Book a test ride

Privacy Policy

Privacy Statement Veloretti

Scope

This Veloretti Privacy Statement applies to the collection, use and other forms of processing of personal data by Veloretti (“Veloretti B.V.”) in connection with our services, Veloretti branded products and this website.

Who is responsible for processing your personal data?

Veloretti B.V. (Moermanskkade 401, 1013 BE Amsterdam, the Netherlands) is the legal entity responsible for all collection and processing of your personal data in connection with Veloretti branded products, services and websites.

Veloretti B.V. is part of Pon Holdings B.V. and its affiliated companies (“Pon”). Veloretti B.V. and Pon are committed to respecting and protecting your privacy and safeguarding the personal data you share with us.

Why do we process your personal data?

Personal data is any information relating to an identified or identifiable natural person. If you choose to register your personal data, contact us or visit our websites, we process certain personal data about you. We process this personal data for the following purposes:

  1. to communicate with you in a personal manner or inform you about Veloretti branded products and/or services in accordance with your choices;

  2. to provide customer service, including services related to purchasing services and/or products, fulfilling warranty obligations and product recalls for our own services and those of affiliated companies, and handling complaints and requests for information;

  3. to process your purchase of Veloretti branded products, including financial and logistical handling;

  4. to manage your Veloretti account;

  5. to manage your participation in competitions, promotions, surveys or website features;

  6. to conduct market research and improve our business operations, services and Veloretti branded products, or to develop new business activities, services and products;

  7. to conduct statistical analyses and report on them;

  8. to provide services on the internet;

  9. to communicate with participants and provide a loyalty programme;

  10. to provide app functionalities, including sending relevant commercial messages;

  11. to communicate future promotional and marketing information to you, including for direct marketing and retargeting purposes;

  12. to aggregate and/or anonymise personal data to generate other data for our use;

  13. to comply with our legal obligations, resolve disputes and enforce our agreements;

  14. to protect the safety and health of individuals;

  15. to support the security of and access to Veloretti buildings and premises;

  16. to prevent burglary, theft and vandalism;

  17. to monitor property and information located in Veloretti buildings or on Veloretti premises;

  18. to record incidents;

  19. as otherwise indicated at or around the time the personal data is collected.

Which personal data do we process?

The exact data we process depends on which websites, products or services you use and how you use them. We process the following personal data.

Data you provide to us:

This is the data you enter yourself when you visit our websites or use our products or services. This data includes, for example, your name, address, place of residence, gender, email address, telephone number, age, date of birth, Veloretti products you have purchased, the account name and passwords you create, bank details for paying for Veloretti products, etc.

Data collected through sensors:

Many products are equipped with one or more sensors or use sensors on the devices on which the products operate. Examples of sensors include GPS receivers, Wi-Fi or Bluetooth receivers, cameras and touchscreens. In accordance with the purposes described above, data about you and the devices used that is collected through sensors is transmitted to Veloretti B.V. and other external parties that require the data in order to provide the agreed services to Veloretti B.V.

Metadata

This is data that is collected or automatically generated while you use Veloretti websites, products or services. Metadata is often collected or generated when you use a computing device or transmit data via a computer network such as the internet. This data includes information relating to your use of the user interface and other device activities, as well as IP addresses, unique device IDs, MAC addresses of Wi-Fi and Bluetooth devices, cookies and data relating to computer activity.

How do we process your personal data?

The table below sets out, for each type of processing, which personal data we process, the purposes for which we use it and the applicable legal basis:

Method of processing

Personal data processed

Purposes for using personal data

Legal basis

Newsletter subscription

First name and last name, address, telephone number and email address.

The purposes described above: 1, 2, 6, 7, 8, 11, 12, 13 and 19

Consent or legitimate interest

Contact form for our customer service

First name and last name, address, telephone number and email address.

The purposes described above: 1, 2, 6, 7, 8, 11, 12, 13 and 19

Performance of a contract or legitimate interest

Creating a Veloretti account

First name and last name, address, telephone number and email address.

The purposes described above: 1, 2, 4, 6, 7, 8, 9, 11, 12, 13 and 19

Consent, legitimate interest or performance of a contract

Registering a Veloretti branded product

First name and last name, address, telephone number and email address.

The purposes described above: 1, 2, 3, 6, 7, 8, 9, 11, 12, 13 and 19

Performance of a contract or legitimate interest

Purchasing Veloretti products via the website

First name and last name, address, telephone number and email address.

The purposes described above: 1, 2, 3, 6, 7, 8, 9, 11, 12, 13 and 19

Performance of a contract or legitimate interest

Participating in a promotion, event, competition or online forum

First name and last name, address, telephone number and email address.

The purposes described above: 1, 5, 6, 7, 8, 11, 12, 13 and 19

Consent or legitimate interest

Visiting our websites (cookies)

Metadata. Note: please refer to the Veloretti Cookie Policy for further details.

The purposes described above: 6, 7, 8, 11, 12, 13 and 19

Consent or legitimate interest

Use of a Veloretti Connected Product

The location history of your Veloretti product for the last 5 days

The purposes described above: 1, 2, 6, 7, 8, 10, 11, 12, 13 and 20

Consent or legitimate interest

Use of the Veloretti app: Geofencing

The location history of your Veloretti product for the last 5 days

The purposes described above: 1, 2, 6, 7, 8, 10, 11, 12, 13 and 20

Consent

Use of the Veloretti app: Ride tracking

The location history of your Veloretti product for the last 5 days

The purposes described above: 1, 2, 6, 7, 8, 10, 11, 12, 13 and 20

Consent

Logging into our websites via social media

Note: we never gain access to your account.

