Last updated: 13 August 2025

Who we are

We are Luma Šport Piran – Danilo Jagodić – Quao, s.p., Razgled 33, 6330 Piran, Slovenia (VAT no. 59575646). You can contact us at luma.sport@hotmail.com or +386 41 781 414.

What data we collect and why

We collect personal data that you provide when you:

  • Fill in our booking form (name, surname, email, phone number, height, gender, rental dates, and any notes) so that we can reserve the correct bike for you and contact you about your booking.
  • Send us enquiries or comments, so we can respond.
  • Visit our website; we collect cookies and log files to improve performance and security (see our Cookie Policy).

We may also ask for your ID number or address when you pick up the bike to verify your identity and fulfil our legal obligations.

Legal basis for processing

We process your data because:

  • We need it to create and fulfil our rental contract with you (GDPR Article 6 (1)(b)).
  • We must meet our legal obligations (for example, under tax or accounting laws).
  • We have a legitimate interest in preventing fraud and ensuring the safety of our bikes.
  • With your consent, we may send you marketing emails about our services; you can opt out at any time.

How long we keep your data

Rental records and associated data are stored for six years after the rental ends, as required by Slovenian accounting rules. If you send us an enquiry but do not book, we keep your messages for up to one year. Cookies and analytics data are kept according to their expiry dates (see Cookie Policy). We destroy copies of identity documents once all equipment is returned.

Sharing your data

We do not sell your data. We share it only with:

  • Our staff and trusted service providers (e.g., hosting company, email service) who need it to perform their duties.
  • Public authorities if required by law (e.g., police in case of theft or fraud).
  • Our accountants or legal advisers where necessary to comply with our obligations.

Some rental bikes are equipped with GPS trackers for theft prevention. Location data is only accessed if the bike is reported stolen, and we share it with the police.

Your rights

Under the GDPR, you have the right to:

  • Be informed about how we use your data.
  • Access a copy of your data.
  • Correct inaccurate or incomplete data.
  • Delete your data when it is no longer needed.
  • Restrict or object to the processing of your data.
  • Port your data to another provider.

To exercise these rights, email luma.sport@hotmail.com. We will respond within one month. If you believe we have not handled your data properly, you can complain to the Information Commissioner of the Republic of Slovenia.

International transfers

We store our data within the EU. If we use service providers outside the EU, we ensure appropriate safeguards (such as EU‑standard contractual clauses).

Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), limited access and staff training.

Changes to this policy

We may update this policy to reflect changes in the law or our services. The latest version will always be available on our website.