Privacy Policy

I keep this simple and honest: here is what data I collect when you book a tour, why I need it, where it is stored, and what your rights are.

Data controller: Aleksei (Lex) Shatilov — MTB Tour Garda, Riva del Garda (TN), Italy · P.IVA 02837030226 · Email: info@mtb-tour.it · WhatsApp/Phone: +39 388 571 8535

What data I collect and why

Booking data. When you send a booking request (via the website form, WhatsApp or email) I receive: your name, email address, the tour and date, the number of riders, children's ages if provided, bike sizes, and any notes you add. I need this to check availability, arrange the tour and the bike rental, and stay in touch with you. Legal basis: performance of a contract (I cannot organise your tour without it).

Payment data. The €20 deposit is paid through a secure SumUp payment link. Your card details go directly to SumUp — I never see or store them. I only receive confirmation that the payment was made. SumUp processes your payment data under its own privacy policy.

Communication. If you contact me on WhatsApp or by email, our correspondence stays in those services under their own terms.

Where your data is stored

Your booking data is processed and stored in Google services (Google Workspace) and I additionally receive booking notifications through a private messaging channel and by email. All of these accounts are mine and access is restricted to me only. No data is shared with anyone else.

Photos and videos

During tours I often film the ride on an action camera and share the footage with you — it is part of the experience. I do not publish photos or videos of you in my marketing (website, social media) without your permission. If I would like to use a clip that shows you, I ask you first — publication happens only with your consent, which you are free to refuse or withdraw at any time.

Cookies and analytics

The website uses only technical cookies necessary for it to work, and privacy-friendly aggregate visit statistics that do not track or profile you. No advertising trackers, no marketing cookies — which is why you see no cookie banner.

How long I keep your data

Booking requests that are not confirmed are deleted within 12 months. Confirmed booking data is kept for up to 24 months after the tour, then deleted.

No marketing

I do not run newsletters or send marketing emails. You will only hear from me about your own booking.

Your rights

Under the GDPR you can at any time ask me: what data of yours I hold, to correct it, to delete it (where no legal retention duty applies), to restrict or object to its processing, or to receive it in a portable format. Just write to info@mtb-tour.it — I answer personally. If you believe your data is mishandled, you can also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, https://www.garanteprivacy.it).

*Last updated: July 2026.*