Privacy policy

01Who is responsible

The controller of the personal data collected on this website is BIKAP – Bike Assembly Portugal, Lda., Rua do Concelho 111, 3780-356 Avelãs de Caminho, Anadia, Portugal.

For any question about your personal data: geral@bikap.pt or +351 234 056 253.

02What data we collect and why

Applications (Join us)

When you apply, we collect what you write in the form — name, email, phone, town and postcode, driving licence and own vehicle, current situation and availability, the role you are applying for, experience in the bicycle industry, education and training, work experience and your presentation — and the CV you send (PDF or Word).

We use this data to assess your application for the role you applied for and to contact you about that recruitment. The legal basis is your request to be considered in a recruitment process (pre-contractual steps, Article 6(1)(b) GDPR).

If you also tick the optional box in the form, we keep your application for other openings that come up at BIKAP, for up to 12 months. The legal basis is your consent (Article 6(1)(a)), which you can withdraw at any time by writing to geral@bikap.pt.

We do not ask for identity documents, tax or social security numbers, date of birth, marital status or nationality. Please do not include health data or other sensitive data in your CV.

Client area

BIKAP clients sign in with the email and password BIKAP gave them, to follow their orders. The session is kept only in the browser and ends when the tab is closed or when signing out. The legal basis is the performance of the contract with the client (Article 6(1)(b)).

Contacts

When you contact us by email, by phone or through the contact form on this website, we use your name, company, contact details and message to reply to you. Messages sent through the form go directly to BIKAP's internal system; no email is sent. The legal basis is your request and our legitimate interest in replying (Article 6(1)(b) and (f)).

Technical data

As with any website, the server hosting it receives technical connection data (IP address, browser, date and time) so the site works and is protected from attacks (legitimate interest, Article 6(1)(f)). We do not run visitor statistics, advertising or profiling.

03Who can access the data

Applications and CVs are kept in BIKAP's internal system, which only Human Resources and the people in charge of recruitment can access. Messages sent through the contact form can only be seen by BIKAP's commercial team. We do not sell or pass personal data to third parties for commercial purposes.

We use service providers that process data on our behalf:

• Cloudflare, Inc. — hosting of this website, of BIKAP's internal system and of its files (including CVs);
• BIKAP's email provider — when you write to us by email.

These providers may process data outside the European Union, including in the United States. In those cases the transfer relies on the safeguards provided for in the GDPR (such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses).

Data is only disclosed to authorities when the law requires it.

04How long we keep the data

• Applications and CVs: up to 12 months after we receive them; at the end of that period they are deleted automatically, together with the CV. If you did not agree to be considered for other openings, Human Resources delete your application when the recruitment you applied for ends. You can ask at any time for your application to be deleted.
• Messages sent through the contact form: up to 12 months after we receive them, after which they are deleted automatically. When a message leads to a business relationship (a quote or an order, for example), what belongs to that relationship is kept for as long as the law requires.
• Client area: while the client's access is active.
• Contacts by email or phone: as long as needed to deal with the matter and to meet BIKAP's legal obligations.
• Technical data: the short period the hosting needs for security.

05Your rights

You can at any time ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a commonly used format (portability). Where processing is based on consent, you can withdraw it at any time, without affecting what was done before.

To do so, write to geral@bikap.pt or to BIKAP's address. We reply within one month.

If you believe your data is not being handled according to the law, you can lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (www.cnpd.pt).

06Cookies and external links

This website does not use statistics, advertising or tracking cookies. The client area keeps the session in the browser's storage only while the tab is open. The hosting service may use strictly technical security cookies.

The website's typeface is served from our own files: visiting the site makes no request to Google. The links to Google Maps, LinkedIn, Facebook and the Complaints Book open those websites, which have their own privacy policies.

The News page shows headlines from public news sources about the sector; it collects no data about who visits it. Opening a headline takes you to that source's website, which has its own privacy policy.

07Security

The website only works over an encrypted connection (HTTPS) and uses security headers that, among other things, prevent it from being embedded in other websites. Applications, CVs and contact form messages are not reachable from the internet: they are delivered directly to BIKAP's internal system, with access by user and password and permissions by area.

08Changes to this policy

We may update this policy when we change how we handle data. The current version is always on this page, with the date of the last update.