Privacy policy

Last updated: 19 October 2026

At BagsKeeper we process your personal data transparently and only as far as necessary. This Policy explains who the controller is, what data we process, for what purposes, on what legal basis, for how long, to whom it is disclosed and how you can exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Spanish Law 34/2002 (LSSI-CE).

1. DATA CONTROLLER

Owner: Ms Antonella Chiapello, NIE Z0464762Y, trading under the business name BagsKeeper.

Address: Partida Penyacerrada 38, 03110 Mutxamel, Alicante, Spain.

Email: info@bagskeeper.es. Phone / WhatsApp: +34 624 751 143.

Website: www.bagskeeper.com

2. WHAT DATA WE PROCESS

• Identification and contact details: first name and surname, email address, phone number and billing postal address.
• Booking data: chosen establishment, dates and times, number and type of items, booking code and amount.
• Payment data: payment is handled by a payment service provider integrated into the platform. BagsKeeper does not store your full card number.
• Luggage records: seal number, a photograph of the seal when the luggage is returned and, if an item arrives damaged, photographs taken on receipt (never capturing people, documents or labels with personal data), and recorded incidents.
• Communications: enquiries, incidents and complaints you send us by email, WhatsApp or other channels.
• Browsing data: IP address, device, browser and data obtained through cookies, in accordance with our Cookie Policy.

We do not ask you for special categories of data (health, ideology, religion, etc.) nor do we ask you to include them in your communications. We will not ask you for any identity document: to collect the luggage, the order number and the name and phone number of the booking holder are sufficient.

The data marked as required to make a booking are essential to provide the service; if you do not provide them, we will not be able to manage the booking. You must provide true and up-to-date data. If you book or collect luggage on behalf of another person, you must inform them of the content of this Policy.

3. WHY WE USE YOUR DATA AND ON WHAT LEGAL BASIS

Purpose	Legal basis
Managing the booking, providing the storage service, verifying the handover and communicating with you about it	Performance of the contract (Art. 6.1.b GDPR)
Charging for the service, issuing receipts or invoices and complying with accounting and tax obligations, and locating the holder if the luggage is not collected	Performance of the contract and legal obligation (Art. 6.1.b and 6.1.c GDPR)
Managing incidents, complaints and the BagsKeeper Protection, and defending our rights	Performance of the contract (Art. 6.1.b) and legitimate interest in defending claims (Art. 6.1.f GDPR)
Answering your enquiries and requests	Pre-contractual measures or performance of the contract (Art. 6.1.b) and legitimate interest in replying to you (Art. 6.1.f GDPR)
Reviewing applications from establishments that want to become a BagsKeeper point and contacting them	Pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR)
Managing our social media profiles and replying to comments and messages	Legitimate interest (Art. 6.1.f GDPR)
Preventing fraud and ensuring the security of the platform	Legitimate interest (Art. 6.1.f GDPR)
Sending you commercial communications, only if you have accepted them	Consent (Art. 6.1.a GDPR and Art. 21 LSSI); you may withdraw it at any time
Analytics and advertising through non-essential cookies	Consent (Art. 6.1.a GDPR and Art. 22.2 LSSI)
Complying with requests from authorities and other legal obligations	Legal obligation (Art. 6.1.c GDPR)

We do not take decisions based solely on automated processing that produce legal effects concerning you, nor do we carry out profiling for that purpose.

4. HOW LONG WE KEEP YOUR DATA

• Check-in and check-out photographs: for as long as necessary to handle incidents and complaints, up to a maximum of twelve (12) months from check-out, unless there is an ongoing claim, litigation or investigation, in which case they will be kept until it is finally resolved.
• Booking data and operational records (seals, times, incidents): for the duration of the service and, thereafter, duly blocked, for the retention and limitation periods legally applicable to liabilities arising from the contract, without prejudice to any other legal periods that may apply.
• Accounting and invoicing data: for six (6) years, in accordance with Article 30 of the Spanish Commercial Code and tax legislation.
• Enquiries by email, WhatsApp or form: one (1) year from the last reply.
• Applications from establishments that do not sign: one (1) year from the last contact.
• Commercial communications: until you withdraw your consent.
• Cookies: according to the periods indicated in the Cookie Policy.

