A data processing guide when you browse, purchase or ask for assistance to Doctorbike. Update: 24 October 2026.
Who manages the data
Doctorbike S.r.l., Corso Europa 82, 20013 Magenta (MI), P. IVA 12143730963. For information or to exercise your rights write to shop@doctorbike.it or a info@doctorbike.it; telephone 02 9725 5461This information concerns the site Doctorbike and related ecommerce services; payment providers and other external services also make their own information.
Data, purposes and legal bases
| Activities and data | Purpose and legal basis |
|---|---|
| Navigation and security: IP address, server requests, device, session and antispam signals | To make available and protect the service, to prevent abuse. Technical necessity and legitimate interest in security, art. 6.1.f GDPR; for strictly necessary tools the exemption from consent provided by art. 122 of the Privacy Code applies. |
| Account: first name, last name, email, protected credentials, addresses and preferences | Create and manage the account requested, allow access to orders and services. Performance of the contract or measures required by the data subject, art. 6.1.b GDPR. Passwords are not stored in clear. |
| Purchases, payments and deliveries: contact details, items, sizes, amounts, addresses, status of the transaction and shipment | Run the order, manage shipping, assistance, warranty and refund: art. 6.1.b GDPR. Tax documentation and compliance: art. 6.1.c GDPR. The complete card data are processed by payment services. |
| Requests, bookings and events: contacts, message, service or product and information provided in the form | Answer and organize the requested service, art. 6.1.b GDPR. The marked fields are necessary to manage the request; do not enter any health data or other particular data in the free fields. |
| Fidelity: card identification, email, balance, movements and associated vouchers | Manage the required program and recognize the necessary benefits, art. 6.1.b GDPR. The email allows you to connect card and account. Further marketing requires a separate consent when provided. |
| Withdrawal: order reference, identity and contact details, articles, declaration, date/time and receipt | Receive and document the withdrawal and manage the return and refund, articles 6.1.b and 6.1.c GDPR. Any IBAN only serves when necessary for the agreed refund. |
| Statistics, usability, advertising and cookie preferences | Statistics with Google Analytics and Microsoft Clarity, campaigns with Google Ads and Meta Pixel according to the choices illustrated in the Cookie Policy. For optional functions the basis is consent, art. 6.1.a GDPR. Registration of choices documents compliance with obligations, art. 6.1.c and 7.1 GDPR. |
The provision of data necessary for the order or service is indispensable to perform it; optional information and consent to marketing are not conditions to purchase. Consent can be revoked without compromising the lawfulness of the processing already carried out.
Who can receive the data
The data are accessible to the authorized staff and suppliers necessary for the service: hosting and IT maintenance, email management, couriers and logistics, administrative and legal consultants, payment and financing providers. Subjects who process data on our behalf must be charged according to art. 28 GDPR; others operate as independent owners according to the service performed.
The site uses PrestaShop installed on the infrastructure of the shop and ECM modules: the simple use of the software does not mean that all data is sent to PrestaShop S.A. Orders and benefits Fidelity can be managed through Sirio Cloud and Shopping Plus/NBF systems. Services MyUniqo for the digital booklet have their own information at the time of access or activation.
According to the method chosen, PayPal/PrestaShop Checkout, Stripe or HeyLight/Compass may take place. Doctorbike receives the results necessary for the management of the order; the evaluation of the financing is carried out by the lender, according to his information, not by the system of recommendation produced Doctorbike.
DoctorGarage: bike and assistance
If you choose to use the garage, we process your bike's name, optional chassis or serial number, date of purchase declared, maintenance notes, mileage and dates to remember. The processing is used to manage the personal space and assistance services required, pursuant to art. 6.1.b GDPR. Data are not public: they are accessible to your account and to authorized staff for the service. The personal notes are distinct from the interventions entered by the team.
You can store a bike; the storage hides it from the active list and does not automatically delete interventions or practices. You can export data and request its deletion from your account's privacy tools or contact the owner; any data necessary for legal obligations or disputes are managed according to the criteria of retention of this information. The communications shown in the garage are answers published specifically by the team, separated from the internal notes.
The portal MyUniqo opens on your request and remains separate from the garage: the site does not synchronize the books via API currently and does not require the credentials MyUniqo. No data of the garage is sent to the portal for the mere fact of visiting this section.
External links and contents
WhatsApp, social, app store and Google Reviews only open their services when you select them. The contact map is uploaded on request. Size and video guides may result in loading the contents of the manufacturer or platform indicated: consult the relevant information before activating them. Third-party content can receive the IP address and browser data.
Transfers outside the EEA
Some providers, including Google, Meta, Microsoft and payment services, may also process data outside the European Economic Area. Any transfers must be based on an adequacy decision applicable to the recipient or on guarantees pursuant to Articles 46 and following GDPR, such as standard contractual clauses and additional measures when necessary. Suppliers' information describes their processing; you can ask Doctorbike for information about the recipients and the relevant warranties.
