1. Data Controller

La Factoría Bike-In SL (B-8688611) is the controller for personal data linked to the Bike-In app, bike-sharing services and related support channels.

You can reach us at info@smartciti.es or by phone on +34 647 816 272.

We process data in compliance with the EU General Data Protection Regulation (GDPR), the Spanish LOPDGDD and Google Play policies.

2. Personal Data We Process

Depending on how you use our services, we process the following categories of data:

• Identification and contact data: name, surname, email address, phone number.
• Account access credentials and verification records.
• Contractual and billing information, including payment methods and history.
• Real-time GPS location, routes, speed and trip status.
• Bicycle and lock telemetry: diagnostics, battery level, Bluetooth locking status.
• Occasional camera captures used to read QR codes when starting or finishing rides.
• Support tickets, communications and operational audit logs.
• Device technical data together with cookie and advertising identifiers.
• Aggregated and pseudonymised analytics on app usage and fleet performance.

3. Purposes of the Processing

We use personal data to:

• Create user accounts, verify identities and manage bicycle reservations.
• Enable vehicle unlocking and locking, manage trip records and process payments.
• Ensure service safety, detect fraud and prevent misuse.
• Provide technical support and customer service.
• Meet our legal, fiscal and regulatory obligations.
• Analyse and improve the app, user experience and fleet performance.
• Send marketing communications when we have your consent, which you may withdraw at any time.

4. Legal Bases

• Performance of the user contract: providing the bike-sharing service and managing rides.
• Compliance with legal and tax obligations.
• Informed consent: real-time geolocation, camera use and marketing communications.
• Legitimate interest: platform security, fleet maintenance and non-individualised analytics.

5. Recipients and International Transfers

We share data with technology providers (EU/EEA hosting, analytics, payment gateways, messaging and support tools), insurers and assistance services, and competent authorities when required.

All processors sign binding agreements that ensure confidentiality and security. For transfers outside the EU/EEA we apply appropriate safeguards such as Standard Contractual Clauses or other recognised mechanisms.

6. Data Retention

• Contract, billing and payment records: 6 years.
• Precise geolocation and telemetry: up to 24 months before anonymisation.
• Incident and complaint files: 6 months or until resolved.
• Technical and audit logs: up to 12 months.
• Marketing communications: for as long as consent remains in force.
• Legal claim documentation: retained for the period required by applicable law.

7. Your Rights

You may exercise your rights of access, rectification, erasure, objection, restriction, portability and withdrawal of consent by emailing info@smartciti.es with the subject line “GDPR Rights” and attaching proof of identity.

We will reply within one month. If you are not satisfied, you may file a complaint with the Spanish Data Protection Authority (AEPD).

8. Security Measures

We apply encryption in transit and at rest, role-based access controls, environment segregation, periodic audits and telemetry monitoring. We maintain incident response plans and notify users and authorities of material breaches in accordance with the law.

9. GPS, Bluetooth and Camera Permissions

The app requests explicit permissions for GPS, Bluetooth and camera access. The camera is only used to scan bicycle QR codes. GPS and Bluetooth operate while locating vehicles and during trips. Disabling these permissions may prevent the service from working.

10. Minors

The service is for users aged 18 or over. If we detect accounts belonging to minors, we will cancel the account and delete the associated data.

11. Cookies and Identifiers

We use SDKs and analytics/marketing tools that generate pseudonymised identifiers. You can adjust your tracking preferences within the app or through your device settings.

12. Changes to This Policy

We will notify you of material updates via the app or email with reasonable notice. The current version will always be available on Bike-In platforms. Continued use of the service constitutes acceptance of the updated policy.

13. Privacy Contact / DPO

Contact our privacy team at info@smartciti.es or by post at C/ Cedros 51, penthouse, 28029 Madrid, Spain. Data incident phone line: +34 647 816 272.