PRIVACY POLICY
Effective date: from 01/01/2024 until further updates.
This Privacy Notice explains how Comate collects, uses, and shares Personal Information when you use our products, services, offers, and promotions.
It is important to us that you feel safe when visiting our website, using any of our services and placing orders. Therefore, you will find all information about the use of your personal information in this Privacy Policy.
Table of Contents
A. Who is responsible for your personal data?
B. Data processing when visiting our website
C. Your rights as a data subject
D. Security
A. Who is responsible for your personal data?
Comate Motion B.V, registered office at Smderijstraat 37, 5111PT Baarle-Nassau, the Netherlands, VAT number: NL864574010B01, which also carries out its activities through its offline stores (“Comate”, “we”, “our” or “us”), is responsible for the processing of your data in accordance with the EU General Data Protection Regulation (the “GDPR”).
With this privacy policy, we would like to inform you accordingly about the type, scope and purposes of the processing of your personal data (hereinafter referred to as “data”) in the context of our digital offerings. If you have any questions about the processing of your personal data, please contact our data protection team at the e-mail address service@comatebikes.com.
B. Data processing when visiting our website
We process data when contacting us, using our services (e.g., subscribing to our newsletter) and visiting our website. Personal data will only be used and processed by us for the purpose for which you have provided us with this data, for example, through consent or to fulfil our contractual obligation. In addition, data processing is carried out to safeguard our legitimate interests. Your data may also be processed by other departments within Comate Motion B.V. In some cases, we also use external service providers for processing. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
The specific purposes of processing, the data concerned and the legal basis for data processing in the context of a visit to our website are listed below:
a) Purpose of visiting our website
We keep records of your visit to our website. The following data is processed: the name of the website accessed, date and time of access, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited page), your IP address and the requesting provider. We collect the data on the basis of our legitimate interests, in accordance with Art. 6 (1) f) GDPR, as the collection serves our legitimate interest in protecting our systems and servers as well as ensuring the stability and security of Comate website.
b) Contacting us
If you contact us via one of our contact forms, on-line customer service or by e-mail, your data will be processed exclusively for the purpose of processing and processing your enquiry. The data may include your e-mail address, full name, delivery address, phone number, subject, content, and other data provided by you. The legal basis for this data processing is Art. 6 (1) (b) GDPR.
c) Membership account
On our website, you have the option of creating a membership account, for which you can set a password yourself. To register your membership account, we obtain the following data from you: e-mail address, full name, gender, phone number, delivery address, age. You can optionally enter additional data. The legal basis for this data processing is Art. 6 (1) (b) GDPR. We use the data to register, record and maintain your membership account. The content of your membership account will be enriched and modified because of your purchase, accumulation of points, etc.
d) Transmission of your data to dealers
If you contact us with the aim of establishing direct contact with a named or nearest dealer, for example, if you would like to make a purchase request from a nearest dealer or arrange a test ride at a certain dealer, we will transmit necessary data from you to the dealer or dealers. It is not possible to process and process your request without such a transfer. The legal basis for this data processing is Art. 6 (1) (b) GDPR.
e) Transfer of your data to payment service providers
When you make a purchase directly on Comate website, we use a payment service provider to process your payment with the highest security standards.
We transmit your transaction data (full name, order information, payment method, amount and payee, bank details or credit card details if applicable) to the payment service providers commissioned to process the payment. For example, we use Klarna for one of our payment options. You can read more about how Klarna uses your personal information here: https://www.klarna.com/international/privacy-policy/. If you pay by SEPA direct debit, Comate Motion B.V, collects the money.
f) Newsletter
When you subscribe to our newsletter, we use the data you have entered. The data includes your e-mail address, full name and other data optionally provided by you. The newsletter is sent exclusively on the basis of your prior consent in accordance with Art. 6 (1) (a) GDPR. If you are under 16 years of age, subscribing to the newsletter requires the consent of your legal guardians.
Registration for the newsletter takes place in the so-called double opt-in procedure. To prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration. In order to be able to prove the registration process in accordance with the legal requirements, your newsletter registration will be logged. This includes the storing the time of registration and confirmation as well as the IP address. Changes are logged by the newsletter service provider used by us.
