Privacy Policy – Bottle Locker B.V.

Version: November 2025

  1. Introduction

Bottle Locker B.V. (“Bottle Locker”, “we”, “us”, “our”) attaches great importance to protecting your privacy. This Privacy Policy explains which personal data we collect, for what purposes, on which legal bases, with whom we share it, and which rights you have.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG). By using our website and services, you acknowledge that you have read this Privacy Policy.

  1. Controller

Bottle Locker B.V.

Mesdagstraat 64 2

1073 HR Amsterdam

The Netherlands

E-mail: info@bottlelocker.nl

  1. Personal data we collect

3.1 Data you provide to us

  • We may process the following categories of data:
    • Name and contact details: name, email address, telephone number, billing and collection/delivery address
    • Account and subscription details: selected storage options and term, customer number, communication preferences
    • Payment information: payment status and references from the payment service provider
  • We do not store full card details, payments are processed by an external payment provider

3.2 Data collected automatically

When you visit our website, we may automatically collect:

  • Device and usage data: IP address, browser type, device and operating system, pages visited, date and time of visit
  • Cookies and similar technologies as described in section 7
  1. Purposes of processing

We process your personal data for the following purposes:

  • Creating, managing and performing your account, subscription and storage agreement
  • Processing orders, payments and invoicing
  • Providing customer service and communicating with you, including service and transaction messages
  • Planning and managing drop-off, collection and on-site appointments
  • Complying with legal obligations, including tax, accounting and alcohol-related regulations where applicable
  • Ensuring security, fraud prevention and internal administration
  • Analysing and improving our website, services and customer experience
  • Sending marketing communications (such as newsletters) if you have given your consent, which you can withdraw at any time
  1. Legal bases (GDPR article 6)

We process personal data on the basis of:

  • Performance of a contract (art. 6(1)(b) GDPR). to provide our services, manage storage and provide support
  • Legal obligation (art. 6(1)(c) GDPR). to comply with statutory duties such as tax and accounting obligations
  • Legitimate interests (art. 6(1)(f) GDPR). such as security, fraud prevention, internal reporting and service improvement, where we carefully balance our interests against your privacy interests
  • Consent (art. 6(1)(a) GDPR). for example for newsletters and non-essential cookies, which you can withdraw at any time
  1. Sharing of personal data

We do not sell or rent your personal data. We only share data with:

  • Service providers acting on our behalf, such as hosting and IT providers, payment service providers, email and communication tools, and logistics partners, subject to data processing agreements where required
  • Professional advisers, such as accountants or legal advisers, where necessary
  • Competent authorities or third parties where this is required by law or necessary to protect our rights or the rights of others
  • If personal data is transferred to countries outside the European Economic Area, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), unless an adequacy decision applies
  1. Cookies and tracking technologies

We use cookies and similar technologies to:

  • Enable the proper and secure functioning of the website (functional cookies)
  • Collect statistics on website use and improve our services (analytics cookies, configured to be as privacy-friendly as possible where feasible)
  • Show personalised content or marketing messages only if you have given consent (marketing cookies)
  • You can manage your cookie preferences via our cookie banner and your browser settings. For more information, please refer to our Cookie Policy if provided separately
  1. Retention periods

We do not retain personal data longer than necessary for the purposes listed above:

  • Transaction and accounting data: up to 7 years to comply with statutory retention obligations
  • Customer service and communication data: up to 2 years after the last contact, unless longer retention is necessary in the context of a dispute
  • Marketing data: until you unsubscribe or withdraw your consent
  • Other data: as long as necessary for the specific purpose, after which we delete or anonymise the data
  1. Your rights

Subject to the conditions under applicable law, you have the right to:

  • Request access to your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure of your data
  • Request restriction of processing
  • Receive your data in a structured, commonly used and machine-readable format (data portability)
  • Object to processing based on our legitimate interests and to direct marketing
  • Withdraw your consent where processing is based on consent
  • You can exercise your rights by contacting info@bottlelocker.nl
  • We aim to respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
  1. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, loss, destruction or damage. These measures may include access controls, encryption where appropriate, secure connections and periodic evaluations. No method of transmission or storage is completely secure, but we strive for a level of security appropriate to the risks.

  1. Minors

Our services are intended only for persons aged 18 years and older. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to remove such data.

  1. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. In case of material changes, we will inform you by email or another suitable channel at least 14 days before the changes take effect. The latest version is always available on our website. 

  1. Contact

If you have any questions or requests regarding this Privacy Policy or our data protection practices, please contact:

Bottle Locker B.V.

Mesdagstraat 64 2

1073 HR Amsterdam

The Netherlands

E-mail: info@bottlelocker.nl