Privacy policy
Last updated: September 2026
Protecting your personal data matters to us. This privacy policy explains what personal data we process when you visit our website, when you sign up for the KEEP·IT product test, and in any further communication. The German version is the legally binding one.
1. Controller
The controller for this data processing is:
Matthias Unger, Schubertstraße 6a, 8010 Graz, Austria
Phone: +43 664 3805404 · Email: hello@keepit.bike
2. Website hosting
Our website is served via Vercel. When you visit the site, technically necessary access data may be processed. This can include:
- IP address
- date and time of access
- page requested
- browser type and version
- operating system
- referrer URL
- technical information about the device used
This processing serves to provide the website securely, reliably and without errors. The legal basis is our legitimate interest in the secure and reliable operation of the website under Art. 6(1)(f) GDPR.
Provider: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA.
3. Domain management
Our domain is managed via INWX. Domain management does not, as a rule, give INWX access to the content you enter in our tester form. Technically necessary data may however be processed as part of providing and managing the domain.
Provider: INWX GmbH, Prinzessinnenstrasse 30, 10969 Berlin, Germany.
4. Signing up for the KEEP·IT product test
The form on this website lets interested people sign up for the KEEP·IT product test and for news about the sales launch. Through the form itself we only process:
- email address
- the language of the page you used (German or English)
- the campaign parameters of your visit (utm parameters, fbclid, landing page), where present
- the wording of the consent shown to you when you submitted the form
Later in the product test, and only where you provide them voluntarily, the following may additionally be processed:
- first and last name
- phone number
- town or postcode
- how often you cycle
- what you use your bike for
- the type of bike you mainly ride
- how you currently handle your bike light when parking
- experience with stolen bike lights
- willingness to test KEEP·IT regularly
- willingness to give feedback via WhatsApp
We use this information for the following purposes:
- selecting suitable testers
- getting in touch with interested people
- organising and running the product test
- communication during the test period
- collecting and evaluating product feedback
- analysing how the product is used
- further development of KEEP·IT
Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future — an email to hello@keepit.bike is enough. The lawfulness of processing carried out before withdrawal is unaffected.
Participation in the product test is open to people aged 18 and over only.
5. Form submission and contact management via HubSpot
The data you enter in the form is sent from our server to HubSpot and stored there as a contact. Your browser does not connect to HubSpot itself, and no HubSpot cookies are set for this purpose.
HubSpot processes the data on our behalf. This can include name, email address, contact details, communication history, information about emails sent and opened, and interactions with links they contain.
Provider: HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland. We have a data processing agreement with HubSpot; EU standard contractual clauses apply to transfers to the USA.
6. Processing in Google Workspace
Sign-ups and feedback we receive may be stored, organised and evaluated in Google Workspace, in particular using Google Sheets, Google Drive and Gmail.
The following data may be processed in Google Workspace:
- contact details
- form answers
- information about bicycle use
- internal notes on selecting testers
- feedback from the product test
- photos and videos
- email correspondence
Provider for users in the European Economic Area: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data on servers outside the European Union or the European Economic Area.
7. Contact and feedback via WhatsApp
Selected testers may be contacted via WhatsApp to organise, run and evaluate the product test. The following data may be processed via WhatsApp:
- phone number
- profile name
- profile picture, if any
- messages and responses
- photos, videos and voice messages
- date and time of the communication
- technical connection data
This communication serves in particular to organise the product test, arrange handover and return, answer questions, report technical problems and pass on feedback, photos and videos. The legal basis is your consent under Art. 6(1)(a) GDPR.
Provider for users in the European Economic Area: WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. WhatsApp may also process certain data outside the European Union or the European Economic Area.
Using WhatsApp is voluntary. Feedback can alternatively be sent by email to hello@keepit.bike by prior arrangement. We never ask for payment details, bank details, passwords or credentials via WhatsApp.
8. Photos and videos from the product test
Participants may voluntarily send photos and videos during the product test. Submitted content may be stored in Google Drive and used for the following purposes:
- technical evaluation of the product test
- analysis of mounting and use
- documenting problems
- checking how the light attaches to the bike
- evaluating different bikes and handlebar shapes
- product improvement and internal documentation
- further development of KEEP·IT
Photos or videos are only published on the website, on social media, in presentations, in advertising material or to third parties if separate, voluntary consent has been obtained. Participation in the product test must not be made conditional on agreeing to public use of photos or videos.
