This Privacy Policy explains how AB Colosseo S.r.l., operating the brand Rome Bag Storage (the “Service”, “we”, “us”), processes the personal data of visitors and customers of the website romebagstorage.com and users of our luggage storage service. We process your data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable Italian data protection law.

1. Data Controller

The data controller responsible for your personal data is:

2. Data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

Data you provide directly

• Booking & identification data — full name, email address, telephone number, number of bags and chosen drop-off/pick-up times.
• Payment data — billing details processed securely through our payment provider. We do not store your full card number on our servers.
• Communications — the content of messages, emails or reviews you send us, and any information you choose to share with our staff.

Data collected automatically

• Technical & usage data — IP address, browser type, device information, pages viewed and interactions with the website.
• Cookies & similar technologies — see the Cookies section below.

3. Purposes & legal bases

We process your personal data only where we have a lawful basis to do so under Article 6 of the GDPR:

4. Third parties & data processors

We share personal data only with trusted service providers who act as data processors on our behalf, and only to the extent necessary. Our main providers are:

We may also disclose data to our accountants, IT/hosting providers and, where required, to public authorities, courts or law-enforcement bodies in compliance with a legal obligation. We never sell your personal data.

5. Cookies

We use cookies and similar technologies to make the website work, to remember your preferences and — with your consent — to measure traffic and improve our Service. Essential cookies are necessary for the site to function; analytics and marketing cookies are set only after you give consent through our cookie banner. You can change or withdraw your consent at any time via the cookie settings or your browser.

For full details on the cookies we use, please see our Cookie Policy.

6. International data transfers

Some of our providers (such as Google and Stripe) may process data outside the European Economic Area. Where this happens, the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision, so that your data continues to enjoy a level of protection essentially equivalent to that guaranteed within the EU.

7. Data retention

We keep your personal data only for as long as necessary for the purposes described above:

• Booking & customer data — for the duration of the service and as long as needed to manage our relationship.
• Invoicing & accounting data — for 10 years, as required by Italian tax law.
• Marketing data — until you withdraw consent or unsubscribe.
• Analytics data — for the retention period set in our analytics tools.

8. Your rights

Under the GDPR you have the right to:

• Access your personal data and obtain a copy of it;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”) where applicable;
• Restrict or object to certain processing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these rights, contact us at info@romebagstorage.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — garanteprivacy.it) if you believe your data has been processed unlawfully.

9. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is completely secure, but we work continuously to safeguard your information.

10. Children

Our Service is not directed to children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review it periodically.