The purposes described above: 1, 6, 7, 8, 11, 12, 13 and 19

Consent or legitimate interest

Entering our buildings or premises

Images and video footage

The purposes described above: 14, 15, 16, 17, 18

Legitimate interest

Use of new technologies (e.g. algorithms and data analysis)

Data resulting from your interactions with and use of our services

The purposes described above: 7, 8, 11 and 13

Legitimate interest

Applying to lease a Veloretti bicycle through our lease partners

First name and last name, address, telephone number and email address.

The purposes described above: 1, 2, 3, 4, 5, 6, 7, 8, 11, 12, 13, 19 and 20

Performance of a contract or legitimate interest

Our legitimate interests include: marketing, advertising, security, crime prevention, IT management, research and analysis of our own products or services, business management, legal affairs and internal management.

Innovation and new technologies

Veloretti B.V. uses new technologies, such as algorithms and data analysis, to improve our services and make interactions more relevant. These technologies are used to support our employees and make our interactions with customers more personalised. The use of these tools always takes place in accordance with data protection legislation and ethical standards.

If you have given consent to the processing of your personal data, you have the right to withdraw that consent at any time by sending a request to privacy@veloretti.com.

How do we share or transfer your personal data?

You should be aware that Veloretti B.V. is part of a business group within Pon and that departments such as Marketing and IT may form part of Pon companies around the world. As a result, your personal data may be shared with and/or transferred worldwide to other companies within the business group or other Pon business units. You can consult the list and locations of our companies here: http://www.pon.com/nl-nl/our-business/bedrijven.

Veloretti B.V. may also share your personal data with external parties to perform certain activities on behalf of Veloretti B.V. and to facilitate services they provide to us. These may include providers of services such as website hosting, data analysis, payment processing, order fulfilment, information technology and related infrastructure services, customer service, email delivery, audits and other services.

Veloretti B.V. may also share your personal data with third parties so that they can send you marketing communications in accordance with your choices. Veloretti B.V. requires these external parties to process and protect your personal data carefully. Veloretti B.V. will not sell your personal data to third parties.

Veloretti B.V. or Pon may reorganise, merge or otherwise sell or dispose of all or part of a business to another company. If such a business is related to Veloretti, such a transfer of ownership may include the transfer of your personal data to the new owner and its advisers.

As part of Veloretti Bicycle Leasing, we share your personal data with the relevant leasing company. This is essential in order to initiate and properly manage this service. When you apply for a lease bicycle via our website or through a Veloretti partner, we exchange your data with the leasing company in order to process your application.

Conversely, the leasing company also shares relevant information with Veloretti. This may include, for example, confirmation that the lease quotation has been signed, so that we know we can deliver your new bicycle. We strictly require these external parties to treat the data they process on behalf of Veloretti with exactly the same level of care, confidentiality and security as we do ourselves.

We will only disclose your personal data if this is permitted or authorised by law, necessary to prevent or combat fraud, necessary for dispute resolution or necessary for any other legitimate need that, under the circumstances, outweighs your privacy interests, such as the security of our business and the safety of our staff.

How do we protect your personal data?

Veloretti B.V. will take appropriate technical and organisational security measures against the loss or unlawful processing of your personal data. This may include the use of secure registration forms, encryption of data and restricting access to your personal data.

Veloretti aims to store your data on servers within the EEA. In all cases, you can be assured that we take appropriate security measures to ensure the confidentiality and protection of your data. For transfers from the EEA to countries that are not considered adequate by the European Commission, we have implemented contractual agreements with third parties that have been approved by the European Commission.

How long do we retain your personal data?

We will retain personal data for as long as necessary or permitted within the context of the purposes described in this Privacy Statement and in accordance with applicable law.

The criteria used to determine our retention periods include:

  • the length of time we have an ongoing relationship with you and provide services to you, for example for as long as you have an account with us or continue to use our services;

  • whether there is a legal obligation with which we must comply, for example certain laws require us to retain records of our transactions for a certain period before we can delete them; or

  • whether retention is advisable in light of our legal position, such as with regard to limitation periods, disputes or investigations by regulatory authorities.

Cookies, web beacons and similar technologies

If you visit or use our websites, services, applications, communication services such as email, and tools, we may use cookies, web beacons and other similar technologies to store information in order to provide you with a better, faster and safer browsing experience.

Please refer to our Cookie Policy for an explanation of cookies, web beacons and similar technologies, how we use them and how you can control them.

Your rights

If you would like to review, correct, update, restrict or delete personal data that we process about you, object to the processing of personal data, or receive an electronic copy of your personal data in order to transfer it to another company, to the extent that this right to data portability is provided to you under applicable law, you can contact us via privacy@veloretti.com or at Moermanskkade 401, 1013 BE Amsterdam, the Netherlands.

We will respond to your request in accordance with applicable law.

Please describe as clearly as possible in your request which personal data your request relates to. For your security, we will only process requests relating to personal data associated with the specific email address you use to send us your request, and we may ask you to verify your identity before fulfilling your request.

We will endeavour to comply with your request as soon as reasonably practicable and, in any event, within the legally required time limits.

Contact, questions, feedback and Data Protection Officer

Please send any questions or comments about this Privacy Statement to privacy@veloretti.com.

Our Data Protection Officer (DPO) can also be contacted via the email address above. You have the right to lodge a complaint with a data protection authority in your country or region, or in the place where an alleged infringement of applicable privacy law occurs.

Policy changes

We may change this Privacy Statement from time to time. Changes to this Privacy Statement will take effect when we publish the revised statement. If necessary, we will inform you of changes to our Privacy Statement.

This Privacy Statement was last updated on: 27 August 2026.