Política de privacidad / Privacy Policy

 I. Contact information

 Halfbike Fuerteventura

C. Corazón de María, 2 - 35629 Tarajalejo - Tuineje - Fuerteventura (Spain)
Tel.: +34 690 398 745
E-Mail: [email protected]

II. Data processing

We process the data of our customers, interested parties and contractual partners within the scope of our contractual services, in accordance with Art. 6 (1) lit. GDPR. 

In doing so, we process inventory data (e.g., customer master data such as names or addresses), contact data (e.g., email, telephone numbers), content data (e.g., text entries), usage and metadata (e.g., in the context of evaluating and measuring the success of marketing measures). We do not process special categories of personal data unless they are part of commissioned processing. The data subjects include our customers, interested parties and their customers, users, website visitors or employees, as well as third parties. The purpose of processing is to provide contractual services, billing and our customer service. The legal basis for processing is provided by Art. 6(1)(b) GDPR (contractual services) and Art. 6(1)(f) GDPR (analysis, statistics, optimisation, security measures). We process data that is necessary for the establishment and fulfilment of contractual services and point out the necessity of providing this data. Disclosure to external parties only takes place if it is necessary within the scope of an order. When processing the data provided to us within the scope of an order, we act in accordance with the instructions of the client and the legal requirements for order processing in accordance with Art. 28 GDPR and do not process the data for any purposes other than those specified in the order. 

We delete the data after the expiry of statutory warranty and comparable obligations. The necessity of storing the data is reviewed every three years; in the case of statutory archiving obligations, deletion takes place after their expiry (6 years, in accordance with Section 257 (1) of the German Commercial Code (HGB), 10 years, in accordance with Section 147 (1) of the German Fiscal Code (AO)). In the case of data disclosed to us by the client within the scope of an order, we delete the data in accordance with the specifications of the order, generally after the end of the order. 

When contacting us (e.g. via contact form, email or telephone), the user's details are processed for the purpose of handling the contact request and it’s processing in accordance with Art. 6 para. 1 lit. b. (within the framework of contractual/pre-contractual relationships), Art. 6 para. 1 lit. f. (other enquiries) GDPR. The user's details may be stored in a customer relationship management system (‘CRM system’) or comparable enquiry organisation system. 

We delete requests if they are no longer required. We review the necessity every two years; furthermore, the statutory archiving obligations apply. 

Provision of online services and web hosting

Description: Our website is hosted by a website hosting provider that uses cloud-based servers within the EU to provide a stable and secure hosting platform. Our website is distributed via a content delivery network with servers around the world to ensure fast and secure delivery of our website to our website visitors.
Types of data processed:
Usage data: e.g. web pages visited, access times, all entries within our online offering or from websites.
Communication data: e.g. browser type, operating system or IP addresses.
Data subjects: Users (website visitors).
Purpose of processing: Fast provision of a stable and secure online offering.
Legal basis: Technically necessary (Section 25 (2) No. 2 TTDSG) and legitimate interest (Art. 6 (1) (f) GDPR).
Recipients or categories of recipients: Website hosting providers, SSL certificate providers, content delivery network providers
Data transfer to third countries: We transfer your personal data to processors in the USA for this purpose. Information on the transfer of personal data to third countries can be found in the section Transfer to third countries.
Retention periods or criteria used to determine retention periods: For more information, see the section on retention periods.

Collection of log files

Description: We store log files for analysis and maintenance of the technical operation of the servers, as well as to support anti-abuse measures and protect the security of the hosting platform.
Types of data processed:
Usage data: e.g. websites visited, access times.
Communication data: e.g. browser type, operating system or IP addresses.
Data subjects: Users (website visitors).
Purpose of processing: To improve the stability and functionality of our website. Legal basis: Legitimate interests (Art. 6(1)(f) GDPR). Our legitimate interest is to ensure the stability and functionality of the website.
Recipients or categories of recipients: Website hosting providers, website analysis providers
Data transfer to third countries: Your personal data is processed within the EU.
Retention periods or criteria used to determine retention periods:
The log files are stored for 7 days and then deleted.

