Privacy Policy
Last updated: 22.09.2026
Ride Beyond ("we") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how Ride Beyond collects, uses, stores and, where necessary, shares personal data provided through the Ride Beyond website and, in particular, through forms used to request participation in our cycling experiences and trips.
This Privacy Policy is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.
⸻
1. DATA CONTROLLER
The Data Controller responsible for the processing of personal data collected through this website and its forms is:
MATTEO PATELLI
trading as Ride Beyond
Email: matteopatelli0@gmail.com
For any questions concerning the processing of personal data or for exercising your rights, you may contact the Data Controller using the contact details above.
⸻
2. PERSONAL DATA WE COLLECT
Depending on the service or experience requested, Ride Beyond may collect:
* first and last name;
* email address;
* telephone number;
* the tour, trip or experience you are interested in;
* information contained in messages or requests submitted through the website;
* any other information voluntarily provided by you in connection with your request.
Ride Beyond collects only data that is relevant and necessary for the purposes described in this Privacy Policy.
Please do not provide special categories of personal data, including health-related information, through website forms unless such information is specifically requested and necessary for a particular activity.
⸻
3. HOW WE COLLECT YOUR DATA
We may collect personal data when you:
* submit an “Apply to Join” form;
* send a request through the website;
* contact Ride Beyond by email or through other contact channels indicated on the website;
* express interest in or apply to participate in a cycling experience or trip;
* communicate with Ride Beyond in connection with the organisation of an experience.
⸻
4. PURPOSES OF PROCESSING
Your personal data may be processed for the following purposes.
A. Managing applications and requests
We use your personal data to:
* receive and manage applications and requests;
* contact you regarding your request;
* provide information about the requested experience;
* check availability and participation requirements;
* organise the requested experience;
* manage communications relating to your participation;
* take the necessary steps to enter into and perform any contractual relationship arising from your request.
Providing the information marked as required in the relevant form is necessary for Ride Beyond to process and respond to your request.
B. Administrative, contractual and organisational management of an experience
Where an experience requires the involvement of third parties responsible for contractual, administrative, insurance, organisational or other services necessary for the delivery of the experience, certain personal data may be shared with those parties to the extent necessary for them to perform their respective activities.
Such parties will process personal data according to their applicable role under data protection law and the relevant contractual arrangements.
Ride Beyond does not disclose personal data to third parties for their own independent marketing purposes without an appropriate legal basis and, where required, your specific consent.
C. Future Ride Beyond communications
Where you have provided specific consent, Ride Beyond may use your contact details to send communications concerning:
* new cycling tours;
* bikepacking trips;
* outdoor experiences;
* new destinations;
* Ride Beyond events and initiatives;
* registration openings and availability;
* other experiences and activities promoted by Ride Beyond.
Providing consent for these communications is voluntary. You may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
D. Communication and customer support
We may also process your personal data to respond to enquiries, provide assistance and maintain the communications necessary in connection with your requested activities.
⸻
5. LEGAL BASIS FOR PROCESSING
Depending on the specific purpose, the processing of personal data may be based on:
* the need to take steps at your request prior to entering into a contract and, where applicable, the performance of a contract;
* compliance with legal obligations applicable to the Data Controller;
* the legitimate interests of the Data Controller, where applicable and where such interests are not overridden by your rights and freedoms;
* your consent, where required by applicable law, in particular for direct marketing communications.
Where consent is required for marketing purposes, such consent is voluntary, specific and separate from other processing activities.
⸻
6. HOW WE PROCESS AND PROTECT YOUR DATA
Personal data may be processed using electronic systems and, where necessary, paper records.
⸻
7. RECIPIENTS OF PERSONAL DATA
Personal data may be processed by parties providing services necessary for the operation of the website, management of enquiries and organisation of experiences.
Depending on the specific circumstances, these may include:
* website hosting and IT service providers;
* website and form management providers;
* communication and email service providers;
* professional advisers and consultants;
* parties involved in the administrative, contractual or organisational management of an experience;
* service providers necessary for the delivery of activities requested by you.
Such parties will receive only the information necessary to perform their respective functions and, where required by applicable law, will be formally appointed as data processors or will act according to the appropriate legal role under applicable data protection legislation.
⸻
8. INTERNATIONAL DATA TRANSFERS
Personal data is primarily processed within the European Economic Area (“EEA”).
Where the use of certain service providers involves the transfer of personal data outside the EEA, such transfers will be carried out in accordance with the requirements and safeguards provided for by the GDPR.
⸻
9. DATA RETENTION
Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and, where applicable, for any additional period required to comply with legal obligations or to establish, exercise or defend legal claims.
Information relating to participation requests and experiences may be retained for the period necessary to manage the relationship and any related legal or administrative obligations.
Personal data processed for marketing purposes will be retained for as long as necessary for that purpose, subject to applicable legal requirements and your right to withdraw consent or object to such communications.
Once the applicable retention periods have expired, personal data will be deleted or anonymised unless further retention is required or permitted by law.
⸻
10. MARKETING AND WITHDRAWAL OF CONSENT
You may choose whether or not to receive marketing communications from Ride Beyond.
Where required by applicable law, marketing communications will only be sent where you have provided the appropriate consent.
You may withdraw your consent at any time by contacting:
[PRIVACY EMAIL ADDRESS]
or by using the unsubscribe mechanism provided in the relevant electronic communication, where available.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
⸻
11. YOUR RIGHTS
Subject to the conditions established by applicable law, you may have the right to:
* obtain confirmation as to whether or not your personal data is being processed;
* access your personal data;
* request the correction of inaccurate or incomplete personal data;
* request the deletion of your personal data;
* request restriction of processing;
* object to certain processing activities;
* receive your personal data in a structured, commonly used and machine-readable format, where applicable;
* withdraw consent at any time where processing is based on consent.
Requests concerning your personal data may be sent to:
[PRIVACY EMAIL ADDRESS]
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe that your personal data is being processed in violation of applicable data protection legislation.
⸻
12. CHANGES TO THIS PRIVACY POLICY
Ride Beyond may update this Privacy Policy from time to time to reflect changes in applicable legislation, our organisation or the services we provide.
The updated version will be published on this website together with the relevant “Last updated” date.
⸻
Last updated: 22.09.2026