Privacy Policy


This policy describes how we may process such data and the users' rights over their personal data on this website and, where applicable, any of its sub-domains.

Let's start with jurisdiction and competence


In the event that there is a conflict or dispute regarding the interpretation of these conditions, as well as due to any matter related to the services of this Website the applicable Jurisdiction and Regulations will be those of Spain, while the competent Courts will be those of Vitoria.

Remember that you give us your consent


Please read this policy carefully and make sure you understand and agree with it before agreeing to use any of our services or provide us with your personal data and, if you do not agree with it, do not use this website or its services or provide us with your data. By accessing this site, using any of its services or providing us with your data, we understand this as a clear affirmative action by which you give us your consent to process your data for the purposes indicated below.

Who is responsible for processing your data?

We are, our details are:

Pol. Ind. Júndiz
01015 Vitoria-Gasteiz

How do we obtain your data?

If you are already a customer, you provided your data to us off-line when requesting our services, in order to be able to maintain the contractual relationship with you.

If you have provided the data to us through this website, we collect information, for example, when you access the site, when you fill in any form that requires personal data, when you upload information or content; or when you communicate with us directly.

We may process and record such uses, and related information, either independently or with the help of third party services, including through the use of "cookies" (If you wish, you can learn more about cookie settings in different browsers by clicking here.) and other tracking technologies.

When you voluntarily submit your personal data, you warrant that you are entitled to provide this information and that the information is true, accurate, current, non-confidential and does not violate any contractual restrictions or third party rights.

If you do not take responsibility for ensuring your data is correct and up to date you decline all responsibility to BICICLETAS MENDIZ SA

Be careful with third party data

With respect to other people's data you must respect their privacy taking special care when publishing their personal data. We remind you that as a user you can only consent to the processing of your personal data, but not those of third parties, and that communicating third-party data constitutes a transfer of personal data.

In the event that you provide personal third-party data, it is your responsibility to have their prior and express consent to use and communicate them to us, and you are responsible for informing them of the inclusion of their data in our files.

The publication of third-party data without their consent may infringe, in addition to data protection regulations, the right to honour, privacy or self-image of said third parties, rights whose protection is governed by the provisions of Organic Law 1/1982, of 5 May, on the civil protection of the right to honour, personal and family privacy and self-image.

For what purpose do we process the data?

We may process them for different purposes, for example:

In the event that you are a current or potential customer, to manage your order.

To keep in touch and communicate with you, to manage the contractual and/or commercial relationship, including after-sales and warranty services, management and invoicing of the services and/or products requested.

If you are just a user of our website and you are not yet a customer, to manage the requests you make to us online.

In the case of providing us with your curricular data or sending us your CV, to contact you and manage the selection processes that we carry out.

To offer you products and services in accordance with your interests; to improve your user/customer experience; to further develop, personalise and improve our services, in line with users'/customers' common or personal preferences, experiences and difficulties we may develop a "business profile", based on the information provided, but we will not make automated decisions on the basis of such a profile.

In both cases to maintain contact and communication with you, to carry out opinion and/or satisfaction surveys and to send you information about our activities, products and/or services (including advertising and/or commercial communications for the purposes of art. 21 LSSICE 34/2002).

For how long will we keep your data?

The personal data provided will be kept for a period of 6 years from the termination of the contractual relationship, in the case of customers, and as long as you do not request their deletion if you are a mere user of the website. Even after these deadlines we may keep them, limiting their processing, only for the fulfilment of legal obligations and/or the exercise or defence of claims.

What is the legitimate basis for the processing of your data?

The legal basis that legitimises us to process your data is the contract (commercial, administrative, employment, purchase, sale, provision of services) existing between the parties if you are a current or potential customer, or, for example, the request you have made to us through our website in the case of being a mere user of the website.

Additionally, we have a legitimate interest, derived from the relationship that you have with us as a customer and/or user of our website, in processing your data for the maintenance and management of the same, in order to:

To deal with requests made through our website.

To send you commercial information about our activities, products and services, (including advertising and/or commercial communications for the purposes of art. 21 LSSICE 34/2002) or those third party entities with which any company has signed a collaboration agreement.

