Privacy Policy
Last updated: 13 August 2026
This policy describes how personal data of users browsing www.ebikeledro.com and/or using the e-bike rental and sales services of E-bike Ledro is processed, in compliance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection law.
1. Data Controller
The Data Controller is E-bike Ledro by Simone Filippi, based in Via A. De Gasperi 14,
Ledro (TN), Italy — VAT 02677930220.
For any request regarding the processing of your personal data you can contact us at:
info@ebikeledro.com or call
+39 379 178 4530.
2. What data we collect
We collect different categories of personal data depending on how you interact with us:
2.1 Data you provide directly
- Booking data: first and last name, phone number, email address, chosen date and time, requested bikes and accessories (e-bike, trailer, helmet, child seat), any additional notes entered in the form.
- Contact data: name, email, phone number and message content when you write to us by email, phone or WhatsApp.
- ID document: when you physically collect the e-bike at our rental point we may ask you to show a valid ID document, solely for identification purposes and to protect the rented equipment. This data is not collected through the website.
2.2 Data collected automatically
- Browsing data: IP address, browser and device type, pages visited, date and time of access, referrer, automatically collected while browsing the site.
- Cookies and similar technologies: used for technical, statistical and marketing purposes. See the Cookies section below for details.
3. Purposes and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Managing booking requests and the rental/sale relationship (confirmation, operational communications, assistance) | Performance of a contract or pre-contractual measures (art. 6.1.b GDPR) |
| Accounting, tax and administrative obligations | Legal obligation (art. 6.1.c GDPR) |
| Handling complaints, disputes and protecting the Data Controller's rights | Legitimate interest (art. 6.1.f GDPR) |
| Promotional activities, newsletters, commercial communications and advertising campaigns (including through third-party platforms such as Google Ads and Meta Ads) | Free and optional consent (art. 6.1.a GDPR) |
| Website usage statistics and technical profiling via third-party cookies | Consent, via cookie banner |
3.1 Use of booking data for advertising purposes
We explicitly inform you that the data you leave when booking (name, email, phone number) — besides being used to manage your rental — may be used, subject to your explicit consent given at the time of booking, for marketing purposes and to run advertising campaigns, for example to send you offers, seasonal promotions and communications about our services via email, SMS, WhatsApp or phone, and to show you personalised ads on platforms such as Google and Meta (Facebook/Instagram) through custom audiences built from your (encrypted) email address or phone number. This processing is entirely optional, does not affect your ability to complete a booking in any way, and is based solely on your consent, which you can withdraw at any time by writing to info@ebikeledro.com without affecting the lawfulness of processing carried out before the withdrawal.
4. Nature of data provision
Providing the data necessary to manage your booking (name, phone, email, date and time) is mandatory: without this data we cannot process your rental request. Providing data for marketing and advertising purposes is instead optional and does not affect your ability to use the service.
5. Who we share your data with
Your personal data may be shared, strictly within the limits necessary for the purposes above, with the following parties acting as data processors or independent controllers:
- Supabase Inc. — database provider where bookings are stored;
- EmailJS — service used to send booking confirmation emails;
- Google LLC — Google Tag Manager, Google Analytics and Google Ads, for statistical and advertising purposes;
- Meta Platforms Ireland Ltd. — when advertising campaigns are active on Facebook/Instagram;
- our accountant/tax advisor, for accounting and tax obligations;
- our website hosting provider;
- public authorities, when required by law.
Your data is never sold to third parties.
6. Transfer of data outside the EU
Some of the providers listed above (e.g. Google, Meta, Supabase) may process data outside the European Economic Area. In such cases, the transfer takes place in compliance with the safeguards provided by articles 44 et seq. of the GDPR, in particular through the adoption of Standard Contractual Clauses approved by the European Commission or other equivalent measures ensuring an adequate level of data protection.
7. Data retention period
- Booking-related data is kept for the duration of the relationship and, afterwards, for the period required by applicable Italian tax and accounting law (up to 10 years).
- Data processed for marketing and advertising purposes is kept until consent is withdrawn, or for a maximum of 24 months from the last interaction, whichever comes first.
- Browsing data and cookies are kept for the periods indicated in the Cookies section.
8. Your rights
As a data subject, you have the right at any time to:
- request access to your personal data (art. 15 GDPR);
- obtain rectification of inaccurate data or completion of incomplete data (art. 16 GDPR);
- obtain erasure of your data, where legally applicable (art. 17 GDPR);
- obtain restriction of processing (art. 18 GDPR);
- receive your data in a structured, machine-readable format (portability, art. 20 GDPR);
- object at any time to processing, including for marketing purposes (art. 21 GDPR);
- withdraw consent given, without affecting the lawfulness of processing carried out before the withdrawal;
- lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local supervisory authority.
You can exercise your rights at any time by writing to info@ebikeledro.com.
9. Minors
Our services are not intended for individuals under 18. Bookings for minors must be made by a parent or legal guardian.
10. Cookies
This site uses technical cookies, necessary for the site to function correctly, and — subject to your consent — analytics and marketing/profiling cookies, including third-party ones (e.g. Google Tag Manager, Google Analytics, advertising tools), used to analyse traffic and show you ads relevant to your interests.
- Technical cookies: essential for browsing and the site to work, do not require consent.
- Statistical/analytics cookies: help us understand how the site is used, in aggregated and, where possible, anonymous form.
- Marketing/profiling cookies: used to show you targeted ads based on your browsing, including on sites and social platforms other than ours.
You can manage or withdraw consent to the use of cookies at any time through the cookie banner shown on your first visit to the site, or from your browser settings.
11. Changes to this policy
This policy may be updated periodically, for example following regulatory changes or changes to the services offered. We invite you to check this page regularly. The last update date is shown above.