Privacy Policy

Moustache Bikes

Last updated: February 2026

Preamble

The personal data you entrust to us when you visit our website is processed in accordance with the French Data Protection Act of January 6, 1978, as amended, and the General Data Protection Regulation (hereinafter "GDPR") of April 27, 2016.

Moustache Bikes, mindful of personal data protection, has implemented the necessary measures to ensure the respect of its users' privacy. In a spirit of transparency, we present our privacy policy, aiming to inform you of the conditions under which we collect and process your personal data when you browse our site.

Moustache Bikes endeavors to collect only the strictly necessary personal data to ensure the quality of its services, particularly the proper application of the manufacturer's warranty.

Please note that this privacy policy may be modified or supplemented at any time by Moustache Bikes, particularly to comply with any legislative, regulatory, jurisprudential, or technological developments. In such a case, the date of its update will be clearly identified at the top of this policy. These modifications are binding on the user upon their online publication. Users should therefore regularly consult this privacy policy to be aware of any changes.

Identity and contact details of the data controller

The data controller for your data is the company Moustache Bikes / SAS CYCLE ME, with its registered office at Zone INOVA, 5 Allée 2 – 5, Rue du Ruisseau – 88150 Thaon-les-Vosges, France, whose legal representative is Olivier CANTET in his capacity as Director.

For any questions regarding the management of your personal data or the exercise of your rights, you can contact us by email at the following address: contact@moustachebikes.com

Purposes and legal bases of processing

Moustache Bikes implements various personal data processing activities based on the following legal grounds:

3.1. Based on your consent (Art. 6.1.a of the GDPR):

• Newsletter management: sending newsletters about our products, services, and news
• Management of cookies subject to your consent: audience measurement cookies, social network cookies, and third-party cookies requiring your prior consent

3.2. Based on our legitimate interest (Art. 6.1.f of the GDPR)

• Website administration and security management: our legitimate interest being to ensure the security and functionality of our website
• Improvement of our products and services:
• Strictly necessary cookies: cookies strictly placed for the provision of a service, and those that enable or facilitate electronic communication

3.3. Based on the legal ground of contract performance and/or pre-contractual measures (Art. 6.1.b of the GDPR):

• Warranty request management: registration of your bicycle and processing of manufacturer warranty claims
• Creation and management of your user account
• Locating bikes to try near you: connecting with our partner dealers for bike tests
• Application of the general terms of use (GTU): compliance with the website's terms of use
• Application of the general terms and conditions of sale (GTC): execution of sales and orders, where applicable

3.4. Based on a legal obligation (Art. 6.1.c of the GDPR)

• Accounting and tax obligations: management of legal warranties applicable to sold products

Categories of personal data processed

“Personal data” is understood according to the definition given in Article 4 of the GDPR. It refers to any information concerning an identifiable natural person or one who can be specifically identified.

4.1. Identification data collected via our forms:

• Identity data
• Your bike model, serial number, and purchase date

4.2. Technical data

Connecting to our site automatically implies the collection of the following data:

• IP address
• Timestamps
• Technical data related to the equipment and browser used
• Data related to website browsing (pages visited, duration of visit)
• Data necessary for account creation and platform use

Recipients of your data

The personal data you provide to us is transmitted only to the following recipients:

5.1. Internal recipients:

• Strictly authorized personnel from Moustache Bikes' internal departments

5.2. Subcontractors and service providers:

Moustache Bikes uses authorized service providers to facilitate the collection and processing of the data you have provided to us. These providers process data on behalf of and for Moustache Bikes:

Service Provider Service Location

BREVO (EIFFEL 65 group) Newsletter sending France (Vitry-sur-Seine)

106 BD HAUSSMANN Cloud: Belgium (Google Cloud)

75008 PARIS

Google Analytics Audience analysis United States

Google LLC for the website

Vimeo LLC Video hosting United States

555 West 18th Street, New York

Meta Share buttons United States

X corp Share buttons United States

Data retention period

Moustache Bikes commits to retaining your personal data only for a period that does not exceed the time necessary to pursue and achieve the purposes for which this data was collected.

