Last updated: 3 June 2026

This Privacy Policy explains how HUCAMI COURIER SRL („Bike.City”, „we”) collects, uses and protects the personal data of visitors to the website www.bike.city and of customers of our rental service, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

1. Data Controller

The controller of your personal data is:

• HUCAMI COURIER SRL
• Tax ID (CUI): RO42609212
• Trade Register No.: J2020006152406
• Registered office: Drumul Bacriului, No. 45, Tronson 2, Ground floor, Ap. 1, Sector 6, Bucharest, Romania
• Email: [email protected]
• Phone / WhatsApp: +40 734 818 529

For any question or request regarding your data, you can contact us at [email protected].

2. What Data We Collect

• Identification data: first and last name, nationality.
• Contact data: email address, phone number.
• A copy of your ID document (national ID card or passport), provided for verification before bike handover.
• Delivery/stay address (hotel, apartment), for the Hotel Delivery option.
• Booking data: the bikes selected, dates and times, chosen service, booking history.
• Payment data: processed exclusively by our payment processor (Stripe); we do not store your card details.
• GPS location data (Samsung SmartTag) of the bike, during the rental period, for security and anti-theft purposes.
• Technical and website-usage data: IP address, device/browser type, pages visited — via cookies (see section 4).
• Correspondence with us: emails, WhatsApp messages, phone calls.
• Reviews or feedback you choose to share publicly.

3. Purposes and Legal Basis

We process your data for the following purposes and on the following legal bases under the GDPR:

Purpose	Legal basis (GDPR)
Processing the booking, handover/return, delivery and support	Performance of the contract – Art. 6(1)(b)
Verifying identity and eligibility (18+)	Performance of the contract and legitimate interest – Art. 6(1)(b) and (f)
Issuing invoices and keeping accounting records	Legal obligation – Art. 6(1)(c)
GPS location for security and recovery in case of theft	Legitimate interest – Art. 6(1)(f)
Handling damage, complaints and disputes	Legitimate interest / establishing a legal claim – Art. 6(1)(f)
Fraud prevention and service security	Legitimate interest – Art. 6(1)(f)
Sending marketing / newsletter communications	Consent – Art. 6(1)(a)
Analytics cookies (Google Analytics)	Consent – Art. 6(1)(a)

4. Cookies and Google Analytics

Our website uses cookies. Strictly necessary cookies enable the website and the booking process to function (the Booqable platform) and do not require consent. For traffic statistics we use Google Analytics, which places cookies only with your consent, given through the cookie banner. You can withdraw your consent at any time via the banner settings or your browser.

5. Marketing Communications

If you have given your consent, we may send you newsletters and offers by email. You can unsubscribe at any time, via the link in the email or by writing to [email protected]. Withdrawing your marketing consent does not affect transactional communications (booking confirmations, rental-related messages).

6. Who We Share Data With

We do not sell your data. We may share it with providers that help us operate the service, acting as processors under data-processing agreements:

Recipient	Role
Booqable	Online booking platform and website hosting
Stripe	Card payment processing
Google (Analytics)	Website usage statistics
Email service provider	Sending communications (confirmations, newsletter)
Meta (WhatsApp)	Communicating with customers via WhatsApp
Public authorities	Upon legal request or to establish/defend a legal claim

7. International Transfers

Some of our providers (e.g. Google, Stripe, Meta) may process data outside the European Economic Area. In such cases, the transfer is carried out on the basis of appropriate safeguards, in particular the Standard Contractual Clauses approved by the European Commission.

8. How Long We Keep Data

Data category	Retention period
Invoicing and accounting data	5 years from the end of the contractual relationship
Copy of the ID document	Only for the period strictly necessary to manage the booking / any damage, then deleted
GPS location data	Automatically deleted 30 days after the bike is returned
Booking and contact data	For the duration of the contractual relationship and applicable limitation periods
Marketing data	Until consent is withdrawn
Cookies	According to the lifespan of each cookie

9. Data Security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or disclosure. Card details are processed exclusively by Stripe (PCI-DSS certified); we do not store them.

10. Your Rights

As a data subject, you have the following rights:

• the right of access to your data;
• the right to rectification of inaccurate data;
• the right to erasure (the „right to be forgotten”), subject to legal retention obligations;
• the right to restriction of processing;
• the right to data portability;
• the right to object;
• the right to withdraw your consent at any time (for marketing and cookies);
• the right not to be subject to automated decision-making.

To exercise these rights, write to us at [email protected]. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro

11. Minors

The service is intended solely for persons aged 18 or over. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this policy. The version in force is the one published on www.bike.city, with the last-updated date shown at the top.

13. Contact

HUCAMI COURIER SRL — Email: [email protected] — Phone / WhatsApp: +40 734 818 529 — Address: Drumul Bacriului, No. 45, Tronson 2, Ground floor, Ap. 1, Sector 6, Bucharest, Romania.

Cookie policy by HUCAMI COURIER SRL, 2026

We collect cookies to deliver you the best possible user experience.