Privacy Policy

1. Controller

The data controller is Karlsplatz Cycle Hub, Frankenberggasse 2–4, 1040 Wien, Austria. Email: [email protected]. Telephone: +43 664 555 1568.

2. Scope

This policy applies to personal data collected through the website isteraciub.hair, contact forms, email, telephone, and in-shop or workshop interactions related to sales, service bookings, test rides, and accessory orders.

3. Data we process

• Identity and contact details (name, email, phone) when you write to us, enquire, book service, or arrange a visit.
• Message content, bike details, and preferences you choose to share.
• Order and service records needed to complete a purchase or repair.
• Technical data such as IP address, browser type, and cookie identifiers where permitted (see our Cookie Policy).

4. Purposes and legal bases

• Responding to enquiries — legitimate interests (Art. 6(1)(f) GDPR) or steps prior to a contract (Art. 6(1)(b)).
• Sales, service, and workshop work — performance of a contract (Art. 6(1)(b)).
• Legal obligations — accounting and compliance under Austrian and EU law (Art. 6(1)(c)), including tax and consumer rules.
• Optional analytics or marketing cookies — consent (Art. 6(1)(a)), which you may withdraw at any time.

5. Retention

We keep enquiry messages for as long as needed to complete the conversation and for a reasonable follow-up period (typically up to 24 months), unless a longer period is required for legal claims, warranties, or accounting. Contract and invoice records are retained for the periods required by Austrian law. Cookie consent choices are stored locally in your browser until you clear them or change preferences.

6. Recipients

Data is handled by the shop. Hosting, email, or payment providers may process data as processors under appropriate agreements. We do not sell personal data. Transfers outside the EEA, if any, will rely on an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.

7. Your rights

Under the GDPR and the Austrian DSG you may request access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent without affecting prior lawful processing.

To exercise rights, contact [email protected]. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde — DSB), Barichgasse 40–42, 1030 Wien, Austria — www.dsb.gv.at.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration, proportionate to the risks of a small retail and workshop website and customer records.

9. Updates

We may update this policy to reflect legal or operational changes. The version published on this page is the current one. Last updated: July 2026.