For how long
The order details are kept for the performance of the contract, assistance and terms applicable to legal safeguards. Compulsory accounting documentation is kept for the period prescribed by law, or ten years. Any litigation or specific obligations may require further storage limited to the necessary data.
Account data and Fidelity are processed for the duration of the report and, subsequently, to the extent necessary for legal obligations and rights protection. The contact requests are kept for as long as necessary to manage them and their developments. You can ask the holder for the criteria applied to your specific request and the deletion of data that is no longer necessary to keep.
The choice of cookies on the device lasts 180 days, unless modified or cancelled in advance. The register of choices is distinct from the cookie: documents the decision, its version and changes. The periods of cookies and third-party services are described in the following section and in the information of suppliers.
Your rights
You can ask for access, rectification, deletion, limitation and, in the cases provided, portability of data; you can object to processing based on legitimate interest and at any time to direct marketing. You can withdraw consents from cookie preferences and write to shop@doctorbike.it for other treatments. The personal area also offers the tools for personal data available in the store.
We respond without undue delay and as a rule within one month; any extension in the cases provided for by the GDPR is communicated. We may request information strictly necessary to verify the identity. You are entitled to lodge a complaint with Data Protection Supervisor or to the competent authority of your country.
Accessory suggestions use catalog correlations and purchases to propose products; they do not take decisions with legal effects on the user. Any decisions of the lender remain separate.
Categories, suppliers and controls available on site Doctorbike.
Le tue scelte
You can buy by rejecting optional categories. •Accept and refuse •Approach have equal evidence; close the banner refuses optional functions. Optional categories are not pre-selected. You can change or revoke your choice at any time; revocation stops subsequent activations and can reload the page to stop the already loaded scripts.
Necessary cookies and preferences
The cookies of PrestaShop (names starting with PrestaShop-), session and security tokens and country and language preferences allow access, shopping cart, form protection and proper order management. The durations depend on the type of session and the settings of the account. They are not used for behavioural advertising.
The cookie ecm_cookie_consent retains the choice for 180 days; on DEV is used ecm_cookie_consent_dev, separated from production. The server log stores date and time, choice identification, action, categories, version of the information, salty IP imprint and browser information; it can associate the authenticated customer. It serves to document preferences.
Statistics and usability
With statistical consent, Google Analytics 4 measures ecommerce visits and events and Microsoft Clarity analyzes interactions and usability, including session recordings with sensitive data masking. Cookies may include _ga and _ga_... (Google, up to two years unless otherwise configured), _clck (Clarity, up to one year) and _clsk (Clarity, up to one day). The actual times are those of the configuration and supplier.
The private fields and personal benefit data are masked in the pre-arranged areas. The data entered in the contact forms and the private account details are not intentionally included in the analysis events.
Advertising and conversions
With marketing consent, Google Ads and Meta Pixel measure campaigns and ecommerce events and can allow you to personalize ads. Cookies may include _gcl_... (Google Ads, normally up to 90 days), _fbp and _fbc (Meta, normally up to 90 days). With marketing consent, advanced Google Ads conversions can use email, phone and name/name transformed on the server in hash SHA-256, in addition to CAP and country, to connect a purchase to Google campaigns. We do not transmit away and city for this function. Hash is pseudonymized personal data, not anonymous data. The transfer takes place only after marketing consent; in case of refusal this function does not send the matching data. The service does not add such contact details to the events GA4, Meta or to the technical reports of the site.
Google Allows Mode V2
The site transmits to Google the status of choices: analytics_storage, ad_storage, ad_user_data and ad_personalization are denied prior to choice and when their respective categories are rejected. The configured advanced mode can transmit signals without analytical or advertising cookies even in a denied state, for aggregate measurement and modeled conversions.
Without cookies it does not automatically mean anonymous: a network communication can involve IP address, technical data and page information. Mode allows is not equivalent to consent and does not guarantee the exemption from privacy obligations on its own. We do not promise full recognition of users who refuse. External measurement scripts are disabled in this development environment.
Payment and information of suppliers
When you activate a payment, the provider can use tools necessary to perform the transaction and prevent fraud. They are not presented as advertising cookies of the store. For conditions, durations and treatment consult the supplier used.
You can also delete cookies from your browser settings. The deletion of technical cookies may interrupt session or shopping cart; in order to maintain refusal, you can reset your preferences to the banner.
Services available online | Doctorbike
For purchased services we process order details, appointment preferences, staff messages and any express request for early performance. The legal basis is performance of the contract and legal obligations; an early performance request concerns withdrawal rights, not marketing consent. Do not enter health information in notes. You can download receipts and request a data export. Retention follows the periods stated for orders, support and legal obligations; deleting a bike from the Garage does not erase purchase records.