OPENBLUE
Lockers
EN
← Home

Privacy

Last updated: 31 July 2026. This website is informational: it does not create accounts or collect data through forms. We only process the information you decide to send us and what is needed to provide the lockers service if you book it.

1. Who processes your data

The data controller is Diana Aguirre Urgoiti, tax ID 53165377A, owner of OpenBlue Malpica, with business address at Rúa A Camuza 24, bajo B, 15113 Malpica de Bergantiños (A Coruña). You can get in touch at openbluemalpica@gmail.com or on 668 50 97 58. There is no data protection officer: given the size and nature of the business it is not mandatory.

2. What data we process, for what, and on what legal basis

  • If you write to us by WhatsApp, phone or email: the data you choose to include (name, number, your message). We use it solely to reply to you. Legal basis: our legitimate interest in replying to whoever contacts us (GDPR art. 6(1)(f)).
  • If you book a locker: name, email, phone and booking details. We use them to give you the access code, to charge you, and to comply with our accounting and tax obligations. Legal basis: performance of the custody contract and compliance with legal obligations.
  • If you accept analytics in the cookie notice: aggregated browsing data. Legal basis: your consent, revocable at any time. See section 6.

We do not use your data for advertising, we do not sell it or share it with third parties for commercial purposes, and we do not make automated decisions or carry out profiling about you.

3. Who else sees it

To operate we need service providers. They only access what is strictly necessary and solely to provide us their service:

  • Arregui (Univers platform): manages the lockers system and the booking portal. Your booking and access code are registered there.
  • Stripe: processes the payment for the lockers. Your card details are handled directly by Stripe; we neither see them nor store them.
  • Netlify: hosts this website and logs the usual technical data of any server (for example, the IP address of the request).
  • Google: only if you click the map image to load the map with directions, or if you accept analytics.
  • Meta (WhatsApp): if you choose to write to us there, your conversation goes through WhatsApp under its own terms. If you prefer to avoid it, email us or call us.

Some of these providers are international companies that may process data outside the European Economic Area, relying on the safeguards provided by the GDPR for that purpose. You can review their privacy policies on their own websites.

4. How long we keep it

  • Enquiries (WhatsApp, email, phone): for as long as the conversation lasts and a reasonable time afterwards, in case follow-up is needed. They are then deleted.
  • Locker bookings: during the booking and, afterwards, for the periods required by law for invoicing and accounting (generally between 4 and 6 years).
  • Analytics: according to the tool's configuration, and in any case collection stops as soon as you withdraw consent.

5. Your rights

You can ask us to access your data, correct it, delete it, restrict or object to its processing, and request the portability of what you have provided us. Simply write to openbluemalpica@gmail.com stating which right you want to exercise; we may ask you to prove your identity so as not to hand your data over to someone else.

If you believe your request has not been handled properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es), which is the competent supervisory authority in Spain.

6. Cookies

Technical cookies are essential and always active. Analytics is only loaded if you accept it in the notice, and advertising cookies are not active. Full details are in our cookie policy.

7. Changes to this policy

If something relevant changes (a new provider, a new purpose), we will update this page and the date at the top. The specific terms of the lockers service are in its Terms and Conditions.