Privacy Policy
This policy explains how Minibike Friends processes personal data when you visit the website, contact us or submit a dealer enquiry or survey. The website is currently in its product-preview and Early Access phase; online purchases and payments are not available. The sections on accounts, orders and payments apply where those functions are made available and used.
1. Controller
The controller under the General Data Protection Regulation (GDPR) and other applicable data protection law is:
Minibike Friends
Owner: Andre Römhild
Küferstraße 47
71686 Remseck am Neckar
Germany
Email: minibikefriends@gmail.com
Telephone: +49 177 7100427
In this policy, “we”, “us” and “Minibike Friends” refer to this controller.
2. General information
Personal data is information relating to an identified or identifiable natural person, including names, addresses, email addresses, telephone numbers, IP addresses and order, payment and communication data. We process it under applicable data protection law. Depending on the purpose, the legal basis is consent (Article 6(1)(a) GDPR), steps requested before a contract or contract performance (Article 6(1)(b)), legal obligations (Article 6(1)(c)), or legitimate interests (Article 6(1)(f)).
3. Hosting
The website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
The host processes technical connection and log data, including IP address, access date and time, requested file or URL, referring URL, browser type and version, operating system and request status. This provides a secure, stable and technically functioning website and helps detect and prevent attacks. The basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation.
4. Server logs
Access may automatically generate server logs containing IP address, access date and time, requested page or file, data volume, referring URL, browser type and version, operating system and device hostname. They are used to maintain security, stability and functionality under Article 6(1)(f) GDPR.
5. WordPress and WooCommerce
The website uses WordPress and WooCommerce for product presentation and, where enabled, order processing. Depending on the functions used, this may involve names, billing and delivery addresses, email addresses, telephone numbers, order details, cart contents, payment method and status, account details and technical usage data. Processing necessary to initiate or perform a contract is based on Article 6(1)(b) GDPR; statutory retention and evidence duties are based on Article 6(1)(c).
6. Minibike Friends and EXPAQ GmbH
Minibike Friends operates the technical distribution and intermediary platform. The designated seller is EXPAQ GmbH, Schwabstr. 2, 71686 Remseck, Germany; email: info@kepspeed.eu; telephone: +49 176 60886223.
Where an order is placed, the information necessary to process and perform the purchase contract is forwarded to EXPAQ GmbH. It may include name, billing and delivery addresses, email, telephone, ordered products, order number, payment method or status and contract-related communication. Transfers are limited to what is necessary for the requested transaction.
EXPAQ GmbH processes these data under its own data protection responsibility for contract administration, invoicing, payment, dispatch and delivery, withdrawal, defect claims, returns, refunds and customer communication. Further details are provided in its own privacy information.
7. Customer accounts and dealer registration
Where account creation is offered, we process the registration data provided. Business details may include company name, legal form, contact person, business address, email, telephone, VAT identification number, website, business activities and evidence of business status. We use them to establish and manage accounts and verify eligibility for dealer areas. The basis is Article 6(1)(b) GDPR or, for preparatory checks and communication with company representatives, Article 6(1)(f). Our legitimate interest is administering and verifying business access.
7.1. Dealer surveys and Early Access
We process the company, contact and survey information you provide to assess dealer demand, review your enquiry, respond to questions and inform you about possible dealer access. This may include company name, contact person, business email, country, website, optional VAT details, product interests, previous experience, expected quantities, free-text responses and optional reference images. Do not upload personal information about other people unless you are entitled to share it.
Participation is non-binding and creates neither an order nor an entitlement to approval or a contract. Processing necessary for steps requested before a contract is based on Article 6(1)(b) GDPR. Otherwise, including market planning and communication with company representatives, it is based on Article 6(1)(f); our legitimate interest is handling business enquiries and developing a range that meets demand.
An enquiry is not a general newsletter subscription. Additional marketing requires an appropriate legal basis or separate consent. Providing information is voluntary; without the required contact details, we cannot process or respond to the enquiry.
8. Contact and email
When you contact us by email, form or another method, we process the information supplied, including name, email, telephone, company and message content, to handle the enquiry. Contract-related enquiries are processed under Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f), based on our legitimate interest in responding appropriately.
Authorised hosting, IT and mail providers process the information needed to operate the website and deliver messages. Our published Gmail contact address is operated through Google’s email service; messages addressed to it are processed through that service. Email content and delivery information may also be retained in the website’s mail system to resolve delivery problems.
