1. Data Controller

Controller: LZ Lockers S.L.
Tax ID: B23951817
Address: Avda. de las Playas 7, Sótano Local 3, 35510 Tías, Las Palmas, Spain
Email: info@lockerslanzarote.com
Legal Representative: Company Administrator.

LZ Lockers S.L. is not required to appoint a Data Protection Officer (DPO) under the GDPR, as its activities do not fall under the cases that require it.

2. Data Collected

Depending on the use of the service, we may collect:

• Identification data: name, surname, email, phone (if applicable).

• Booking data: date, locker type, access code.

• Payment data: processed by external providers (we do not store card numbers).

• Billing data.

• Images from video surveillance cameras (for security).

• System access logs.

3. Purposes of Processing

The data is used to:

1. Manage bookings and provide the contracted service.

2. Process payments and issue invoices.

3. Send information related to the booking or incidents.

4. Ensure the security of the facilities through video surveillance.

5. Comply with legal obligations (tax, accounting, security).

No automated profiling or automated decisions with legal effects are performed.

4. Legal Basis for Processing

• Contract performance: Management of bookings and locker access.

• Legal obligation: Invoicing, accounting obligations, and security.

• Legitimate interest: Security of the facilities and fraud prevention.

• Consent: For voluntary commercial communications (if any).

5. Recipients and Data Disclosures

Data may be disclosed to:

• Service providers acting as data processors (hosting, payment gateways, booking software, video surveillance company).

• Public administrations when required by law.

• State Law Enforcement Agencies in case of incidents.

No international transfers of data outside the EU are made.

With all providers, data processing agreements are formalized in accordance with Art. 28 GDPR.

6. Data Retention

• Customer and booking data: 5 years (tax and accounting obligations).

• Invoices and financial documentation: 6 years (Spanish Commercial Code).

• Access logs: 12 months.

• Video surveillance: 30 days, unless incidents occur.

• Data for commercial communications: until consent is withdrawn.

7. User Rights

The user can exercise:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to object

• Right to data portability

To exercise them, you must send an email to info@lockerslanzarote.com, proving your identity.

The controller will respond within a maximum of 1 month, extendable to 2 months in complex cases.

If the user believes their rights have been violated, they can file a claim with the Spanish Data Protection Agency (AEPD).

8. Data Security

LZ Lockers S.L. applies appropriate technical and organizational measures:

• SSL Encryption

• Access control

• Authorized video surveillance

• Limitation of data access

• Processing contracts with providers

9. Minors

The services are intended for individuals over 18 years of age. Minors can only use the service under adult supervision.

10. Changes to the Privacy Policy

LZ Lockers S.L. may update this policy to adapt to legal or service changes. The updated version will be published on this website.