Data Controller

Identity: NOMA LOCKERS, with registered address at the address indicated at our registered office.
Contact email: the email address enabled for this purpose on our website.

What personal data do we collect and for what purpose?

We collect only the data necessary for managing reservations, providing the storage service, and fulfilling our legal obligations. The categories of data processed include:

• Identificative data: name, surname, ID document, email, phone number.

• Transaction data: reservation information, schedules, locker type, amount paid, and payment data (the latter will be processed directly by our payment gateway).

Purposes of processing:

1. Manage, process, and execute the reservation and the provision of the locker rental service.

2. Handle technical incidents and customer inquiries through customer service channels.

3. Comply with legal obligations (e.g., invoicing, document retention, etc.).

4. If applicable, manage the shipping of forgotten items to the address indicated by the user.

5. With prior express consent, send commercial or informational communications about our services.

Legal basis for processing

The processing of your data is based on:

• The performance of a contract (the reservation and service provision) [Art. 6(1)(b) GDPR].

• Compliance with legal obligations (invoicing, etc.) [Art. 6(1)(c) GDPR].

• Legitimate interest to manage incidents and improve the service, provided that the user's rights do not prevail.

• Express consent for sending commercial communications, when required.

Data recipients

Your personal data will not be transferred to third parties except by legal obligation or for the provision of the service (e.g., payment platform, courier services for shipments). In these cases, data processors are required to comply with the GDPR and sign a data processing agreement.

User rights

The user has the right to exercise the following rights before NOMA LOCKERS:

• Access: know what data we are processing.

• Rectification: modify inaccurate or incomplete data.

• Deletion: request the deletion of your data when it is no longer necessary (right to be forgotten).

• Objection: object to the processing of your data for reasons related to your particular situation.

• Restriction of processing: request that processing be suspended in certain cases.

• Portability: receive the data you have provided to us in a structured and commonly used format.

To exercise these rights, you must send a written request to the postal address or to the email address enabled on our website, accompanied by a copy of your identity document to verify your identity.

Data retention period

Data will be retained for as long as necessary to fulfill the purpose for which it was collected and to address any liabilities that may arise from the provision of the service. Once the contractual relationship has ended, data will be kept blocked and made available to competent authorities for the legal statute of limitation periods.

Data security

NOMA LOCKERS adopts the necessary technical and organizational measures to ensure a level of security appropriate to the risk of the processing, protecting your personal data against destruction, loss, alteration, or unauthorized access.

Claims to the supervisory authority

The user has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with applicable regulations.