Privacy Policy

1. Who is responsible for your data

Girona Bike Pics is operated by Ricard Peña, based in Girona, Spain. Contact for privacy matters: hola@gironabikepics.com. Full identification details, including our NIF, are published on our Legal Notice page.

2. What personal data we collect

Depending on how you interact with the site, we may collect:

• Contact/booking form (Services): name, email, requested session dates, session type, number of riders, preferred language
• Event registration (Rides): first name, last name, email, phone number, and the date/time you accepted the liability waiver and photography consent
• Photographs taken at events or sessions: images may show your face and identify you, whether or not you purchase a photo
• Purchases: when you buy a photo through our Pixieset store, that transaction is handled directly by Pixieset and its payment processor — see their own privacy policy for how they handle your data. We do not receive or store your payment card details.
• Basic analytics: we use privacy-friendly analytics (Vercel Analytics) that does not use cookies to track you individually or build a profile of you across sites.

3. Why we process this data and the legal basis

• To respond to your booking or event inquiry, and to organize and run events you register for — necessary to fulfil our arrangement with you
• To send you confirmation emails via our email provider, Resend — necessary to fulfil our arrangement with you
• To take and use event/session photographs, including for promotional use and for offering them for sale — based on the consent you give when registering or booking a session
• To keep basic records for tax and accounting purposes — legal obligation

4. Who we share data with

We use a small number of service providers (data processors) to run the site:

• Supabase — stores event registration records
• Resend — sends confirmation emails
• Pixieset — hosts our photo galleries and processes photo purchases and payments directly
• Vercel — hosts the website itself

We do not sell your personal data to anyone.

5. How long we keep your data

We keep booking and event registration records for as long as reasonably needed to organize the relevant event or session, and afterwards for the period required by Spanish tax and accounting rules. You can ask us to delete your data sooner where we're not legally required to keep it — see your rights below.

6. Photographs of you

If you attend an event or session we photograph, your image may appear in photos we take, use for promotion, or offer for sale, based on the consent given at registration or booking. If you'd rather not appear in publicly used photos, let us know in advance at hola@gironabikepics.com and we'll do our best to accommodate that — though we can't guarantee removal from group or crowd shots after the fact if others have already purchased or received copies.

7. Children

Our events and services are intended for adults. If a minor takes part with a parent or guardian's involvement, we rely on that parent or guardian to provide any necessary consent on the minor's behalf, including for photography.

8. Your rights

Under GDPR, you can ask us to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data, where we're not required to keep it
• Restrict or object to certain processing
• Receive a copy of your data in a portable format

To exercise any of these, email hola@gironabikepics.com. If you're not satisfied with our response, you can lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at aepd.es.

9. Cookies

If our analytics or any other tool ever requires cookies beyond what's strictly necessary for the site to function, we will update this policy and, where required, ask for your consent first.

10. Changes to this policy

We may update this policy from time to time. The version published on this page is the one currently in effect.