Contact form

Description: We offer a contact form function on our website that allows you to contact us by entering your contact details and your request and clicking on ‘Submit’.
Types of data processed:
Usage data: name, email address and content of the message, websites visited, access times.
Communication data: e.g. IP addresses, browser type, operating system or IP addresses.
Data subjects: users (website visitors).
Purpose of processing: processing of contact and pre-contractual enquiries via our website.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), performance of a contract and/or pre-contractual enquiries (Art. 6(1)(b) GDPR). Our legitimate interest is to respond to your enquiry.
Recipients or categories of recipients: Website hosting providers, providers of transactional emails
Data transfer to third countries: We transfer your personal data to processors in the USA for this purpose. Information on the transfer of personal data to third countries can be found in the section on transfers to third countries.
Retention periods or criteria used to determine retention periods: For more information, please refer to the section on retention periods.

Lead capture function ‘Smart Forms’

Description: We offer smart forms on our website that you can use to contact us and provide additional information that we need to respond to your enquiry.
Types of data processed:
Usage data: log files, access times
Communication data: e.g. message content, name, telephone number, timestamp (e.g. time the form was sent), IP address, browser type, operating system
Data subjects: users (website visitors).
Purpose of processing: Processing of contact and pre-contractual enquiries via our website.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), performance of a contract and/or pre-contractual enquiries (Art. 6(1)(b) GDPR). Our legitimate interest is to respond to your enquiry.
Recipients or categories of recipients: Website hosting provider, transaction email provider, our email service provider.

Data transfer to third countries: We transfer your personal data to processors in the USA for this purpose. Information on the transfer of personal data to third countries can be found in the section on transfers to third countries.
Retention periods or criteria used to determine retention periods: For more information, please refer to the section on retention periods. 

Captcha 

Description: We have implemented a third-party captcha tool in the contact form to check whether the entries in the contact form originate from human visitors to this website or from machines or automated programmes (also known as ‘bots’).
Types of data processed:
Usage data: e.g. website accessed and date and time of access
Communication data: e.g. IP addresses, browser type, operating system, IP addresses
Data subjects: Users (e.g. website visitors, users of online services).
Purpose of processing: Securing the contact form with spam protection.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Our legitimate interest is to prevent misuse of our contact form.
Recipients or categories of recipients: Website hosting providers, captcha providers.
Data transfer to third countries: Your personal data will be processed within the EU.
Retention periods or criteria used to determine retention periods: For more information, please refer to the section on retention periods.

Analysis of website visitors

Description: When you visit our website, we collect information about your use of our website using a web analytics function developed by our website hosting provider and store it in pseudonymised form. This tool collects your IP address and user agent, combines them, and truncates and stores this data using a hash function. In this way, we generate a visitor ID that is encrypted with a random value, known as SALT, which changes every 24 hours. This ensures that your IP address cannot be recovered from the visitor ID we store and that you cannot be personally identified. Furthermore, we do not combine this data with other data and only store it on the website hosting provider's server. We also process web analytics, HTTP data and web analytics profile data. The web analytics function we use creates and stores the web analytics profile. This contains information about the use of our website, in particular page views, frequency of visits and length of stay on visited pages, as well as the client user agent of your end device.
Types of data processed:
Usage data: e.g. websites visited, access times
Communication data: e.g. browser type, operating system or IP addresses
Data subjects: Users (website visitors).
Purpose of processing: Analysis of user behaviour in aggregated form in order to improve our website, including its presentation and content.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Our legitimate interest is to carry out web measurements in order to improve our products and our website.
Recipients or categories of recipients: Website hosting providers.
Data transfers to third countries: Your personal data will be processed within the EU.
Retention periods or criteria used to determine retention periods: For more information, please refer to the section on retention periods.

