Privacy Policy
Last updated: June 2026
Introduction
BGP Noleggio Srl ("we," "our," or "the Company"), operating under the brand Explore on Bike, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our platform, or book our services, in strict compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.
1. Data Controller
Company Name: BGP Noleggio Srl. Registered Office: Via Vittore Carpaccio 60, 00147 Roma, Italy. VAT ID: 17405641006. Certified Email (PEC): bgpnoleggiosrl@legalmail.it. Contact Email: hello@exploreonbike.com
2. Categories of Data We Collect
Identity and Contact Data: name, surname, email address, phone number, language preferences, and country of residence. Booking and Transaction Data: details of tours booked, date and time of service, number of participants, and physical parameters voluntarily provided. Financial Data: payment card details and billing information processed via encrypted third-party gateways (e.g. Stripe); we do not store your full financial credentials. Technical and Usage Data: IP address, browser type, operating system, and details of how you interact with our website. Visual Media Content: photos and videos captured by guides during tours, subject to your explicit consent provided via the Digital Liability Waiver.
3. Purposes and Legal Basis for Processing
Performance of a Contract (Art. 6(1)(b) GDPR): to manage and confirm your bookings, process payments as the Merchant of Record, and communicate essential tour logistics, including the creation of dedicated operational WhatsApp groups. Consent (Art. 6(1)(a) GDPR): for promotional newsletters, marketing communications, and the capture and sharing of tour media. Legal Obligation (Art. 6(1)(c) GDPR): to comply with applicable tax, accounting, and anti-money-laundering laws. Legitimate Interest (Art. 6(1)(f) GDPR): to improve our platform, optimise user experience, ensure network security, and handle potential legal claims.
4. Data Sharing and Third-Party Recipients
Local Tour Partners: we transmit contact details and booking parameters to the independent local operators executing your e-bike tour. Technical Service Providers: we use secure third-party platforms including WaiverForever (digital safety waivers) and Dropbox (hosting and distributing tour media). Payment Gateways: financial transaction data is shared exclusively with certified payment processors. Public Authorities: data may be disclosed where required by mandatory legal or judicial order.
5. Media Content Storage and Retention
Visual media captured during tours is uploaded to secure, dedicated cloud folders hosted on Dropbox. A secure link to the folder is sent automatically to the participants of that specific tour group. Media assets are retained for a maximum of 12 months, after which they are permanently deleted unless explicit permission is granted for extended use.
6. International Data Transfers
Some of our technical service providers may process data outside the European Economic Area (EEA). In such cases, we ensure the transfer is protected by appropriate legal safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) or adequacy decisions.
7. Data Retention Period
Booking and financial records are retained for 10 years in accordance with Italian fiscal legislation. Marketing data (emails) is retained for 24 months from your last interaction, or until you unsubscribe.
8. Your Rights Under the GDPR
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection to direct marketing. To exercise any of these rights, contact us at privacy@exploreonbike.com. You also have the right to lodge a complaint with a data protection authority, such as the Garante per la protezione dei dati personali in Italy (www.garanteprivacy.it).
9. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our operational practices or legal requirements. Any updates will be posted on this page with a revised "Last Updated" date.