1. DATA CONTROLLER
In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that the personal data collected through the Platform will be processed by:
• Data Controller: Lordurmon SL.
• Tax ID: B26979039.
• Address: Calle Santa Isabel 33, 28012 Madrid, Spain.
• Contact email: hola@luggagemadrid.com.
• Phone/WhatsApp: +34 614335694
2. PURPOSE OF PROCESSING
Your personal data will be processed for the following purposes:
• Booking and service management: To process your ticket reservation, manage access to the facilities, send you the confirmation code, and keep you informed about the status of your service.
• Customer service: To manage any queries, incidents, or complaints you may submit through the available channels.
• Administrative, accounting, and tax purposes: To comply with legal obligations arising from the contract, such as invoicing.
• Marketing communications: To send you information about promotions, offers, or new services, provided you have previously authorized us to do so. If you do not wish to receive these types of communications, you may object at any time by sending an email to the address indicated.
3. LEGAL BASIS FOR PROCESSING
The legal basis for processing your data is:
• The performance of a contract: To manage your booking and provide you with the locker rental service.
• The legitimate interest of the data controller: To manage and improve customer service and service quality.
• Compliance with a legal obligation: To comply with the tax, accounting, and security obligations required by law (e.g., video surveillance).
• Your consent: For sending personalized marketing communications, which you may revoke at any time.
4. DATA RETENTION PERIOD
Personal data will be kept for the time strictly necessary to fulfill the purpose for which it was collected. Specifically:
• Reservation details will be kept for the duration of the contract and, once it has ended, for the legally established periods for compliance with tax, accounting, and liability obligations (e.g., 6 years according to the Commercial Code).
• Images from the video surveillance system will be kept for a maximum of 30 days, unless they are necessary for incident investigations.
• If you have authorized us to send you marketing communications, we will keep your contact information until you request to unsubscribe.
5. DATA RECIPIENTS (ASSIGNMENTS AND TRANSFERS)
For the proper provision of the service, we may share your data with the following recipients:
• Service providers: Companies that provide us with locker maintenance services, payment gateway services (for managing payments), courier services for sending codes and notifications, and IT and web hosting service providers. These data processors act under our instructions and are obligated to maintain the confidentiality and security of the data.
• Law Enforcement Agencies: In cases where required by law or when there are well-founded suspicions of the possession of prohibited items.
• International Transfers and Disclosures: We do not transfer data to third countries or international organizations that do not guarantee an adequate level of protection. In the case of using suppliers located outside the European Economic Area, we guarantee that such transfers are carried out based on adequacy decisions by the European Commission or with appropriate safeguards, such as Standard Contractual Clauses.
6. USER RIGHTS
You have the right to exercise the following rights recognized by the GDPR:
• Access: To know what personal data we process about you.
• Rectification: To request the correction of your inaccurate or incomplete data.
• Erasure: To request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Objection: To object to the processing of your data, in particular for marketing purposes.
• Restriction of processing: To request that the processing of your data be restricted in certain circumstances.
• Portability: To receive the personal data you have provided to us in a structured, commonly used format and to transmit it to another data controller.
To exercise these rights, you can send a written request to the postal address. or the email address indicated at the beginning of this policy, attaching a copy of your ID card or other document that proves your identity.
7. SOURCE OF DATA AND CATEGORIES
The personal data we process comes from the user, who provides the necessary information through the booking form.
The categories of data we process are:
• Identification data (first and last name)
• Contact data (email address, telephone number)
• Transaction data (booking dates, ticket type, amount)
• Payment data, processed through the payment gateway, without us storing your complete card details.
8. SECURITY MEASURES
Lordurmon SL implements appropriate technical and organizational measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of the art, the nature of the data stored, and the risks to which it is exposed.
9. VIDEO SURVEILLANCE
The facilities are equipped with a video surveillance system. Images will be processed by Lordurmon SL for the purpose of ensuring the safety of people, property, and facilities, as well as for the investigation of any incidents. This purpose is based on the legitimate interest of the data controller.
