In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Digital Rights Guarantee (LOPDGDD), we inform you that the personal data provided will be processed as set out below.
DATA CONTROLLER
Identity: Juan Castellano Sanz
Tax ID (NIF): 02712855M
Address: Calle de la Aduana, 17 – 28013 Madrid, Spain
Phone: +34 687 40 97 87
Email: starlockers.madrid@gmail.com
PURPOSES OF PROCESSING
The personal data you provide through contact forms, booking forms or other means available on our website will be processed for the following purposes:
- Contact form: To respond to your enquiries, suggestions or requests for information about our services.
- Booking form: To manage your locker reservation, send you access codes and all information necessary for using the service.
- Video surveillance: Images captured by our video surveillance system are used to ensure the security of persons, property and facilities.
- Newsletter (if applicable): If you voluntarily subscribe, to send you commercial communications about our services, promotions and news.
LEGAL BASIS
The legal basis for processing your data is:
- Performance of a contract: For the management of bookings and provision of the locker service.
- Consent of the data subject: For sending commercial communications and responding to enquiries via the contact form.
- Legitimate interest: For video surveillance for security purposes, in accordance with applicable regulations.
- Legal obligation: Retention of tax and accounting data as required by applicable legislation.
DATA RETENTION
Personal data will be retained for:
- Booking data: For the time necessary to provide the service and thereafter for the legally established period to address any potential liabilities.
- Billing data: Retained for 6 years in accordance with tax and accounting regulations.
- Video surveillance data: Recordings will be retained for a maximum period of 30 days from capture, unless they must be retained to evidence acts that compromise the integrity of persons, property or facilities.
- Contact data: Until you request its deletion or 3 years elapse without any interaction on your part.
- Data for commercial communications: Until you withdraw your consent.
RECIPIENTS OF DATA
Your data will not be disclosed to third parties, except where legally required or in the following cases:
- Technology service providers: Companies providing hosting, email sending and payment processing services, solely for the purpose of service provision.
- Banking entities: For the management of payments and collections related to the service.
- Competent authorities: When legally required (Law enforcement agencies, Tax authorities, etc.).
INTERNATIONAL TRANSFERS
Some technology service providers may be located outside the European Economic Area. In such cases, we guarantee that such transfers are made in compliance with the appropriate safeguards established under the GDPR (Standard Contractual Clauses, adequacy decisions, etc.).
RIGHTS OF DATA SUBJECTS
At any time, you may exercise the following rights:
- Right of access: To know what personal data we are processing about you.
- Right to rectification: To request the correction of inaccurate or incomplete data.
- Right to erasure: To request the deletion of your personal data.
- Right to restriction of processing: To request that the processing of your data be restricted in certain circumstances.
- Right to object: To object to the processing of your data.
- Right to data portability: To receive your data in a structured and commonly used format.
- Right not to be subject to automated decisions: Including profiling.
- Right to withdraw consent: At any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, please contact us at:
Email: starlockers.madrid@gmail.com
Postal address: Calle de la Aduana, 17 – 28013 Madrid, Spain
Please identify yourself adequately and specify the right you wish to exercise. We will respond to your request within a maximum period of one month from receipt.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you consider that the processing of your personal data infringes applicable regulations, you have the right to lodge a complaint with the competent supervisory authority. In Spain, this is:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid
www.aepd.es
You may also lodge a complaint with the supervisory authority of your country of residence within the EU.
SECURITY MEASURES
We have adopted the necessary technical and organisational measures to guarantee the security of your personal data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed.
The Star Lockers premises feature:
- Video surveillance system connected to a Security Monitoring Centre
- 24-hour connection with the Police
- Alarm and intrusion detection systems
- Access control via personalised codes
VIDEO SURVEILLANCE
We inform you that the Star Lockers premises are equipped with a video surveillance system to ensure the security of persons, property and facilities.
In compliance with applicable regulations, we inform you of the following:
- Purpose: To ensure the security of persons, property and facilities.
- Controller: Juan Castellano Sanz (details provided above).
- Legal basis: Legitimate interest in the protection of persons, property and facilities.
- Retention: Images are retained for a maximum period of 30 days.
- Surveilled area: Video-surveilled areas are duly indicated by informational signs.
- Rights: You may exercise your rights of access, rectification, erasure, restriction, objection and portability at starlockers.madrid@gmail.com
The video surveillance cameras are installed in such a way that they do not capture images of public spaces or adjacent properties.
UPDATES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy to adapt it to legislative, jurisprudential or interpretive developments by the competent data protection authority. In the event of material changes, we will notify you via a prominent notice on our website or by email if we hold your address.
Last updated: November 2025