Privacy Policy

1. Introduction

Welcome to Lyrycao.com's Privacy Policy. This document outlines how we collect, use, process, and protect your personal information when you use our bicycle rental services in Amsterdam. We are committed to ensuring that your privacy is protected in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

By using our website and services, you consent to the data practices described in this policy. We encourage you to read this Privacy Policy carefully to understand our practices regarding your personal data.

2. Information We Collect

We collect and process the following categories of personal data:

• Identity Information: Name, date of birth, identification documents (passport or ID card) required for bicycle rental agreements.
• Contact Information: Email address, phone number, postal address, and accommodation details during your stay in Amsterdam.
• Financial Information: Payment details, transaction history, and billing information.
• Technical Information: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform on devices you use to access our website.
• Usage Information: Information about how you use our website and services, including browsing patterns and bicycle rental history.
• Marketing and Communications Information: Your preferences in receiving marketing from us and our third parties and your communication preferences.

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfill your bicycle rental requests, including managing payments, fees, and charges.
• To verify your identity as required by Dutch rental regulations.
• To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
• To administer and protect our business and website, including troubleshooting, data analysis, testing, system maintenance, and support.
• To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
• To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
• To make suggestions and recommendations to you about services that may be of interest to you.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract Performance: Processing necessary for the performance of our contract with you to provide bicycle rental services.
• Legitimate Interests: Processing necessary for our legitimate interests, provided these interests don't override your fundamental rights and freedoms.
• Legal Obligation: Processing necessary for compliance with legal obligations to which we are subject under EU or Dutch law.
• Consent: Where you have given consent to the processing of your personal data for specific purposes.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes through other means.

For bicycle rental transactions, we typically retain customer data for a period of 7 years to comply with Dutch tax and business regulations.

6. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. These measures include:

• Encryption of sensitive data both in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication procedures
• Staff training on data protection and security practices
• Physical security measures at our premises

We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Your Data Protection Rights

Under the GDPR, you have the following rights:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct inaccurate information or complete incomplete information.
• Right to Erasure: You can request that we erase your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: You can request the transfer of your data to you or a third party in a structured, commonly used, machine-readable format.
• Right to Object: You can object to the processing of your personal data in certain circumstances.
• Rights Related to Automated Decision Making: You have rights related to automated decision making and profiling.

To exercise any of these rights, please contact us. We will respond to all legitimate requests within one month.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users. This helps us provide you with a good experience when browsing and allows us to improve our site. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer.

We use the following types of cookies:

• Strictly Necessary Cookies: Required for the operation of our website.
• Analytical/Performance Cookies: Allow us to recognize and count visitors and see how they move around our website.
• Functionality Cookies: Enable us to personalize content for you.
• Targeting Cookies: Record your visit to our website, the pages you visit, and the links you follow.

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "last updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.