Privacy notice

Last updated 16 October 2026.

Who is responsible

The data controller is AdventureLab S.r.l., via Giulio Braga 98, 59100 Prato (PO), Italy, VAT no. 02410590976, certified email adventurelab@pec.it. For anything about your personal data write to collab@bikeadventureseries.com, the mailbox we read every day for all our work with destinations and brands.

What you give us with your application, and why

There is no account to create and nothing to buy on this site. The only form is the application, on the destinations page and on the brands page. It asks for your name, work email, organisation and role, and then for what we need to prepare the first call, that is the territory, the goal, the sector, the markets, the indicative budget and what success would look like for you. We also record the language and the page you wrote from.

We use this data to assess the partnership, reply to you and prepare the call. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). To send the application we ask you to confirm that you have read this notice.

Your application goes to two places. A copy reaches the collab@bikeadventureseries.com mailbox as an email, with your address set as the reply-to. Your contact is saved in Brevo, in a list kept only for AdventureLab applications, together with the type of application, your organisation, the language and the date.

Updates, only if you ask

If you tick the updates box we write to you now and then about AdventureLab projects, events and results. The legal basis is your consent (Art. 6(1)(a) GDPR). Every email carries an unsubscribe link, and you can also write to us. Withdrawing your consent takes effect from that moment and does not affect what was lawful before. If you leave the box unticked you receive no such emails.

Booking the call

After you send the application a calendar appears so you can pick a day for the call. It is a Google Calendar page (Google Ireland Limited) shown inside our site, and it loads only after you have sent the application. What you enter there to book reaches us as an appointment, and Google processes it under its own privacy policy (policies.google.com/privacy). When it loads, the Google page may set cookies on Google domains, as explained on the cookies page.

Who processes data on our behalf

Brevo (Sendinblue SAS, France) stores contacts and sends emails, with data kept inside the European Union.

Cloudflare, Inc. hosts the site, runs the service that receives applications and provides Turnstile, the check that protects the form from automated submissions. To do so it processes your IP address and some technical features of your browser, based on our legitimate interest in protecting the site (Art. 6(1)(f) GDPR).

Google (Google Ireland Limited) provides the mailbox and the calendar for calls.

All of them act as our data processors (Art. 28 GDPR). We do not sell or hand over your data to anyone, and we do not use it for automated decisions or profiling.

What is recorded automatically

Like any web server, the Cloudflare infrastructure records your IP address, the requested page, the time and your browser type, to deliver the pages and protect the site from abuse (legitimate interest, Art. 6(1)(f) GDPR). The application service does not write your email into its own logs, and those logs delete themselves after a few days. The site uses no analytics, advertising pixels or profiling.

Transfers outside the European Union

Cloudflare and Google may process data outside the European Union, in particular in the United States. Transfers rely on the safeguards of Articles 44 and following of the GDPR, namely the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.

How long we keep it

Your application and your Brevo contact are kept as long as needed to assess and start the partnership. If the partnership does not go ahead, we delete them within 24 months of our last contact. Data for updates is kept until you unsubscribe. If a contract follows, the retention periods required by law for contractual and tax records apply.

Your rights

At any time you may ask us for access to your data, its rectification or erasure, restriction of processing and portability, and you may object to processing based on legitimate interest (Articles 15 to 22 GDPR). Write to collab@bikeadventureseries.com and we will reply within one month. If you believe your data has been mishandled you may lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of the country where you live.

Changes

If this notice changes we update the date at the top of the page. If a change affects processing based on your consent, we will ask for that consent again.