GDPR Data Protection & Privacy Policy
This privacy notice explains how Aipas Electric Bikes Europe GmbH processes personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR).
1. Data Controller
Aipas Electric Bikes Europe GmbH, Mainzer Landstraße 180, 60327 Frankfurt am Main, Germany. Email: info@ebikes-europe.com.
2. Purpose of Processing
Personal data collected during checkout (name, delivery address, email, phone number) is processed strictly for order fulfillment, courier tracking, and statutory tax and warranty documentation (Art. 6(1)(b) & (c) GDPR).
3. Data Security & Storage
Our platform implements enterprise-grade technical measures adhering to OWASP Top 10 guidelines. We do not store sensitive payment credentials.
4. Payment Processing
Card and wallet payments are processed by Stripe Payments Europe, Ltd. (Ireland). When you choose card payment you are redirected to Stripe's hosted payment page; your card details are entered there and never reach our servers (Art. 6(1)(b) GDPR). Stripe's own privacy notice applies: https://stripe.com/privacy. SEPA transfers are made from your own bank; for Bitcoin payments we only see the public blockchain transaction. We store your order data (items, amounts, delivery details, payment reference) for contract fulfilment and statutory retention periods.
5. Website Analytics (First-Party, Cookieless)
We measure how the store is used with our own analytics system running on our own server — no data is sent to Google or any other third party. It sets no cookies and stores no identifier on your device. Your IP address is never stored: the server derives a short-lived pseudonymous value from it that changes every day and cannot be reversed, and this value is used solely to count unique visitors (Art. 6(1)(f) GDPR — legitimate interest in understanding aggregate store usage). Browsers signalling "Do Not Track" or Global Privacy Control are counted without any visitor value at all. Aggregated data is retained for a maximum of 400 days.
6. Live Chat
If you use the chat widget, we process the messages you send, the page you were on, and — only if you choose to provide them — your name and email address, in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR). Conversations are stored on our own server and are not shared with third parties. You can request deletion of a conversation at any time via info@ebikes-europe.com.
7. Your Rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority. Contact: info@ebikes-europe.com.
This translation is provided for your convenience. In the event of any discrepancy, the German version of this document shall prevail.