Last updated: 2 November 2026.

This page explains which personal data we process when you visit bicillevant.com, request a booking or write to us, what we use it for, how long we keep it and what your rights are. We comply with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

Portocolom Sport, S.L. (Bicillevant)
Tax ID (NIF): B16607236
Address: Carrer Cala Marçal, 22, 07670 Portocolom (Balearic Islands), Spain
Phone: +34 606 548 677
Email: info@bicillevant.com

We are not required to appoint a data protection officer. For any privacy question, write to info@bicillevant.com.

2. What data we process, why, and on what legal basis

a) Bike booking requests. When you use the booking form on a bike page, we process your name, email address, phone or WhatsApp number (if provided), pick-up shop, model, number of units, pick-up and return dates and any comments you add. We use them to check availability, confirm your booking, prepare the bikes and contact you about the rental. Legal basis: steps taken at your request before entering into a contract and performance of the rental contract (Art. 6(1)(b) GDPR).

b) Enquiries. When you write to us through the contact form, by email, by phone or on WhatsApp, we process the data you give us (name, email, phone, subject and message) in order to reply. Legal basis: if the enquiry concerns a rental or a tour, the pre-contractual steps you request (Art. 6(1)(b) GDPR); otherwise, our legitimate interest in answering people who contact us (Art. 6(1)(f) GDPR).

c) Rental, invoicing and legal obligations. If the rental goes ahead, we process the data needed for the contract, payment and invoice, and keep it as required by commercial and tax law. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).

d) Website statistics. Only if you accept it in the cookie notice, we use Google Analytics to learn how many people visit the website, which pages they view and what actions they take (for example, opening WhatsApp, calling or sending a form). Google Analytics processes online identifiers and technical data about your device and browser. If you do not accept, Google only receives cookieless signals that do not allow you to be identified. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22.2 of Spanish Law 34/2002, LSSI), which you can withdraw at any time from the cookie settings link.

e) Form security. Our forms use Google reCAPTCHA to stop automated spam. reCAPTCHA analyses technical data about your device and your interaction with the page. Legal basis: our legitimate interest in protecting the website and our inbox from abuse (Art. 6(1)(f) GDPR).

f) Customer reviews. We display public reviews from our customers on Google and Tripadvisor through the Trustindex service. The reviews, their images and the files of that section are served from our own server, so your browser does not connect to Trustindex or to the review platforms and none of your data is shared with them.

Fields marked with an asterisk in our forms are required. Without them we cannot process your booking or enquiry. We do not make automated decisions or build profiles that affect you.

3. How long we keep your data

Contact details in bookings (name, email, phone and comments) are deleted automatically twelve months after the bike return date. We keep only the model, dates and units, with no personal data, to manage stock and produce internal statistics.

Enquiries are kept for as long as needed to reply and for no more than twelve months after the last contact, unless they lead to a rental.

Invoicing data is kept for the legally required periods: six years under Article 30 of the Spanish Commercial Code and, for tax purposes, for the limitation period set by the Spanish General Tax Law.

Google Analytics data is kept for fourteen months and then deleted.

4. Who may receive your data

We do not sell or disclose your data to third parties, except where required by law (for example, to the tax authorities or the courts). To provide our service we rely on providers that process data on our behalf and under our instructions (data processors):

• Hostinger: website and email hosting, on servers located in the European Union.
• Google Ireland Limited: Google Analytics (only with your consent) and Google reCAPTCHA.

If you write to us on WhatsApp, WhatsApp Ireland Limited processes your data as an independent controller under its own privacy policy.

5. International transfers

Google may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework, recognised by the European Commission in its adequacy decision of 10 July 2023, and by the standard contractual clauses approved by the Commission.

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before withdrawal. Write to info@bicillevant.com or to our postal address stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month at the latest.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.

7. Minors

Bookings and enquiries must be made by adults. Children’s bikes and child seats are always booked by an adult responsible for the child.

8. Security

We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access to the management panel and backups.

9. Cookies

You can see which cookies we use and change your preferences in our cookie policy.

10. Changes to this policy

If we change the way we process your data, we will update this page and show the date of the latest revision at the top.