Purpose Retention period

Contact request management 3 years from the last contact

Newsletter sending management Until unsubscription or 3 years of inactivity

Warranty request management 60 months (5 years) from bicycle registration, corresponding to the warranty period for bicycle frames

User account creation and management Until account deletion or 3 years of inactivity

Locating bikes to try 3 years from the request

Website administration and security 12 months maximum for connection logs

Audience measurement cookies 13 months maximum

Accounting and tax obligations 10 years in accordance with legal obligations

At the end of these periods, your data is deleted or anonymized in such a way that it can no longer identify you.

Data transfers

7.1. Transfers within the European Union

Moustache Bikes uses service providers located in France and the European Union, notably BREVO for sending newsletters, whose servers are located in France and Belgium.

7.2. Data transfers outside the European Union

Some of our service providers may transfer your data to countries outside the European Union, particularly to the United States.

In this case, Moustache Bikes ensures that the data transfer is governed by appropriate guarantees compliant with the GDPR:

Service Provider Country Guarantees implemented

Google LLC United States Data Privacy Framework

Vimeo LLC United States Data Privacy Framework

Meta United States Data Privacy Framework

X Corp United States Data Privacy Framework

Woopra analytics United States Data Privacy Framework

Heap analytics United States Data Privacy Framework

Hotjar United States Data Privacy Framework

Exercise of your rights

In accordance with current legislation and regulations, you have the following rights, as applicable:

• The right to access your data at any time (Article 15 of the GDPR)
• The right to rectify, update, or complete your data (Article 16 of the GDPR)
• The right to demand the erasure of your data (Article 17 of the GDPR)
• The right to withdraw your consent at any time (Article 13-2 c of the GDPR)
• The right to restrict the processing of your data (Article 18 of the GDPR)
• The right to object to the processing of your data (Article 21 of the GDPR)
• The right to data portability, when your data is subject to automated processing (Article 20 of the GDPR)

To exercise these rights, you can contact us:

• By electronic means: contact@moustachebikes.com
• By postal mail:

Moustache Bikes / SAS CYCLE ME

Attention: Data Protection Department

Zone INOVA, 5 Allée 2 – 5, Rue du Ruisseau

88150 Thaon-les-Vosges

France

To assist you in your efforts, you can consult the letter templates developed by the French National Commission for Information Technology and Civil Liberties (CNIL):

• Template for exercising your right of access: https://www.cnil.fr/fr/modele/courrier/exercer-son-droit-dacces
• Template for deleting information: https://www.cnil.fr/fr/modele/courrier/supprimer-des-informations-vous-concernant-dun-site-internet

Right to lodge a complaint with the supervisory authority

If you believe that Moustache Bikes does not comply with its obligations regarding your personal data, you can lodge a complaint or make a request with the competent authority.

In France, the competent authority is the French National Commission for Information Technology and Civil Liberties (CNIL), to whom you can address a request:

• By electronic means: https://www.cnil.fr/fr/plaintes
• By postal mail :

CNIL

3 Place de Fontenoy

TSA 80715

75334 PARIS CEDEX 07

Contact

For any questions regarding this privacy policy or to exercise your rights, you can contact us:

Moustache Bikes / SAS CYCLE ME Zone INOVA, 5 Allée 2 – 5, Rue du Ruisseau 88150 Thaon-les-Vosges France

Email: contact@moustachebikes.com

Website: www.moustachebikes.com

Previous Version – Last updated: 23/03/2023

Preamble:

The General Data Protection Regulation (GDPR) came into force in May 2018 within the European Union. It aims to protect the personal data of individuals within the EU.

Moustache Bikes, mindful of personal data protection, has implemented the necessary measures to ensure the respect of its users' privacy. Furthermore, Moustache Bikes endeavors to collect only the strictly necessary personal data to ensure the quality of its services, particularly the proper application of the manufacturer's warranty.

This privacy policy defines and informs you of how Moustache Bikes (SAS CYCLE ME) uses and protects the information you transmit to us, where applicable, when you use this site accessible from the following URL: www.moustachebikes.com (hereinafter the “Site”).

Please note that this privacy policy may be modified or supplemented at any time by Moustache Bikes, particularly to comply with any legislative, regulatory, jurisprudential, or technological developments. In such a case, the date of its update will be clearly identified at the top of this policy. These modifications are binding on the User upon their online publication. Users should therefore regularly consult this privacy and cookie policy to be aware of any changes.