Once these periods have elapsed, the data will be securely deleted or anonymised.

5. WHO WE DISCLOSE YOUR DATA TO

We do not sell your data. We only disclose it when necessary to provide the service or comply with the law:

• Partner establishments: they receive only the data strictly necessary to receive, store and hand back your luggage (name of the booking holder, order number, phone number, number of items, dates, seal and photographs). This data is made available to them through a shared bookings sheet and an email notification for each booking. At handover, they check the order number and the booking details (name and phone number of the holder) provided by the person collecting the luggage, who may be someone other than the holder. They act as data processors on behalf of BagsKeeper, under a contract in accordance with Art. 28 GDPR, and are prohibited from using the data for their own purposes, offering you services or contacting you for commercial purposes.
• Technology and service providers: e-commerce platform (Shopify), management, storage and communication tools (Google, including the Google Sheets sheet through which each establishment is given access to the data of its bookings, and the email notifications for each booking), payment providers, Metricool (management of our social media), CARTO (map of locations), Microsoft (business email), Cloudflare (hosting of the system that notifies each establishment that it has a new booking) and WhatsApp Business from Meta Platforms Ireland Ltd. (new-booking notifications to establishments, which do not include your contact details, and customer support for those who write to us on WhatsApp), which process the data as data processors.
• Shopify as an independent controller (Shopify Network Intelligence): Shopify may use certain browsing and purchase data, together with data from other stores, to prevent fraud, improve its services and personalise ads on its network. You can read its policy at shopify.com/legal/privacy and object to this use through the "Do not sell or share my personal information" link in the footer or through the cookie banner.
• Advertising platforms and social networks (Meta Platforms): only if you have accepted advertising or analytics cookies, in accordance with our Cookie Policy, to measure the effectiveness of our campaigns and show relevant ads.
• Professional advisers and insurers: tax and accounting advisers and, where appropriate to manage an incident, insurance companies.
• Public authorities, courts and law enforcement agencies: where there is a legal obligation (for example, reporting a theft or a request from the tax authorities).

6. INTERNATIONAL TRANSFERS

Some of our providers (such as Shopify, Google, Cloudflare or Meta) may process data outside the European Economic Area. In such cases, the transfer is based on an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified companies) or on standard contractual clauses and other appropriate safeguards. You can request further information by writing to info@bagskeeper.es.

7. YOUR RIGHTS

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw at any time any consent you have given, without affecting the lawfulness of prior processing. To do so, write to info@bagskeeper.es or to our postal address, stating the right you wish to exercise and proving your identity. We will reply within a maximum of one (1) month, which may be extended in the cases provided for in the GDPR.

If you consider that your data has not been processed correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. MINORS

BagsKeeper's services are intended for persons over 18 years of age. We do not knowingly process data of minors; if we detect that such data has been provided, we will delete it.

9. SECURITY

We apply technical and organisational measures appropriate to the risk: access to bookings through one account per establishment, limited to authorised staff who have committed in writing to confidentiality, access limited to strictly necessary data, confidentiality of authorised persons, a ban on keeping local copies of data or photographs outside BagsKeeper's tools, and security incident notification protocols.

10. SOCIAL MEDIA

BagsKeeper has profiles on Instagram, Facebook, TikTok and YouTube. If you follow us, comment or write to us, we will process your username and your messages to reply to you and manage the community, on the basis of legitimate interest. Each social network also processes your data in accordance with its own privacy policy. For the statistics of our Facebook and Instagram pages, BagsKeeper and Meta Platforms Ireland Ltd. are joint controllers.

11. COOKIES

The use of cookies and similar technologies is governed by our Cookie Policy.

12. CHANGES

We may update this Policy to adapt it to legal, technical or operational changes. The current version will always be the one published on the website.

13. CONTACT

BagsKeeper

Owner: Ms Antonella Chiapello, NIE Z0464762Y

Email / Phone: info@bagskeeper.es / +34 624 751 143

Postal address: Partida Penyacerrada 38, 03110 Mutxamel, Alicante, Spain