Privacy
Translation of the French text, which prevails in case of difference.
Who is responsible
The controller is Philippe Scheinok, Mind Cycling, Koninginnelaan 2/A301, 8670 Koksijde, Belgium, company number 0683.402.513, info@mindcycling.be, +32 494 24 71 12. We do not have a data protection officer; for any question, write to info@mindcycling.be.
What we collect, why and for how long
Order and delivery. Data: name, delivery address, e-mail, telephone, country, items ordered, text of any dedication, tracking number. Purpose: to process the order, ship the parcel, keep you informed of its tracking, and handle returns and the guarantee. Legal basis: performance of the contract (Article 6(1)(b) of the GDPR) and accounting and tax obligations (Article 6(1)(c)). Period: the statutory retention period for accounting records, i.e. 7 years from the end of the financial year.
Payment. Payment takes place on the pages of Stripe or PayPal. We never receive your card number; we receive the payment confirmation, its amount, your name and your e-mail address. Stripe and PayPal process your payment data under their own responsibility, for fraud prevention and their legal obligations; see their privacy policies. Legal basis: performance of the contract. Period: that of the order.
Order-related e-mails. After payment, Stripe sends you a receipt with the order summary, and we send you the order confirmation by e-mail (through the Resend service), with the general terms attached as a PDF. An acknowledgement of receipt of a withdrawal is sent to you by e-mail without delay; our replies are sent to you by Philippe Scheinok from info@mindcycling.be. Legal basis: performance of the contract and legal obligation (acknowledgement of receipt of the withdrawal, Article VI.61/2 of the Code of Economic Law). Period: copies of the e-mails are kept with the order.
Online withdrawal function. Data: name, order number, e-mail, date of receipt, item, optional reason, date and time of submission. Purpose: to record your withdrawal and acknowledge receipt without delay, as the law requires. Legal basis: legal obligation. Period: that of the order.
E-mails you send us. Data: name, e-mail, content of the message sent to info@mindcycling.be. Purpose: to reply to you. Legal basis: our legitimate interest in replying to enquiries, or performance of the contract if it concerns an order. Period: as long as needed to reply to you and follow up on the exchange.
Retailer, club and company forms. Data: name, company or club, country, VAT number, e-mail, telephone, quantity wanted, message. Purpose: to draw up a quote and trade terms. The VAT number may be checked against the European Commission’s VIES system. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b)). Period: as long as needed to handle the request, then for the duration of the business relationship.
How e-mails and forms are sent. Messages sent through the site’s forms (online withdrawal, retailers, clubs and companies) reach us by e-mail at info@mindcycling.be, and the automatic e-mails described above (order confirmation, acknowledgement of a withdrawal, order summary sent to Philippe Scheinok) are sent through the Resend service (Resend, Inc., United States). Resend processes your name, e-mail address, the content of your message or declaration, the order summary and the delivery address. The transfer to the United States relies on the European Commission’s standard contractual clauses, and Resend states that it also complies with the EU-U.S. Data Privacy Framework.
Hosting and security. The website is hosted by Cloudflare. To serve the pages and protect the website against abuse, Cloudflare processes technical data (IP address, browser type, pages requested, timestamp) in its logs, for a limited period. Legal basis: our legitimate interest in running and securing the website (Article 6(1)(f)).
Visitor statistics. We do not measure traffic to the website: no analytics tool is installed and no data is collected for that purpose.
Videos. YouTube videos are only loaded after you click, from the youtube-nocookie.com domain. From that click onwards, Google may process data under its own policy (https://policies.google.com/privacy).
Who receives your data
We do not sell or rent out your data. It is passed on only to the providers we need:
| Provider | Role | Registered office | Transfer outside the EU |
|---|---|---|---|
| Stripe Payments Europe, Limited | payment | 1 Grand Canal Street Lower, Grand Canal Dock, Dublin 2, Ireland | data may be transferred to the Stripe group outside the EU, under its policy |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | payment | 22-24 Boulevard Royal, L-2449 Luxembourg | under its policy |
| Cloudflare, Inc. | hosting and security | 101 Townsend Street, San Francisco, CA 94107, United States | yes: certification under the EU-U.S. Data Privacy Framework and standard contractual clauses |
| Resend, Inc. | sending the site’s e-mails (forms, order confirmation, acknowledgement of a withdrawal) | United States | yes: standard contractual clauses; Resend states that it complies with the EU-U.S. Data Privacy Framework |
| Mondial Relay S.A.S.U. | carriage and parcel points | 1 avenue de l’Horizon, 59650 Villeneuve-d’Ascq, France (Belgian branch: rue François Englert 15, 1480 Tubize) | no |
The carrier receives your name, the address or parcel point chosen, your telephone number and your e-mail address, so that it can tell you when the parcel arrives.
We may also disclose your data where the law requires it, for example to the tax authorities.
Your rights
You can ask at any time for access to your data, its rectification, its erasure, the restriction of its processing and its portability, and you can object to processing based on our legitimate interest. Write to info@mindcycling.be; we reply within one month. We may ask you to prove your identity if we are in doubt.
You also have the right to lodge a complaint with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, +32 (0)2 274 48 00, contact@apd-gba.be, https://www.autoriteprotectiondonnees.be. If you live in another country of the Union, you can contact the authority of that country.
Security
The website is served over HTTPS. No payment data passes through our servers. Access to orders is restricted to Philippe Scheinok and protected by a password. The one exception: SINNOVA (Luiz Lemes), which builds and maintains the website, has technical access to Stripe and the hosting, as a processor.
Changes
We may update this policy; the version in force is the one published on this page.