PERSONAL DATA

Generally, you can visit the Moustache Bikes Site without providing any personal information about yourself. In any event, you are in no way obliged to transmit this information to Moustache Bikes. Nevertheless, in case of refusal, you may not be able to benefit from certain information or services you have requested.

In this regard, Moustache Bikes may in some cases ask you to provide (hereinafter your “Personal Information”):

• name and surname
• email address
• postal address
• phone number
• contact details of your bike shop
• your bike model, serial number, and purchase date

By providing this information, you expressly accept that it will be processed by Moustache Bikes, for the purposes indicated in point 2 below as well as for the purposes recalled at the end of each form.

In accordance with the General Data Protection Regulation adopted by the European Parliament on April 14, 2016, and the amended French Data Protection Act of January 6, 1978, Moustache Bikes informs you of the following points:

1 - Identity of the data controller

The data controller is the company Moustache Bikes / SAS CYCLE ME, with its registered office at Zone INOVA, 5 Allée 2 – 5, Rue du Ruisseau – 88150 Thaon-les-Vosges, France, whose legal representative is Olivier CANTET in his capacity as Director.

2 – Purposes of processing

Moustache Bikes may process your Personal Information:

(a) to provide you with the information or services you have requested (including: sending the Newsletter); and/or

(b) to manage your warranty requests following the registration of your bicycle on our website; and/or

(c) to collect information allowing us to improve our Site, products, and services (particularly through cookies)

(d) for locating bikes to try near you

(e) for the creation and management of your user account

3- Recipients

Only Moustache Bikes is the recipient of your Personal Information. This information, whether in individual or aggregated form, is never transmitted to a third party, notwithstanding the subcontractors Moustache Bikes uses (you will find more information about them in point 7 below). Neither Moustache Bikes, nor any of its subcontractors, commercializes the personal data of visitors and Users of its Site.

4 – Retention period

Your Personal Information is retained by Moustache Bikes only for the time corresponding to the purpose of collection as indicated in point 2 above, which in no case shall exceed 60 months, i.e., the warranty period for our bicycle frames.

5 – IT and Freedom Rights

You have the following rights concerning your Personal Information, which you can exercise by writing to us at the email address contact@moustachebikes.com with the subject line: « My personal data ».

> Right of access and communication of data

You have the ability to access the Personal Information concerning you.

Any access request should be sent to us by email at contact[a]moustachebikes.com with the subject line: « My personal data »

However, due to Moustache Bikes' obligation of security and confidentiality in the processing of personal data, you are informed that your request will be processed provided that you provide proof of your identity, particularly by producing a scan of your valid identity document (in case of a request via our dedicated electronic form) or a signed photocopy of your valid identity document (in case of a request sent by mail).

Moustache Bikes informs you that it will be entitled, where applicable, to oppose manifestly abusive requests (due to their number, repetitive or systematic nature).

To assist you in your efforts, particularly if you wish to exercise your right of access through a written request to the postal address mentioned in point 1, you will find below a letter template developed by the French National Commission for Information Technology and Civil Liberties (the "CNIL").

https://www.cnil.fr/fr/modele/courrier/exercer-son-droit-dacces

> Right to rectification of data

Under this right, legislation authorizes you to request the rectification, update, locking, or erasure of data concerning you that may prove to be inaccurate, erroneous, incomplete, or obsolete.

Any access request should be sent to us by email at contact[a]moustachebikes.com with the subject line: « My personal data »

> Right to object

The exercise of this right is only possible in one of the following two situations:

• When the exercise of this right is based on legitimate grounds; or
• When the exercise of this right aims to prevent the collected data from being used for commercial prospecting purposes.

To assist you in your efforts, particularly if you wish to exercise your right to object through a written request sent to the email address indicated in point 1, you will find a letter template developed by the CNIL by clicking on the following link.

https://www.cnil.fr/fr/modele/courrier/supprimer-des-informations-vous-concernant-dun-site-internet

6 – Response times

Moustache Bikes commits to responding to your request for access, rectification, or opposition, or any other additional request for information within a reasonable period not exceeding 1 month from the receipt of your request.