9. Payments, where offered
No online payment is currently available through this website. Before a new payment service is activated, the corresponding provider information must be supplied.
9.1. PayPal
Where PayPal is offered and selected, the provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Data necessary for payment may include name, billing address, email, order value, currency and order or transaction information. The basis is Article 6(1)(b) GDPR.
9.2. Credit cards
Where card payment is offered, the provider is identified in checkout and the required privacy information is supplied before activation. Necessary information may include name, billing address, transaction details, amount and technical payment information. The basis is Article 6(1)(b) GDPR.
9.3. Bank transfer
For bank transfers, the participating banks process account-holder name, IBAN, amount, reference and booking or transaction details for contract performance under Article 6(1)(b) GDPR.
10. Cookies and consent management
Cookies and similar technologies support necessary functions such as security, login, account and language settings and remembering your privacy choices; cart functions apply where enabled. Storage or access that is strictly necessary to provide a digital service expressly requested by you is governed by section 25(2) TDDDG. Optional technologies requiring consent are governed by section 25(1) TDDDG and, for personal data, Article 6(1)(a) GDPR.
We use Real Cookie Banner to record privacy choices on this website. It stores a consent identifier and selected services and documents the time, banner version and relevant interactions needed to evidence the choice. Consent records are stored on our web server. Processing to document legally required consent is based on Article 6(1)(c) GDPR, with Article 6(1)(f) applying to reliable preference management. Preference cookies are configured for up to 365 days. Consent records are retained separately for the period needed to document compliance with applicable consent requirements.
You can decline optional services and change or withdraw your choice for the future through the privacy settings. Withdrawal does not affect processing that was lawful before withdrawal.
11. Optional analytics
Google Analytics 4 is not listed among the currently configured consent services. If introduced, its purposes, provider details, retention and transfer arrangements will be explained before it is activated and any required consent will be requested. Necessary server logs described above are separate from optional analytics.
12. YouTube
Where YouTube videos are embedded, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loading them may disclose IP address, device and technical information and the visited page to Google. Where consent is required, embedded content is loaded only with consent under Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG. Consent may be withdrawn through the privacy settings.
13. Instagram
We maintain an Instagram presence and may link to or embed its content. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. An ordinary link takes you to Instagram when clicked. If you contact or interact with us there, we receive the profile details and message or comment content you provide and use it to handle the interaction. The basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) for other communication, reflecting our legitimate interest in responding.
Embedded Instagram content may transmit personal data to Meta when loaded and requires prior consent where applicable, under Article 6(1)(a) GDPR and section 25(1) TDDDG. Meta processes data under its own policies and may process it outside the EU/EEA. See Instagram’s privacy policy.
14. Recipients
Personal data is shared only where necessary for the stated purposes or otherwise lawful. Depending on the services used, recipients may include hosting, IT and email providers, EXPAQ GmbH as seller, payment and shipping providers, tax advisers and bookkeeping providers, analytics or web services with consent, and authorities where disclosure is legally required.
15. Transfers outside the EU/EEA
International providers, including Google and Meta, may process personal data outside the EU/EEA. Where required, transfers must rely on a GDPR transfer mechanism, such as an applicable adequacy decision or appropriate safeguards including European Commission standard contractual clauses. You may contact us for information on the safeguards applicable to your data and how to obtain a copy.
16. Retention
We retain personal data only for as long as needed for the relevant purpose, or for applicable statutory retention periods. Enquiry and survey data is retained while needed to process your enquiry, follow up on requested dealer access or evaluate the demand submitted. After the purpose ends, it is deleted unless a legal retention duty or another lawful basis requires continued storage. You may withdraw your interest or request deletion using our contact details. The consent-management periods are described in section 10.
17. Your rights
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent for the future. Withdrawal does not affect the lawfulness of prior processing. Contact us using the details in section 1.
18. Complaints
You may complain to a data protection supervisory authority, particularly in the country where you habitually reside, work or believe an infringement occurred. For Baden-Württemberg, this is the State Commissioner for Data Protection and Freedom of Information: www.baden-wuerttemberg.datenschutz.de.
19. Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. You may object to direct marketing at any time without giving a specific reason.
20. Withdrawal of consent
You may withdraw consent at any time with effect for the future. For cookies, analytics or embedded media, use the privacy settings on this website or contact us.
21. Changes to this policy
This policy may be updated to reflect technical changes, new services, changes in processing or legal developments.
Updated: 23 September 2026