Privacy Policy


This Privacy Statement governs the collection, use and other forms of processing of personal data by Bike Mobility Services GmbH (“BMS”) that operates its bike lease service with the Lease a Bike ("LaB") brand that uses the “Lease a Bike Platform” (“Platform”).

Who is responsible for processing your personal data?

BMS (Siemensstraße 1-3, 49661 Cloppenburg) is the legal entity responsible for all collection and all processing of your personal data in connection with the Platform.

BMS is part of Pon Holdings B.V. its affiliates and its subsidiaries (“Pon”). BMS and Pon are committed to respecting and safeguarding your privacy and the security of your personal data you share with us.

Why do we process your personal data?

Personal data is information that identifies you as an individual or relates to an identifiable individual. When you choose to register your personal data or contact us, we will process some personal data about you. We process these personal data for the following purposes:

  1. communicate with you in a personal way or to inform you via newsletters about Lease a Bike lease process;
  2. provide a lease offer at the end of the lease contract as well as an offer for a new bike or new lease that might be interesting for you
  3. provide customer service and to deal with any enquiries or complaints;
  4. administer and fulfill your bike lease including the financial and logistic handling;
  5. administer your Lease a Bike account;
  6. handle your lease process with your employer as Customer Company and the involved Leasing Company;
  7. perform statistical analyses and market research to improve our business, services and Lease a Bike products or to develop new business, services and products by A) using aggregated and/or anonymized personal data, e.g. to see if our bike dealer network is covering all relevant areas for a customer or B) sending out voluntary surveys to employers, employees or dealers;
  8. to comply with our legal obligations, resolve disputes, or enforce our agreements;

Which personal data and how do we process your data?

In the table below we describe per way of processing: the personal data and the purposes for which we process the personal data as well as the legal basis for the processing:

Ways of processing Personal data processed Purposes for processing the personal data Legal basis
Lease a Bike account creation Name, address, e-mail address and phone number. Possible: personnel number or department code The above described purposes: 1, 2, 3, 4, 5, 6, 7 and 8 Consent or performance of a contract
Visit the Platform Metadata (IP address, cookies) NB: please refer to our Cookie Policy Lease a Bike for further details on used cookies The above described purposes: 4, 6, 7 and 8 Performance of a contract or legitimate interest
Lease contract ending offer Address, phone number, In case of buying the bike: bank account number The above described purposes: 1, 2, 4 and 6 Performance of a contract, legitimate interest

Our legitimate interests related to the Platform only include: providing fonts, security, (crime) prevention, IT management, research and analysis of our products or services, legal affairs, internal management. Google Fonts is used for providing fonts but is hosted locally on the server so the IP addresses are not shared with Google.

You have the right to withdraw your consent which you may have given to the processing of your personal data at any time by sending your withdrawal request to

How do we share or transfer your personal data?

BMS will share the minimum personal data with the Customer Company as your employer (to handle the lease itself and the related payroll processing), and with the involved Leasing Company (to be able to provide the Lease a Bike service), and with the bike dealer (only the name to identify the person responsible).

BMS may share your personal data also with third parties to perform certain processing activities on behalf of BMS and to facilitate services they provide to us. These can include providers of services such as website hosting, data analysis, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services. BMS requires these third parties to process and protect your personal data diligently. BMS will not sell your personal data to third parties.

You should be aware that BMS is part of a business group within Pon and that departments (like IT, Marketing) can be located in Pon companies around the world. As a consequence your personal data may be shared within and/or transferred to other business group companies or other Pon companies around the world.

BMS or Pon might reorganize, merge or in any other way sell or dispose (part of) a business company to another company. Where such business relates to Lease a Bike, such transfer of ownership may include the transfer of your personal data to the new owner and its advisors. We will otherwise only disclose your personal data if so required or authorized by law, where necessary for preventing or combating fraud, where necessary for dispute resolution, or for any other pressing legitimate need which under the circumstances must outweigh your privacy interests, such as the security of our business and the safety of our staff.

How do we protect your personal data?

BMS will take appropriate technical and organizational security measures against loss or unlawful processing of personal data. This may include using secure registration forms, encryption of data, and restricting access to your personal data.

The data in the LaB platform is located on servers in the EEA. In rare cases personal data need to be transferred to third countries that do not provide an adequate level of protection for your personal data. However, you can be assured that BMS will take appropriate safeguards for the confidentiality and protection of your data. For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, standard contractual clauses adopted by the European Commission, to protect your personal data. You may obtain a copy of these measures by contacting

How long do we retain your personal data?

We retain personal data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law.

The criteria used to determine our retention periods include:

Cookies, web beacons and similar techniques

If you are using our Platform, we may use cookies, web beacons and other similar technologies for storing information to provide you with a better, faster and safer browser experience.

Please refer to our Cookie Policy LaB Platform for the explanation of cookies, web beacons and similar techniques, how we use these techniques and how you can control these techniques.

Your rights

If you would like to request to review, correct, update, suppress, restrict or delete personal data, object to the processing of personal data, or if you would like to request to receive an electronic copy of your personal data for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may contact us via

As BMS and Pon are committed to respecting and safeguarding your privacy and the security of your personal data, a special Security & Privacy Office department is in place to handle your request and to ensure we respond to your request consistent with applicable law.

In your request, please make as clear as possible what personal data your request relates to. For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event within any applicable legally required timeframes.

Contact, questions, feedback and Data Protection Officer

If you have any questions about this Privacy Statement, please contact us at:

You may also contact our Data Protection Officer (DPO) via You have the right to lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs.

Policy changes

We may change this Privacy Statement from time to time. Any changes will become effective when we post the revised Privacy Statement. If necessary, we will inform you when we change the Privacy Statement. This statement was last modified on date: 17 June 2022. You can contact us if you want to retrieve previous versions.

Bike Mobility Services