You can revoke your consent to receive a newsletter by e-mail at any time. There is a revocation link at the end of each newsletter. If you have only subscribed to our newsletter and revoked this registration, your personal data will be deleted completely.
The newsletters are sent via our service provider, MailerLite Limited, an Irish registered company at 38 Mount Street Upper, Dublin 2, D02 PR89 Ireland. Your e-mail address, full name and other data optionally provided by you will be stored on the servers of MeilerLite Limited. MailerLite Limited uses this data to send and evaluate the newsletter on our behalf. MailerLite Limited is our processor within the meaning of Art. 28 GDPR and is contractually bound to comply with the GDPR.
Your inclusion in the newsletter mailing list is based solely on your prior consent in accordance with Art. 6 (1) (a) GDPR.
g) Contacting as a Dealer
When you contact us via our contact or by e-mail in order to become a dealer, your details will be processed exclusively for the purpose of processing and processing your request. Data concerned are: company name, surname, first name, email address, telephone number, company address, website domain, subject and content of your message. Without the processing of this data, it is not possible to process and process your request. The legal basis for this data processing is Art. 6 (1) (b) GDPR.
C. Your rights as a data subject
a) General
Under the GDPR, you have various rights in terms of control over your personal data. You can obtain information directly from us about how we process your data. Below you can find out more about your rights. If you would like to obtain access to the personal data held about you by Comate or to have certain data deleted, you can make a request to us by email: service@comatebikes.com. For all other questions, please use the contact details provided in section C.f).
b) Rectification, deletion, restriction of processing (blocking)
When we process your personal data, we endeavour to take reasonable steps to ensure that your personal data is accurate and up-to-date for the purposes for which it was collected. In the event that your personal data is inaccurate, incomplete or need to be updated, you can request the correction of such data.
You may have the right to request the erasure of your personal data or the restriction of its processing.
To exercise these rights, you can contact us at any time using the contact details set out in section C.f).
c) Data portability
You may have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to transmit these data to another controller.
To exercise this right, you can contact us at any time using the contact details set out in section C.f).
d) Right to object
You have the right to object to the processing of your personal data at any time where we are processing your personal data for direct marketing purposes or where we are processing your personal data for the pursuit of our legitimate interests and there are grounds relating to your particular situation. To exercise this right, you can contact us at any time using the contact details set out in section C.f). or exercise your right to object as described in more detail in this Privacy Policy.
e) Revocation of consent with effect for the future
You can revoke your consent at any time with effect for the future. Data for billing and accounting purposes are not affected by termination / revocation or deletion. Your revocation does not affect the lawfulness of the previous processing. To exercise this right, you can contact us at any time using the contact details set out in Section C.f). or exercise your right of withdrawal as described in more detail in this Privacy Policy.
f) Exercising your rights as a data subject
If you have any questions about the processing of your personal data, if you would like to request information, correction, blocking, objection or deletion of data, or if you wish to transfer the data to another company, please contact:
Comate Motion B.V
Smederijstraat 37
5111PT Baarle-Nassau
Netherlands
BTW: NL864574010B01
E-Mail: service@comatebikes.com
D. Security
a) Share
We may disclose your personal data to companies that process personal data on our behalf and on our behalf (so-called “processors”), to scientific institutions in the context of research and development, to third parties where there is a legal obligation to do so, to our business partners and to the police or judicial authorities, insofar as they request the personal data and are entitled to do so.
b) Transmit
When you make a payment on our website, we protect the transmission of your personal data with a secure connection using modern cryptographic standards (TLS, e.g., with AES). TLS (Transport Layer Security) is a security technology that ensures that your personal data is transmitted securely over the Internet and is not visible to third parties.
c) Integrity
Our employees as well as our processor are obliged by both their contractual obligations and data protection rules to treat your personal data confidentially.
In order to protect your collected data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, technical and organizational measures are used that are continuously improved in line with technological developments.
d) Storage
Your personal data will be kept for as long as you are in contact with us, including but not limited to use our service/products, subscribe to our newsletter, and up to 10 years after the end of this relationship.
e) Change
The Privacy Policy may be updated from time to time. We reserve the right to modify, revise or change the Privacy Policy at any time, with or without notice. It is your responsibility to review these terms and conditions periodically to ensure that you are aware of any changes.
Updated December 2024 by Comate Motion BV