maistra e-bike WhatsApp

Privacy

Privacy policy

maistra e-bike, run by Dario Figari, is committed to protecting users’ personal data in accordance with Regulation (EU) 2016/679 (“GDPR”). This notice describes how personal data is collected and processed at the various stages of your interaction with our website and services.

Last updated: July 2025

Company details

(A) Stages of personal data collection

Stage 1 – Browsing the website

When you visit www.maistraebike.it, and only if you give your consent via the cookie banner, we collect anonymous statistical data through:

  • Google Analytics 4 (loaded via the Google tag, gtag.js)

This data does not allow users to be personally identified and is used solely for aggregate analysis of how the website is used. If you decline, Google Analytics is not loaded.

Stage 2 – First contact

If you decide to contact us by phone, WhatsApp, Telegram or email, we collect the data you voluntarily provide, such as:

  • Phone number
  • Email address
  • Name (if given in the message)

This data is used solely to reply to your requests for information or quotes.

Stage 3 – Data collection for booking and agreement

If you decide to go ahead with a booking, we will send you a form (for example via WhatsApp) to collect the information needed to draw up the rental agreement and, if requested, to issue an invoice. At this stage we collect:

  • First name and surname
  • Date and place of birth
  • Tax code
  • Home address
  • Other identification data required by law

This data is needed to prepare the agreement and to meet legal and tax obligations.

(B) Purposes and legal basis of processing

Personal data is processed for the following purposes:

  • Providing information and quotes on request (stage 2)
  • Managing bookings and entering into rental agreements (stage 3)
  • Complying with legal and tax obligations (stage 3)
  • Anonymous statistical analysis of website use (stage 1)

The legal basis is the user’s explicit consent (Art. 6(1)(a) GDPR) and/or the performance of pre-contractual and contractual measures requested by the data subject (Art. 6(1)(b) GDPR), as well as compliance with legal obligations (Art. 6(1)(c) GDPR).

(C) Processing methods and retention

Processing is carried out using electronic and paper-based tools, in accordance with the principles of lawfulness, fairness and transparency.

  • Data collected for information requests is kept for as long as needed to handle the request and deleted at the data subject’s request.
  • Data collected for entering into the agreement is kept for 10 years from the date of the agreement, as required by Italian law.

(D) Disclosure and transfer of data

Data is not disseminated or sold to third parties. It may only be disclosed to service providers needed to deliver the service (e.g. rental management platforms), appointed as data processors and compliant with the GDPR.

Data will not be transferred outside the European Union.

(E) Rights of the data subject

Users may exercise the rights provided for by Articles 15–22 GDPR at any time, including:

  • Access to, rectification and erasure of data
  • Restriction of or objection to processing
  • Data portability
  • Withdrawal of consent

To exercise these rights, please contact the Data Controller using the details above.

(F) Data security

Data is protected by appropriate technical and organisational security measures. Messages exchanged via WhatsApp are protected by end-to-end encryption.

(G) Cookies and tracking tools

The website uses Google Analytics 4 to collect anonymous usage data, only with your prior consent. On your first visit, a banner lets you choose Accept or Decline: until you accept, Google Analytics is not loaded and its cookies (_ga, _ga_*) are not set. Your choice is saved in your browser (localStorage) and you can change it at any time via the “Cookie preferences” link at the bottom of every page.

The website uses Google Consent Mode v2 with advertising storage always denied: no advertising or profiling cookies are used, and Google Signals and ad personalisation are disabled. Only the technical tools needed for the website to work remain.

(H) Changes to this notice

Any changes to this notice will be published on this page with the date of the update. This notice is drawn up pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and was last updated in July 2025.

For further information or to exercise your rights, you can contact the Data Controller using the details above.