Privacy policy

Last updated 25 September 2026

Who is responsible for your data

The data controller for this website and for our rental service is Tuscany Ride a bike - Italy, trading as Premium Bike Rental, with its registered office in Andorra la Vella and its operating base at Hotel Cap Negret in Altea, Spain.

If you have any question about how we use your information, the quickest route is an email to the address above.

What we collect

We only collect what we need to answer you and to rent you a bike.

• When you use the contact form: your name, email address, the subject of your enquiry and your message. Your phone number and where you are staying are optional.
• When you request or make a booking: the dates, the bike you would like, your height and any measurements you give us for set-up, your delivery address if you want the bike brought to you, and your payment details where you pay online.
• When you email or call us: whatever you choose to tell us, and the correspondence itself.
• When you browse the site: standard technical data such as your IP address, browser type and the pages you visit, recorded automatically in our web server logs. If you accept analytics cookies, we also receive statistics about your visit through Google Analytics — which pages you read, how long you stay and roughly where in the world you are. See Cookies below.

Bookings themselves are handled by the Ride in the Box booking system, which runs on their own website. The booking buttons on our booking page take you there, and once you are on their site Ride in the Box processes your details under its own privacy policy as well as passing the booking on to us. If you would rather not use their system, the booking request form on that page comes straight to us by email instead.

Why we use it, and on what basis

• To answer your enquiry and prepare a quote — because you have asked us to, as a step before entering a contract.
• To provide the rental — to set the bike up to your measurements, deliver it, stay in touch during the hire and deal with any problem on the road. This is necessary to perform our contract with you.
• To meet our legal obligations — invoicing, accounting and tax records under Spanish law, and any obligation to identify the hirer of a bike.
• To keep the site and our business running safely — preventing fraud and abuse, and keeping the server logs that let us investigate problems. This is our legitimate interest, and it never overrides your rights.
• To understand how the site is used — which pages and routes people actually read, so we can make the site more useful. We do this with Google Analytics, and only with your consent, given through the cookie banner. You can withdraw it at any time.
• To send you news or offers — only if you have asked for them. We do not run a newsletter by default, and you can withdraw consent at any time.

How long we keep it

• Enquiries that do not become a booking: up to 12 months after our last exchange, so we can pick the conversation up if you come back.
• Bookings, invoices and rental records: for as long as Spanish tax and accounting law requires us to keep them, currently up to six years after the rental.
• Server logs: a short rolling period, typically no more than a few weeks, unless we need them to investigate a security incident.

Who we share it with

We do not sell your data and we do not pass it to anyone for their own marketing. We share it only with the people and services we need in order to work:

• Ride in the Box, which runs our online booking and payment system.
• Our website hosting and email providers, which store the site, the form submissions and our correspondence.
• Google Ireland Limited, which provides Google Analytics, but only if you have accepted analytics cookies.
• Our accountants and professional advisers, where they need it to do their job.
• Public authorities, where the law requires it.

Some of these providers may process data outside the European Economic Area. Where they do, we rely on safeguards recognised under EU law, such as an adequacy decision or the European Commission's standard contractual clauses.

Cookies

This site sets a small number of cookies. Necessary cookies keep it working — for example remembering that you have submitted a form, and storing your cookie choice itself so we do not ask again on every page. These need no consent. Analytics cookies are set by Google Analytics (the _ga and _ga_* cookies, which last up to two years) and only after you accept them in the cookie banner. Until you do, Google's tag runs in a restricted mode that stores nothing on your device and cannot recognise you. You can change or withdraw your choice at any time using the cookie icon in the corner of the screen. We run no advertising cookies. The Ride in the Box booking system, which you reach from our booking page, sets its own cookies once you are on their site, governed by their policy.

Your rights

Under the General Data Protection Regulation and Spain's data protection law (LOPDGDD) you have the right to:

• ask for a copy of the personal data we hold about you;
• have it corrected if it is wrong or incomplete;
• have it deleted, where we no longer have a reason to keep it;
• restrict or object to how we use it;
• receive it in a portable format;
• withdraw any consent you have given, at any time.

To exercise any of these, email post@premiumbikerental.es. We may ask you to confirm your identity first. We will reply within one month.

If you are not happy with how we have handled your data, you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos, at www.aepd.es.

How we protect it

The site is served over an encrypted connection, form submissions are stored in a password-protected system, and access to your details is limited to the people who need it to serve you. No system is perfectly secure, but we take reasonable care with what you give us.

Changes to this policy

If we change how we use your data we will update this page and the date at the top. For anything significant we will tell you directly where we can.