Privacy Policy
Last updated: 29 July 2026
This Privacy Policy explains how AOI GmbH processes personal data when you visit AOI.CYCLE, create or use an account, contact us, purchase a product, request warranty support, or use related services. It does not apply to websites or services operated independently by third parties.
1. Controller
The controller responsible for processing your personal data is:
AOI GmbH
Immermannstraße 34
40210 Düsseldorf
Germany
Email: service@aoicycle.com
2. Principles and Legal Bases
We process personal data only when this is necessary for the relevant purpose and when a legal basis applies. Depending on the activity, this is performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR); compliance with legal obligations, including tax and accounting obligations (Article 6(1)(c) GDPR); our legitimate interests in operating a secure website, preventing misuse, handling support requests and defending legal claims (Article 6(1)(f) GDPR); or your consent, where required, including for non-essential analytics technologies (Article 6(1)(a) GDPR).
3. Visiting AOI.CYCLE
Data processed. When you access the website, your browser may transmit technical data including IP address, requested page, date and time of access, browser and operating-system information, referring URL, language settings and technical logs.
Purpose, legal basis and retention. We use this data to deliver the website, maintain its stability and security, investigate technical faults and prevent misuse. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. Technical logs are retained only for as long as necessary for those purposes and longer only where needed to investigate a security incident or meet a legal obligation.
4. Contact, Customer Service and Warranty
Data processed. If you contact us by email or form, or request warranty support, we process your name, email address, telephone number where provided, message, order or purchase information, correspondence, photographs and other information you choose to submit.
Purpose, legal basis and retention. We use this information to answer your enquiry, provide customer service, assess warranty matters and maintain the customer relationship. The legal basis is Article 6(1)(b) GDPR where the request relates to a contract, purchase or warranty, and Article 6(1)(f) GDPR for other enquiries and service improvement. We keep the information for as long as needed to resolve the matter and for any applicable warranty, limitation or legal-claims period.
5. Orders, Payment and Delivery
Data processed. When you place an order, we process your name, email address, company name if provided, billing and delivery address, country, postcode, city, telephone number, order notes, purchased items, VAT, delivery option, order history, payment method, payment reference and payment status.
Required information. Fields marked as required during checkout are necessary to process payment, deliver or arrange collection of your order, provide customer service and meet applicable invoicing obligations. If you do not provide this information, we may be unable to accept or fulfil your order. Company name and order notes are optional.
Payment. For direct bank transfer, we process the information necessary to match and confirm your payment. For debit and credit card payments, payment processing is provided through PayPal Commerce Platform. PayPal processes card information and relevant payment or fraud-prevention data under its own privacy notice; AOI GmbH does not store complete card details. See PayPal Privacy Statement.
Delivery and collection. We share the data necessary for delivery or collection with DHL, UPS and, where selected, the relevant authorised dealer. These recipients may receive your name, delivery or collection details, contact information and order information required to provide the service.
Legal basis and retention. Processing is necessary to perform the purchase contract under Article 6(1)(b) GDPR. Order, invoice, payment and related accounting records are generally retained for 8 years, or longer where required by law or necessary to establish, exercise or defend legal claims.
6. Account Data
Where an account is made available to you, we process the username or email address, password-related authentication information and account activity needed to provide and secure the account. The legal basis is Article 6(1)(b) GDPR. Account data is retained while the account remains active, then deleted or anonymised unless retention is necessary for an order, warranty, legal claim or statutory record-keeping obligation.
7. Service Providers and Other Recipients
We use carefully selected service providers that process data on our behalf where necessary to provide our website and services. These may include website-hosting, IT, security and professional-service providers. We disclose data to public authorities, advisers or other recipients only where required by law or necessary to protect our legal rights. Service providers acting on our behalf are contractually required to process personal data only for the agreed purpose and under our instructions.
8. International Transfers
Some providers may process or access personal data outside the European Economic Area, including in the United States. This can include providers used for analytics or website services, such as Google and Automattic / Jetpack. Where a transfer takes place, we use the safeguards required by applicable law, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, or standard contractual clauses with supplementary measures. Further information is available from the relevant provider: Google Privacy Policy and Automattic Privacy Policy.
9. Cookies and Analytics
We use essential cookies and similar technologies for functions that you request, including cart, checkout, login and security. These are necessary for the operation of the website.
Google Analytics and Jetpack / WordPress.com statistics may be used to understand website use and improve the service. These analytics technologies are not necessary for the purchase function and require prior consent where applicable. You may also manage cookies through your browser settings. Our cookie consent banner lets visitors accept or refuse non-essential analytics technologies and change or withdraw their choice at any time through “View preferences.”
Payment-related technology supplied by PayPal may be used during checkout to process payments and help prevent fraud.
10. No Newsletter or Marketing Automation
AOI.CYCLE does not currently operate an email newsletter or marketing-automation service through this website. If this changes, we will update this Privacy Policy and obtain consent where required.
11. Automated Decision-Making
AOI GmbH does not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Payment providers may carry out their own fraud-prevention, identity or risk checks under their own privacy notices.
12. Your Rights
Subject to applicable law, you have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting processing carried out before withdrawal.
To exercise your rights, contact us at service@aoicycle.com. We will respond within the period required by applicable law. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular the authority in your place of residence, workplace or place of the alleged infringement. The authority responsible for AOI GmbH is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
13. Third-Party Links and Changes
Our website contains links to third-party services, including social media. When you follow one of these links, the relevant provider is responsible for its own processing of personal data.
We may update this Privacy Policy when our services, processing activities or legal requirements change. The current version will always be published on this page with its last updated date.