With this privacy policy, we aim to transparently inform you about how and for what purpose we process your personal data. Personal data includes all information that relates to you as an individual or that can be used to personally identify you.

This privacy policy applies to all processes in which we process your personal data, unless you have been informed of this separately. Please note that the processes that result in the processing of personal data are complex. Such processing takes place in the following cases in particular:

You book an offer from usYou visit our website or one of our social media accountsYou subscribe to our newsletterYou take part in competitions or eventsYou receive travel information or marketing communications from usYou contact us

We reserve the right to inform you about the processing of your data elsewhere, e.g. in our GTC

According to the applicable data protection regulations, the company responsible for the processing of personal data is the one that determines the purpose and means of this processing. Several companies may also be jointly responsible for the processing.

Eitzinger Sports S.L. is responsible for data processing in accordance with this privacy policy.

If you have any concerns or questions about data protection, you can contact the following office:

Eitzinger Sports S.L.
Avinguda Catalunya 35 3°/1,
17320 Tossa de Mar
Girona ESP

bikerental.cambrils@eitzinger.ch
+34 654 49 87 79

In connection with the processing of personal data, you have the following rights in particular:

• Right to information about your personal data stored by us, the purpose of the processing, the origin of the data and any data transfers
• Right to rectification if your data is incorrect or incomplete
• Right to restrict the processing of your personal data
• Right to object to data processing or to withdraw consent to the processing of personal data
• Right to erasure of your personal data
• Right to report to the competent supervisory authority
• Right to enforce your interests in court

Please note that the exercise of certain rights may contradict contractual agreements. This may in turn affect the performance of the contract (e.g. termination of the contract or cost consequences).

We process your personal data for various purposes. Primarily, the processing is necessary to provide you with our products and services.

6.1 Contract Fulfilment

In order to enter into and carry out contracts with you, we generally need to process your personal data. This applies, for example, when you book a trip with us, make a purchase in our bike shop, or use a service from our workshop.

In the context of fulfilling a contract, we may process the following categories of personal data in particular:

• Personal identification data (e.g. name, date of birth, gender, ID/passport number, passport validity date)
• Contact information (e.g. home/delivery address, email address, phone number)
• Financial data (e.g. payment details)
• Behavioral and transaction data (e.g. shopping cart contents, booking and purchasing behavior)
• Profile data or personal preference data (e.g. interactions with our travel agency, bike shop, or workshop)

We may process your data as necessary for contract initiation, conclusion, execution, or enforcement. Your data may also be processed for emergency communication purposes.

In order to deliver a service, your data may be shared with a service provider (e.g. airline or hotel). Please note that Eitziner Bike Holiday GmbH may act solely as an intermediary in such cases. In those instances, the service provider processes your data under their own responsibility and their respective privacy policies apply. Additionally, data is exchanged with payment service providers for the purpose of payment processing.

6.2 Communication

To communicate with you and respond to your inquiries, we must process your personal data. This occurs, for example, when you use our contact form, email, call, write to us, or when we reach out to you with questions.

We may process the following categories of data in the context of communication:

• Personal identification data (e.g. name, date of birth, gender)
• Contact information (e.g. address, email address, phone number)
• Content and metadata of communication (e.g. details about the content, type, time, and location of the communication)

We may carry out all processing activities necessary for communication with you.

6.3 Marketing

We would like to regularly provide you with offers and news about our products and services through various channels. We may also inform you about products and services of our partners and third parties that we believe may be of interest to you.

To inform you about attractive and relevant offers and to keep you updated with important news, we process your personal data for marketing purposes. This may happen, for instance, when you book a trip with us, make a purchase in our bike shop, or use a service in our workshop.

