Privacy
policy.

Data controller

Identity

Roger Tuneu Crous

Tax ID (NIF / CIF)

4784594A

Address

Carrer Barcelona 31, 08552 Taradell (Osona)

Email

hola@pyrmonbikes.com

Phone

+34 649 18 71 48

What data we collect

"Notify me" form (index.html)

Email address — required.

Contact form (contacte.html)

First name, surname, email, phone, reason and message. First name, email, reason and message are required; surname and phone are optional.

Purchase process (in the future)

Name, ID/tax number, shipping and billing address, phone, payment method and body measurements (bike fit). Required for the performance of the contract.

Technical and analytics cookies

See the cookies policy.

Email communications

The contents of the email exchanged with us.

Stripe processes the payment data directly — PYRMON never stores your full card number.

What we use your data for

• Answering your enquiries received through the contact form.
• Notifying you of the launch of products ("Notify me" form), if you have explicitly consented.
• Managing the purchase, manufacture and delivery of an ordered bicycle (including bike fit, process communications and after-sales).
• Compliance with legal obligations: invoicing, accounting, taxation, warranty.
• Improving the website through anonymised analytics (only if the corresponding cookies are accepted).
• Commercial communications about new models or events, only if you have consented.

Legal basis for processing

In accordance with article 6 of the GDPR, each purpose has its own legal basis:

Answering enquiries via the form

Explicit consent (art. 6.1.a GDPR).

Launch notifications

Explicit consent (art. 6.1.a GDPR).

Managing a purchase

Performance of a contract (art. 6.1.b GDPR).

Invoicing, accounting, warranty

Legal obligation (art. 6.1.c GDPR).

Commercial communications to customers

Legitimate interest (art. 6.1.f GDPR) — you can object at any time.

Anonymised web analytics

Consent via cookies (art. 6.1.a GDPR).

How long we keep the data

• Contact form data without a purchase: up to 1 year from the last communication, unless you request deletion earlier.
• "Notify me" form data: until you withdraw consent or the first promised communication is made, whichever comes first.
• Customer data with a purchase: 6 years (art. 30 of the Spanish Commercial Code) plus the legal warranty periods.
• Tax data: the legally required periods (4-10 years depending on the nature).

Who we share your data with

To carry out PYRMON's activity, the following data processors and recipients are involved:

• Vercel Inc. as data processor.
• Microsoft (Outlook · Microsoft 365).
• Collaborating accountancy firm for tax and accounting obligations.
• Stripe Payments Europe Ltd. (Ireland) — when the payment gateway is activated.
• Courier company for deliveries.
• Google LLC (USA) for loading the website's fonts (Google Fonts).
• Public authorities when required by law (tax authorities, courts, etc.).

No data is transferred to third parties for those third parties' own advertising purposes.

International data transfers

• If Stripe (Ireland) is used: processing within the EEA, with no relevant international transfer.
• If Google (USA) services are used: transfer covered by the Standard Contractual Clauses approved by the European Commission and the EU-US Data Privacy Framework (adequacy decision of July 2023).

Your rights

In accordance with articles 15 to 22 of the GDPR, you can exercise the following rights:

• Access: to know what data of yours we hold.
• Rectification: to correct inaccurate data.
• Erasure (right to be forgotten): to ask us to delete it.
• Restriction of processing in certain circumstances.
• Objection to processing based on legitimate interest.
• Portability: to receive your data in a structured format and transfer it to another controller.
• Not to be subject to automated decisions that significantly affect you. PYRMON does not carry out profiling or automated decision-making.
• Withdraw consent at any time, without retroactive effect.

How to exercise them: send an email to hola@pyrmonbikes.com stating the right you wish to exercise and attaching a copy of your ID or equivalent document. We will respond within a maximum of one month (extendable to two in complex cases).

If you consider that the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

Security measures

• HTTPS connection with SSL certificate.
• Restricted access to the data, only to authorised personnel.
• Regular backups.
• Data processors contracted with the safeguards required by the GDPR.
• PYRMON reviews the technical and organisational measures annually.

Minors

The website is not aimed at children under 14. We do not knowingly collect data from minors. If we detect that a minor has provided data without the consent of their legal guardians, we will delete it immediately.

Changes to the policy

PYRMON may update this policy to adapt it to legal or operational changes. The date of the last update appears at the start of the document. We recommend reviewing it periodically.

If you have questions about your data or want to exercise a right, write to us at hola@pyrmonbikes.com.