Protezione dei dati GDPR e informativa sulla privacy
La presente informativa spiega come Aipas Electric Bikes Europe GmbH tratta i dati personali in conformità al Regolamento generale sulla protezione dei dati dell'UE (Regolamento (UE) 2016/679 – GDPR).
1. Titolare del trattamento
Aipas Electric Bikes Europe GmbH, Mainzer Landstraße 180, 60327 Francoforte sul Meno, Germania. Email: [email protected].
2. Finalità del trattamento
I dati personali raccolti durante l'ordine (nome, indirizzo di consegna, email, numero di telefono) sono trattati esclusivamente per l'evasione dell'ordine, il tracciamento della spedizione e la documentazione fiscale e di garanzia prevista dalla legge (art. 6, par. 1, lett. b e c del GDPR).
3. Sicurezza e conservazione dei dati
La nostra piattaforma adotta misure tecniche di livello aziendale conformi alle linee guida OWASP Top 10. Non conserviamo credenziali di pagamento sensibili.
4. Payment Processing
Card and wallet payments are processed by Stripe Payments Europe, Ltd. (Ireland). When you choose card payment you are redirected to Stripe's hosted payment page; your card details are entered there and never reach our servers (Art. 6(1)(b) GDPR). Stripe's own privacy notice applies: https://stripe.com/privacy. SEPA transfers are made from your own bank. We store your order data (items, amounts, delivery details, payment reference) for contract fulfilment and statutory retention periods.
5. Website Analytics (First-Party, Cookieless)
We measure how the store is used with our own analytics system running on our own server — no data is sent to Google or any other third party. It sets no cookies and stores no identifier on your device. Your IP address is never stored: the server derives a short-lived pseudonymous value from it that changes every day and cannot be reversed, and this value is used solely to count unique visitors (Art. 6(1)(f) GDPR — legitimate interest in understanding aggregate store usage). Browsers signalling "Do Not Track" or Global Privacy Control are counted without any visitor value at all. Aggregated data is retained for a maximum of 400 days.
6. Live Chat
If you use the chat widget, we process the messages you send, the page you were on, and — only if you choose to provide them — your name and email address, in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR). Conversations are stored on our own server and are not shared with third parties. You can request deletion of a conversation at any time via [email protected].
7. Your Rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority. Contact: [email protected].
La presente traduzione è fornita per comodità dell'utente. In caso di discrepanza prevale la versione tedesca del presente documento.