Privacy Policy

Last updated: 01 October 2026

This Privacy Policy describes how the website https://www.bicicapace.com (the “Site”) collects, uses and protects users’ personal data, pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) and applicable Italian law.

1. Data Controller
Bicicapace SRL, Piazza Cinque Giornate 1, 20129 Milan (MI), Italy. VAT number: IT10049070963. Email: info@bicicapace.com.
The Controller has not appointed a Data Protection Officer (DPO), as this is not mandatory.

2. Data collected, purposes and legal bases

2.1 Navigation data. The Site’s IT systems collect certain data whose transmission is implicit in the use of Internet protocols, such as IP address, browser type, pages visited and access times. This data is used to ensure the operation and security of the Site. Legal basis: the Controller’s legitimate interest (Art. 6(1)(f) GDPR).

2.2 Cookies and statistics (Google Analytics). The Site uses technical cookies, which are necessary for it to function. Only with the user’s consent, given through the cookie banner, it also uses analytics cookies from Google Analytics 4, provided by Google Ireland Limited, to obtain statistics on the use of the Site. Legal basis for analytics cookies: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time via the [Cookie preferences] link. For details, please see our [Cookie Policy – link].

2.3 Test ride and information requests. Through the forms on the Site and its landing pages, created with Google Forms, we collect first name, last name, email address and location [and any other fields: phone…]. This data is processed to:
a) handle the test ride or information request, contact the user and forward the request to the nearest Bicicapace dealer, who will arrange the test ride. Legal basis: steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR);
b) only if the user consents by ticking the dedicated optional box, send promotional communications and newsletters about Bicicapace products and initiatives. Legal basis: consent (Art. 6(1)(a) GDPR).

3. Whether providing data is mandatory
Providing the data referred to in section 2.3 a) is necessary to handle the request: without it, we cannot process the request. Consent to marketing under section 2.3 b) is optional, and not giving it does not prevent the user from requesting a test ride.

4. Processing methods and retention period
Data is processed using electronic tools, with appropriate security measures. It is retained as follows:

  • test ride and information request data: 12 months from the request;
  • marketing data: 24 months from the date of consent or the last interaction, or until consent is withdrawn, if earlier;
  • navigation data: up to 90 days, unless needed to investigate unlawful activity;
  • analytics cookies: as specified in the Cookie Policy.

5. Recipients of the data
Data will not be disseminated. It may be disclosed to:

  • authorised personnel of Bicicapace SRL;
  • Google Ireland Limited, for the Google Forms and Google Analytics services, acting as Data Processor;
  • Automattic, for the WordPress.com hosting service on which the Site is hosted, acting as Data Processor;
  • the Bicicapace dealer nearest to the user, limited to the data needed to arrange the test ride. The dealer processes this data as an independent Data Controller, solely for this purpose.

6. Transfers outside the EU
Some providers, in particular Google and Automattic, may process data in the United States.
Such transfers are based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework and, where applicable, on the Standard Contractual Clauses approved by the Commission. If the nearest dealer is located outside the European Economic Area, data will only be transferred to countries covered by a European Commission adequacy decision (e.g. United Kingdom, Switzerland, Canada) or on the basis of other safeguards provided for in Articles 46-49 GDPR.

7. Automated decision-making
We do not carry out automated decision-making, including profiling, that produces legal effects concerning the user or similarly significantly affects them.

8. User rights
Users may at any time exercise the rights provided for in Articles 15-22 GDPR: access to their data, rectification, erasure, restriction of processing, data portability and objection to processing, including for marketing purposes. Users may also withdraw their consent at any time, without affecting the lawfulness of processing carried out before withdrawal. Every promotional communication includes an unsubscribe link. Requests should be sent to info@bicicapace.com.
Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the country where they live or work.

9. Changes
The Controller may update this Privacy Policy. The current version is always published on this page, together with the date of the last update.

To top