Welcome to Cicli Leggenda (“ciclileggenda.com”, “we”, “us”, or “our”). We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our vintage bicycles, components, or services. It is designed to comply with the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA)/CPRA, and applicable US and Canadian privacy laws.

---

1. Data Controller

The entity responsible for the processing of your personal data is:

2. Information We Collect

We only collect personal data that is strictly necessary to fulfill your orders and provide a functional user experience. This includes:

• •
  Identity & Contact Data: First name, last name, billing address, shipping address, email address, and phone number.
• •
  Transaction Data: Details about bank transfers to and from you and details of products you have purchased from us. (Note: We do not collect or store credit card details on our servers).
• •
  Technical & Usage Data: IP address, browser type, time zone setting, operating system, and how you use our website (collected via essential cookies).

3. Legal Basis for Processing

If you are located in the European Union or Northern Europe, we process your data under the following legal bases:

• •
  Performance of a Contract: To process, verify, and deliver your vintage bicycle orders.
• •
  Legitimate Interests: To maintain website stability and protect our site against fraud.
• •
  Consent: When you explicitly opt-in to cookies or communication.

4. Data Retention and Your Right to Deletion

We only keep your data for as long as necessary to fulfill the purposes we collected it for, including any legal, tax, or accounting requirements.

5. Sharing Your Data (Third-Party Service Providers)

To operate our business and deliver our products, we share your data only with trusted third parties who adhere to strict privacy and data security standards:

• •
  Shipping & Couriers: UPS (to securely deliver your orders to North America and Northern Europe).
• •
  Website Hosting & Tools: WordPress and Rocket hosting (used to securely host and run our e-commerce infrastructure).

We do never sell, rent, trade, or share your personal data with third parties for marketing or advertising purposes.

6. International Data Transfers

Since our operations are based in Italy and we serve customers across the United States, Canada, and Northern Europe, your data will be transferred and processed across borders. We ensure that appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) are in place to guarantee your data remains fully protected under applicable laws.

7. Limitation of Liability

To the maximum extent permitted by applicable law, Stefano Spagnolo and Cicli Leggenda shall not be liable for any indirect, incidental, special, or consequential damages arising from unauthorized third-party access, data breaches, or cyber-attacks, provided that we have implemented reasonable technical and organizational security measures in line with standard web practices. Our products are sold as-used, unique vintage goods, and the data collected relates solely to basic commercial fulfillment.

8. Cookies

We use essential cookies to keep track of website functionality, such as your language preferences and shopping cart contents. You can set your browser to refuse all or some cookies, but please note that doing so may cause some parts of this website to function improperly.

9. Contact Us

For any questions regarding this Privacy Policy, or to exercise your right to immediately delete your data, please contact us directly:

---