MSRBikes
Privacy Policy
This policy informs, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), about the processing of personal data in the online store and the physical establishment of MSRBikes – Murcia Sobre Ruedas.
1. Data Controller
- Company name: Elecmobil Murcia System S.L.
- NIF: B73799108 (VAT: ESB73799108)
- Address: C/ Don Alfonso Palazón Clemares, 3, 30009 Murcia
- Email: info@msrbikes.com
- Phone: +34 968 935 665
- Hours: Monday to Friday, 10:00–13:45 and 16:30–20:30
- Registration data: Mercantile Registry of Murcia
You can exercise your rights or consult any privacy questions at info@msrbikes.com.
2. Data We Process
Depending on the use of the website, we may process:
- Identifying and contact data: name, surname, email, phone, shipping and billing address, NIF/VAT.
- Account data: encrypted password, order history, wish list.
- Purchase data: products, amounts, payment method, shipping issues.
- Reviews: name you wish to publish and comment (the email is not published).
- Strictly necessary technical data: session, cart, CSRF token, and cookie preference.
We do not collect special categories of data (health, ideology, etc.).
3. Purposes and Legal Bases
| Purpose | Legal Basis (art. 6 GDPR) |
|---|---|
| Manage registration, account, and order (including shipping, payment, invoice, and after-sales service) | Contract execution (art. 6.1.b) |
| Comply with tax, accounting, and consumer obligations | Legal obligation (art. 6.1.c) |
| Address inquiries, warranties, withdrawal, and exercise of rights | Legal obligation and/or legitimate interest (art. 6.1.c and 6.1.f) |
| Publish product reviews, if submitted | Consent (art. 6.1.a) |
| Send commercial communications | Consent (art. 6.1.a); you can withdraw it at any time |
| Non-essential cookies (analytics or marketing), if activated | Consent (art. 6.1.a) and LSSI art. 22.2 |
| Store security, fraud prevention, and technical maintenance | Legitimate interest (art. 6.1.f) |
Sending offers by email or equivalent means requires prior consent (LSSI art. 21), unless there is a prior contractual relationship and the possibility of opting out is informed.
4. Recipients
We do not sell your data. We only share it with:
- Payment providers (transfer, card/Redsys, PayPal, Cetelem financing) to collect the order.
- Logistics and transport operators to deliver the order.
- Hosting, email, and IT maintenance providers, under a service contract (art. 28 GDPR).
- Public administrations when there is a legal obligation.
Some payment providers (e.g., PayPal) may process data outside the EEA. In that case, GDPR guarantees (standard clauses or other appropriate measures) apply.
5. Retention Periods
- Orders and invoicing: the period required by commercial and tax regulations (generally, up to 6 years).
- Customer account: while active and, thereafter, the time necessary for legal responsibilities.
- Inquiries: the processing time and a reasonable subsequent period.
- Reviews: while published or until you request their deletion.
- Cookie consent: 13 months, according to AEPD guidelines.
- Marketing: until you withdraw consent.
6. Rights
You can request access, rectification, deletion, limitation, portability, opposition, and, when processing is based on consent, withdraw it without affecting the lawfulness of prior processing.
How to exercise them: write to info@msrbikes.com indicating your name, the right you wish to exercise, and a contact method. We may ask for reasonable identification to prevent unauthorized access.
You can also file a complaint with the Spanish Data Protection Agency: https://www.aepd.es/.
7. Minors
The store is not directed at minors under 14 years old. We do not knowingly collect data from minors below that age.
8. Security and Updates
We apply appropriate technical and organizational measures (HTTPS, encrypted passwords, access control, backups). No system is infallible.
This policy may be updated if regulations or processing changes. The current version is the one published on this page.