Skip to main content

Privacy Policy

This policy explains what personal data we collect when you use this website or book luggage storage with us, why we use it, who else handles it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Who we are

Luggage Storage Heraklion City Center, Sfakianaki 4, 71201 Heraklion, Crete, Greece, is responsible for your personal data (the “controller”). You can reach us by phone or WhatsApp on +30 695 150 8538, or in person at the store.

What we collect when you book

When you book online, we ask for:

  • Your name
  • Your phone number
  • Your drop-off and pick-up dates and times
  • How many bags of each size you are leaving
  • The language you booked in

We also create a booking reference and calculate the price. We do not ask for an email address, a postal address or any payment details online — you pay at the store.

Why we use it

We use your booking details to hold your space, to recognise you and hand your bags back to the right person, and to contact you about your booking if we need to. The legal basis is that this is necessary to provide the storage service you asked for (Article 6(1)(b) GDPR). We do not use your details for marketing, and we never sell them.

Who handles your data

We use a small number of service providers to run the website and the booking system. They process data only on our behalf:

  • Supabase stores booking records in a database in the EU (Ireland). Supabase privacy policy
  • Vercel hosts this website and processes the requests your browser sends, including your IP address. Vercel privacy policy
  • Telegram: when you book, the booking details, including your name and phone number, are sent to our staff’s Telegram chat so we know you are coming. Telegram privacy policy

Some of these providers are based outside the EU or may process data outside it. Where that happens, the transfer relies on the safeguards the GDPR provides for it, such as the European Commission’s standard contractual clauses or an adequacy decision.

How long we keep it

We keep booking details for as long as we need them to provide the service and to deal with any questions about your booking afterwards, and longer only where the law requires it. After that, we delete them.

Security and abuse prevention

To stop automated spam, the booking system briefly counts recent requests from each IP address (held in memory for about ten minutes and never stored) and recent bookings made with the same phone number. The legal basis is our legitimate interest in keeping the booking system working (Article 6(1)(f) GDPR).

Cookies

We do not use advertising cookies. The website may set a cookie called NEXT_LOCALE, which remembers the language you chose and is deleted when you close your browser.

Website statistics (Google Analytics)

We use Google Analytics 4 to count visits and see which pages are useful. It sets cookies (_ga and _ga_*) that last up to two years and sends information about your visit to Google — the pages you view, your type of device and browser, and your approximate location. When a booking is completed, we also record its reference and value, never your name or phone number. Google privacy policy

The map

The map in the “Location” section loads from Google Maps only when you tap “Show Map”. From then on, Google receives your IP address and browser details. Google privacy policy

Contacting us by WhatsApp or phone

If you message us on WhatsApp or call us, we see your number and what you send us, and use it only to answer you. WhatsApp’s own privacy policy also applies to messages sent through it.

Your rights

You can ask us to show you the personal data we hold about you, to correct or delete it, to restrict or object to how we use it, or to give it to you in a portable format. Contact us by phone, on WhatsApp or at the store, and we will reply within one month.

If you think we have not handled your data properly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr).

Changes to this policy

If we change how we use personal data, we will update this page and the date at the top.