Privacy Policy
We value your trust as much as your performance on the road. Here is exactly how MVMT Cycling collects, protects, and handles your personal information under Regulation (EU) 2016/679 (GDPR).
Zero Data Selling
We never trade, rent, or sell your rider profile or order logs to external marketing platforms or data brokers.
Encrypted Checkout
Checkout information is transmitted via encrypted connections directly into our payment processor's secure systems; we never see or store your full card number.
EU-First Infrastructure
Where possible, we host order and customer records on infrastructure within the EU; any processors located elsewhere are bound by recognized international transfer safeguards.
Right to Erasure
You have the legal right to request access to or deletion of your stored customer records, subject to limited exceptions such as statutory invoice retention.
The Data Controller responsible for processing operations across our online store is PARDUS EUROPE S.R.L., registered at Viale dei Colli Euganei 14, 35041 Battaglia Terme (PD), Italy. For any inquiries regarding how we handle your personal data, contact us at info@mvmtcycling.com.
We strictly limit data acquisition to parameters necessary for executing high-performance component fulfillment:
We do not collect or store raw credit card numbers or security CVV codes on our servers.
When you browse our store, we (and, where you consent, our analytics provider) automatically collect technical information such as your IP address, browser and device type, pages viewed, and how you navigate the site. This is collected through cookies and similar technologies.
Strictly necessary cookies are always active; functional and analytics cookies are only set with your consent. For the full list of cookies we use, their purpose, and how to manage your preferences, see our Cookie Notice.
Processing operations are anchored on explicit statutory grounds under GDPR Art. 6 (1):
• Contract Fulfillment (Art. 6(1)(b)): Necessary to dispatch components and parts to your address and provide tracking notifications.
• Statutory Tax Compliance (Art. 6(1)(c)): Retention of transactional invoices for EU fiscal and One-Stop Shop (OSS) VAT accounting.
• Legitimate Interests (Art. 6(1)(f)): Technical fraud prevention and keeping the store secure.
• Consent (Art. 6(1)(a)): Optional analytics cookies and marketing opt-ins.
Your delivery information is shared only with the courier partners we use for transit routing (DPD, DHL Parcel, GLS). Payment verification occurs directly inside our secure payment gateway systems, without us storing your full card details.
If you consent to analytics cookies, we share limited, pseudonymized usage data with Google Analytics (Google Ireland Ltd. / Google LLC) to understand site performance. We do not sell this data or use it for third-party advertising.
Some of our service providers, such as Google (for analytics) and our payment gateway partners, may process personal information outside the European Economic Area, including in the United States. Where this happens, we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses, or an applicable adequacy decision, to ensure your data remains protected to an equivalent standard.
Commercial invoices are retained for the statutory audit period required under applicable Italian and EU tax law. Non-contractual inquiries and customer support chats are routinely archived or deleted after standard operational resolution.
If you opt in to receive marketing updates from us, we will use your email address to send product releases and brand news. You can withdraw this consent at any time using the unsubscribe link in any marketing email, without affecting order-related communications.
Your Statutory Rights Under GDPR
Right of Access (Art. 15)
Obtain clear confirmation and a comprehensive export of all personal data held concerning your identity.
Right to Rectification (Art. 16)
Demand prompt correction of incomplete or outdated delivery details and order history.
Right to Erasure (Art. 17)
Request deletion of your customer profile ("Right to be Forgotten"), subject to limited exceptions such as statutory tax retention.
Restriction of Processing (Art. 18)
Suspend active data utilization while the accuracy or legitimacy of processing is verified.
Data Portability (Art. 20)
Receive your personal information in a structured, commonly used, and machine-readable format.
Supervisory Authority (Art. 77)
Lodge a formal complaint with your competent national European Data Protection Authority (DPA).