YOUR DATA
Velo Algarve's privacy policy. How we collect, use, and protect your personal data in line with GDPR and Portuguese data protection law.
Last updated: 17 July 2026
Velo Algarve (“we,” “us,” “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to it.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and its implementing Portuguese legislation, Lei n.º 58/2019 de 8 de agosto.
Please read this policy carefully. If you have any questions, contact us using the details in Section 12.
Velo Algarve is a premium road bike rental service operating in the Algarve region of Portugal. We are the data controller for the personal data described in this policy, meaning we determine the purposes and means of processing your data.
Our business is operated as:
Planaltos Opinativos, Lda.
NIPC 519261380
Rua João Manuel Paulo Rocha, n.º 12, R/C D
8600-750 Lagos
Portugal
Trading as: Velo Algarve
We do not have a Data Protection Officer (DPO), as we are a small business not engaged in large-scale systematic monitoring or processing of sensitive data. Queries about data protection should be directed to us using the contact details in Section 12.
We collect the following categories of personal data from you or about you:
Collected when you make a booking:
Collected when you contact us:
Collected automatically when you visit veloalgarve.com:
If you contact us or leave a review via Google Business Profile, Google may share relevant data with us in line with their own privacy terms. We do not control Google’s data processing.
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Booking and rental data | To fulfil your rental booking and provide the service | Article 6(1)(b) GDPR |
| Body measurements and fit preferences | To prepare and deliver your bike fitted to your requirements | Article 6(1)(b) GDPR |
| Payment data | To process payment for your rental | Article 6(1)(b) GDPR |
| Communications data | To respond to enquiries | Article 6(1)(f) GDPR |
| Website usage data | Website analytics and improvement | Article 6(1)(a) GDPR (where consent is required) |
| Marketing communications | Direct marketing | Article 6(1)(a) GDPR |
| Identity verification data | Fraud prevention and protection of rental equipment | Article 6(1)(f) GDPR |
We do not use your personal data for automated decision-making or profiling.
Where required, Velo Algarve may use a trusted third-party identity verification provider to verify a customer’s identity before releasing rental equipment.
The identity verification process may involve the collection and processing of government-issued identification documents and biometric verification data by the verification provider.
Velo Algarve does not store copies of identity documents or biometric data unless expressly stated otherwise.
The processing of such data is carried out by the verification provider in accordance with its own privacy documentation and applicable data protection laws.
Velo Algarve receives only the outcome of the verification process and any reference information required to confirm completion of the verification.
We retain personal data only for as long as necessary for the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Booking and rental records | For the period required under applicable tax, accounting and commercial record-keeping obligations |
| Communications data | 2 years from the date of last contact |
| Website analytics data | As configured in Google Analytics from time to time, currently set to a maximum of 14 months |
Where we are required by law to retain data for longer periods (for example, for tax compliance), we will do so. After the applicable retention period, data is deleted securely.
We do not sell your personal data. We share it only with the following third-party processors, each of whom processes data on our behalf under appropriate data processing agreements:
Our booking and rental management software. Booqable processes your booking data, including personal details and payment information, on our behalf as a data processor under GDPR. Booqable is GDPR-compliant and operates under a Data Processing Agreement.
We use Stripe to process payments and security deposit pre-authorisations.
We use Google Analytics 4 to understand how visitors use our website. Google Analytics 4 processes information relating to website usage and visitor interactions, subject to your consent where required.
We use Google Business Profile to manage our business listing and respond to customer reviews. If you interact with our Google Business Profile, your data is subject to Google’s privacy terms.
We use Google Search Console for website performance monitoring. This service processes website and search data but does not handle customer personal data directly.
We use Meta advertising services and may use Meta technologies to measure advertising performance and website interactions, subject to your consent where required.
We use CookieYes as our consent management platform to display our cookie consent banner and to record and manage your cookie preferences. Consent records are processed on our behalf for compliance purposes. See our Cookie Policy for details.
We may also disclose your personal data if required to do so by law, by a court order, or by a regulatory authority.
Some of our service providers, including Google, Meta and Stripe, may transfer personal data outside the European Economic Area (EEA).
Where such transfers occur, we ensure that appropriate safeguards are in place, including:
As a data subject, you have the following rights under GDPR (Articles 15–22):
To exercise any of these rights, contact us using the details in Section 12. We will respond within one calendar month. We may ask you to verify your identity before processing your request.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt
Address: Rua de São Bento, 148-3.º, 1200-821 Lisboa, Portugal
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
No transmission of data over the internet is completely secure. While we do everything reasonably practicable to protect your data, we cannot guarantee the security of data transmitted to or from our website.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNPD within 72 hours of becoming aware, and will notify you without undue delay if the breach is likely to result in a high risk to your rights.
We may update this Privacy Policy from time to time. When we do, the updated version will be posted at veloalgarve.com/privacy-policy/ with an updated “last updated” date. We encourage you to review this policy periodically.
Where changes are material, we will take reasonable steps to notify you (for example, by email if you are an existing customer).
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to make a complaint about how we have handled your data, please contact us:
Velo Algarve
Planaltos Opinativos, Lda.
NIPC 519261380
Email: hello@veloalgarve.com
WhatsApp: +351 927 909 206
Website: veloalgarve.com
Postal Address:
Rua João Manuel Paulo Rocha
8600-750 Lagos
Portugal
We will respond to all data-related requests within one calendar month.
