Privacy policy
Last updated 4 September 2026 · VoltRider Mall B.V., Vierhavensstraat 56, 3029 BG Rotterdam · KvK 74829110
VoltRider Mall B.V. sells and services electric bikes and scooters. This policy sets out what we do with your personal data when you browse voltridermall.shop, buy something, book a test ride or bring a bike into the workshop.
1. Controller
VoltRider Mall B.V., Vierhavensstraat 56, 3029 BG Rotterdam, the Netherlands. Chamber of Commerce (KvK) number 74829110. Privacy contact: [email protected], telephone +31 10 322 7740.
2. Data we process
| Category | Examples | Kept for |
|---|---|---|
| Order data | Name, delivery address, e-mail, phone, order contents and value | 7 years (tax law) |
| Payment data | Payment method, status, last four digits of the card | 7 years |
| Workshop data | Frame and battery serial numbers, service history, battery health reports | Life of the vehicle + 2 years |
| Test-ride bookings | Name, phone, chosen slot, ID check note (no ID copy is stored) | 6 months |
| Financing applications | Passed to our credit partner; we retain only the approval status | 7 years |
| Website data | IP address, device and browser type, pages viewed (analytics only with consent) | 14 months |
3. Why we process it
- Contract (Art. 6(1)(b) GDPR) — taking payment, delivering, servicing, handling warranty claims and returns.
- Legal obligation (Art. 6(1)(c)) — invoicing and record-keeping under Dutch tax law, and product-safety traceability for battery recalls.
- Legitimate interest (Art. 6(1)(f)) — fraud prevention, securing the shop, recovering stolen vehicles when a customer files a report, and improving our products from aggregated service data.
- Consent (Art. 6(1)(a)) — the newsletter, and analytics or marketing cookies. Withdraw at any time.
4. Recipients
We share only what is necessary with: our payment provider (Mollie B.V., Amsterdam), carriers (DHL Parcel, PostNL and a specialist bike freight partner), our financing partner for credit applications you submit yourself, our accountant, our e-mail platform and our EU-based hosting provider. Battery serial numbers are shared with the cell manufacturer only in the event of a safety recall. We never sell personal data.
5. International transfers
All primary processing takes place inside the European Economic Area. Where a sub-processor operates outside it, the transfer is governed by the European Commission's Standard Contractual Clauses, and we assess each case for supplementary safeguards before allowing it.
6. Your rights
You may request access to your data, correction, erasure, restriction, portability, or object to processing based on our legitimate interest. Write to [email protected]; we respond within one month. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag) or to the authority where you live.
7. Security
TLS everywhere, hashed passwords, two-factor authentication on all staff accounts, encrypted backups and role-based access to workshop records. We run an annual penetration test on the checkout and publish a security contact at [email protected] for responsible disclosure.
8. Children
We do not knowingly sell to or collect data from anyone under 16. Test rides require an adult present.
9. Changes
Material changes are announced on this page 30 days before taking effect. The date at the top always shows the version in force.