Privacy & Cookie Policy

The inquiry form requires your company name, contact name, email address and message. Phone number and package interest are optional. Please do not send sensitive personal information or information about other people unless authorised. The form asks you to acknowledge this notice; that is not marketing consent.

Submitted inquiries are stored in the website database and sent to the nextbike Cyprus team by email. Hosting and delivery services process technical information such as IP addresses, request details and browser information to provide and protect the service. The commute calculator performs its calculations in your browser; this application does not submit or save its inputs or results.

We use inquiry details to respond to your request and discuss a possible partnership. Where applicable, this is necessary to take steps at your request before a contract (GDPR Article 6(1)(b)); business-contact correspondence and protecting the website rely on legitimate interests in answering requests and operating a secure service (Article 6(1)(f)). Legal recordkeeping may rely on a legal obligation (Article 6(1)(c)).

Optional analytics and external content rely on your separate, affirmative permission. Refusing them does not stop you from browsing or contacting us. The inquiry form does not enrol you in a marketing list. We do not use this form for automated decisions with legal or similarly significant effects.

Essential storage supports administrator authentication, security and remembering your privacy choice. The localStorage entry cypruserides-privacy-v1 records your category choices, notice version and time on this browser and website for up to 180 days. Each website hostname has its own choice. You can use Cookie settings to reject optional services, select categories or withdraw permission at any time. Old or invalid choices require a new decision.

Google Analytics 4 is optional and is configured only for freedom.abacusai.app when a valid Measurement ID is available. When Google Analytics is not configured, the preferences panel says so; the separate inquiry-linked analytics described below can still be used with permission. The Google tag is not loaded before analytics permission. Once allowed, Google receives usage, device and session information; _ga and _ga_* first-party cookies are configured for up to 180 days without renewing their expiry on each visit. Advertising storage, advertising user data, personalisation and Google signals are disabled. Initial page URLs omit query strings and fragments. Do not place personal data in page addresses. Withdrawing disables collection and attempts to remove these first-party cookies; it does not erase data already received by Google.

The embedded bike configurator is currently served by bikesimulator.abacusai.app. External-content permission is separate from analytics. Until allowed, the embed is replaced with a loading-consent panel on both the homepage and the unlisted configurator page. Loading shares your IP address and browser details with the provider, which may use its own cookies or storage. Withdrawal removes the embed; this website cannot erase storage on another origin. You can also clear it in your browser settings. If the administrator changes the embed to another service, that service must be reviewed before use.

Hosting resources, the platform runtime and selected web fonts may make network requests needed to render the website. The optional-service controls are not a guarantee that every third-party resource is blocked. Provider storage and server-side retention are governed by their own practices, not by the 180-day browser preference duration.

Inquiry information is available to authorised nextbike Cyprus staff and service providers supporting hosting, database storage and email delivery, including Abacus.AI. Optional analytics uses Google; external content is delivered by its indicated provider. Information may also be disclosed where legally required. We do not sell inquiry data.

Providers may process information outside Cyprus or the EEA. Applicable transfer arrangements depend on the provider and service configuration; contact us for information about recipients and the safeguards applicable to your data. Enabling a cookie category does not waive your data-protection rights.

Inquiry retention depends on whether the request remains open, whether a partnership follows, and any applicable legal recordkeeping or claim period. This website does not currently apply an automatic inquiry-deletion deadline. Contact us to request deletion or details of the retention period applicable to your inquiry. Database records, email copies and provider backups may have different lifecycles; a request must be assessed across those systems.

Browser privacy choices expire after 180 days. Analytics cookies are configured for up to 180 days; this is not the retention period for event data held in a Google Analytics property. Property retention and external-provider storage settings must be considered separately.

Administrative inquiry access requires authentication. Inquiry inputs are checked for type, email format and length, and visitor text is escaped before inclusion in notification email HTML. Submit only what is necessary to explain your request. No internet service can guarantee absolute security; contact us if you believe information has been exposed or sent in error.

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction or portability of your personal data and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. Cookie settings provides withdrawal for optional website services.

Contact us using the details below. We may need proportionate information to verify your identity and normally respond within one month, with any lawful extension explained. You may complain to the Cyprus Commissioner for Personal Data Protection (www.dataprotection.gov.cy) or another competent EU supervisory authority.

We may revise this notice as website features or data-handling practices change. The revision date is shown above. Material changes to optional processing require a fresh consent decision rather than treating continued use as consent.

For privacy questions or rights requests, contact nextbike Cyprus at [email protected] or by post at Georgiou Malekidi 8, 3040 Limassol, Cyprus. Please identify the website and the inquiry concerned without sending unnecessary sensitive information.

When email sending is configured, a confirmation is addressed to the email supplied in your inquiry, with [email protected] and [email protected] copied (duplicate addresses are omitted). Resend processes the message for delivery. Our administrators can record provider acceptance, delivery delays, receiving-server acceptance, failures, bounces and complaints to manage correspondence. Delivery is not proof of inbox placement or reading.

A separate, unchecked inquiry-form choice allows optional email image-load and link-request signals and linking consented website visits to that inquiry. Without that choice, our confirmation contains no tracking pixel or tracked website link. Provider-wide open/click tracking must stay off. Opens and clicks are approximate: email privacy tools, security scanners, forwarded emails and copied staff can generate them. We cannot prove who opened an email or measure time spent reading it.

Website attribution additionally requires Analytics permission in Cookie settings. On the same browser and hostname, cypruserides-inquiry-association-v1 localStorage links an inquiry using a random identifier for up to 180 days; cypruserides-inquiry-session-v1 sessionStorage groups page activity. We record visits to public pages, page-view counts, maximum scroll depth, and approximate visible, focused website time excluding prolonged inactivity. We do not record form contents, full query strings, IP addresses, precise location or device fingerprints in these activity records. Embedded-provider interactions are not recorded by this feature. Clearing storage, using another browser or rejecting analytics prevents continued browser attribution; a forwarded link can associate another person, so linked activity is not verified identity.

Use Cookie settings to stop future website analytics on this browser. Use the tracking-preferences link in the confirmation to revoke inquiry-level tracking and clear its stored optional activity; delivery records and inquiry details remain. Optional collection stops after 180 days from submission. The app keeps a bounded summary of first/latest email signals and the latest 50 website sessions per inquiry, not a complete browsing history. Expired optional activity is excluded from reporting; expiry is not a promise that historical database backups or email-provider logs have been erased. Contact us for deletion requests covering retained records and provider copies. Operational email records follow inquiry retention. Privacy choices from older notice versions require a fresh decision.