Privacy Policy
This page explains, in plain language, what personal data eBykes.nl collects when you browse, shop or sign up with us, why we collect it, and the rights you have over it under the General Data Protection Regulation (GDPR) and its Dutch implementation, the AVG (Algemene Verordening Gegevensbescherming).
This policy is a thorough starting template covering the standard GDPR/AVG requirements for an e-commerce site. It uses placeholder text (highlighted like this) wherever it needs your actual company details or confirmation of exactly which tools you use (analytics, payment provider, email platform, etc.). Please fill those in and have the final version checked by a qualified data protection professional or lawyer before going live — this is especially important given how actively the Dutch Autoriteit Persoonsgegevens enforces the AVG.
- We only collect the personal data we genuinely need to take your order, deliver it, support you, and — if you opt in — send you our newsletter.
- We never sell your personal data to third parties.
- Cookies that aren’t strictly necessary (like analytics or marketing cookies) are only set once you give consent via our cookie banner.
- You can access, correct, download or delete your data, or withdraw consent, at any time by emailing support@ebykes.nl.
- If you’re ever unhappy with how we’ve handled your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Who we are
eBykes.nl is operated by [Legal company name, e.g. eBykes B.V.], registered with the Dutch Chamber of Commerce (KVK) under number [KVK number], VAT/BTW number [NL BTW number], with its registered address at [registered business address, Netherlands].
For the purposes of the GDPR and AVG, eBykes.nl is the data controller responsible for your personal data. You can reach us at any time at support@ebykes.nl.
Most small online shops aren’t legally required to appoint a formal Data Protection Officer (DPO). If eBykes.nl’s data processing later involves large-scale or systematic monitoring, a DPO may need to be appointed and named here — worth reviewing as the business grows.
What personal data we collect
We only collect data that’s genuinely useful for running eBykes.nl and serving you well. Depending on how you use the site, this may include:
| Category | Examples |
|---|---|
| Identity & contact data | Name, delivery address, billing address, email address, phone number |
| Order & transaction data | Products purchased, order value, order history, warranty registrations, spare-part requests |
| Payment data | Payment method used and confirmation of payment — card and bank details themselves are handled directly by our payment provider, not stored on our own servers |
| Account data | Login email and encrypted password, if you create an account with us |
| Communications | Messages, emails or chat transcripts when you contact customer support |
| Technical & usage data | IP address, browser type, device type, pages viewed, referring website, approximate location (country/region level) |
| Marketing preferences | Newsletter subscription status, email open/click activity (if you’re subscribed) |
We do not knowingly collect any “special category” data under Article 9 GDPR (such as health, religious or biometric data) through normal use of this website.
Why we use your data, and our legal basis
Under the GDPR, we must have a valid legal basis for every way we use your personal data. Here’s ours:
| What we do | Why | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Process and deliver your order | To fulfil our contract with you | Performance of a contract |
| Handle payments | To confirm and process payment | Performance of a contract |
| Respond to customer service enquiries | To help you before or after a purchase | Performance of a contract / legitimate interest |
| Send you our newsletter | To share offers, new e-bike models and accessories | Consent (opt-in) |
| Use analytics cookies | To understand how visitors use the site and improve it | Consent (opt-in via cookie banner) |
| Prevent fraud & keep the site secure | To protect eBykes.nl and our customers | Legitimate interest |
| Keep financial records | To meet Dutch tax and accounting law | Legal obligation |
International data transfers
Most of our service providers are based in the European Economic Area (EEA). Where a provider is based outside the EEA (for example, in the United States), we make sure an appropriate safeguard is in place before any data is transferred — such as the EU-US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses. You can ask us for more detail on any specific safeguard using the contact details below.
How long we keep your data
| Data type | Typical retention period |
|---|---|
| Order, invoice & payment records | 7 years, as required by Dutch tax law |
| Customer account data | For as long as your account is active, plus a limited period after closure |
| Newsletter subscription data | Until you unsubscribe |
| Customer service correspondence | Up to [e.g. 2 years] after your last contact with us |
| Analytics & marketing cookie data | Per the cookie’s own duration, shown in our cookie banner/settings |
Where we no longer need personal data for the purpose it was collected, we delete or anonymise it.
Your rights under the GDPR/AVG
As someone whose data we process, you have the following rights at any time:
Access
Ask what personal data we hold about you.
Rectification
Ask us to correct inaccurate or incomplete data.
Erasure
Ask us to delete your data (“right to be forgotten”), where applicable.
Restriction
Ask us to pause processing your data in certain situations.
Portability
Receive your data in a portable format, or have it sent to another provider.
Objection
Object to processing based on legitimate interest, including direct marketing.
Withdraw consent
Withdraw any consent you’ve given, at any time, free of charge.
No automated decisions
Not be subject to purely automated decisions with legal or similarly significant effects.
How to exercise your rights
To exercise any of the rights above, email us at support@ebykes.nl with your request. We may ask you to verify your identity first, to make sure we don’t hand your data to the wrong person. We’ll respond within one month, as required by Article 12(3) GDPR — for complex requests, we may extend this by up to two further months, and we’ll let you know if that’s needed.
Exercising your rights is free of charge, except in cases of manifestly unfounded or excessive requests, where we’re permitted to charge a reasonable fee or decline.
Complaints & the Autoriteit Persoonsgegevens
We’d genuinely like the chance to put things right first, so please contact us at support@ebykes.nl if you’re unhappy with how we’ve handled your personal data.
You also have the right to lodge a complaint directly with the Dutch supervisory authority for data protection:
Postal address: Postbus 93374, 2509 AJ Den Haag, the Netherlands
Phone: 088 – 1805 250
Website: autoriteitpersoonsgegevens.nl
Complaints can be submitted in Dutch or English, and the AP recommends contacting the organisation involved first before filing a formal complaint.
If you live in another EU/EEA country, you’re also entitled to complain to your own national data protection authority.
How we protect your data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including encrypted connections (HTTPS/TLS) across the site, restricted access to personal data on a need-to-know basis, and regular review of our security practices. No online system can be guaranteed 100% secure, but we take this seriously and review our measures on an ongoing basis.
Children’s privacy
eBykes.nl is intended for adults purchasing e-bikes and related equipment. Our website and services are not directed at children, and under the Dutch implementation of the GDPR (the UAVG), individuals under the age of 16 need parental or guardian consent to use services based on consent. If you believe a child has provided us with personal data without appropriate consent, please contact us at support@ebykes.nl and we’ll take steps to remove it.
Changes to this policy
We may update this privacy policy from time to time — for example, if we start using a new tool or service, or if data protection law changes. The “last updated” date at the top of this page will always reflect the most recent version. Where a change is significant, we’ll take reasonable steps to let you know, such as a notice on the site or an email if you’re a registered customer.
Questions about your privacy?
We’re happy to talk you through exactly what data we hold and why. Reach out any time.
