Privacy Policy for Nordkyst Cykelværksted & Handel

1. Introduction and company information

This privacy policy explains how Nordkyst Cykelværksted & Handel collects, uses, stores, shares, and protects personal data in connection with its cycling-related business activities, including bicycle sales, repairs, maintenance, accessories, customer service, bookings, warranty handling, and related services.

The data controller is:

Nordkyst Cykelværksted & Handel
Hovedgaden 17, 8544 Mørke, Denmark
Email: [email protected]
Phone: +45 86 34 79 52

This policy applies to personal data processed when you visit our premises, contact us, purchase products or services, request repairs, make bookings, use our website or other digital channels, or otherwise interact with Nordkyst Cykelværksted & Handel.

2. Data collection and processing

Nordkyst Cykelværksted & Handel may collect and process the following categories of personal data:

Identification and contact data: name, address, email address, telephone number, and similar contact details.
Transaction data: purchase history, invoices, payment status, order details, repair orders, warranty claims, and service records.
Communication data: correspondence by email, phone, in person, or through contact forms, including complaints and inquiries.
Technical data: IP address, device information, browser type, and usage data if you interact with our digital services.
Customer and service data: bicycle specifications, repair notes, service preferences, and information necessary to perform requested services.
Security and fraud prevention data: information necessary to protect our business, staff, and customers from misuse, fraud, or unauthorized access.

We generally collect personal data directly from you. In some cases, we may receive data from third parties such as payment providers, delivery partners, accounting systems, or public authorities where permitted by law.

3. Purpose of data processing

Nordkyst Cykelværksted & Handel processes personal data for the following purposes:

to sell bicycles, parts, accessories, and related products;
to provide repair, maintenance, assembly, inspection, and workshop services;
to manage bookings, customer requests, quotations, and service communication;
to issue invoices, handle payments, and maintain accounting records;
to process warranty claims, returns, complaints, and after-sales support;
to comply with legal obligations, including bookkeeping, tax, consumer, and product safety requirements;
to improve our services, customer experience, and internal operations;
to prevent fraud, misuse, and unauthorized access;
to send service-related communications and, where permitted, marketing communications;
to protect the rights, property, and safety of Nordkyst Cykelværksted & Handel, our customers, and staff.

4. Legal basis for processing

We process personal data only where we have a valid legal basis. Depending on the context, the legal basis may include:

Performance of a contract: when processing is necessary to fulfill a sales agreement, repair agreement, booking, or other service arrangement.
Legal obligation: when processing is required to comply with applicable laws, including accounting and tax obligations.
Legitimate interests: when processing is necessary for the legitimate interests of Nordkyst Cykelværksted & Handel, such as customer service, business administration, security, fraud prevention, and service improvement, provided that your interests and rights do not override those interests.
Consent: when we rely on your consent, for example for certain marketing activities or optional communications. You may withdraw consent at any time.

5. Data sharing and third parties

Nordkyst Cykelværksted & Handel may share personal data with third parties where necessary and lawful, including:

Payment service providers for processing card or other payments;
Accounting and bookkeeping providers for financial administration and compliance;
IT and hosting providers for website, email, storage, and system support;
Delivery and logistics partners for shipping products or parts;
Manufacturers, suppliers, and warranty partners when handling product support, spare parts, or warranty claims;
Public authorities where disclosure is required by law or lawful request;
Professional advisers such as lawyers, auditors, or insurers where necessary for legal or business purposes.

We only share the minimum amount of data necessary for the relevant purpose and require appropriate confidentiality and data protection safeguards where applicable.

6. Data transfer to third countries

As a general rule, Nordkyst Cykelværksted & Handel seeks to store and process personal data within the European Economic Area (EEA). If personal data is transferred to a country outside the EEA, we will ensure that appropriate safeguards are in place in accordance with applicable privacy laws, such as standard contractual clauses or other recognized transfer mechanisms, where required.

7. Storage duration

Nordkyst Cykelværksted & Handel retains personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

Customer and transaction records: retained for the period necessary to manage the customer relationship and fulfill contractual obligations.
Accounting and tax records: retained for the period required by applicable bookkeeping and tax laws.
Repair and service records: retained for a reasonable period to support warranty, service history, and customer support.
Marketing data: retained until you withdraw consent or object, or until the data is no longer needed.
Security and log data: retained for a limited period unless a longer retention period is required for investigation or legal compliance.

When personal data is no longer needed, it will be deleted, anonymized, or securely archived in accordance with applicable requirements.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

Access: the right to obtain confirmation of whether we process your personal data and to receive a copy of that data.
Rectification: the right to request correction of inaccurate or incomplete personal data.
Erasure: the right to request deletion of your personal data in certain circumstances.
Restriction: the right to request that processing be restricted in certain situations.
Data portability: the right to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
Objection: the right to object to processing based on legitimate interests and, in certain cases, to direct marketing.

To exercise your rights, please contact Nordkyst Cykelværksted & Handel using the contact details below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may no longer be able to provide certain optional services or communications.

10. Right to complain

If you believe that Nordkyst Cykelværksted & Handel has processed your personal data in violation of applicable privacy laws, you have the right to lodge a complaint with the competent data protection authority. If you are located in Denmark, this is typically the Danish Data Protection Agency (Datatilsynet).

We encourage you to contact us first so that we can try to resolve your concern directly and promptly.

11. Data security

Nordkyst Cykelværksted & Handel implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of internal procedures.

While we take reasonable steps to protect your data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

12. Contact information

If you have questions about this privacy policy or the processing of your personal data, please contact: