Privacy policy
This Privacy Policy explains how SIA TOPVELO ("we," "us," or "our") collects and processes personal data provided by you when you use the RARIRIDE online booking inquiry form. We are committed to protecting your privacy and handling your data transparently, in compliance with the European Union's General Data Protection Regulation (GDPR).
1. Data Controller Contact Information
The Data Controller responsible for processing your personal data is:
-
Company Name: SIA TOPVELO
-
Registration Number: 40203467580
-
Legal Address: Hipokrāta iela 51, Rīga, LV-1079, Latvia
-
Physical Address (Workshop/Shop): Lāčplēša iela 125, Rīga
-
Email for Data Inquiries: info@rariride.com
-
Phone/WhatsApp: +371 29227571
2. Personal Data We Collect
We collect only the information necessary to process your rental inquiry and verify your identity:
-
Identity and Contact Data: Full name, phone number, email address, and personal identity number (personas kods).
-
Verification Data: Copies of your personal identification document (Passport or ID card) and a "selfie" photo for identity confirmation.
-
Inquiry Details: E-bike model choice and desired rental duration.
-
Technical Data: IP address, browser type, and timestamps recorded upon acceptance of our terms.
3. Purpose and Legal Basis for Processing
We process your data for the following specific purposes:
-
To Handle Booking Inquiries: We use your details to communicate with you, verify bike availability, and prepare the physical rental agreement. Legal basis: Performance of a Contract (taking pre-contractual steps at your request).
-
To Verify Identity: Processing your ID/Passport and selfie is necessary for our Legitimate Interest in preventing fraud and ensuring the security of our high-value assets.
-
To Record Consent: Recording your IP address and timestamp when you accept our terms is necessary for our Legitimate Interest in maintaining a verifiable audit trail.
-
To Ensure Website Security: Technical data is used based on our Legitimate Interest in maintaining a secure, functional service.
4. Data Retention
We retain your personal data only for as long as necessary:
-
Successful Bookings: Once the physical Rental Agreement is signed, your data will be stored as part of the formal legal contract for 5 to 10 years, as required by Latvian commercial and tax legislation.
-
Unsuccessful Inquiries: Data from inquiries that do not result in a signed agreement (including uploaded identity documents) will be deleted within 6 months of the last communication or upon your explicit request for erasure.
5. Disclosure of Your Personal Data
We may share your data with the following categories of third parties:
-
Service Providers: External IT providers (web hosting and secure server maintenance) who act as Data Processors on our behalf.
-
Legal Compliance: Law enforcement, public authorities, or courts, if legally required (e.g., in the event of an official legal inquiry or reported criminal activity).
6. Your Rights Under GDPR
As a data subject, you have the following rights. To exercise them, please contact us at info@rariride.com:
-
Right of Access: Request a copy of the personal data we hold about you.
-
Right to Rectification: Have inaccurate or incomplete data corrected.
-
Right to Erasure: Request the deletion of your data, subject to legal retention obligations.
-
Right to Restriction: Limit how we use your data.
-
Right to Object: Object to processing based on our Legitimate Interest.
-
Right to Data Portability: Receive your data in a structured, machine-readable format.
7. Lodging a Complaint
If you believe that we have not complied with data protection laws, you have the right to lodge a complaint with the national supervisory authority:
-
Data State Inspectorate (Datu valsts inspekcija)
-
Address: Blaumaņa iela 11/13-11, Rīga, LV-1011
-
Website: www.dvi.gov.lv
8. Changes to This Privacy Policy
We may update this policy periodically to reflect changes in our services or legal requirements. The latest version will always be posted on this page.