7 – Authorized service providers and transfer to a third country outside the European Union

Moustache Bikes informs you that it uses its authorized service providers to facilitate the collection and processing of the data you have provided to us. These providers may be located outside the European Union and communicate data collected through the various forms on the Site.

Messages are sent via the BREVO service of the EIFFEL 65 group, 106 BD HAUSSMANN 75008 PARIS 8, FRANCE. Your email address, first and last name, as well as other optional data you have provided, are registered on their own Online servers in Vitry-sur-Seine, Ile-de-France, FRANCE. Data stored in the Cloud is on Google Cloud in Belgium. All data is replicated three times in at least two different geographical zones. BREVO uses this information on our behalf for sending and evaluating newsletters.

As part of website analysis, we use Google Analytics, an online analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In this context, Google uses servers located in the USA.

The EU Commission has certified in an adequacy decision, the EU-US Privacy Shield, that the level of data protection in the aforementioned countries is identical to that of the EU.

Moustache Bikes has previously ensured that its service providers implement adequate guarantees and comply with strict conditions regarding confidentiality, use, and data protection. Particular attention has been paid to the existence of a legal basis for any data transfer to a third country. As such, one of our providers is subject to internal corporate rules (or "Binding Corporate Rules") approved by the CNIL in 2016, while others comply not only with Standard Contractual Clauses but also with the Privacy Shield.

8 – Complaint to the competent authority

If you believe that Moustache Bikes does not comply with its obligations regarding your Personal Information, you can lodge a complaint or make a request with the competent authority. In France, the competent authority is the CNIL, to whom you can address a request electronically by clicking on the following link:

https://www.cnil.fr/fr/plaintes/internet

9 – Cookie Policy

When you first connect to the Moustache Bikes website, a banner at the bottom of your screen informs you that information relating to your browsing may be recorded in files called “cookies”. Our cookie usage policy allows you to better understand the provisions we implement regarding browsing our website. It informs you in particular about all cookies present on our website, their purpose (Part I.), and provides you with the steps to configure them (Part II.).

> General information on cookies present on the Moustache Bikes website

Moustache Bikes, as the publisher of this website, may place a cookie on your device's hard drive (computer, tablet, mobile, etc.) to guarantee you smooth and optimal navigation on our website.

“Cookies” (or connection witnesses) are small, limited-size text files that allow us to recognize your computer, tablet, or mobile device to personalize the services we offer you.

The information collected through cookies does not in any way allow you to be personally identified. It is used exclusively for our own needs to improve the interactivity and performance of our website and to send you content tailored to your interests. None of this information is communicated to third parties unless Moustache Bikes has obtained your prior consent or when the disclosure of this information is required by law, by court order, or by any administrative or judicial authority authorized to know about it.

To better inform you about the information that cookies identify, you will find below a table listing the different types of cookies that may be used on the Moustache Bikes website, their name, their purpose, and their retention period.

> Configuring your cookie preferences

You can accept or refuse the deposit of cookies at any time

When you first connect to the Moustache Bikes website, a banner briefly presenting information about the placement of cookies and similar technologies appears at the bottom of your screen. This banner warns you that by continuing to browse the Moustache Bikes website (by loading a new page or clicking on various elements of the site, for example), you accept the placement of cookies on your device. You are also deemed to have given your consent to the placement of cookies by clicking on the "X" icon to the right of the banner at the bottom of your screen.

Depending on the type of cookie concerned, obtaining your consent for the storage and reading of cookies on your device may be imperative.

Cookies exempt from consent

In accordance with the recommendations of the French National Commission for Information Technology and Civil Liberties (CNIL), certain cookies are exempt from requiring your prior consent insofar as they are strictly necessary for the functioning of the website or have the exclusive purpose of enabling or facilitating electronic communication. These include session ID cookies, authentication cookies, load balancing session cookies, as well as interface personalization cookies. These cookies are fully subject to this policy insofar as they are issued and managed by Moustache Bikes.

Cookies requiring your prior consent

This requirement concerns cookies issued by third parties that are qualified as "persistent" insofar as they remain on your device until their deletion or expiration date.

