Privacy Policy

1. Controller

The data controller is Krab Street Cycles, Korunní 74, 120 00 Praha 2, Czechia. Email: [email protected]. Telephone: +420 777 555 291.

2. Scope

This policy applies to personal data collected through the website rimbrcarba.digital, contact forms, email, telephone, and in-store or workshop interactions related to sales, service bookings, fitting appointments, and equipment orders.

3. Data we process

• Identity and contact details (name, email, phone) when you write to us, order, book service, or schedule a fit.
• Message content, bike details, and preferences you choose to share.
• Order and service records needed to complete a purchase or repair.
• Technical data such as IP address, browser type, and cookie identifiers where permitted (see our Cookie Policy).

4. Purposes and legal bases

• Responding to enquiries — legitimate interests (Art. 6(1)(f) GDPR) or steps prior to a contract (Art. 6(1)(b)).
• Sales, service, builds, and fitting — performance of a contract (Art. 6(1)(b)).
• Legal obligations — accounting and compliance under Czech and EU law (Art. 6(1)(c)), including tax and consumer rules.
• Optional analytics or marketing cookies — consent (Art. 6(1)(a)), which you may withdraw at any time.

5. Retention

We keep enquiry messages for as long as needed to complete the conversation and for a reasonable follow-up period (typically up to 24 months), unless a longer period is required for legal claims, warranties, or accounting. Contract and invoice records are retained for the periods required by Czech law. Cookie consent choices are stored locally in your browser until you clear them or change preferences.

6. Recipients

Data is handled by the shop. Hosting, email, or payment providers may process data as processors under appropriate agreements. We do not sell personal data. Transfers outside the EEA, if any, will rely on an adequacy decision or appropriate safeguards.

7. Your rights

Under the GDPR and Act No. 110/2019 Coll. you may request access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent without affecting prior lawful processing.

To exercise rights, contact [email protected]. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czechia — www.uoou.cz.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration, proportionate to the risks of a small retail and workshop website and customer records.

9. Updates

We may update this policy to reflect legal or operational changes. The version published on this page is the current one. Last updated: July 2026.