To send your data to other suppliers contracted by RTO Publicidad to provide the customer with a comprehensive or specialised service that requires the intervention of interdisciplinary teams and; for internal administrative purposes.

To carry out opinion and/or satisfaction surveys ...

Fraud prevention.

These purposes are compatible with the initial purpose for which we initially collected your data (managing contact, communication with you and maintaining the relationship that binds us) but, in any case, the provision of your data for these purposes is always voluntary and your interests, rights or freedoms will always prevail, over our legitimate interest, so if you ask us to delete and stop processing your data for these purposes, we will do so, whereby we can block them for the formulation, exercise or defence of claims.

If you have provided us with sensitive data subject to special protection, the legitimacy to process them is your express consent. This consent is given to us unequivocally when you provide us with your data, this being considered a clear affirmative act that manifests this consent.

To which recipients may your data be disclosed?

The data will be communicated to other companies for internal administrative purposes, including the processing of personal customer data.

We inform you that the data you provide may be communicated to third parties for purposes directly related to the legitimate functions of the transferor and transferee such as:

Organisations of the Public Administrations to which there is a legal obligation to communicate data (tax administration, social security bodies, labour inspectorate...), Notaries, Registries, Mutual Insurance Companies, Courts or Tribunals, Lawyers, Solicitors, Experts, etc., said communication will always be made for the fulfilment of purposes directly related to the legitimate functions of the transferor and transferee.

To banking entities for the management of collections and payments.

We use US companies such as Microsoft, provider of the Office and Windows application, we have chosen the aforementioned company because it is adhered to the Privacy Shield agreement, which means that it is obliged to comply with equivalent requirements to the European ones in terms of data protection, in such a way that the level of protection of your personal data is not undermined. The aforementioned Privacy Shield agreement is a legally binding and enforceable instrument between the EU and the US and is considered by the European Commission to provide adequate safeguards for the protection of personal data subjects' personal data. If you wish you can access the Microsoft privacy policy on its website.

In any case, by accepting this data protection policy you expressly and unequivocally authorise the communication of your data to said company, knowing that this involves an international transfer of data to a country outside the European Economic Area and giving your unequivocal consent to such transfer.

Your comments posted on our social media profiles may be published on our website, as well as the photographs included in those comments.

In the event that the User provides third-party personal data to become beneficiaries of the services, they declare to have the prior and express consent of the same to communicate them to us and they are responsible for communicating to all of them the inclusion of the same in our files.

The user undertakes to enter accurate, current and truthful data so as not to mislead the recipients of the information, and not to impersonate other users using their registration data to the various services and/or contents of the Website.

Do you know your rights when you provide us with your details?

  • Right of access: You can ask us what personal data we are processing and even request a copy of it.
  • Right of rectification: You can ask us to rectify inaccurate personal data or to complete incomplete personal data, including by means of an additional declaration.
  • Right of erasure (right to omission): You can ask us to erase your personal data when: they are no longer necessary for the purposes for which they were collected, you withdraw your consent, they have been unlawfully processed or in compliance with a legal obligation.
  • Right to limitation of processing: You can request that we limit the processing of your data, in which case we will only keep them for the exercise or defence of claims.
  • Right to data portability: You can ask us to return (to you or to a third party you specify) your personal data in a structured, commonly used and machine-readable format.
  • Right to object: You may object to the processing of your data if such processing is based on the legitimate interest of the data controller or is for advertising purposes.

To exercise all these rights you can send a written and signed request to BICICLETAS MENDIZ SA C/ ADRIANO VI 29 BIS 01008 VITORIA, enclosing in all cases a copy of your ID document, or by email to

In the case of modification of your data you must notify it at the same address, declining all responsibility for the company if you do not do so.

On receipt of any of the above requests we will respond to you within a maximum period of 10 days.

You have the right to make a complaint before the Spanish Data Protection Agency. For more information about the rights you can exercise and to request model forms for exercising your rights, please visit the website of the Spanish Data Protection Agency,

How do we obtain the data?

The personal data that we process at BICLETAS MENDIZ SA comes directly from the interested party.