Privacy Policy
Last Updated: January 4, 2026
Introduction
Welcome to SAVA Bicycles. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our bicycle service journal application.
Data Controller Information
SAVA Bicycles s.r.o.
Nad Závěrkou 2434/7 Břevnov, 169 00 Praha 6 Czech Republic
VAT: CZ14090830
Email: info@sava-bicycles.com
What Data We Collect
We collect and process the following categories of personal data:
Account Information
- Email address (for login and communication)
- Password (stored as encrypted hash using bcrypt)
- First and last name
- Phone number
- GDPR consent
Bicycle Information
- Frame serial numbers
- Bike specifications
- Ownership records
- Purchase date
- Purchase proof documents (uploaded PDFs stored securely)
Service Data
- Service history and records
- Warranty claims
Usage Data
- Session cookies (authentication tokens, 7-day expiration)
- Language preferences
- Website usage analytics (if Google Analytics is enabled)
Legal Basis for Processing
We process your data based on:
- Contract Performance (GDPR Article 6(1)(b)): To provide bicycle registration and service management
- Legal Obligation (GDPR Article 6(1)(c)): To maintain warranty records and comply with consumer protection laws
- Consent (GDPR Article 6(1)(a)): For marketing emails and analytics (you can withdraw consent anytime)
Cookies & Tracking
We use the following cookies:
Essential Cookies
better-auth.session_token- Authentication session (7 days)sava-lang- Language preference
Analytics Cookies (Optional)
- Google Analytics - Website usage statistics with IP anonymization
- You can opt out of analytics in your browser settings or via our cookie preferences
Third-Party Services
We work with trusted third-party providers:
AWS S3 (Amazon Web Services)
- Purpose: Secure file storage for purchase proofs and legal documents
- Data Location: EU (Frankfurt) and US (Virginia)
- Safeguards: Standard Contractual Clauses, encryption at rest
AWS SES (Amazon Simple Email Service)
- Purpose: Sending transactional emails (verification, password reset, service reminders)
- Data Location: US East (Virginia)
- Safeguards: Standard Contractual Clauses, TLS encryption in transit
Google Analytics (if enabled)
- Purpose: Website usage analytics to improve user experience
- Data Location: United States
- Safeguards: IP anonymization, data retention controls
Data Retention
We retain your data for the following periods:
- Active Accounts: Duration of business relationship + 3 years (warranty obligations)
- Purchase Records: 10 years (Czech accounting and tax law requirements)
- Session Data: 7 days (automatic expiration)
- Deleted Accounts: 30-day soft delete period, then permanent anonymization
Your Rights
Under GDPR, you have the following rights:
Right to Access (Article 15)
Request a copy of all personal data we hold about you
Right to Rectification (Article 16)
Correct inaccurate or incomplete personal data
Right to Erasure (Article 17)
Request deletion of your personal data ("right to be forgotten")
Right to Restriction (Article 18)
Limit how we use your personal data
Right to Data Portability (Article 20)
Receive your data in a machine-readable format
Right to Object (Article 21)
Object to processing based on legitimate interests
Right to Withdraw Consent (Article 7(3))
Withdraw consent for marketing or analytics at any time
How to Exercise Your Rights: Email us at info@sava-bicycles.com. We will respond within 30 days.
International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA):
- AWS Services: Data may be transferred to US data centers
- Safeguards: We use Standard Contractual Clauses approved by the European Commission
- Adequacy: AWS complies with EU-US Data Privacy Framework where applicable
Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of material changes via:
- Email notification to your registered address
- Prominent notice on our website
Your continued use of the service after changes constitutes acceptance of the updated policy.
Contact & Complaints
Privacy Questions: Email info@sava-bicycles.com
Supervisory Authority: If you are not satisfied with our response, you have the right to lodge a complaint with:
Úřad pro ochranu osobních údajů (ÚOOÚ) Office for Personal Data Protection Pplk. Sochora 27 170 00 Prague 7 Czech Republic Website: https://www.uoou.cz
Children's Privacy
Our service is not intended for children under 13 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.
This privacy policy is provided in multiple languages for your convenience. In case of discrepancies, the English version shall prevail.