Privacy Policy

Last updated: 28.10.2025

RENTER EBIKE PRIM  S.R.L. (“Renter”, “we”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your personal data when you interact with us, including when you use our website, contact us as a lead, or enter into a rental agreement with us as an individual or as a company representative.

1. Who we are and how to contact us

RENTER EBIKE PRIM based in Romania, is the controller of your personal data.

If you have any questions about this Privacy Notice, or if you wish to exercise your data protection rights, please contact us at:
📧 admin@renter.bike

You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) or with your local supervisory authority within the EU.

2. Personal data we process

Depending on your relationship with us, we may process the following types of personal data:
Identification Data – Full name, Personal Numeric Code (CNP), age (for eligibility verification), and signature.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) – necessary for the conclusion and execution of rental agreements; and compliance with legal obligations (Art. 6(1)(c)) – for record-keeping and archiving requirements.

Contact Data – Address, email address, and telephone number.
Legal basis: performance of a contract (Art. 6(1)(b)) – for communications related to contract performance; and legitimate interest (Art. 6(1)(f)) – for customer support and security notifications.

Contractual and Transaction Data – Rental start and end dates, payment method, payment status, issued invoices, and total number of rental days.
Legal basis: performance of a contract (Art. 6(1)(b)); and legal obligation (Art. 6(1)(c)) – for accounting and tax compliance in relation to document retention.

Vehicle Data – Bicycle number, brand, mileage, and any additional rented equipment.
Legal basis: performance of a contract (Art. 6(1)(b)) – for fleet management and asset tracking; and legitimate interest (Art. 6(1)(f)) – for monitoring and maintaining equipment.

Lead/Referral and Contact Data – The source through which you contacted us (e.g., how you found us), any referral information, and the reason for service termination, if applicable.
Legal basis: legitimate interest (Art. 6(1)(f)) – for managing business relationships and improving services; and consent (Art. 6(1)(a)) – when data is retained for future marketing purposes.

Geolocation Data – Real-time location of our bicycles obtained via GPS devices (used solely for locating company property; GPS logs are not stored).
Legal basis: legitimate interest (Art. 6(1)(f)) – for asset protection and theft prevention; and legal obligation (Art. 6(1)(c)) – where required for insurance purposes or cooperation with law enforcement authorities.

În funcție de relația pe care o aveți cu noi, putem prelucra următoarele categorii de date cu caracter personal:
Date de identificare – Nume complet, Cod Numeric Personal (CNP), vârstă (pentru verificarea eligibilității) și semnătură.
Temei legal: executarea contractului (Art. 6(1)(b) GDPR) – necesară pentru încheierea și executarea contractelor de închiriere; și îndeplinirea obligațiilor legale (Art. 6(1)(c)) – pentru respectarea cerințelor de evidență și arhivare.
Date de contact – Adresă, adresă de e-mail și număr de telefon.
Temei legal: executarea contractului (Art. 6(1)(b)) – pentru comunicări legate de derularea contractului; și interes legitim (Art. 6(1)(f)) – pentru asistență clienți și notificări de securitate.
Date contractuale și de tranzacție – Data de început și sfârșit a închirierii, metoda de plată, statutul plății, facturi emise și numărul total de zile de închiriere.
Temei legal: executarea contractului (Art. 6(1)(b)); și obligație legală (Art. 6(1)(c)) – pentru cerințe contabile și fiscale privind păstrarea documentelor.
Date legate de vehicul – Numărul bicicletei, marca, kilometrajul și orice echipamente suplimentare închiriate.
Temei legal: executarea contractului (Art. 6(1)(b)) – pentru gestionarea flotei și urmărirea bunurilor; și interes legitim (Art. 6(1)(f)) – pentru monitorizarea și întreținerea echipamentelor.
Date de contactare și recomandare (lead/referral) – Sursa prin care ne-ați contactat (de exemplu, cum ne-ați descoperit), eventualele informații de recomandare și motivul încetării serviciului, dacă este cazul.
Temei legal: interes legitim (Art. 6(1)(f)) – pentru gestionarea relațiilor comerciale și îmbunătățirea serviciilor; și consimțământ (Art. 6(1)(a)) – dacă datele sunt păstrate pentru marketing viitor.
Date de geolocalizare – Locația în timp real a bicicletelor noastre, obținută prin dispozitive GPS (utilizată exclusiv pentru localizarea proprietății companiei; nu se stochează jurnale GPS).
Temei legal: interes legitim (Art. 6(1)(f)) – pentru protejarea activelor și prevenirea furturilor; și obligație legală (Art. 6(1)(c)) – atunci când este necesar pentru cerințe de asigurare sau colaborare cu autoritățile de aplicare a legii.

