Data protection

for the Application to Participate in the Brand Ambassador Program

I have been informed that Bike Mobility Services GmbH and its affiliated companies within the meaning of § 15 AktG (hereinafter collectively referred to as “BMS”) are looking for brand ambassadors¹ who, after successful application, will participate in various events including training sessions, bike fitting, and the ADAC Cyclassics 2025, and share their experiences on social media platforms such as Instagram, LinkedIn, and possibly Strava. This is intended to promote public awareness of the Lease a Bike brand as well as of BMS.

By ticking the appropriate checkbox as part of my application, I give my consent to the data processing described below in connection with my application for the brand ambassador program:

The data controller is Bike Mobility Services GmbH, Mühlenstraße 28, 49661 Cloppenburg, Germany. I can contact the data protection officer at: [email protected].

As part of the application process for the brand ambassador program, BMS processes the following categories of personal data:

• Contact details (first and last name, address, email address, telephone number)

• Year of birth and gender

• Employment data (employer, job title and position, location of employer)

• Application data for the brand ambassador program (e.g. application details, responses to the questionnaire)

• Sports-related data (especially experience with cycling and cycling events)

• Images (particularly photos and, where applicable, an application video provided by me)

• Social media data (primarily profile names on Instagram, LinkedIn, and, if applicable, Strava)

If I submit a video or an additional written statement, this may contain or imply further information—particularly sensitive data categories (e.g. ethnic origin, religious beliefs, or health status). In such cases, this information may also be processed. However, it is not the intention of BMS to deliberately collect such sensitive data, and they will not be used in the selection process.

(All the above-mentioned categories are hereinafter collectively referred to as the “application data”.)

My application data will be handled in compliance with data protection regulations and used solely for the purpose of conducting the selection process, in particular to verify whether I meet the requirements to participate in the brand ambassador program.

The legal basis for data processing is my consent.

My application data will not be transferred for purposes other than those listed above. This includes, in particular, disclosure to companies affiliated with BMS and to service providers acting on behalf of BMS in connection with the brand ambassador program, insofar as this is necessary for carrying out the selection process. Disclosure may also occur, if necessary, to our tax or legal advisors. In the event that application data is transferred to a third country, BMS will ensure appropriate safeguards in accordance with applicable data protection laws.

I agree to the processing of my application data as described above. I understand that my consent is voluntary and may be refused without giving reasons and without facing any disadvantages. However, I am also aware that without consenting to data processing, I cannot be considered for the brand ambassador program.

Application data will generally be stored for the duration of the application process and for a retention period of ten (10) weeks thereafter, and then deleted unless BMS is legally required or entitled to store it for a longer period. Beyond this, my consent remains valid until I withdraw it. I may revoke my consent at any time in writing or by email to [email protected], without providing reasons. The revocation will apply with future effect and does not affect the legality of any data processing carried out before the revocation. In the event of a revocation, my application data will be deleted unless legal or contractual obligations prevent deletion.

I am also aware that no automated decision-making, including profiling, will take place.

Furthermore, I have been informed about my data subject rights: I have the right to access the personal data that BMS stores about me (Art. 15 GDPR), and, where applicable, the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). I also have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR if I believe that my personal data is being processed unlawfully. The competent supervisory authority for Bike Mobility Services GmbH is: “Die Landesbeauftragte für den Datenschutz Niedersachsen” (The State Commissioner for Data Protection of Lower Saxony).

Last updated: February 2025

¹ For ease of reading, the generic masculine form is used in this document. All gender identities are equally intended.