Privacy Policy
luggagedrop24.pl
The privacy of visitors to luggagedrop24.pl and of customers using our Luggage Drop 24 storage service in Gdańsk is important to us. This policy explains what personal data we collect, for what purposes, on what legal basis, and what rights data subjects have.
This policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the "GDPR").
1. Data controller
The controller of your personal data is:
2. Contact for data protection matters
For any matter related to the processing of your personal data, including to exercise the rights described in section 9, you can reach us at:
- e-mail: contact@luggagedrop24.pl
- telephone: +48 603 570 008 (daily 10:00–18:00 CET)
- in writing, to the registered office address given in section 1
We have not appointed a Data Protection Officer — we are not required to do so under Article 37 GDPR. Please use the contact details above for all GDPR-related matters.
3. What data we collect and where it comes from
In the course of operating the website and providing our luggage storage service, we may process the following categories of personal data:
3.1. Data you give us directly
- Contact and identification data — name, phone number, e-mail — if you contact us by phone, e-mail, or in person at our office at ul. Toruńska 15/U4 in Gdańsk;
- Data about the stored luggage — number of items, drop-off and pick-up times, reservation code (if applicable);
- Invoice data — if you request a VAT invoice: company name, address, tax ID.
3.2. Data received from our partner Bounce
Online reservations are currently handled by the Bounce platform (Bounce Storage Inc.). We therefore receive from Bounce the data necessary to deliver the service, in particular: customer first name, reservation code, number of bags, planned drop-off and pick-up times. Bounce is a separate data controller for the purposes of managing the reservation and payment. For details on how Bounce processes your data, see: bounce.com/privacy-policy.
3.3. Data collected automatically (technical data and cookies)
- device IP address,
- browser and operating system information,
- date and time of visit, pages viewed,
- source of visit (referring page, marketing campaign),
- information stored in cookies — see section 11.
4. Purposes of processing and legal bases
We process your data for the following purposes:
| Purpose | Legal basis | Retention |
|---|---|---|
| Providing the luggage storage service (accepting, storing, releasing) | Article 6(1)(b) GDPR — performance of a contract | Until the service ends + until any related claims are time-barred |
| Handling contact requests (e-mail, phone) | Article 6(1)(f) GDPR — legitimate interest (responding to enquiries) | Up to 12 months after the correspondence ends |
| Issuing and archiving accounting documents (invoices, receipts) | Article 6(1)(c) GDPR — legal obligation (Polish Tax Ordinance, Accounting Act) | 5 years from the end of the year in which the tax obligation arose |
| Establishing, pursuing, or defending against legal claims | Article 6(1)(f) GDPR — legitimate interest | Until the applicable limitation period expires (typically 3 or 6 years) |
| Website analytics (traffic measurement, content effectiveness) | Article 6(1)(a) GDPR — consent given via the cookie banner | Until consent is withdrawn, or a maximum of 14 months (Google Analytics default) |
| Ensuring website security (server logs, detecting abuse) | Article 6(1)(f) GDPR — legitimate interest (service integrity) | Up to 12 months |
5. Recipients of your data
Your data may be disclosed to the following categories of recipients:
| Recipient / role | Scope of data | Country of processing |
|---|---|---|
| home.pl S.A. — website hosting | Technical data, server logs | Poland (EEA) |
| Bounce Storage Inc. — reservation platform operator | First name, reservation code, booking details | USA (outside EEA — see section 6) |
| Google Ireland Ltd. — Google Fonts and Google Analytics 4 (with user consent) | IP, technical data, cookie identifiers | Ireland / USA (see section 6) |
| Microsoft Ireland Operations Ltd. — Microsoft Clarity (with user consent) | IP, technical data, anonymised session recordings | Ireland / USA (see section 6) |
| Accounting firm serving Apartmore Sp. z o.o. | Invoice data (name / company, address, tax ID) | Poland (EEA) |
| Payment processors (for online payments handled by Bounce) | As per their own privacy policies — we do not process card data ourselves | As per their own policies |
| Authorised public authorities (police, prosecutors, courts, tax authorities) | Only on the basis of valid law and a proper request | Poland |
6. Transfers outside the European Economic Area
Some of our service providers (including Bounce, Google, Microsoft) are based in or process data in the United States. Transfers of data to the USA take place on the basis of:
- European Commission implementing decision 2023/1795 (the EU-US Data Privacy Framework) — where the recipient has adhered to that program, or
- Standard Contractual Clauses approved by the European Commission (Decision 2021/914).
On request, we will provide a copy of the safeguards applied for a specific transfer.
7. Providing data — is it required?
Providing data is voluntary, but in some cases it is necessary to use the service:
- your first name and reservation code are necessary to drop off and collect your luggage,
- your phone number or e-mail are necessary if you want to be notified about the status of the service,
- invoice data is necessary to issue a VAT invoice to a company.
Declining to provide data means we cannot deliver the service to the extent that data is needed.
8. Profiling and automated decision-making
We do not make any decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or significantly affect you in a similar way.
9. Your rights
In connection with the processing of your data, you have the following rights:
- right of access to your data and to receive a copy of it (Article 15 GDPR),
- right to rectification of inaccurate data or to complete incomplete data (Article 16 GDPR),
- right to erasure ("right to be forgotten") — where there is no overriding reason to continue processing, such as a legal obligation (Article 17 GDPR),
- right to restriction of processing in the cases listed in Article 18 GDPR,
- right to data portability — for data processed on the basis of consent or a contract, in a machine-readable format (Article 20 GDPR),
- right to object to processing based on legitimate interest (Article 21 GDPR),
- right to withdraw consent at any time — for processing based on consent (e.g. analytics). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise these rights, contact us as described in section 2.
10. Right to complain to the supervisory authority
If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:
11. Cookies and similar technologies
The luggagedrop24.pl website uses cookies — small text files stored by your browser on your device.
11.1. Types of cookies
| Type | Purpose | Consent required |
|---|---|---|
| Technical (necessary) | Basic site functionality, security, session management | No (Article 173(3)(2) of the Polish Telecommunications Act) |
| Google Fonts | Loading typefaces from Google's servers | Consent to loading third-party resources |
Analytics (Google Analytics 4 — cookies _ga, _ga_*) |
Traffic analysis, measuring content effectiveness | Yes — consent via the cookie banner |
UX research (Microsoft Clarity — cookies _clck, _clsk, CLID) |
Anonymised session recordings, heatmaps, UX issue detection | Yes — consent via the cookie banner |
11.2. Managing cookies
You can manage cookies in your browser settings (Chrome, Firefox, Safari, Edge). You can also block all cookies or delete those already stored. Note that disabling necessary cookies may prevent some parts of the site from working correctly.
12. Changes to this privacy policy
We reserve the right to change this policy. The current version is always available at luggagedrop24.pl/en/privacy-policy.html. We will notify you of material changes by e-mail (if you have an active reservation with us) or through a visible notice on the site. The effective date of the current version is shown at the top of the document.
13. Final provisions
Matters not covered by this policy are governed by the GDPR, the Polish Personal Data Protection Act of 10 May 2018, the Polish Act of 18 July 2002 on the Provision of Services by Electronic Means, and the Polish Telecommunications Act of 16 July 2004.
Back to homepage