Privacy Policy

1. Data Controller

The Data Controller is:

Bikejamming di B. Inzadi
Via Campo del Ponte 4/1
20060 Gessate (MI) – Italy
Email: info@bikejamming.it

The Data Controller processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection law.

2. Categories of Personal Data

We may process the following categories of personal data:

  • Identification data (first name, last name)

  • Contact details (address, email address, phone number)

  • Billing and tax information

  • Order and purchase details

  • Shipping data, including for deliveries outside Italy

  • Payment-related information (processed directly by payment providers)

  • Technical and browsing data (IP address, device information, cookies)

  • Reviews or communications voluntarily submitted by users

We do not process special categories of personal data pursuant to Article 9 GDPR.

3. Purposes of Processing and Legal Basis

Personal data are processed for the following purposes:

A. Performance of a Contract

  • Order management

  • Payment processing

  • Delivery of products in Italy and abroad

  • Customer support

  • Returns and legal warranty management

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

B. Legal Obligations

  • Accounting and tax compliance

  • Record keeping

  • Compliance with requests from competent authorities

Legal basis: Article 6(1)(c) GDPR (legal obligation).

C. Security and Fraud Prevention

  • Prevention of unlawful use of the website

  • Protection of our legal rights

Legal basis: Article 6(1)(f) GDPR (legitimate interest).

D. Newsletter and Marketing Communications

We send marketing communications only with prior explicit consent.

Legal basis: Article 6(1)(a) GDPR (consent).

Consent may be withdrawn at any time.

E. Soft Spam (Existing Customers)

If you are already a customer, we may send communications regarding products similar to those previously purchased, unless you object.

Legal basis: Article 130(4) of the Italian Privacy Code.

4. Methods of Processing

Personal data are processed using appropriate technical and organizational measures to ensure security and confidentiality.

No automated decision-making processes producing legal effects are carried out.

5. Payments

Payments by credit card, PayPal or other electronic systems are processed directly by the respective payment providers.

Bikejamming does not access or store full credit card details.

6. Disclosure of Data

Personal data may be disclosed to:

  • Couriers and shipping companies, including for international deliveries

  • Hosting and e-commerce platform providers

  • IT service providers

  • Accounting and tax consultants

  • Public authorities, when required by law

Processors acting on our behalf are appointed pursuant to Article 28 GDPR.

Personal data are not subject to public disclosure.

7. Transfers Outside the European Economic Area

Where necessary for technical or operational reasons (e.g., cloud services, analytics tools, newsletter platforms), personal data may be transferred outside the European Economic Area.

Such transfers will take place in compliance with Articles 44–49 GDPR, through:

  • Adequacy decisions of the European Commission; or

  • Standard Contractual Clauses (SCCs); or

  • Other safeguards permitted under applicable law.

8. Data Retention

Personal data are retained only for as long as necessary for the purposes for which they were collected:

  • Contractual and tax data: 10 years (in accordance with Italian law)

  • Marketing data: until consent is withdrawn

  • Browsing data: as specified in the Cookie Policy

9. Data Subject Rights

Under Articles 15–22 GDPR, you have the right to:

  • Access your personal data

  • Request rectification

  • Request erasure

  • Restrict processing

  • Data portability

  • Object to processing

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority in your country of residence.

10. Minors

The website is not intended for individuals under 18 years of age.

We do not knowingly collect personal data from minors.

11. Cookies

Information on the use of cookies is provided in the dedicated Cookie Policy.

12. Updates to This Policy

This Privacy Policy may be updated from time to time.

The latest version will always be available on this page.