Privacy policy

Data controller

Bike Shop 6390 Lena Odermatt, Blumenweg 17, 6390 Engelberg (for contact details, see Legal Notice).

What data is processed

Booking form: If you request a service via the website, we use the data you provide (name, telephone number, email address, details of your bike, preferred date, message) solely to prepare and process your enquiry. The usual method is via WhatsApp: your details are used to generate a pre-written message, which you then send to us yourself via your WhatsApp app. The link to this message already contains this text; it is therefore transmitted to WhatsApp (Meta Platforms Ireland Limited) as soon as you click on it, even if you subsequently decide not to send the message. WhatsApp’s privacy policy applies here; for more information, see whatsapp.com/legal.

Your details are stored temporarily on our server between the form and the confirmation page, for the duration of your session. After 30 minutes, the data becomes unusable; when the session ends – at the latest two hours after your last page view – it is deleted. If you submit the enquiry, the data is removed immediately. Nothing is stored permanently on the server.

The confirmation page also features a ‘Send enquiry by email’ button. If you use this, our server will instead send your details to us via email, using your email address as the reply-to address. Email is not end-to-end encrypted whilst in transit. We do not pass on your data to third parties and delete it as soon as it is no longer required for processing your enquiry. If you do not use WhatsApp, you can also send us your enquiry by telephone or email.

Protecting the form against misuse: To prevent the form from being misused for mass emails, we count the number of enquiries per internet connection. We do not store your IP address in plain text for this purpose, but only as a checksum; this entry is automatically deleted after 24 hours. If our spam detection system rejects an enquiry, we record the time, reason, the truncated check value and the selected service – so that we can tell if the system has made a mistake and a genuine enquiry has not been received. Your name, telephone number, email address and message text are not included in this log.

A technically necessary cookie: On the booking page, we set a cookie called ‘kirby_session’. It contains only a random identifier, no personal details about you, and serves two purposes: to protect against fraudulent form submissions and to pass your details from the form page to the confirmation page. It expires two hours after your last page view, or after just 30 minutes if you remain inactive. We do not set any cookies on any other pages of the website.

No tracking: This website does not use any tracking or analytics services, nor does it use any advertising networks, and it does not load fonts or scripts from third-party servers.

Server log files: When you visit the website, access data (e.g. IP address, date and time, page accessed) is stored in log files for technical reasons. These are maintained by our hosting provider and are used exclusively for security and troubleshooting purposes.

Language and design selection: To ensure the website appears in your language and with your chosen colour scheme, it stores these two settings locally in your browser (known as ‘localStorage’). Only the options you select yourself via the two buttons in the top right-hand corner are stored; your browser language is not taken into account. This process takes place exclusively within your browser; no data is transmitted to us or to third parties. You can remove these settings at any time by clearing your browser’s website data.

Map link to Google Maps: On the home page and the contact page, there is a ‘Show on map’ link that takes you to Google Maps, making it easier for you to find us. We do not embed a map directly into the website. Data is therefore only transmitted to Google once you click on the link yourself. If you do so, you will leave our website and Google’s privacy policy (Google Ireland Limited) will apply. Among other things, Google may process your IP address. You can find out more at policies.google.com/privacy.

Your rights

You have the right to access the data we hold about you, as well as the right to have it corrected or deleted. To do so, simply get in touch with us (for contact details, see Legal Notice).