Privacy Policy

The controller responsible for data processing on this website is:
BikeShop Friesen
C. Aslan
Friesenstraße 24, 10965 Berlin-Kreuzberg
Telephone: 030 32899017
Email: bikeshopfriesen@gmail.com

This website is hosted by Cloudflare Inc. (101 Townsend Street, San Francisco, CA 94107, USA) via its "Cloudflare Workers" platform. When you access the site, technically necessary connection data (e.g. IP address, browser identifier, requested URL, time of the request) is processed in order to deliver the site and protect it against attacks.

Use takes place for the purpose of contract performance towards our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering (Art. 6 (1) (f) GDPR). For data transfers to third countries, Cloudflare relies on the EU Standard Contractual Clauses.

When you visit our website, information is automatically stored in so-called server log files, which your browser transmits (browser type, operating system, referrer URL, IP address, time of the server request). This data cannot be attributed to specific individuals and is not merged with other data sources.

If you contact us via the contact form, email or telephone, your details, including the contact data you provided there, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions.

Processing takes place on the basis of Art. 6 (1) (b) GDPR (pre-contractual measures / contract performance) or Art. 6 (1) (f) GDPR (legitimate interest in the effective handling of your enquiry).

Our website does not use any marketing or advertising cookies. We use technically necessary storage in your browser's local storage in order to remember your cookie/consent decision (key: bsf-consent) and your language choice. This storage only takes place after you interact with the site and is necessary for the operation of the site (Art. 6 (1) (f) GDPR, § 25 (2) no. 2 TTDSG).

In addition, the reach measurement automatically included by our website builder (Lovable, see section 9) writes two entries to local storage: __lovable_anonymous_id (pseudonymous visitor identifier, unlimited) and __lovable_session (rolling session ID, 30 minutes idle). Further details in section 9. We have requested the deactivation of this reach measurement from the provider; once carried out, these entries no longer apply.

Optional external content — the Google Maps map and the profile pictures loaded from Google in our customer reviews — will only be loaded after your express consent in accordance with § 25 (1) TTDSG in conjunction with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future (see section 12).

This page offers an optional embedding of the Google Maps map service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded after you have actively consented ("Load map" or "Accept"). Only then will your IP address be transmitted to a Google server, possibly in the USA.

The legal basis is your consent under Art. 6 (1) (a) GDPR. For data transfers to the USA, Google relies on the EU Standard Contractual Clauses. More information: https://policies.google.com/privacy.

On our website we display reviews from our Google Business Profile. The pure text of the reviews is retrieved server-side by us via the official Google Places API (New) — no personal data of our website visitors is transmitted to Google in the process. The provider of the Places API is Google Ireland Limited.

The profile pictures of the reviewers are hosted on Google servers (googleusercontent.com) and are only loaded after you have consented. Without consent, you will instead see a neutral placeholder with the first letter. The legal basis for loading the pictures is your consent (Art. 6 (1) (a) GDPR); the display of the review text takes place on the basis of our legitimate interest in a transparent presentation (Art. 6 (1) (f) GDPR).

On our site we link to a WhatsApp chat via a button. Only when you actively click on this link will a connection be established with Meta Platforms Ireland Ltd. ("WhatsApp") and your telephone number and, where applicable, message contents will be transmitted to WhatsApp. Without a click, no data will be transmitted to WhatsApp. The legal basis for processing after the click is your enquiry (Art. 6 (1) (b) GDPR). WhatsApp's information: whatsapp.com/legal/privacy-policy-eea.

This website is created and delivered using the website builder of Lovable AB, Sveavägen 63, 111 34 Stockholm, Sweden. Lovable automatically includes its own first-party analytics script (/_l5e/events.js) on all published pages, which collects anonymised reach data: page views, dwell time, bounce rate, referrer, device type, browser, operating system and rough geographic origin (derived from the IP address, without storing the IP itself). To recognise returning visitors within this evaluation, the local storage entries __lovable_anonymous_id and __lovable_session mentioned in section 5 are set. No cookies are set, no IP addresses are stored permanently and no data is passed on to third parties (Google, Meta or similar). The legal basis is our legitimate interest in a data-minimising reach measurement (Art. 6 (1) (f) GDPR).

Note: We have requested from the provider the complete deactivation of this reach measurement as well as the deletion of the data already collected pursuant to Art. 17 GDPR. This privacy policy will be updated accordingly once this has been carried out.

We do not use any other analytics or tracking services (Google Analytics, Meta Pixel, TikTok Pixel, Hotjar or similar). Should such services be integrated in the future, this will only take place on the basis of your prior consent (Art. 6 (1) (a) GDPR), and this privacy policy will be adapted accordingly beforehand.

Under the GDPR, you are entitled in particular to the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to the contact details above is sufficient.

This privacy policy is currently valid. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.

You may withdraw your cookie and Maps consent at any time with effect for the future. On your next visit you will be asked again for your decision.