Your privacy matters to Velodynamics OÜ. This document explains what personal data we collect, what we use it for, who we share it with, how long we keep it and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act. If the English and Estonian versions differ, the Estonian version applies.
Data controller
Velodynamics OÜ
Registry code 14613930
Akadeemia tee 47, 13520 Tallinn, Estonia
Email: info@velodynamics.ee
Phone: +372 5692 4604
What data we collect
When you book
- Name, email address and phone number
- Booking details: service, time and fitter
- Bike details: brand, model, size and pedal type
- Goals and notes you write down yourself
- Health data: past injuries and current complaints, if you enter them. Filling in these fields is optional.
During the service
- Body measurements, bike measurements and position data that we collect during the fit
- Results of the initial physiotherapy assessment and the pedalling technique analysis
- The report we prepare for you
For invoicing and communication
- Invoice details (name, service, amount)
- Our correspondence by email or phone
When you visit the website
- Technical data that the server logs for security, such as IP address, browser type and time of visit
What we use the data for, and on what basis
- To manage your booking and provide the service (confirmation and reminder emails, the fit, the report, three months of follow-up advice). Basis: performance of a contract.
- To keep your booking and service data after the service (including position data and the report), so that we can advise you on later visits and transfer your position to another bike if needed. Basis: your consent, which you give when booking. You can withdraw your consent at any time. In that case we delete this data, except data we must keep by law (e.g. invoices).
- Health data is used only to set up your position safely and in a way that suits you. Basis: your explicit consent, which you give when booking. You can withdraw your consent at any time.
- To prepare and keep invoices. Basis: legal obligation under the Accounting Act.
- To keep the website secure and working. Basis: our legitimate interest.
We do not use your data for direct marketing and we never sell it to anyone.
Who we share data with
We use trusted service providers who process data on our instructions and only to provide our service:
- Web hosting provider, whose servers hold the website and the booking database
- Email delivery service, which we use to send confirmation, reminder and cancellation emails
- Google (Google Calendar), where the booking time, service and customer name are entered for the fitter's calendar. Health data is not entered in the calendar.
- Accounting service for preparing and keeping invoices
If a service provider processes data outside the European Economic Area, this is done only with the safeguards set out in the GDPR (for example the European Commission's standard contractual clauses). We may also disclose data where required by law.
How long we keep data
- Booking and service data (including position data and the report): until you withdraw your consent
- Health data: until you withdraw your consent
- Invoices: 7 years, as required by the Accounting Act
- Server logs: up to 90 days
Cookies and third-party content
Our website does not use advertising or analytics cookies. The contact page has a Google Maps map, and the site uses Google Fonts typefaces. When these load, Google learns your IP address and may set its own cookies in line with Google's privacy policy.
Your rights
You have the right to:
- get information about and a copy of your data
- have inaccurate data corrected
- have your data deleted, unless we are required to keep it
- restrict the processing of your data and object to it
- receive your data in a machine-readable format (data portability)
- withdraw your consent at any time. This does not affect the lawfulness of processing before the withdrawal.
To use your rights, write to info@velodynamics.ee. We reply within one month at the latest. If you believe we have violated your rights, you have the right to contact the Estonian Data Protection Inspectorate.
Minors
For customers under 16, the booking and consent are given by their parent or guardian.
Data security
We protect data with reasonable technical and organisational measures: only our staff have access to booking data, the admin area is password-protected and data is transferred encrypted. However, no online solution is ever 100% secure.
Changes
We may update this privacy policy from time to time. The current version and its date are always on this page.