Privacy Policy

This English version is provided for convenience. The German privacy policy is the legally binding version; German and EU data protection law applies.

We take the protection of your personal data seriously. In this privacy policy we inform you, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), which data we process, for what purpose and on what legal basis.

1. Controller

The controller responsible for data processing on this website is:

CycleFit Europe
Lloyd Thomas
Peter-Krenkel-Str. 10
64625 Bensheim, Germany

(Postal address — office mail address only, not a visitor address)

Email: lloyd@bikefiteurope.com

2. General information

Personal data is any information relating to an identified or identifiable natural person. We only process personal data where this is necessary to provide the website, to communicate with you, and to prepare, carry out and follow up a bike fitting, or where you have given your consent.

Data is transmitted on this website in encrypted form via a secured connection (TLS/SSL).

3. Hosting and server log files

This website is hosted by an external service provider. The personal data collected on this website is stored on the host’s servers.

Hosting provider: 1blu GmbH, Riedemannweg 60, 13627 Berlin, Germany. The server is located in a data centre in Germany.

When you access the website, the host automatically collects information in so-called server log files that your browser transmits. These are usually:

IP address
date and time of access
page or file requested
amount of data transferred
browser type and version
operating system used
referrer URL

This data is required to provide the website technically, to ensure stability and security, and to prevent misuse. The legal basis is our legitimate interest in a secure and functional web presence (Art. 6 (1) (f) GDPR).

Retention period: the server log files are rotated automatically by file size, and the oldest files are deleted in the process. At the current volume, log entries are deleted after about three months.

4. Contact by email or form

If you contact us by email or via a contact form, we process the data you provide (e.g. name, email address, content of your message) in order to handle and respond to your enquiry.

The legal basis is the performance of pre-contractual measures or the performance of a contract (Art. 6 (1) (b) GDPR), insofar as your enquiry relates to a booking or service, otherwise our legitimate interest in responding to enquiries (Art. 6 (1) (f) GDPR).

We store this data for up to 12 months after the last contact. If your enquiry leads to a booking or a contract, the statutory retention periods apply (see section 13).

5. Online appointment booking

Appointments are booked in our own booking system at booking.bikefiteurope.com, which we operate ourselves as the controller. It is not embedded in this website: when you click a booking button, the booking system opens as a page of its own.

Which data the booking system processes (e.g. name, contact details, desired appointment and service, payment details), for which purposes, on which legal basis, with which service providers and for how long is explained in the booking system’s privacy policy. The data you enter during booking is processed to carry out the booking and prepare the appointment (Art. 6 (1) (b) GDPR).

Where a booking came from. When you click a booking button on this website, at the moment of the click we add information to the link about where the click came from: the page and the button (cf_src, cf_cta) and any campaign information already present in the address you visited (utm_source, utm_medium, utm_campaign, utm_content, utm_term, gclid, fbclid). Nothing is stored on your device in the process. The booking system stores this information and the domain name of the referring page together with your booking. It also counts visits to its booking pages daily, aggregated by service and origin and without reference to individual people. This lets us evaluate which pages and channels lead to bookings. The legal basis is our legitimate interest in evaluating our offering and our advertising (Art. 6 (1) (f) GDPR). You can object to this processing at any time (Art. 21 GDPR).

Showing the next free appointment. On some service pages we show the next free appointment. To do so, your browser requests the public service overview of our booking system at booking.bikefiteurope.com when the page loads. This request carries no cookies, and nothing is stored on or read from your device in the process. As with any page request, our server technically receives your IP address and browser information in order to deliver the response; we do not link this to you or to any later booking. The legal basis is our legitimate interest in showing you current availability (Art. 6 (1) (f) GDPR). You can object to this processing at any time (Art. 21 GDPR); the display is also omitted if your browser blocks the request.

Measuring bookings with Google Analytics. After every confirmed booking, the booking system sends an event server-side to Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), and a reversing event if the booking is cancelled. It transmits the booking number, the service booked, the amount and the origin information described above, never your name, email address, phone number or questionnaire answers. If you have not consented to the “Analytics” category on this website, the booking system uses a random substitute identifier that has no connection to your visit to the website; the legal basis is then our legitimate interest in measuring booking success (Art. 6 (1) (f) GDPR). If you have consented, the booking system additionally reads your Google Analytics identifier from the _ga and _ga_* cookies so that the booking can be attributed to your visit, and only if the cf_an cookie, which we set solely after your consent, is also present (see the Cookie Policy). The legal basis for this is your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR), which you can withdraw at any time with effect for the future; after that, no Google Analytics identifier is read. Where Google processes data outside the EU, this is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

To prepare, carry out and follow up a bike fitting, we process the information you provide for this purpose. Depending on your input, this may also include body-related information, such as body measurements, mobility, previous riding positions or training habits.

