1. Controller responsible for the data processing
The controller responsible for the data processing within the meaning of Article 13 (1) a) of the General Data Protection Regulation (GDPR) is:
Cycle Love Ltd
Karyders Building 4, Shop 21
6010 Larnaca, Cyprus
Tel: 24 000888
Email: [email protected]
2. Specific details relating to the data processing
2.1. Personal data
Article 4 (1) GDPR defines personal data as any information relating to an identified or identifiable natural person. Personal data includes, for example, name, address, telephone number, email address, bank account details, credit card number.
2.2. Data processing for the performance of a contract
If you place an order with Cycle Love Ltd, we shall need personal data for the purposes of processing the purchase, including shipping the goods that you have ordered, handling returns or dealing with complaints. Specifically, we shall need details relating to your name, postal address, email address and, if applicable, essential payment details. It is essential that you provide your email address so that we can send you confirmation of receipt of your order, notify you of the shipment of your goods and/or contact you. Therefore, this data processing will take place for the purpose of performing the contract.
Even before a contract is concluded, you may have already contacted Cycle Love Ltd and, for example, sent us an email enquiry requesting our advice. In this case, the data received from you, such as your email address and possibly your name, will be processed by us for the purpose of carrying out precontractual measures.
Article 6 (1) b) GDPR is the legal basis for data processing for the purpose of performing a contract or for carrying out precontractual measures as a result of an enquiry from the data subject.
For handling your order, Cycle Love Ltd will pass on personal data to service partners such as payment service providers (including, but not limited to, banks, Paypal, Amazon Pay, credit card companies) and shipping service providers (including, but not limited to, DHL, DPD, Hermes, forwarders), insofar as this is necessary for the performance of your contract.
It is also possible that your personal data will be passed on to a supplier delivering the goods directly to you. The recipient must use the transferred data only for the performance of its task. Any use beyond this is not permitted. Personal data processed for the performance of the contract will be stored by us for the statutory period of limitation.
The data necessary under commercial law or fiscal law will be stored by us for the retention periods prescribed by law under Section 257 HGB [German Commercial Code] and Section 147 AO [Tax Code], generally for a period of 10 years. Personal data processed for carrying out precontractual measures will be erased within 12 months if no contract is concluded.
You can subscribe to the Cycle Love newsletter in the course of the ordering process or separately via our shop website. In any event, we shall use the double opt-in procedure. This means that you will receive from us an email with a link via which you, as the owner of the email address, can confirm your subscription to the newsletter. Only after you have given this confirmation will you be subscribed to the newsletter.
Following registration, Cycle Love will use your submitted data for marketing purposes. We shall then regularly inform you of, for example, new products, activities or sales campaigns.
We store your e-mail address and the language in which you are using the Cycle Love webshop.
Article 6 (1) a) GDPR is the legal basis for this data processing.
The data processing will take place only according to express consent. In addition, we store the data of the application under the double opt-in procedure. Article 6 (1) f) GDPR is the legal basis for this data processing. The essential justified interest lies in proving an existing consent.
You may revoke your consent at any time with effect for the future. Each newsletter will contain an unsubscribe link. If you use that link, the unsubscribe of your e-mail adress will be executed immediately. For reasons of proof and for defence against legal claims the dataset concerning your e-mail address can be stored for up to 3 years after you have unsubscribed. The dataset in question will then be deleted automatically. Article 6 (1) f) GDPR is the legal basis for this data processing.
2.4 Customer account
You have the possibility of creating a Cycle Love customer account. This password-protected, personal access offers you a series of useful features, including, but not limited to, viewing of the orders that you have placed, displaying and downloading of your invoices, management of personal customer data, addition and editing of different delivery addresses, saving of a standard payment method and creation of a personal reminder note and/or wish list.
Article 6 (1) a) GDPR is the legal basis for this data processing. The data processing will take place only according to express consent. The data submitted to the customer account will be stored as long as your consent exists. You may revoke this consent at any time with effect for the future. An informal notification using the contact details stated under Section 1 will suffice for this. If your consent is revoked, your customer account, including the data submitted to it, will be deleted.