Welcome. We speak English too.

English
ES EN

This is an English translation for convenience. The Spanish version is the legally binding one.

1. General information

This privacy policy explains how Oxia Cycles processes the personal data it receives through the oxiacycles.com website.

This policy may be updated to reflect legislative or operational changes. Please check this page periodically.

2. Data controller

For any queries regarding the processing of your data, email me at the address above.

3. Data collected

Only the personal data you voluntarily provide are collected:

  • Contact forms: name, email address and message.
  • Project enquiry form: name, email address, message and, if you provide them, optional details about your bicycle or body measurements for the initial assessment.
  • Newsletter: email address.

No banking data, official identification numbers or special categories of data are collected through the site.

4. Purpose of processing

Personal data are used exclusively to:

  • Respond to enquiries and messages received through the forms.
  • Initiate and manage custom bicycle building projects when requested.
  • Send the monthly newsletter to those who voluntarily subscribe.

No automated processing or profiling is carried out.

5. Legal basis

  • Consent of the data subject: applies to newsletter subscription.
  • Performance of a contract or pre-contractual measures: applies to information requests and custom projects.

6. Data retention

  • Messages received through the forms are kept in the controller's email account for as long as necessary for the purpose for which they were sent, and no longer than the statutory limitation period for any resulting liabilities.
  • Newsletter subscription data are kept until the user unsubscribes.

7. Recipients and data processors

Personal data may be processed by the following processors who provide services to the controller:

  • Sered (Spain): web hosting and email provider for the oxiacycles.com domain. Stores the messages received through the forms.
  • Resend (United States): transactional email service for notifications generated through the forms. Covered by Standard Contractual Clauses approved by the European Commission.
  • Cloudflare (United States): DNS services and anti-spam protection (Turnstile) for the website. Covered by Standard Contractual Clauses approved by the European Commission.
  • Google Analytics (United States): website analytics via cookies. Covered by Standard Contractual Clauses approved by the European Commission.
  • Brevo (France): newsletter delivery platform, when activated.

Personal data are not disclosed to third parties beyond the processors listed, except where required by law.

8. International transfers

Some of the data processors are located outside the European Economic Area. Transfers are made under the safeguards provided by the GDPR (Standard Contractual Clauses and, where applicable, adequacy decisions).

9. Your rights

You have the right to:

  • Access: know which of your data are being processed.
  • Rectification: correct inaccurate data.
  • Erasure: request the deletion of your data.
  • Objection: object to the processing.
  • Restriction: request that the processing be restricted.
  • Portability: receive your data in a structured format.
  • Withdrawal of consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any right, email hola@oxiacycles.com clearly stating your request.

10. Complaint to the supervisory authority

If you believe that the processing of your data does not comply with applicable data protection law, you may lodge a complaint with the Spanish Data Protection Authority (AEPD) (www.aepd.es).

11. Security

Oxia Cycles applies appropriate technical and organisational measures to safeguard the data and prevent unauthorised access, loss or alteration.

Last updated: May 2026.