We process this information to provide the service you have booked (Art. 6 (1) (b) GDPR). Providing this information is voluntary; however, without certain details a bike fitting may not be possible or may not be carried out in full.

In connection with a bike fitting, information may arise that can be classified as health data within the meaning of Art. 9 GDPR. This includes, for example, information about pain, previous injuries, numbness, mobility limitations, saddle pressure or other physical complaints.

We process such information exclusively where you voluntarily provide it to us for the preparation, execution, documentation or follow-up of your bike fitting. The legal basis is your explicit consent (Art. 9 (2) (a) GDPR). You can withdraw this consent at any time with effect for the future.

CycleFit Europe is not a medical provider and does not offer any medical or therapeutic services. A bike fitting does not replace a medical examination, diagnosis or treatment. The information mentioned serves solely to adapt the riding position and equipment to your individual requirements.

If you do not wish to share health-related information with us, that is possible. In that case we carry out the bike fitting based on the information available to us.

8. Photos, videos and movement analysis during bike fitting

During a bike fitting, photos or video recordings may be made and a movement analysis carried out to analyse the riding position. These recordings initially serve solely to carry out and document your appointment (Art. 6 (1) (b) GDPR; where health-related, Art. 9 (2) (a) GDPR on the basis of your explicit consent).

Any use beyond this — in particular publication of photos or videos, for example on the website or on social media — requires separate, explicit consent. This consent is voluntary and can be withdrawn at any time with effect for the future.

9. Cookies and similar technologies

This website uses cookies and similar technologies. Technically necessary cookies are required to operate the website. Non-necessary cookies and comparable technologies are only used with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

If you consent to the “Analytics” category, we also set the cf_an cookie for all pages under bikefiteurope.com. It contains no identifier, only the value 1, and tells our booking system at booking.bikefiteurope.com that you have consented. It is deleted after one year or when you withdraw your consent; on withdrawal we also delete the Google Analytics cookies _ga and _ga_*.

Details of the cookies used, the categories and the option to change or withdraw your consent can be found in our Cookie Policy.

10. External services and embedded content

Individual pages may contain content from external providers (e.g. embedded media). When such content is accessed, connection data is transferred to the respective provider.

Insofar as this embedding is not technically necessary, it only takes place with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future.

No content from external providers is currently embedded on this website.

We do not currently offer a newsletter on this website. No data for a newsletter is therefore collected via this website.

12. Payment processing

No payment can be made on this website itself. Online payments are only possible in the booking system at booking.bikefiteurope.com. The data required for this is transmitted to the payment service provider Stripe (Stripe Payments Europe Ltd, Ireland). The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR). Details can be found in the booking system’s privacy policy.

13. Retention periods

We only store personal data for as long as is necessary for the respective purposes or as required by statutory retention periods. After that, the data is deleted or anonymised.

Specific retention periods:

Server log files: see section 3 (currently about three months).
Enquiries via a contact form or by email: up to 12 months after the last contact.
Form submissions automatically identified as spam: 30 days, after which they are deleted.
Data relating to bookings and contracts: in line with the statutory retention periods, in particular 6 years for business correspondence and 10 years for accounting records (Section 257 HGB, Section 147 AO).

14. Your rights

Within the scope of the legal requirements, you have the following rights:

right of access to the data processed about you (Art. 15 GDPR)
right to rectification of inaccurate data (Art. 16 GDPR)
right to erasure (Art. 17 GDPR)
right to restriction of processing (Art. 18 GDPR)
right to data portability (Art. 20 GDPR)
right to object to processing (Art. 21 GDPR)
right to withdraw consent given at any time with effect for the future (Art. 7 (3) GDPR)

An informal message to the contact details above is sufficient to exercise your rights.

15. Right to lodge a complaint with the supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR. The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Deutschland
Telefon: +49 611 1408-0
E-Mail: poststelle@datenschutz.hessen.de

16. Currency and changes to this privacy policy

This privacy policy is currently valid and has the date stated below. As our website develops, or due to changed legal requirements, it may become necessary to amend this privacy policy.

Last updated: 21 October 2026