This Privacy Policy explains how we process the personal data of customers using Rascal Rent Belgium, a children's bicycle rental service for consumers residing in Belgium, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Who is the controller of your personal data

The controller of your personal data is RASCAL BIKES s.r.o., Svatopetrská 35/7, 617 00 Brno, Czech Republic, Company ID No. 06675069, registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File No. 103606 (hereinafter referred to as “we” or “us”).

Contact for data protection matters: info@rascal.cz.

2. What personal data we process

We process the information you provide to us, including your first name and surname, residential address, email address, telephone number, information provided in the booking form (e.g. the selected bicycle model and preferred handover date), contract details, invoicing and payment information, and the content of our communications with you.

When handing over the bicycle, we verify your identity by inspecting an identity document. We do not record or retain identity document numbers or the Belgian national registration number (rijksregisternummer / numéro de registre national).

3. Why we process your data and the legal basis for doing so

Processing your booking and taking steps towards entering into a contract – Article 6(1)(b) GDPR (taking steps at your request prior to entering into a contract).

Performance of the rental agreement – handover and collection of the bicycle, servicing and communication with the customer – Article 6(1)(b) GDPR.

Invoicing and accounting – Article 6(1)(c) GDPR (compliance with our legal obligations).

Protection of our legal claims, debt recovery and dispute resolution – Article 6(1)(f) GDPR (our legitimate interests).

We only send you marketing communications with your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time.

4. Who we share your personal data with

We share your personal data with:

• our contact point in Belgium, which handles bicycle handovers and returns and routine customer communications on our behalf (a processor bound by a data processing agreement);

• IT service and tool providers (e.g. the operator of the booking form);

• accounting and tax service providers; and

• where necessary, carriers and legal representatives.

We process personal data within the European Union. If an IT service provider transfers data outside the European Economic Area, this will only take place on the basis of an adequacy decision of the European Commission or standard contractual clauses.

5. How long we retain your personal data

We retain your personal data for the duration of the rental agreement and thereafter for the applicable limitation periods for any potential contractual claims.

Accounting and tax records are retained for the period required by applicable legislation.

Personal data relating to a booking where no contract was subsequently entered into will be deleted no later than 12 months after the booking.

6. Your rights

You have the right to access your personal data, request its correction or erasure, request restriction of processing, request data portability, and object to processing based on our legitimate interests.

You may exercise your rights by email at info@rascal.cz. We will respond to your request no later than one month after receiving it.

You also have the right to lodge a complaint with a supervisory authority, including the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, www.autoriteprotectiondonnees.be, or the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

7. Other provisions

We do not use automated decision-making or profiling when processing your personal data.

Providing the information marked as mandatory in the booking form is a condition for entering into the rental agreement. Without this information, we cannot process your booking.

We may update this Privacy Policy from time to time. The current version will always be available on this page.

Effective from: 1 September 2026