PRIVACY POLICY

1. Identity of the Data Controller The website rayanbike.com is owned and operated by Aabal Oubaih, with tax identification number Y-2673439-W, and registered address at Calle El Correillo 59, Playa Blanca, 35580, Las Palmas, Canary Islands, Spain. For any privacy-related enquiries, you may contact us at info@rayanbike.com.

2. Data We Collect When you use our website or complete a reservation or contact form, we may collect the following personal data: full name, email address, phone number, delivery address, and any additional information you voluntarily provide in the notes field. We do not collect sensitive data as defined under Article 9 of the GDPR.

3. Purpose and Legal Basis for Processing We process your personal data for the following purposes. To manage and confirm your bike rental pre-reservation, based on the performance of a contract or pre-contractual measures at your request. To respond to enquiries submitted through our contact form, based on your consent. To send you updates or promotional communications, only if you have explicitly subscribed to our newsletter, based on your consent. To comply with legal obligations applicable to our business activity.

4. Data Retention We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in any case for the periods required by applicable Spanish and European legislation. Reservation data will be kept for a minimum of five years for tax and accounting purposes.

5. Data Sharing We do not sell, rent or trade your personal data to third parties. We may share your data with trusted service providers who assist us in operating our website and conducting our business, such as email delivery services and web hosting providers, under appropriate data processing agreements. All processors are required to handle your data in accordance with the GDPR.

6. International Transfers Some of our service providers may be located outside the European Economic Area. In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your personal data.

7. Your Rights Under the GDPR, you have the following rights regarding your personal data: the right to access your data, the right to rectify inaccurate data, the right to erasure of your data, the right to restrict processing, the right to data portability, the right to object to processing, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To exercise any of these rights, please contact us at info@rayanbike.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos) at www.aepd.es.

8. Security We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Changes to This Policy We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated date. We encourage you to review this policy periodically.