Privacy policy

Who controls your data

The controller of your personal data is AURABIKE Yehor Korystov, Wrocławska 20, 30-006 Kraków, NIP 6762711642, REGON 543827880.

• Email: kontakt@aurabike.pl
• Phone: +48 791 307 377

What we collect

Only what actually passes through this site.

• Contact form: your name, phone number, the bike model you choose, and the pick-up date if you give one.
• Analytics, only after you agree: IP address, device and browser type, pages you visit.
• Session recordings, only after you agree: a recording of how you move around the page — cursor movement, clicks and scrolling.
• Server logs, created on every visit: IP address, date of the visit and browser type.

Why, and on what legal basis

• To talk to you about a rental and prepare the contract — your consent and steps before entering a contract, Article 6(1)(a) and (b) GDPR.
• Visit statistics through Google Tag Manager — your consent, Article 6(1)(a) GDPR.
• Session recording and click maps through Microsoft Clarity — your consent, Article 6(1)(a) GDPR. This is a separate purpose, not part of ordinary statistics: Clarity records how your visit went, not only that it happened.
• Security and correct operation of the site — our legitimate interest, Article 6(1)(f) GDPR.
• Accounting, if a rental goes ahead — a legal obligation, Article 6(1)(c) GDPR.

Your consent to analytics

Until you click «I agree», no analytics script runs — neither Google Tag Manager nor Microsoft Clarity. We keep your choice in your browser storage, not in a cookie.

• You can withdraw your consent at any time with the «Cookie settings» link in the footer. The page reloads and asks again.
• Withdrawing consent does not affect what was already collected.

Who receives your data

• Web3Forms — the service that delivers form messages to our mailbox. It operates from India and uses Amazon Web Services, Cloudflare and Hetzner infrastructure.
• Google Ireland Limited and Google LLC — Google Tag Manager, and the Google map embedded on the contact page.
• Microsoft Ireland Operations Limited — Microsoft Clarity. Microsoft transfers the data to Microsoft Corporation in the United States under Standard Contractual Clauses.
• The hosting company whose server this site runs on.
• The Google map does not load on its own. On the contact page you see the address and a «Show the map» button — only your click loads the map, and only then does your IP address reach Google. If you do not click, nothing goes to Google.

Transfers outside the European Economic Area

Some of the services above process data outside the EEA, including in the United States and in India.

• For Microsoft Clarity the basis is the Standard Contractual Clauses between Microsoft Ireland Operations Limited and Microsoft Corporation.
• For the other services the basis for the transfer is set out in their own terms and data processing agreements.

How long we keep data

• Form messages — 12 months from our last contact, unless a rental goes ahead.
• Accounting records for a rental — 5 years, as tax law requires.
• Session recordings in Microsoft Clarity — up to 30 days. Microsoft keeps selected recordings and click maps for up to 9 months.
• Form data held by Web3Forms — up to 3 years, under that service’s own rules.

Your rights

At any time you can:

• ask for access to your data and a copy of it
• correct data that is wrong
• ask us to delete your data
• restrict how we process it
• object to processing based on our legitimate interest
• move your data to another controller
• withdraw consent you gave earlier
• complain to the President of the Personal Data Protection Office in Poland

Contact about your data

Write to kontakt@aurabike.pl or call: +48 791 307 377. We answer every request about personal data.

Changes

If we change how we process data, we change this document and the date at the top of the page.