharing and Third-Party Disclosure
Cobra Rental Bike Valencia does not sell, rent, or trade your personal data with third-party advertisers. Data is only communicated to:
- Law enforcement authorities, judges, or tax agencies where legally mandated.
- Banking institutions strictly for processing rental payments and security deposit refunds.
- Certified technical service providers (such as hosting infrastructure and business messaging providers) operating under GDPR-compliant data processing agreements.
7. Your GDPR Rights
Under European data protection law, you hold the following rights free of charge:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request corrections to incomplete or inaccurate data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer required for legal obligations.
- Right to Restriction: Request that processing be temporarily limited under certain statutory circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.