3. How we collect your data

Directly from you: when you contact us through our website, WhatsApp, or other communication channels; when you sign a contract with us; when you provide identification and payment details.

  • Automatically: when our bicycles are equipped with GPS trackers (for live location only).

  • From third parties: when referrals are made by existing customers or partners.

We do not currently send marketing communications. If this changes in the future, we will only do so with your explicit consent.

Our products and services are not intended for anyone under the age of 18 and therefore, we do not knowingly collect data relating to children.

  • Direct de la dumneavoastră: atunci când ne contactați prin site, WhatsApp sau alte canale de comunicare; când semnați un contract cu noi; când furnizați date de identificare și plată.
  • Automat: atunci când bicicletele noastre sunt echipate cu dispozitive GPS (doar pentru localizare în timp real).
  • De la terți: atunci când primim recomandări de la clienți existenți sau parteneri.
În prezent nu trimitem comunicări de marketing. Dacă acest lucru se va modifica în viitor, o vom face doar cu consimțământul dumneavoastră explicit.
Produsele și serviciile noastre nu sunt destinate persoanelor sub 18 ani și, prin urmare, nu colectăm în mod conștient date despre minori.

4. Sharing your data

Sister company (Data Processor):

Where personal data is transferred outside the European Economic Area (EEA), including to our affiliated company in Republic of Moldova, such transfers are carried out in compliance with Chapter V of the GDPR. Specifically, transfers are governed by the European Commission’s Standard Contractual Clauses (SCCs) to ensure that your data remains protected to EU standards.

Third-party service providers for communication and storage:

We use third-party service providers for secure storage and communication purposes, such as cloud storage providers and communication platforms.

Crisp.chat (Crisp IM SAS, France) — used for live chat, website inquiries, and customer support. Crisp acts as our data processor under a GDPR-compliant Data Processing Agreement. Customer data is hosted within the EU (Netherlands, Germany, Ireland), and Crisp’s sub-processors comply with EU data protection standards.
More details: Crisp GDPR Notice

Google Drive (Google Ireland Ltd.) — used for secure file storage and document collaboration. All data is stored and processed according to Google’s GDPR-compliant Data Processing Terms. Access is restricted to authorized personnel only.WhatsApp Business (Meta Platforms Ireland Ltd.)— occasionally used for direct client communication regarding project logistics or support. WhatsApp messages are end-to-end encrypted, and only minimal information is exchanged as necessary for service delivery.

5. Data subject rights

You have the following rights under GDPR:

  • Right of access – to receive a copy of your personal data.

  • Right to rectification – to have incomplete or inaccurate data corrected.

  • Right to erasure – to request deletion where no longer necessary or lawful.

  • Right to restriction – to limit processing in certain circumstances.

  • Right to portability – to receive your data in a structured, machine-readable format.

  • Right to object – to processing carried out on legitimate interest grounds.

To exercise your rights, contact us at [insert contact email]. We will respond within one month, as required by law.
You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), at https://dataprotection.ro/, or with your local supervisory authority within the EU.

6. Data security

We use technical and organisational security measures to protect your data that we manage against manipulation, loss, destruction and against access by unauthorised persons. We also have procedures to deal with any suspected Personal Data breach and we will notify you, along with any relevant regulator, of any breach where we are legally required to do so.

7. Changes to this notice

We may update this Privacy Notice from time to time. Updated versions will always be published on our website with the date of the last revision.
Specifications
Prices
Reviews
FAQ
Business
Specifications
Prices
Reviews
FAQ
Business