Privacy Policy | Elysium Bike Shop

Effective Date: August 3, 2025
Last Updated: August 3, 2025

Welcome to Elysium Bike Shop. We take the privacy and protection of your data seriously. This Privacy Policy explains how we collect, use, share, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

1. Data Controller Information

Company Name: Elysium Bike Shop
Address: Calle Cámara de la Industria 11A, 28938 Móstoles, Madrid, Spain
Email: info@elysiumbike.com
Phone: +34 631 950 661
Website: https://www.elysiumbike.com

2. Scope of This Policy

This policy applies to personal data collected through:

Our website: https://www.elysiumbike.com
Online store transactions
Newsletters, advertising, and customer communication
User accounts and customer support

3. Categories of Personal Data We Collect

We collect the following categories of personal data:

a. Identifiers

Full name
Email address
Phone number
Shipping and billing addresses
IP address
User account credentials

b. Commercial Information

Purchase history
Shopping preferences
Order fulfillment data

c. Technical Data

Device information
Browser type and settings
Operating system
Referring URLs and session data

d. Internet or Network Activity

Browsing behavior on our website
Clicks, time on page, and other usage statistics

e. Payment Data

Payment method used
Transaction ID
Billing details (processed securely via third-party providers like Shopify/Stripe/PayPal)

4. How We Collect Your Data

We collect data via:

Direct interactions (e.g., when you place an order or contact us)
Account creation and newsletter signup
Cookies and similar technologies
Third-party integrations (e.g., payment gateways, analytics tools)

5. Purposes and Legal Bases for Processing (GDPR)

Purpose	Legal Basis (GDPR)
Order processing and shipping	Performance of contract (Art. 6.1(b))
Account registration and management	Performance of contract (Art. 6.1(b))
Marketing and newsletter	Consent (Art. 6.1(a))
Site analytics and performance	Legitimate interest (Art. 6.1(f))
Legal, tax, and regulatory compliance	Legal obligation (Art. 6.1(c))
Fraud prevention and security	Legitimate interest (Art. 6.1(f))

6. Disclosure of Personal Data

We may disclose your data to the following third parties:

a. Service Providers

E-commerce platform: Shopify
Payment processors: Stripe, PayPal
Email and marketing services: Mailchimp
Shipping providers: DHL, Correos Express
Analytics providers: Google Analytics, Facebook Pixel

b. Legal Authorities

Where required by law or legal proceedings

c. Corporate Transactions

In case of merger, acquisition, or asset sale

We do not sell or rent your personal data.

7. Data Transfers Outside the EEA

Your data may be transferred to third countries (e.g., the USA) for processing. When this occurs, we implement one or more of the following safeguards:

Standard Contractual Clauses (SCCs) approved by the EU Commission
Adequacy decisions by the European Commission
Binding corporate rules (BCRs)

You can request a copy of such safeguards at: info@elysiumbike.com

8. Data Retention

We retain your personal data only for as long as necessary:

Data Category	Retention Period
Order and payment data	7 years (legal obligation)
User account data	Until deletion or 5 years of inactivity
Marketing data	Until consent is withdrawn
Analytics and cookies	26 months (or less, depending on tool)

9. Cookies and Tracking Technologies

We use cookies for:

Website functionality (essential cookies)
Analytics (Google Analytics)
Marketing (Facebook Pixel, Google Ads)
Preferences and settings

You may control cookies via:

Our website cookie banner
Your browser’s settings

See our Cookie Policy for full details.

10. Your Rights Under GDPR and CCPA/CPRA

a. For EU/EEA Residents (GDPR)

You have the right to:

Access your personal data
Rectify inaccurate data
Request data deletion (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time
File a complaint with your Data Protection Authority

b. For California Residents (CCPA/CPRA)

You have the right to:

Know what personal data we collect, use, or disclose
Request deletion of your personal data
Correct inaccurate personal data
Opt-out of data sale or sharing (We do not sell personal data)
Limit use of sensitive personal data (if applicable)
Exercise rights without discrimination

To exercise your rights, contact us at info@elysiumbike.com

We will respond within 30 days of receipt of a verifiable request.

11. Data Security

We implement appropriate technical and organizational security measures, including:

SSL encryption across our website
Encrypted payment processing
Access controls and password protection
Regular software and plugin updates
Data breach protocols in accordance with GDPR (notification within 72 hours)

Despite our efforts, no system is completely secure. You use our services at your own risk.

12. Children’s Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such data, we will delete it immediately.

13. Automated Decision-Making

We do not use your data for automated decision-making or profiling that produces legal effects.

14. Third-Party Links

Our site may include links to third-party sites. This privacy policy applies only to our site. We encourage you to read the privacy policies of any third-party sites you visit.

15. Changes to This Policy

We may revise this Privacy Policy periodically. When we do, we will update the “Last Updated” date and notify you if material changes are made.

You are encouraged to review this policy regularly.

16. Contact Information

For questions, complaints, or data access requests, contact us at:

Elysium Bike Shop
Calle Cámara de la Industria 11A
28938 Móstoles, Madrid, Spain
Email: info@elysiumbike.com
Phone: +34 631 950 661
Website: https://www.elysiumbike.com/

17. Consent

By using our website, you consent to the collection, processing, and disclosure of your personal data in accordance with this Privacy Policy.