For marketing purposes, we may process the following categories of personal data:

• Personal identification data (e.g. name, date of birth, gender)
• Contact information (e.g. home/delivery address, email address, phone number)
• Behavioral and transaction data (e.g. shopping cart details, purchasing/booking behavior)
• Online identifiers (e.g. cookie IDs, IP addresses)
• Tracking and traffic data (e.g. browsing and click behavior)
• Profile data or personal preference data (e.g. product or service preferences)

Marketing includes all processing activities that allow us to inform you appropriately about our offerings. We may send you written and electronic information or offers. This includes, in particular:

• Sending newsletters, emails, push notifications via our website, and other electronic messages
• Sending printed materials such as brochures, magazines, or other mailings
• Displaying digital advertisements (e.g. search ads, display ads, video ads, social ads)
• Issuing vouchers and inviting you to events or sweepstakes

We may also process your personal data for additional purposes, including but not limited to:

• Market and opinion research
• Assertion of legal claims
• Compliance with legal obligations and the prevention or investigation of crimes or misconduct
• Evaluation and improvement of internal processes and for administrative purposes

Normally, you provide us with your personal data yourself, for example by sending it to us or when you communicate with us.

In certain cases, we also collect data about you ourselves or automatically, for example when you use our services, book with us or surf our website. This includes, in particular, behavioral and transaction data, online identifiers as well as tracking and traffic data.

We may also receive your personal data from third parties. These may be the following third parties, for example:

• People from your environment
• Banks and other contractual partners
• Online service providers
• Authorities
• Registers and public sources
• Companies affiliated with Eitzinger Bike Holiday GmbH

The legal basis for the collection and processing of your personal data depends on the specific purpose of the data processing.

We process your data in good faith and for the purposes set out in this privacy policy (see section 6).

If this is necessary, we base the processing on a justification. The following justifications typically come into question:

• Consent on your part
• Execution of a contract or pre-contractual measures
• Compliance with legal requirements
• Balancing of legitimate interests

You can revoke any consent you have given for data processing at any time (see also section 5). The legality of the data processing that has already taken place remains unaffected by the revocation.

We will only pass on your personal data if we have a legal basis for doing so. The data is always transmitted for a specified purpose.

9.1 Affiliated companies

We only pass on your personal data to affiliated companies for administrative purposes. In these cases, the data will not be processed for the respective companies' own purposes.

9.2 Third parties

We may pass on your personal data to third parties if this is necessary in the context of contract processing or other purposes (see section 6). This may be, for example, a company entrusted with the performance of a service or a credit institution commissioned to process a payment. Such third parties are contractually obliged to process your personal data exclusively on our behalf and in accordance with our instructions. In addition, third parties must ensure the security of your personal data by means of suitable technical and organizational measures.

If Eitzinger Bike Holiday GmbH only acts as an agent for the services offered, the data necessary for the provision of the service will also be passed on to the relevant service provider (e.g. flight or hotel provider). In this case, this service provider processes your data under its own responsibility and its privacy policy applies.

As far as possible, we process your personal data in Switzerland or the European Economic Area (EEA). Under certain circumstances, your personal data may be transferred to service providers abroad as part of order processing. The transfer may take place worldwide.

Data will only be transferred to a third country in the absence of adequate data protection in the third country concerned if the processor has provided guarantees deemed appropriate by the legislator to ensure data protection. In such a case, a transfer will only take place after a prior risk assessment. If we deem it necessary to take additional technical measures to safeguard the integrity and confidentiality of the personal data transmitted, we will ensure this.

We only process particularly sensitive personal data if this is absolutely necessary for the provision of our services and you have provided us with this data or have consented to its processing.

We only store personal data for as long as is necessary to fulfill the individual purposes for which the data was collected or if we are legally obliged to store it for longer.

We store your personal data as securely as possible and take appropriate technical and organizational measures to protect your data from loss, access, misuse or alteration. Both our contractual partners and our employees are obliged to comply with the applicable data protection regulations.

