Cookies help us deliver our services. By using our services, you agree to our use of cookies.
Privacy notice
Privacy Policy
Last updated: 22 October 2026
1. Who we are
Grease Monkey BikeWorks operates the online store gmbikeshop.ro. This policy explains how we process personal information under Regulation (EU) 2016/679 (GDPR).
Data controller: [LEGAL ENTITY NAME]; registration/tax number: [NUMBER]; registered address: [FULL ADDRESS]; email: info@gmbikeshop.ro.
2. Information we collect
Depending on the services you use, we may process:
- Name, telephone number and email address
- Billing and delivery addresses
- Purchased products, order history, invoices, returns and payment status
- Account login details and preferences
- Customer support communications
- Technical data such as IP address, browser, device and cookies
- Marketing preferences and consent records
3. Purposes and legal bases
We process orders, deliver products and manage accounts to perform our contract with you (GDPR Article 6(1)(b)). Invoicing and mandatory recordkeeping are based on legal obligations (Article 6(1)(c)).
Website security and abuse prevention may rely on legitimate interests (Article 6(1)(f)), subject to your rights. Email marketing and non-essential analytics or advertising technologies use consent where required (Article 6(1)(a) and applicable electronic communications law).
4. Who receives your data
Where necessary, we share relevant data with couriers, payment processors, invoicing and accounting providers, hosting and maintenance services, email services and, when lawfully enabled, analytics and advertising providers. We may also disclose information to public authorities when required by law.
Actual providers and their roles must be confirmed: [COURIERS], [PAYMENT PROVIDER], [INVOICING], [HOSTING], [EMAIL], [ANALYTICS].
5. Cookies
We use essential cookies to operate the store, including shopping cart, authentication and security features. Non-essential analytics and advertising cookies generally require your consent before activation.
Read our [COOKIE POLICY LINK] and adjust your choices at [COOKIE SETTINGS LINK].
6. How long we retain information
We retain tax and accounting records for applicable statutory periods; account data while the account is active and thereafter only where justified; support messages as needed to resolve enquiries and potential claims; and consent records as necessary to demonstrate compliance.
[COMPLETE: specific retention periods for accounts, messages, logs and cookies.]
7. Transfers outside the EEA
Some providers may transfer data outside the European Economic Area. Where this happens, we use a GDPR-compliant mechanism such as an adequacy decision or Standard Contractual Clauses, with additional safeguards where required.
[CONFIRM: countries, providers and applicable transfer safeguards.]
8. Your rights
Subject to GDPR conditions, you can request access, correction, deletion, restriction, portability and object to processing, and withdraw consent. Withdrawal does not affect processing lawfully carried out beforehand.
Contact info@gmbikeshop.ro. We normally respond within one month. You may complain to Romania’s data protection authority (ANSPDCP): https://www.dataprotection.ro.
9. Required data and marketing
Information needed for billing and delivery is necessary to complete an order. Promotional subscriptions are optional and can be cancelled at any time using the unsubscribe link or by emailing us.
10. Automated decisions
[CONFIRM: we do not make solely automated decisions that produce legal or similarly significant effects. If such decisions occur, explain them here.]
11. Security and changes
We use appropriate technical and organizational safeguards to protect personal data. We may update this policy when our activities or legal requirements change; the current version will be published here.
12. Contact
For privacy questions: Grease Monkey BikeWorks, info@gmbikeshop.ro, [CONTROLLER ADDRESS].