Privacy Policy of luggagevault.es

Effective Date: 14 October, 2025

At LUGGAGE VAULT S.L.U. (“we,” “our,” or “us”), your privacy matters. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. We comply with the General Data Protection Regulation (GDPR), the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable laws.

1. Who We Are

Company Name: LUGGAGE VAULT S.L.U.
CIF: B22855514
Business Address: Carrer de Sancho de Ávila 41, Bajos 9, 08018 Barcelona, Spain
Local Address: Carrer de Padilla 275, Local 2, 08025 Barcelona, Spain
Email (personal): james@luggagevault.es
Email (general): hello@luggagevault.es
Phone: +34 623 751 882
Support Hours: 06:00–01:00 (Europe/Madrid)

We are the Data Controller for the personal information we collect and process.

2. Data We Collect

We only collect the information we need to provide our services:

• Identity & Contact: Name, email, phone number, billing address.
• Booking Details: Locker size/number, rental period, booking dates.
• Payment Info: Payment method details processed securely by Stripe. We do not store or process card numbers on our servers.
• Access & Security: Door PIN, locker QR codes, entry timestamps and access logs associated with bookings.
• Technical Data: IP address, device type, browser type, and site usage (via cookies and analytics tools — see Cookie Policy).
• Location Data: If you enable location services (e.g., Google Maps to find us).
• Customer Support: Messages or call details when you contact us.
• Advertising & Tracking: Data about how you interact with our ads (Google Ads, Facebook Ads).
• Security Footage: CCTV images recorded at our premises (provided by Prosegur Security).

3. How We Collect It

• Directly from you: When you book, contact us, or use our kiosk.
• Automatically: Via cookies, analytics, tracking tools, and access control systems when you use our site or enter the facility.
• From trusted partners: Payment processors (Stripe), security providers (Prosegur), analytics (Google Analytics), advertising networks (Google, Meta), mapping/fonts providers (Google Maps, Google Fonts), and insurance partners in case of claims.

4. Why We Use Your Data

• Process and manage your locker booking.
• Take secure payments and send receipts.
• Provide booking confirmations and reminders.
• Offer location-based services (Google Maps).
• Improve our website and services (analytics).
• Deliver and measure ads and promotions.
• Control and verify access to the facility and lockers (PIN/QR code logging).
• Keep our facilities secure (CCTV monitoring).
• Establish, exercise or defend legal claims related to bookings or incidents.
• Meet legal and tax obligations.

5. Legal Basis for Processing

We process your personal data under these legal bases:

• Contract (Art. 6(1)(b) GDPR): To deliver the service you’ve booked.
• Consent (Art. 6(1)(a) GDPR): For cookies, marketing, and location services.
• Legitimate Interest (Art. 6(1)(f) GDPR): Security, fraud prevention, service improvements.
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with Spanish tax and business laws.

6. Payments

Payments are processed through Stripe (Visa, Mastercard, Amex, PayPal, Apple Pay, Google Pay). We never store your card details. Stripe’s privacy policy is available at https://stripe.com/privacy. All transactions are processed externally by Stripe or other secure third-party providers.

7. How Long We Keep Your Data

• Bookings & Payments: 5 years (required by Spanish tax law).
• Customer Support Messages: 2 years after your last contact.
• Analytics Data: 26 months (Google default).
• CCTV Footage: 30 days unless needed for security/legal purposes.
• Advertising Data: Up to 13 months unless you withdraw consent earlier.
• Access & Security Logs: 90 days from the end of the booking.

After these periods, data is securely deleted or anonymized.

8. Who We Share Your Data With

We never sell your data. We only share it with trusted providers who help us operate our services:

• Stripe – payments
• Google Analytics – website insights
• Google Ads / Facebook Ads – marketing
• Google Maps / Google Fonts – content display
• Prosegur Seguridad España, S.L. – CCTV monitoring
• Insurance providers – in case of claims
• Google Tag Manager – tracking management

All partners comply with GDPR and are bound by confidentiality agreements.

9. International Data Transfers

Some providers (Google, Meta, Stripe) are outside the EEA. We use EU Standard Contractual Clauses or rely on their GDPR compliance to protect your data. All providers are vetted for GDPR compliance, and appropriate safeguards are applied.

10. Your Rights

You can:

• Access the data we hold about you.
• Correct inaccurate information.
• Delete your data (unless required by law).
• Limit how we use your data.
• Request a copy in a portable format.
• Object to certain processing (like marketing).
• Withdraw consent at any time for consent-based processing.

To exercise your rights, email james@luggagevault.es or hello@luggagevault.es. You can also file a complaint with the Agencia Española de Protección de Datos (AEPD).

11. Updates to This Policy

We may update this Privacy Policy. The “Effective Date” will always reflect the latest version. If material changes are made, we will display a clear notice on our website and update the effective date.

12. Contact Us

If you have questions about your privacy, contact:

LUGGAGE VAULT S.L.U.
Business Address: Carrer de Sancho de Ávila 41, Bajos 9, 08018 Barcelona, Spain
Local Address: Carrer de Padilla 275, Local 2, 08025 Barcelona, Spain
Email (personal): james@luggagevault.es
Email (general): hello@luggagevault.es
Phone: +34 623 751 882