Contact list

Description: We use a service provided by our website provider to create contact lists in order to optimally use and manage our customers' data.
Types of data processed:
Usage data: Name, email address, transaction email data, newsletter subscription.
Communication data: e.g. browser type, operating system or IP addresses.
Data subjects: Users (e.g. website visitors, users of online services).
Purpose of processing: Management of customer data, newsletter registration.
Legal basis: Fulfilment of contract and/or pre-contractual enquiries (Art. 6(1)(b) GDPR).
Recipients or categories of recipients: Website hosting providers, transaction email providers.
Data transfer to third countries: Your personal data will be processed within the EU.
Retention periods or criteria used to determine retention periods: For more information, please refer to the section on retention periods.

Map content (Google Maps)

Description: We embed maps on this website using a plugin from a map service provider to enable an appealing presentation of our online offerings and to make it easy to find the locations we specify on the website. Once you have given your consent via the consent level or cookie banner, the map element is loaded and the data is transferred to the map provider's servers.
Types of data processed:
Usage data: e.g. websites visited, access times.
Communication data: e.g. browser type, operating system or IP addresses.
Data subjects: Users (e.g. website visitors, users of online services).
Purpose of processing: Appealing presentation of our online offerings and easy location of the places specified by us on the website.
Legal basis: Consent (Art. 6(1)(a) GDPR).
Recipients or categories of recipients: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, https://policies.google.com/privacy
Data transfer to third countries: Your personal data will be processed within the EU.
Retention periods or criteria used to determine retention periods: For more information, please refer to the section on retention periods.

III. Retention periods

In general, we process and store your personal data for the duration required for the respective purpose of use. This may also include the periods of contract initiation (pre-contractual legal relationship) and contract execution. On this basis, personal data is regularly deleted in the course of fulfilling our contractual and/or legal obligations, unless its temporary further processing is necessary for the following purposes:

• Fulfilment of statutory retention obligations (commercial or tax law)
• Retention of evidence, taking into account the limitation periods
• Assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person.

IV. Transfer to third countries

We ensure that your data is processed within the EU or the European Economic Area. If this is no longer possible and the data must be transferred to a third country, Jimdo will, after prior review, ensure that the country to which the data is transferred maintains an adequate level of data protection that meets the requirements of the Court of Justice of the European Union and the European Commission.
In such cases, the transfer of data is based on an adequacy decision by the European Commission or the standard contractual clauses for the transfer of personal data to third countries in their currently valid version. These can be viewed here.
Data may also be transferred to a third country on the basis of your consent. Details of this will be communicated to you separately, if necessary.

V. The rights of our visitors and users (data subject rights)

• Access to information: You may request access to information about your personal data that we process.
• Rectification: If your data is not (or no longer) correct, you may request that your data be rectified. If your data is incomplete, you may request that it be completed.
• Erasure: You have the right to request the erasure of your data in accordance with applicable data protection laws. Please note that a request for erasure may depend on whether there is a legitimate reason and whether there is no legal reason that requires us to retain your data.
• Restriction of processing: You have the right to request the restriction of the processing of your data. Please note that a request for restriction of processing depends on the existence of a legitimate reason.
• Objection: You have the right to object to the processing of your data for reasons relating to your particular situation. In the event of a justified objection, we will no longer process your data.
• Objection to the processing of your data for direct marketing purposes: You have the right to object to the processing of your data for direct marketing purposes at any time. This also applies to profiling in connection with direct advertising. You can send us your objection informally, preferably to the above contact details, stating the keyword ‘Objection to the processing of my personal data for advertising purposes’.
• Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
• Data portability: You have the right to receive personal data that you have provided to us in an electronic format.
• Withdrawal of your consent: You have the right to withdraw your consent at any time. The easiest way to withdraw your consent is to send an email to the contact details above. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.