Privacy Policy
Happy Wheels Bike Rental & GPS Tours A trading name of Inn Bruges · VAT: BE0688939629 Hotel Karel de Stoute, Bruges Last updated: May 2026
1. Who We Are
Happy Wheels is a trading name of Inn Bruges, a company registered in Belgium (VAT: BE0688939629), operating from Hotel Karel de Stoute, Bruges.
When this policy refers to "Happy Wheels", "we", "us", or "our", it means Inn Bruges acting as the data controller for your personal data.
For any privacy-related questions, you can contact us at: 📧 hello@happywheelsbrugge.be
2. What This Policy Covers
This policy explains:
- What personal data we collect about you
- Why we collect it and the legal basis for doing so
- How long we keep it
- Who we share it with
- Your rights under the General Data Protection Regulation (GDPR)
It applies to all personal data collected through our website (happywheelsbrugge.be), our booking system, and in person at the time of rental.
3. What Data We Collect and Why
3.1 Booking and rental data
What: Name, email address, phone number, rental dates, bike tier selected, and payment confirmation.
Why: To process your booking, confirm your reservation, and manage your rental.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR) — we need this information to provide the service you've booked.
Retention: Kept for 7 years in line with Belgian accounting and tax law obligations, then deleted.
3.2 Identity document photograph
What: A photograph of your passport or national identity card, taken at the time of bike collection.
Why: As a security measure to deter theft and assist in the recovery of rental equipment in the event of non-return. This photograph is not used for any other purpose.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — we have a legitimate interest in protecting our rental fleet from theft and fraud. We have assessed that this interest is not overridden by your rights, given that the data is retained for a strictly limited period, is not shared except in the specific circumstances described below, and that you are informed of this practice before collection.
Retention: Deleted within 7 days of the bike being returned in satisfactory condition. In the event of non-return, theft, or an unresolved dispute, the photograph may be retained for longer and shared with the Politie Brugge as part of a formal police investigation.
Important note: We store this photograph securely. It is not uploaded to any cloud marketing platform, used for identification purposes beyond the rental, or shared with any third party except as stated above.
3.3 Payment data
What: Payment is processed through our third-party payment provider. We do not store your full card number, CVV, or banking details.
Why: To collect payment for your rental.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR).
Retention: Payment records are retained for 7 years in line with Belgian tax law. Raw card data is handled and retained solely by our payment processor.
3.4 Website usage data (cookies and analytics)
What: When you visit our website, we use Google Analytics to collect anonymised data about how visitors use the site — including pages visited, time spent, device type, and approximate location (country/city level). This is collected via cookies.
Why: To understand how our website is used and to improve it.
Legal basis: Consent (Article 6(1)(a) GDPR) — you will be asked to accept or decline analytics cookies when you first visit the website. You can change your cookie preferences at any time via the cookie settings link in the footer.
Retention: Google Analytics data is retained for 14 months, after which it is automatically deleted. You can also opt out of Google Analytics tracking at any time using the Google Analytics Opt-out Browser Add-on.
4. Who We Share Your Data With
We do not sell your personal data. We share it only in the following circumstances:
| Recipient | Purpose | Location | |-----------|---------|----------| | Supabase | Our booking and reservation management system stores your booking data securely | EU (data stored in EU region) | | Our payment provider | Processes your card payment | EU | | Google Analytics | Website analytics (only if you consent to cookies) | USA (covered by Google's standard contractual clauses) | | Politie Brugge | Identity document photograph, only in the event of theft or non-return of a bike | Belgium |
All third-party processors with whom we share personal data are required to handle it in compliance with GDPR and are bound by data processing agreements.
5. International Data Transfers
Google Analytics may transfer data outside the European Economic Area (EEA) to the United States. Google LLC participates in the EU-US Data Privacy Framework and processes data under Standard Contractual Clauses approved by the European Commission. You can opt out of this by declining analytics cookies.
All other personal data is stored and processed within the EEA.
6. Your Rights
Under GDPR, you have the following rights regarding your personal data:
Right of access — You can request a copy of the personal data we hold about you.
Right to rectification — You can ask us to correct inaccurate or incomplete data.
Right to erasure — You can ask us to delete your data, subject to any legal obligation we have to retain it (e.g. tax records).
Right to restriction — You can ask us to restrict how we process your data while a concern is being resolved.
Right to object — You can object to processing based on legitimate interest (such as the identity document photograph). We will stop processing unless we can demonstrate compelling legitimate grounds that override your rights.
Right to withdraw consent — Where processing is based on consent (e.g. analytics cookies), you can withdraw consent at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint — If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit — GBA):
Gegevensbeschermingsautoriteit Drukpersstraat 35, 1000 Brussels 📧 contact@apd-gba.be 🌐 www.gegevensbeschermingsautoriteit.be
To exercise any of your rights, contact us at hello@happywheelsbrugge.be. We will respond within 30 days.
7. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Identity document photographs are stored on a secured device with restricted access and are deleted promptly once the rental period is concluded satisfactorily.
No method of electronic storage is 100% secure. If you have concerns about how we store your data, please contact us.
8. Children
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16 without verified parental or guardian consent.
9. Changes to This Policy
We may update this policy from time to time. The current version will always be published on our website with the date it was last updated. If changes materially affect how we handle your data, we will take reasonable steps to notify affected customers.
10. Contact
For any questions about this privacy policy or how we handle your personal data:
Happy Wheels (Inn Bruges) Hotel Karel de Stoute, Bruges 📧 hello@happywheelsbrugge.be