Privacy Policy
Privacy Policy
Data Controller Overview
Confidentiality, transparency, and data integrity are core commitments of Top Fun, S.L.. We collect and process only the information strictly necessary to deliver our bicycles, components, and related services.
- Data Controller: TOP FUN, S.L. (hereinafter "TopFun", "We", or "Data Controller")
- Tax Identification Number (NIF/CIF): B59459800
- Registered Address: C/ Josep Pla, Nº 2, 08182 Sant Feliu de Codines, Barcelona, Spain
- Contact & Privacy Email: information@topfun.com
- Scope: Covers all data collected through www.finnacycles.com and affiliated online platforms.
1. Data Controller
The entity legally responsible for the processing of your personal data collected through this website is TOP FUN, S.L., with registered tax number B59459800 and principal place of business at C/ Josep Pla, Nº 2, 08182 Sant Feliu de Codines, Barcelona, Spain.
For any inquiries regarding data protection, you may reach our privacy desk via information@topfun.com.
2. Personal Data We Collect
Personal Data refers to any information relating to an identified or identifiable natural person. This includes directly identifying attributes (such as first and last name, email address, postal delivery address, and telephone number), as well as indirect technical identifiers (such as IP addresses, device signatures, and cookie analytics).
By interacting with our platform, you guarantee that all data provided is accurate, valid, and up to date. You assume sole responsibility for any direct or consequential damage caused to TopFun or third parties as a result of inaccurate, fictitious, or incomplete information submitted during registration or checkout. TopFun reserves the right to suspend or terminate services to any user suspected of submitting fraudulent or inaccurate identity details.
3. Processing Purposes, Legal Basis & Data Retention
Depending on the interaction channel used, TopFun processes specific categories of personal data under defined legal grounds and statutory retention schedules:
A. Contact Form
- Data Collected: Email address, name, message body.
- Purpose: Responding to inquiries, technical questions, and requests for bike specifications.
- Legal Basis: Your explicit consent when submitting the request.
- Retention: Until the query is resolved, unless an active commercial or contractual relationship ensues.
B. User Registration
- Data Collected: Full name, email address, date of birth, secure encrypted password.
- Purpose: Account management, order history tracking, warranty records, customer loyalty.
- Legal Basis: Execution of terms of use and legitimate business interest.
- Retention: Until you submit a formal account deletion request.
C. Social Login (Facebook / Third-Party)
- Data Collected: Public social profile information authorized by your platform privacy settings.
- Purpose: Streamlined authentication and account creation.
- Legal Basis: Your explicit consent during external authentication.
- Retention: Managed concurrently with your active platform account.
D. Orders & Checkout
- Data Collected: Full name, billing and shipping address, phone number, VAT/tax ID (if requested for invoices).
- Purpose: Purchase execution, product dispatch, delivery tracking, partner assembly routing, warranty management.
- Legal Basis: Execution of the sales contract and compliance with fiscal regulations.
- Retention: For the duration of the commercial relationship plus mandatory statutory tax limits (typically 5 to 6 years).
E. Payment Processing
- Data Handled: Cardholder name, tokenized payment details, transaction timestamps.
- Security: All transactions are executed via certified PCI-DSS SSL-encrypted gateways (PayPal, secure banking POS, Instant Credit). TopFun never stores raw credit card numbers or CCV codes on its servers.
- Legal Basis: Execution of the contractual sales transaction.
- Retention: Managed strictly by certified payment institutions under international banking laws.
F. Direct Messaging & Live Chat
- Data Collected: Communication content, provided contact coordinates.
- Purpose: Real-time customer service and pre-purchase support.
- Legal Basis: User consent and legitimate interest in providing pre-sales assistance.
- Retention: Concluded upon resolution of the dialogue session.
G. Telephone Support
- Data Collected: Voice recordings (where applicable), contact logs, service notes.
- Purpose: Service quality assurance, resolution of incident logs, order adjustments.
- Legal Basis: Consent granted at the beginning of the call.
- Retention: Maintained for the minimum period required to document the requested action.
H. Back-In-Stock Waiting Lists
- Data Collected: Email address, selected bike model/size/build.
- Purpose: Notifying you when a product is replenished in our inventory.
- Legal Basis: Explicit user request and consent.
- Retention: Purged once stock availability is notified or the item is discontinued.
I. Newsletter & Commercial Updates
- Data Collected: Email address, preferred language.
- Purpose: Sending product launches, ride event invitations (e.g., Sobretaula), and technical updates via electronic channels.
- Legal Basis: Explicit subscription consent or soft opt-in under relevant e-commerce regulations for related products.
- Retention: Until consent is withdrawn via the "Unsubscribe" link included in every mailing.
Age Requirement Notice
Submission of personal data requires a minimum age of 16 years (or the relevant age threshold of legal consent in your European member state). TopFun does not knowingly collect personal data from minors without parental or legal guardian consent.
4. Data Recipients & Third-Party Transfers
TopFun does not sell, rent, or trade your personal data. We disclose information solely to authorized entities essential for fulfilling contracts, providing technology, or meeting statutory legal mandates:
- Finna Partner Network: Certified workshops and bike shops designated by you at checkout for bike pickup, inspection, and assembly.
- Logistics & Courier Partners: Freight carriers responsible for physical package delivery and tracking.
- IT & Infrastructure Providers: Cloud hosting, database administration, web development, and platform management tools.
- Digital Operations: CRM tools, analytical services, and secure communication platforms.
- Public Authorities: Tax, legal, and judicial bodies where required by prevailing Spanish and European laws.
All data processors contracted by TopFun are bound by strict Data Processing Agreements (DPA) adhering to European GDPR standards.
5. Your Statutory Rights
Under GDPR and LOPDGDD regulations, you may exercise the following rights at any time without fee:
| Right of Access | Obtain confirmation as to whether your personal data is being processed and receive a copy of that data. |
|---|---|
| Right to Rectification | Request immediate correction of inaccurate, outdated, or incomplete records. |
| Right to Erasure ("To Be Forgotten") | Request deletion of your data when it is no longer necessary for the original purposes collected, unless fiscal obligations override. |
| Right to Restriction | Request the limitation of processing under disputed accuracy or unlawful processing claims. |
| Right to Data Portability | Receive your personal data in a structured, commonly used, machine-readable format for transfer to another provider. |
| Right to Object | Object to processing based on legitimate interest or direct marketing purposes at any time. |
| Revocation of Consent | Withdraw previously given consent at any moment without affecting the lawfulness of prior processing. |
How to Exercise Your Rights
Send a written notice stating your request with the subject line "Data Protection / Exercise of Rights", including your full name, email address used on the platform, and a copy of an official identification document (ID/Passport) to verify identity, to:
- By Email: information@topfun.com
- By Postal Mail: TOP FUN, S.L. – Data Protection Department, C/ Josep Pla, Nº 2, 08182 Sant Feliu de Codines, Barcelona, Spain
If you believe your rights have not been adequately satisfied, you hold the legal right to file a claim before the Spanish Data Protection Agency (AEPD) at www.aepd.es.
6. Security Measures
TopFun has adopted technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, destruction, misuse, or alteration. Communications between your browser and our platform are encrypted via Transport Layer Security (TLS/SSL). Internal administrative access is restricted exclusively to authorized personnel bound by nondisclosure agreements.
7. Privacy Inquiries
For questions or feedback regarding this Privacy Policy, please contact our data team at information@topfun.com.