Flexy Luggage
Privacy Policy
This Privacy Policy explains how Flexy Luggage collects, uses, and protects the personal data you provide when using our website or luggage storage services in Corfu.
Last updated: May 2025 · Applies to flexyluggage.com
Data Controller
Souvlakis Stamatios Georgios | VAT: 153535700
1st Parodos Polychroniou Constanta, Corfu 49100, Greece
Email: info@flexyluggage.com | Tel: +30 699 563 2295
1. Introduction
This Privacy Policy explains how Flexy Luggage ("we", "us", "our") collects, uses, and protects the personal data you provide when using the website flexyluggage.com or interacting with our luggage storage services in Corfu, Greece. We are committed to protecting your privacy in full compliance with the EU General Data Protection Regulation (GDPR) 2016/679.
2. Data We Collect
2.1 Data You Provide Directly
| Category | Data | Purpose |
|---|---|---|
| Booking Form | Name, preferred date, locker size, number of bags | Service reservation via WhatsApp |
| Contact / Enquiries | Name, email, phone, message content | Customer support and communication |
| On-site Check-in | Name, contact details | Locker access and receipt generation |
2.2 Data Collected Automatically
When you visit our website, we automatically collect technical data such as your IP address, browser type, pages visited, time spent on pages, and referring URL. This data is collected via cookies and analytics tools (see Section 6).
3. Legal Basis for Processing
- Contractual necessity (Art. 6(1)(b) GDPR): processing required to provide our luggage storage services.
- Legitimate interests (Art. 6(1)(f) GDPR): website security, fraud prevention, and service improvement.
- Consent (Art. 6(1)(a) GDPR): analytics and advertising cookies, and marketing communications.
- Legal obligation (Art. 6(1)(c) GDPR): compliance with applicable tax and business regulations.
4. Recipients of Your Data
We do not sell your personal data to third parties. Data is shared only with:
- WhatsApp (Meta Platforms): for booking communications submitted via our booking form.
- Google LLC: for analytics (Google Analytics 4) and advertising measurement (Google Ads) via Google Tag Manager.
- Meta Platforms Inc.: for advertising effectiveness measurement via Meta Pixel (_fbp cookie).
- Website hosting and maintenance providers, under data processing agreements.
- Public authorities, when required by applicable law.
Google and Meta process data in the USA under Standard Contractual Clauses (SCCs) as the transfer safeguard under Art. 46 GDPR.
5. Data Retention
| Category | Retention Period |
|---|---|
| Booking and transaction records | 5 years (Greek tax law) |
| Customer enquiry data | 3 years from last contact |
| Analytics cookies (_ga, _ga_*) | 13 months |
| Advertising cookies (_fbp, _gcl_au) | 3 months |
| CCTV footage (on-site) | 30 days, then automatically deleted |
6. Cookies
6.1 What Are Cookies
Cookies are small text files stored on your device when you visit our website. They help us improve your browsing experience and measure the effectiveness of our services.
6.2 Cookies We Use
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Stores and counts page views; tracks session and campaign data | 13 months |
| _ga_* | Google Analytics | Stores page view state for Google Analytics 4 | 13 months |
| _gcl_au | Google Tag Manager | Measures advertisement efficiency via Google services | 3 months |
| _fbp | Meta (Facebook) | Stores and tracks user interactions for advertising | 3 months |
We use Cookieyes as our consent management platform. On your first visit, a cookie banner allows you to accept all cookies, reject non-essential cookies, or customise your preferences. You may change your cookie settings at any time via the cookie banner on our website. Disabling analytics and advertising cookies does not affect the core functionality of our booking form or website.
7. Your Rights Under GDPR
You have the right to:
- Access: request a copy of the personal data we hold about you (Art. 15 GDPR).
- Rectification: request correction of inaccurate data (Art. 16 GDPR).
- Erasure: request deletion of your data where no legal obligation requires us to keep it (Art. 17 GDPR).
- Restriction: request we limit processing of your data (Art. 18 GDPR).
- Portability: receive your data in a structured, machine-readable format (Art. 20 GDPR).
- Objection: object to processing based on legitimate interests (Art. 21 GDPR).
- Withdraw consent: at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@flexyluggage.com. We respond within 30 calendar days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): Kifissias 1-3, Athens 115 23, www.dpa.gr.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption for all website communications, access controls limiting data access to authorised personnel only, regular data backups, and 24/7 CCTV monitoring at our physical storage facilities (footage retained for 30 days only). In the event of a data breach affecting your rights, we will notify the HDPA and you in accordance with GDPR obligations.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be notified via a prominent notice on our website. Continued use of the website after publication of changes constitutes acceptance of the updated Policy.
10. Contact
For any privacy-related questions or requests, use the contact details below.