Last updated: 11 September 2026

Privacy policy

Who we are

Venga Cycling Mallorca, Carrer de Formentor 59, 07470 Port de Pollença, Illes Balears, Spain, is the controller of the personal data described here. You can reach us at hola@vengacyclingmallorca.com or +34 643 217 821.

Company registration details (legal name and tax number) to be completed before launch.

What we collect, and why

When you book a bike. Your name, email address and — if you give one — your phone number. Where you are staying on the island. Your height, and your weight if you choose to give it. Your preferred riding position. The bike, size, dates, pickup time, insurance and any extras you choose, plus anything you write in the notes field.

We need the name and contact details to confirm the booking and reach you if something changes. We need your height and riding position to set the bike up before you arrive — that is the whole point of a fitted rental. Weight is optional and used only to set tyre pressure. Where you are staying tells us where you are riding from and gives us a second way to find you if a phone goes unanswered.

Legal basis: performance of a contract. Without these details we cannot prepare a bike for you.

When you write or call us. Whatever you put in the message, so that we can answer it. Legal basis: our legitimate interest in replying to people who contact us.

When you visit the site. Nothing that identifies you, unless you agree to it. See the cookies section below.

What we do not collect

We do not take card details on this site. Payment happens in the shop when you pick the bike up. We do not ask for identity documents, we do not profile you, and we do not make automated decisions about you.

Who else sees your data

We use a small number of services to run the site. Each of them only receives what it needs:

  • Supabase — the database holding your reservation. Hosted in the European Union.
  • Resend — sends your confirmation email. It sees your email address and the contents of that message.
  • GitHub Pages — serves the website files. It processes your IP address in its server logs, as every web server does.
  • Google (Tag Manager, Analytics) — only if you accept analytics cookies. See below.
  • Open-Meteo — the live weather bar. Your browser asks it for the weather in Port de Pollença; no personal data is sent.

We do not sell your data and we do not share it with anyone else.

Cookies and analytics

The site sets nothing beyond what it needs to work until you decide. Before you choose, all analytics and advertising storage is switched off — this is implemented with Google Consent Mode v2.

Necessary — remember your language and your booking in progress, and keep the site secure. These cannot be switched off because the site would not work without them.

Analytics — only if you agree. Tells us which bikes and routes people look at and where bookings get abandoned, so we can fix what is confusing. The data is aggregated.

Marketing — only if you agree. Lets us reach cyclists planning a trip and measure whether those ads work.

You can change or withdraw your choice at any time through the "Cookie settings" link in the footer. Withdrawing is as easy as giving consent, and your decision expires after twelve months so we ask again.

How long we keep things

Reservations are kept for as long as we need them for accounting and any warranty or liability questions — under Spanish law that is six years. Emails you send us are kept for as long as the conversation is useful, and then deleted. Analytics data is retained according to the settings in Google Analytics, and never contains your name or contact details.

Your rights

Under the GDPR you can ask us to show you the data we hold about you, correct it, delete it, restrict what we do with it, or send it to you in a portable form. You can object to processing based on our legitimate interest, and you can withdraw consent for cookies at any time.

Write to hola@vengacyclingmallorca.com and we will answer within one month. If you think we have handled your data badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

Changes

If we change this policy we will update the date at the top. Material changes will be announced on the site.