Data Controller

Identity: BYE BAGS, S.L.
CIF: B22826168
Registered address: Avenida Ricardo Soriano 33, Edificio Nueva Marbella, Local Comercial 12, 29601 Marbella, Málaga (Spain)
Website: https://www.byebagslockers.com/

Purpose of Processing
The personal data provided by users through the website will be processed for the following purposes:

Managing reservations made by users in the smart locker system.
Managing the use of lockers and access to them.
Handling information requests or incidents related to the service.
Complying with legal and tax obligations arising from the provision of the service.
Conducting statistical analyses and service improvements.

Legal Basis
The legal basis for processing personal data is:

The performance of a contract (management of reservations and provision of the contracted service).
Compliance with legal obligations (tax, accounting, and security).
The user’s explicit consent (for commercial communications, if enabled in the future).

Data Retention
Personal data will be retained as long as there is a contractual relationship with the user and, afterwards, for the periods required by tax and accounting regulations. Data needed for temporary locker access will only be kept for the time strictly necessary to provide the service.

Data Disclosure to Third Parties
Personal data will not be disclosed to third parties except where there is a legal obligation or when necessary to properly provide the service (for example, technological providers of web hosting or reservation management systems, under contracts that guarantee personal data protection).

User Rights
Users may exercise the following rights at any time, under the terms established in the applicable data protection regulations (Regulation (EU) 2016/679 and LOPDGDD):

Right to access their personal data.
Right to rectification of inaccurate data.
Right to erasure when, among other reasons, the data is no longer necessary for the collected purposes.
Right to object to the processing of their data.
Right to restriction of processing.
Right to data portability to another controller.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they believe their rights have not been properly addressed.

Security Measures
BYE BAGS, S.L. will process users’ personal data confidentially and will adopt the necessary technical and organizational measures to ensure data security and prevent alteration, loss, or unauthorized processing or access, in accordance with data protection regulations.