Privacy and Cookie Policy

Effective Date: October 2026

1. Data Controller Information

The Controller of your personal data processed through the online store vinci.cc in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) is:

Cycling Industry Monika Lewandowicz
Registered Business Address: ul. Targowa 27, 87-100 Toruń, Poland
Correspondence & Returns Address: ul. Kościelna 23, 05-200 Wołomin, Poland
EU VAT Identification Number: PL1251636227 | REGON: 362777410
Contact E-mail: shop@vinci.cc | Phone: +48 690 772 386

2. Categories of Personal Data Collected

We collect and process personal data provided voluntarily when you interact with our website, place an order, or contact us:

• First and last name
• Billing address and shipping destination
• Phone number and e-mail address
• Company identification details and EU VAT number (for business orders)
• Technical parameters (IP address, browser specification, session timestamps)
•  

3. Legal Bases and Purposes of Processing

Your data is processed strictly in accordance with European data protection standards under the following legal bases:

• Order Fulfillment & Contract Performance (Art. 6(1)(b) GDPR): Processing name, address, email, and phone details to process orders, dispatch goods, and handle warranty or Crash Replacement requests.
• Legal & Tax Obligations (Art. 6(1)(c) GDPR): Issuing invoices, maintaining statutory sales registers, and fulfilling EU accounting standards.
• Legitimate Legal Interests (Art. 6(1)(f) GDPR): Defending against legal claims, customer service communications, and maintaining website stability and security.
• Consent (Art. 6(1)(a) GDPR): Sending newsletters, direct marketing campaigns, or placing non-essential tracking cookies.

4. Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes outlined above:

• Order Data & Invoices: Retained for 5 years from the end of the calendar year in which the tax tax obligation arose, as required by law.
• Customer Account & Inquiry Data: Processed until account deletion or resolution of the submitted inquiry.
• Marketing & Cookie Consent: Processed until consent is revoked or an objection is submitted.

5. Recipients of Data and International Transfers

Your personal data is disclosed to trusted third-party service providers bound by strict confidentiality and processing agreements:

• Logistics Partners: International courier operators (InPost courier network and delivery partners) solely for parcel transport.
• Financial Institutions: Payment processing gateways (e.g., PayPal, credit card merchants) to execute secure transactions.
• Operational Partners: External certified accounting offices and web hosting infrastructure operators (JCHOST).
• Analytics & Marketing Platforms: Google Ireland Ltd. (Google Tag Manager, GA4) and Meta Platforms Ireland Ltd. (Meta Pixel / Facebook Pixel). Where data is transferred outside the European Economic Area (EEA), standard contractual clauses (SCCs) approved by the European Commission are applied.

6. Your Rights Under EU GDPR

You hold full statutory rights regarding your personal data:

• Right to access your personal data and receive a copy.
• Right to rectification (correction) or erasure (“Right to be Forgotten”).
• Right to restriction of processing or data portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time without affecting prior lawful processing.
• Right to lodge a formal complaint with a supervisory authority (President of the Personal Data Protection Office – UODO in Poland, or your local national EU data protection regulator).

To exercise your rights, please submit your request to shop@vinci.cc.

7. Cookie Policy & Consent Management

The website vinci.cc uses cookies and similar tracking scripts to ensure proper store functionality, analyze traffic, and display personalized content. For a full, detailed list of cookies and tracking technologies used on our website, please visit our dedicated Cookie Policy (EU).

7.1 Integration with Complianz & Google Consent Mode v2

Our store employs the Complianz Privacy Suite integrated with Google Consent Mode v2. When accessing vinci.cc, an interactive cookie banner allows you to give explicit, informed consent for distinct cookie categories (Statistics, Marketing, Preferences) before any non-essential tags (Google Analytics, Meta Pixel) are loaded.

7.2 Cookie Categories

• Essential / Necessary Cookies: Required for fundamental website operations, secure checkout, cart management, and privacy preference retention. Cannot be turned off.
• Preferences Cookies: Allow the site to remember user-selected choices (language, currency).
• Statistics & Performance Cookies: Gather anonymous statistical data via Google Analytics to help us understand user interaction and optimize store performance.
• Marketing & Retargeting Cookies: Implemented via Meta Pixel and Google Tags to measure advertising conversion efficiency and serve relevant advertisements.

7.3 Managing and Revoking Cookie Consent

You can adjust, customize, or revoke your cookie consent at any time using the persistent consent control element provided by Complianz at the bottom of the page, or through your web browser configuration settings.

8. Server Logs

Accessing the website generates automated server log entries (IP address, request timestamp, browser identification, HTTP status codes) maintained by our hosting provider strictly for IT infrastructure monitoring, technical maintenance, and system safety.