Consent given can be withdrawn at any time with effect for the future by emailing hello@keepit.bike. Material already published cannot always be fully retrieved from printed or already distributed materials. Future use will stop after withdrawal.
9. Email communication and news about the sales launch
We use your email address to communicate with you about the product test. Where you have expressly agreed, we may also use your email address to inform you about:
- KEEP·IT news
- further product tests
- product development
- sales launch and availability
- events and opportunities to try the product
Processing for information and marketing purposes is based on your consent under Art. 6(1)(a) GDPR. Consent is voluntary and can be withdrawn at any time with effect for the future — by email to hello@keepit.bike or via an unsubscribe link where one is included in the message.
We use HubSpot to send, organise and manage emails (see section 5). Gmail / Google Workspace may additionally be used for personal correspondence (see section 6).
10. No user accounts, no checkout
This website currently offers neither user accounts nor a checkout process. No payment or address data is collected. We also operate no database of our own for this website — sign-ups live solely in the systems named in sections 5 and 6.
11. Retention periods
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. For data collected during the product test the following periods currently apply:
- data of applicants who were not selected: up to 12 months after sign-up
- data of selected testers: up to 24 months after the product test ends
- feedback from the product test: up to 24 months after the product test ends
- photos and videos for internal product development: up to 24 months after the product test ends
- photos and videos released for publication: until consent is withdrawn or the content is no longer needed
- WhatsApp communication: up to 24 months after the product test ends
- email correspondence about the product test: up to 24 months after the product test ends
- data for news and information about the sales launch: until consent is withdrawn
Longer storage may occur where statutory retention obligations apply, where the data is needed to establish, exercise or defend legal claims, or where the data subject has expressly agreed to longer storage. Once the relevant period expires, data is deleted or anonymised unless another legal basis for storage applies.
12. Recipients of personal data
Depending on how you use our website and whether you take part in the product test, the following service providers may receive personal data:
- Vercel for hosting and cookieless traffic measurement
- INWX as domain provider
- HubSpot for form submission, contact management and email communication
- Google Workspace for storage, evaluation and communication
- WhatsApp for communication with testers
- Microsoft and Meta for analytics and marketing — only with your consent (see section 14)
Personal data is only passed on for other purposes where there is a legal obligation, where it is necessary to run the product test, where a legitimate interest exists, or where express consent has been given.
13. Transfers to third countries
Some of the service providers used may process personal data outside the European Union or the European Economic Area. This may apply in particular to Vercel, Google, WhatsApp, HubSpot, Microsoft and Meta.
Where necessary, such transfers take place on the basis of appropriate safeguards as required by the GDPR — in particular adequacy decisions, standard contractual clauses or other suitable protective measures.
15. Legal bases
Depending on the type of processing, we may process personal data on the following legal bases:
- consent under Art. 6(1)(a) GDPR
- pre-contractual measures or performance of a contract under Art. 6(1)(b) GDPR
- compliance with a legal obligation under Art. 6(1)(c) GDPR
- legitimate interest under Art. 6(1)(f) GDPR
Where processing is based on a legitimate interest, our interest lies in particular in the secure operation of the website, in improving our product and in efficient communication.
16. Withdrawing consent
You can withdraw consent at any time with effect for the future, in particular by emailing hello@keepit.bike. The lawfulness of processing carried out before withdrawal is unaffected.
17. Your rights
Subject to the statutory requirements, you have the following rights in particular:
- the right to access the personal data we hold about you
- the right to rectification of inaccurate or incomplete data
- the right to erasure
- the right to restriction of processing
- the right to data portability
- the right to object to certain processing
- the right to withdraw consent given
- the right to lodge a complaint with a supervisory authority
To exercise your rights, contact us any time at hello@keepit.bike.
18. Right to complain
You have the right to complain to a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law. In Austria the competent authority is:
Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria.
19. Data security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unauthorised alteration, unauthorised disclosure, misuse and destruction.
These can include access restrictions, secure passwords, encrypted connections, permission concepts and regular reviews of the systems in use.
20. Changes to this privacy policy
We may update this privacy policy when our website, the product test, the service providers used, our processing activities or the legal requirements change. The version published on this website applies.