As such cookies are issued by third parties, their use and placement are subject to their own privacy policies, for which you will find a link below. This cookie family includes audience measurement cookies (notably Google Analytics), advertising cookies (which Moustache Bikes does not use), as well as social media sharing cookies (notably from Facebook, YouTube, Twitter, and LinkedIn).

Audience measurement cookies establish statistics regarding the frequency and use of various elements of the website (such as the content/pages you have visited). This data contributes to improving the usability of the Moustache Bikes website. An audience measurement tool is used on this website:

> GOOGLE ANALYTICS

Google Analytics is an offering from Google Ireland Limited, an Irish company with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. The company may place cookies on your device. With the help of these cookies, Google can analyze the use of our website. In this way, Google obtains personal data, such as the IP address.

The transfer of personal data outside the EU, to Google's servers in the United States, is governed by the Privacy Shield or data protection shield, to which Google is a member. For more information on data protection management and Google's settings options, visit https://policies.google.com/privacy.

> GOOGLE FONT

To ensure an attractive display of our services, we use "Google Fonts," which integrates selected fonts into our website. Google Fonts is an offering from Google Ireland Limited, an Irish company with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. The transfer of personal data outside the EU, to Google's servers in the United States, is governed by the Privacy Shield or data protection shield, to which Google is a member. For more information on data protection management and Google's settings options, consult their privacy rules https://policies.google.com/privacy.

> Facebook & Twitter share button

To allow you to share content from our site with other people, we integrate social network applications into our site that may collect personal data about you. We notably integrate the "share" button from the companies: Twitter and Facebook. A data transfer outside the EU to their servers located in the United States is possible. To learn more about the data processing methods operated by these providers, as well as your rights and settings for protecting your privacy, please consult their privacy policy:

https://www.facebook.com/policy.php

https://twitter.com/privacy

> VIMEO

We use plugins from the Vimeo video portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Viewing a page of our website with its plugin implies a direct connection to Vimeo's servers via your web browser. When you consult a page of our website containing such a plugin, your browser establishes a direct connection to Vimeo's servers. The content of the plugin (including your IP address) will be transmitted directly by your browser to a Vimeo server in the United States where it will then be stored.

For more information on Vimeo's privacy rules, please consult their privacy policy: https://vimeo.com/privacy

> Facebook, whose cookie policy you can consult by clicking on the following link: https://fr-fr.facebook.com/policies/cookies/

> Instagram, whose cookie policy you can consult by clicking on the following link: https://www.facebook.com/help/instagram/155833707900388/

> LinkedIn, whose cookie policy you will find by clicking on the following link: https://www.linkedin.com/legal/cookie-policy?_l=fr_FR

> YouTube, for which you will find the necessary help to delete cookies from the Google Chrome browser by clicking on the following link: https://support.google.com/youtube/answer/32050?hl=fr, but also the full cookie policy from the following link: https://www.google.fr/intl/fr/policies/technologies/cookies/

You have various cookie setting tools

Most internet browsers are configured by default to allow cookies to be stored. Your browser offers you the opportunity to modify these standard settings so that all cookies are systematically rejected or that only a part of the cookies is accepted or refused depending on their issuer.

WARNING: We draw your attention to the fact that refusing to deposit cookies on your device may nevertheless alter your user experience as well as your access to certain services or functionalities of this website. Where applicable, Moustache Bikes disclaims all responsibility for the consequences related to the degradation of your browsing conditions that occur due to your choice to refuse, delete, or block cookies necessary for the site's operation. These consequences cannot constitute damage, and you will not be able to claim any compensation for this.

Your browser also allows you to delete existing cookies on your device or to notify you when new cookies are likely to be placed on your device. These settings do not affect your browsing but cause you to lose all the benefits provided by the cookie.

Please find below the multiple tools available to you so that you can configure the cookies placed on your device.

Each Internet browser offers its own cookie management settings. To find out how to modify your cookie preferences, you will find below the links to the necessary help to access your browser's menu provided for this purpose:

Chrome : https://support.google.com/chrome/answer/95647?hl=en

Firefox : https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Internet Explorer : https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11

Opera : http://help.opera.com/Windows/10.20/en/cookies.html

Safari : https://support.apple.com/kb/PH21411?viewlocale=en_US&locale=en_US

For more information on cookie management tools, you can consult the CNIL website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.