1. Who is responsible
The data controller is TourdeWheel (VéloRouge), 4 Rue du Faubourg-de-Saverne, 67000 Strasbourg, France.
You can reach us by e-mail at contact@velorouge.fr, by phone or WhatsApp on +33 6 30 77 09 94, or in person at the shop during opening hours.
2. What data we collect
Booking and rental data: your name, e-mail address, phone number, rental dates and the equipment rented, plus the identity check and deposit details required to hand over a bike.
Contact data: the content of the messages you send us by e-mail, WhatsApp or phone.
Website data: technical data such as IP address, browser and pages viewed. Analytics and advertising identifiers are only collected if you accept them in the cookie banner.
3. Why we process it, and on what legal basis
To perform the rental contract you enter into with us (bookings, hand-over, return, deposits, invoices) — Article 6(1)(b) GDPR.
To answer your questions and manage the customer relationship — our legitimate interest, Article 6(1)(f) GDPR.
To measure how the site is used and how our advertising performs, with Google Analytics and Google Ads — only with your consent, Article 6(1)(a) GDPR. Consent is signalled to Google through Consent Mode v2 and you can change or withdraw it at any time.
To meet our accounting and tax obligations — Article 6(1)(c) GDPR.
4. Cookies and analytics
Essential cookies keep the site working: your language choice, the booking widget and your cookie decision. They are always active.
Analytics and advertising cookies (Google Analytics, Google Ads) load only after you select "Accept all". If you choose "Essential only", no analytics or advertising cookies are set and Google receives consent-denied signals.
You can change your decision at any time by clearing this site's cookies in your browser and reloading the page.
5. Who we share data with
Booking partners who process your reservation when you book through them (for example GetYourGuide, Bókun, Lokki). They act as independent controllers under their own privacy notices.
Google Ireland Limited for analytics and advertising measurement, when you have consented.
Our hosting, e-mail and payment providers, acting as processors on our instructions.
We never sell your personal data.
6. International transfers
Some of our providers may process data outside the European Economic Area. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
7. How long we keep data
Rental contracts, invoices and accounting records are kept for the retention period required by French commercial and tax law.
Contact messages are kept for as long as needed to handle your request and for a reasonable follow-up period afterwards.
Analytics data is retained according to the retention setting configured in Google Analytics, and only exists if you consented.
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out.
To exercise these rights, write to contact@velorouge.fr. We answer within one month.
If you believe your data is not handled properly, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).