When you visit our website, certain data is automatically stored on our servers or on servers of services that we purchase and/or have installed. This is done for the purposes of system administration, security, tracking or statistical analysis. This may involve the following data, for example:

• Location, date and time of access
• IP address
• Operating system and browser information
• Name of Internet service provider
• Websites you have previously visited
• Search terms you used to find our website

The collection of these log files is absolutely necessary for the operation of the website. You therefore have no option to object to this. The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Normally, the data is deleted at the end of each session.

We operate pages on social networks and other platforms operated by third parties (fan pages, channels, profiles, etc.). We may collect data about you there. We receive this information both from you and from the platforms when you contact us via our pages (e.g. through communication, comments or visits).

The platforms analyze your use of our pages and link this data with other information they know about you (e.g. behavior and preferences). The platforms process this data independently and also for their own purposes.

We use this data in particular for communication, marketing and market research purposes. We may also use content published by you (e.g. comments), e.g. in our advertising on the platform or elsewhere. Both we and the platform operators may remove or restrict content from or about you in accordance with the usage guidelines (e.g. inappropriate comments).

For further information on the data processing of the platform operators, please refer to the data protection information of the respective platform.

Our website and newsletters use so-called cookies, pixels, tags, fingerprints, and other tracking technologies (collectively referred to as "cookies"). Cookies are small files that are stored on your computer or mobile device when you visit our website or receive our newsletter.

16.1 What Types of Cookies Do We Use?

We use different types of cookies to provide you with an optimal browsing experience. Below is an overview of the types of cookies we use:

• Essential Cookies (mandatory): These cookies are strictly necessary for the functioning of the website and its core features. For example, they ensure that entered form data is retained when navigating between pages and that shopping cart contents are preserved.
• Preference Cookies (optional): These cookies allow us to store certain information you enter on our website (e.g., location, language) so that you don’t have to re-enter it. This helps improve the user-friendliness of our site.
• Statistics Cookies (optional): These cookies help us understand how visitors interact with our website. The collected data allows us to continuously improve the site and user experience.
• Marketing Cookies (optional): Marketing cookies enable us (or our marketing partners) to show you relevant advertisements on our website or third-party sites based on your browsing behavior.

16.2 Do We Use Third-Party Cookies?

Yes, we may also use third-party cookies. In such cases, the cookies are set not by us, but by the respective third-party provider. These providers may be located outside the European Economic Area (EEA).

Third-party cookies are used, for example, for analytics services or for tracking and retargeting purposes. Providers such as Google and Facebook allow us to display advertisements to you on our site or on third-party websites and to measure their effectiveness.

16.3 How Long Are Cookies Stored?

Most cookies we use are "session cookies" and are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them (they are typically deleted automatically after a maximum of 2 years).

16.4 Can You Prevent Data Collection via Cookies?

Cookies are stored on your device. Therefore, you have full control over the use of cookies. You can delete them completely or disable or restrict their transmission at any time. For more information on managing cookies, consult your browser’s help pages or the privacy settings of the respective third-party providers (see section 16.5).

You can also review and adjust or withdraw your current cookie preferences at any time via the cookie settings on our website.

Please note: If you disable cookies, certain features of our website may no longer function properly.

16.5 Overview of Third-Party Cookies and Social Media Plugins

Below is a list of third-party providers whose services we use on our website:

Google

We use the following services from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) or its affiliates:

• Google Ads
• Google Analytics
• Google Business Profile
• Google Maps
• Google Tag Manager
• YouTube Plugins

For detailed information on Google’s privacy policy, please refer to their official documentation.

Microsoft

We use the following service from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA) or its affiliates:

• Microsoft Clarity

For detailed information on Microsoft’s privacy policy, please see their official site.

Meta

We use the following services from Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, D04 X2K5, Ireland) or its affiliates:

• Facebook Plugins
• Instagram Plugins
• Threads Plugins

For detailed information on Meta’s privacy policy, please consult their website.

SmartBear

We use the following service from SmartBear Software Inc. (450 Artisan Way, Somerville, MA 02145, USA) or its affiliates:

• BugSnag

For detailed information on SmartBear’s privacy practices, please visit their privacy page.