Privacy Policy

Data Controller

Officina Dario Pegoretti
Lungadige Galtarossa 21/A
37133 Verona VR, Italy
Email: info@dariopegoretti.com
Phone: +39 045 9617028

This privacy policy explains how we collect, use, and protect personal data when you visit dariopegoretti.com or contact us, in accordance with the EU General Data Protection Regulation (Regulation 2016/679, "GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).

What data we collect

We collect personal data that you provide directly to us through our website, including when you submit an enquiry, subscribe to our newsletter, use the bike configurator, or contact us by email or telephone. This may include your name, email address, telephone number, country or location, and any information you include in your message.

When you use our bike fit tool or geometry explorer, we may collect measurements you enter (such as height and inseam length) to provide size recommendations. This data is attached to your enquiry if you choose to submit one.

We also collect technical data automatically when you visit our website, including your IP address, browser type, device information, pages visited, and time spent on the site. This data is collected through cookies and similar technologies (see our Cookie Policy for details). We use Google Analytics, a web analytics service provided by Google Ireland Limited, to help us understand how visitors use the site. Google Analytics uses cookies to collect anonymised usage data, which is processed on Google's servers. IP anonymisation is enabled, meaning your full IP address is not stored.

Legal basis for processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Consent — when you subscribe to our newsletter or accept non-essential cookies. You may withdraw consent at any time.
• Contractual necessity — when you submit an enquiry about purchasing a bicycle, and we process your data to respond to and manage that enquiry.
• Legitimate interest — for website analytics and improving our services, provided this does not override your fundamental rights and freedoms.

How we use your data

We use your personal data to respond to enquiries about our bicycles and services, to process and manage frame orders, to send our newsletter (only with your explicit consent), to improve our website and understand how visitors use it, and to comply with legal obligations.

We do not sell your personal data. We do not use automated decision-making or profiling that produces legal effects.

Newsletter

If you subscribe to our newsletter, we collect your email address and send periodic updates about new models, workshop news, and stories from Verona. We use Mailchimp (The Rocket Science Group LLC, based in the United States) to manage our mailing list. Mailchimp processes your data under the EU-US Data Privacy Framework. You can unsubscribe at any time using the link in every email, or by contacting us directly.

Data sharing

We may share your data with trusted third parties who assist us in operating our website and conducting our business, including our hosting provider (Railway), our content management system (Sanity), our email service provider (Mailchimp), and our analytics provider (Google Analytics). These parties process data on our behalf and are bound by contractual obligations to protect your data in accordance with the GDPR.

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses or adequacy decisions by the European Commission.

Data retention

We retain enquiry data for as long as necessary to fulfil the purpose for which it was collected, typically for the duration of our commercial relationship and for a reasonable period thereafter to comply with legal obligations. Newsletter subscription data is retained until you unsubscribe. Website analytics data is retained in anonymised form.

Your rights

Under the GDPR and Italian data protection law, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to certain processing activities
• Request portability of your data in a structured, machine-readable format
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, contact us at info@dariopegoretti.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data in transit.

Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this page periodically.