Privacy notice

1. Data controller

COSENTINO SERVICE S.N.C. DI COSENTINO SALVATORE E C., Via Divisi 76/78, 90133 Palermo (PA), Italia, VAT number 07398910823. For anything concerning personal data: info@depositobagaglipalermo.com.

No data protection officer has been appointed: the activity is not among those for which the Regulation requires one.

2. What we process

• identity and contact details: first name, surname, email address, phone number where given;
• booking data: location, size, date and time, amount, status, any notes;
• payment data: handled by Stripe. We receive the outcome, the card scheme and the last four digits; the full number never reaches our systems and is never stored;
• locker access data: time of opening, method (code or QR), outcome, the IP address the request came from;
• messages sent to you: the confirmation with your opening code, the expiry reminder, replies to support requests;
• your language choice, kept in a technical cookie.

3. Why, and on what legal basis

• to provide the service you booked, that is to perform the contract (art. 6(1)(b)): all the data above, unless stated otherwise;
• to meet tax and accounting obligations (art. 6(1)(c)): booking and payment data;
• for the security of the storage, to answer disputes and to prevent abuse (art. 6(1)(f), legitimate interest): the access log and IP addresses. Our interest is protecting the luggage in our care, which is also yours;
• to send you commercial messages (art. 6(1)(a), consent): only if you asked for them, and you can withdraw at any time.

4. How long we keep it

• bookings and related messages: 24 months after the service ends;
• accounting and tax records: 10 years, as the law requires;
• locker access log: 12 months;
• CCTV images, once the system is in operation: no more than 14 days, except individual frames needed for a dispute under way;
• data processed with your consent: until you withdraw it.

5. Who we share it with

Data is never sold, nor passed to third parties for their own purposes. It is processed on our behalf, as processors, by:

• Stripe Payments Europe Ltd (Ireland), for card payments. Stripe may transfer data outside the European Union under the standard contractual clauses approved by the Commission;
• Hostinger International Ltd, which hosts the servers the platform runs on. The servers are in Frankfurt, Germany;
• the provider of the mailbox our automatic messages are sent from;
• Domus Tech S.r.l.s., which built and maintains the software.

6. Your rights

You may at any time ask to access your data, correct it, erase it, restrict its processing, receive it in a machine-readable format, and object to processing based on legitimate interest (articles 15 to 22 of the Regulation).

Requests go to info@depositobagaglipalermo.com and are answered within one month.

If you believe the processing breaches the Regulation you may complain to the Italian data protection authority (www.garanteprivacy.it) or to the authority of the country you live in.

7. Providing your data, and automated decisions

Identity, contact and payment data are necessary to book: without them the service cannot be provided. Consent to commercial messages is entirely optional.

No automated decision-making or profiling takes place.