Privacy Policy
Last updated: 24 August 2026 Β |Β Effective: 24 August 2026
Data ControllerStunning Bike Co-Tours di Malinverni Andrea
Via Alessandro Manzoni, 12 β 22100 Como (CO), Italia
P.IVA: 03872230135
Email:
[email protected]Privacy:
[email protected] This Privacy Policy describes how Stunning Bike Co-Tours ("we", "us", "our") collects, uses and protects your personal data when you use the Stunning Bike Co Tours mobile application ("the App") and related services.
1. Data We Collect
- Account data: name, email address, encrypted password, login history
- Location (GPS): precise location, collected only while a tour is active β used exclusively for GPS-triggered audio narration and POI detection
- Biometric identifiers: Face ID / Touch ID β stored only on your device, never transmitted to our servers
- Photos: only if you choose to submit them through the app
- Tour activity: tours redeemed, points of interest visited, points balance
- Device information: device type, operating system, app version, push notification token
- Support communications: messages, photos or location shared when contacting support
- Purchase data: in-app purchase transaction identifiers (processed by Apple β we do not store payment card details)
2. How We Use Your Data
- Providing and personalising the audio guided tour service
- Account authentication and security
- GPS navigation and automatic POI audio trigger
- Push notifications for support updates and tour information
- Processing in-app purchases and managing access codes
- App improvement, analytics and legal compliance
3. Legal Basis for Processing (GDPR)
- Contract performance: account creation, tour access, purchase processing
- Legitimate interests: app security, fraud prevention, service improvement
- Consent: push notifications, location access (you can withdraw at any time in device settings)
- Legal obligation: tax and accounting records
4. Sub-Processors
We use the following third-party services to operate our app:
- Emergent (emergent.sh) β database, infrastructure and hosting. DPA: app.emergent.sh/dpa
- Apple Inc. β Sign in with Apple, push notifications, in-app purchases
- Google LLC β Sign in with Google, Maps
- FareHarbor β tour booking and reservation management
- Cloudflare Inc. β content delivery network and media storage (R2)
- 3CX β live chat and voice support
5. Data Retention
- Account data: until account deletion + 30 days
- Tour activity: 3 years
- Support communications: 2 years
- GPS tracks: 1 year
- Login history: 90 days
- Purchase records: 10 years (legal obligation)
6. Data Transfers
Your data may be processed in countries outside the European Economic Area (EEA) by our sub-processors. All transfers are protected by Standard Contractual Clauses (SCCs) as required by GDPR Article 46.
7. Your Rights Under GDPR
- Access: request a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data ("right to be forgotten")
- Portability: receive your data in a structured, machine-readable format
- Restriction: limit how we process your data
- Objection: object to processing based on legitimate interests
- Withdraw consent: at any time, without affecting prior processing
Contact us at [email protected] β we will respond within 30 days.
You also have the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it
8. Children's Privacy
Our app is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Security
We implement appropriate technical and organisational measures to protect your data, including encrypted storage, HTTPS transmission, hashed passwords, and access controls.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance of the updated policy.
11. Contact
Stunning Bike Co-Tours di Malinverni Andrea
Via Alessandro Manzoni, 12 β 22100 Como (CO), Italia
Email: [email protected]
Privacy: [email protected]
Website: www.stunningbikecotours.com