BAGS FREE – PRIVACY POLICY
Last update: 15 January 2026
This Privacy Policy describes how Bon-Bags S.r.l. (“Bags Free”, “we”, “us”) collects and processes personal data through the website www.bags-free.com, through our booking forms and through communications (email, phone, WhatsApp).
This information is provided pursuant to Regulation (EU) 2016/679 (GDPR) and applicable Italian privacy laws.
1) Data Controller
Bon-Bags S.r.l.
Registered office: Via Alfredo Catalani, 39 – Rome, Italy
Email (privacy requests): info@bags-free.com
2) Types of Personal Data We Process
We may collect and process the following categories of data:
A) Data you provide directly
● first name, last name
● phone number, email address
● pick-up and delivery address
● travel details (hotel name, station/airport details)
● booking details (dates, time slots, number of luggage items)
● payment and billing details (invoice data, tax/VAT details if applicable)
● any information included in messages you send us (email, forms, WhatsApp)
B) Data collected automatically (Website / technical data)
When you browse our website, we may collect:
● IP address
● browser type and device information
● date and time of access
● pages visited and technical logs
These data are necessary to ensure website security and proper functioning (similar to the data described in the old policy).
3) Purposes and Legal Bases of Processing
We process your data only for specific purposes and based on valid legal grounds.
3.1 Service and contract execution
Purpose: to manage bookings, provide luggage transport/storage/shipping services, pick-up and delivery support, customer care.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
3.2 Customer support and communications
Purpose: to answer enquiries and assist you before/after the service.
Legal basis: performance of a contract and legitimate interest (Art. 6(1)(b) and 6(1)(f) GDPR).
3.3 Invoicing and legal compliance
Purpose: accounting, administrative obligations, tax compliance, dispute management.
Legal basis: legal obligation (Art. 6(1)(c) GDPR).
3.4 Security and fraud prevention
Purpose: protect website and systems, prevent abuse, investigate suspicious activity.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
3.5 Marketing communications (optional)
Purpose: sending updates about services, promotions or news by email (where applicable).
Legal basis: consent (Art. 6(1)(a) GDPR), unless local law allows soft opt-in for existing customers. You can withdraw your consent at any time.
4) Mandatory vs Optional Data
Providing data necessary to execute the service (pick-up address, contact details, booking information) is mandatory. If you do not provide such information, we may be unable to deliver the requested service.
Other information is optional and will only be processed if provided voluntarily.
5) Sharing of Data (Recipients)
We do not sell personal data.
We may share data only when necessary, with:
● Bags Free staff and authorised collaborators
● external couriers/shipping partners (for shipment delivery)
● IT providers (hosting, email systems, website management)
● payment service providers (if applicable)
● legal/tax consultants and competent authorities when required by law
All partners act as Data Processors or independent Controllers according to GDPR obligations.
6) Data Transfers Outside the EU
If certain service providers (e.g. email tools, analytics, translation plugins) are located outside the EU/EEA, data transfers will occur only with appropriate safeguards (e.g. Standard Contractual Clauses).
7) Retention Period
We keep personal data only for as long as necessary:
● booking/service data: for the duration of service and for the following period needed for legal protection
● billing/accounting data: for the time required by tax law
● customer support communications: for a reasonable period to manage enquiries and disputes
● marketing data: until you withdraw consent or request deletion
8) Your Rights Under GDPR
You may request at any time:
● access to your personal data
● rectification (correction)
● deletion (where applicable)
● restriction of processing
● objection to processing (in certain cases)
● data portability (where applicable)
● withdrawal of consent (for marketing)
To exercise your rights, contact us using the references in Section 1.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
9) Special Categories of Data
Please do not provide sensitive data (health-related, religious beliefs, etc.) through our forms or messages.
If such data is accidentally received, it will be handled only where strictly necessary and in accordance with applicable law.
10) Cookies and Tracking Tools
Our website may use cookies and similar technologies. Cookies may be:
● Technical cookies (necessary for website functioning)
● Analytics cookies (to understand website usage)
● Marketing cookies (only if enabled and accepted by the user)
For full details, please refer to our Cookie Policy and cookie preferences banner (where applicable).
11) Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
The updated version will always be published on this page with the “Last update” date.