PRIVACY POLICY
Information on the Processing of Personal Data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 – GDPR
Last updated: October 2026
1. Data Controllers
This Privacy Policy describes how the personal data of users who visit the website www.vaise.it, make bookings and use the luggage storage services provided at VAISE locations are processed.
The data controllers are:
VAISE SRL
• Registered office: via Crosariole 6, 35010 Trebaseleghe (PD), Italy
• VAT number: 05642830284
• Website: www.vaise.it
• Privacy contact: info@vaise.it
VAISE SRL manages the website and the locations in Venice.
PLAYNET ITALIA SNC
• Registered office: via dell’Albero 10/R, Florence (FI), Italy
• VAT number: 05463560481
• Privacy contact: firenze-smn@vaise.it
PLAYNET ITALIA SNC is the company responsible for the Florence location.
The two companies act as independent data controllers for the processing activities falling within their respective areas of responsibility. Each company is responsible for the processing of personal data relating to the services it manages. For further information or to exercise their rights, data subjects may contact info@vaise.it, specifying the location or service to which their request relates.
2. Categories of Personal Data Processed
In connection with the use of the website and the services, the following categories of personal data may be processed.
2.1 Identification and Contact Data
First name, surname, email address, telephone number and any other information provided by users when making a booking or requesting assistance.
2.2 Booking Data
Booking reference, selected location, service date and time, booking duration, locker type, booking status, any amendments or cancellations, and information necessary to manage the service.
2.3 Payment Data
Information relating to the payment amount, date and outcome, transaction identifiers, refund status and data required for payment reconciliation. Payments may be processed through various payment service providers. Full payment card details are processed in accordance with the procedures and responsibilities established by the respective providers.
2.4 Technical and Browsing Data
When users browse the website, data such as IP address, device and browser information, access date and time, technical logs and data necessary for the operation and security of the website may be collected. Further information about cookies and tracking technologies is available in the Cookie Policy.
2.5 Locker Usage Data
Data relating to the opening and closing of lockers, access codes, usage times and any malfunctions or incidents may be processed to the extent necessary to manage the service and ensure security.
2.6 Images Collected through Video Surveillance
At locations equipped with cameras, images of individuals entering or passing through monitored areas may be collected. This processing is also governed by a specific Video Surveillance Privacy Notice, available on www.vaise.it.
2.7 Data Voluntarily Provided by Users
Information contained in requests sent by email, contact forms or other customer support channels may be processed to the extent necessary to handle the request.
3. Purposes of Processing and Legal Bases
Personal data are processed for the following purposes.
A. Booking Management and Service Provision
To create and manage bookings, assign lockers, enable access, manage changes, provide assistance during use of the service and request feedback on the quality of the service received. Legal basis: performance of a contract or taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.
B. Payment Processing and Administrative Compliance
To process payments, verify transactions, manage any refunds, prevent errors and comply with tax and accounting obligations. Legal bases: performance of a contract, pursuant to Article 6(1)(b) GDPR, and compliance with legal obligations, pursuant to Article 6(1)(c) GDPR.
C. Customer Support and Complaint Management
To respond to user enquiries, resolve technical issues, handle complaints and investigate any service disruptions. Legal basis: performance of a contract and, where applicable, the data controller’s legitimate interest in handling requests and protecting its rights, pursuant to Article 6(1)(b) and (f) GDPR.
D. Security of Premises and Services
To protect individuals and property, identify irregularities in locker usage, prevent misuse and investigate incidents or damage. Legal basis: the data controller’s legitimate interest in ensuring the security of its premises and protecting individuals and property, pursuant to Article 6(1)(f) GDPR, subject to an assessment of necessity and the balancing of interests. Video surveillance is also subject to the specific information provided in Document 2.
E. IT Security and Prevention of Misuse
To protect the website, IT systems and services against unauthorised access, fraud, attempted intrusions and improper use. Legal basis: the legitimate interest in ensuring system security and preventing misuse, pursuant to Article 6(1)(f) GDPR, or compliance with legal obligations, where applicable.
F. Compliance with Legal Obligations and Protection of Rights
To comply with applicable legal requirements and to establish, exercise or defend legal claims, whether out of court or in judicial proceedings. Legal bases: Article 6(1)(c) GDPR and, where applicable, Article 6(1)(f) GDPR.
G. Traffic Analysis and Website Improvement
The website may use analytics tools, including Google services, to understand how the website is used, measure its performance and improve its content and functionality. Where cookies or tracking technologies requiring consent are used, they are activated only after valid consent has been obtained. The website does not use data for further purposes that are incompatible with those described above without providing a new privacy notice and obtaining any required consent, where necessary.
4. Whether the Provision of Data Is Mandatory
Providing the data required to make a booking and receive the service is necessary to enter into and perform the contract. Failure to provide the required data may make it impossible to complete the booking or provide the requested service. Providing data for additional purposes, such as the use of non-essential cookies, is optional. Refusing consent does not affect access to website features that do not require such technologies.
5. Processing Methods and Security
Personal data are processed using electronic systems and, where necessary, paper-based records, in accordance with the principles of lawfulness, fairness, transparency, data minimisation and storage limitation.
The data controllers implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, disclosure or unauthorised alteration. Access to personal data is restricted to authorised individuals and parties who need the data for the purposes described in this Privacy Policy.
6. Recipients of Personal Data
Personal data may be disclosed, within the limits of their respective responsibilities and needs, to the following categories of recipients:
• Payment service providers and financial institutions involved in transactions;
• Providers of hosting, IT infrastructure, website maintenance and technical support services;
• Providers of web traffic analytics tools, including the Google services actually used;
• Providers of communication and email management services;
• Accounting, tax and legal advisers and other appointed professionals;
• Public authorities, law enforcement agencies and judicial authorities, where required by law or necessary to protect legal rights;
• Other authorised parties or appointed service providers, within the limits of the purposes described above.
Service providers processing personal data on behalf of a data controller are appointed as data processors pursuant to Article 28 GDPR, where applicable. An up-to-date list of relevant providers may be requested using the contact details provided in this Privacy Policy, subject to applicable legal requirements.
7. Transfers of Data to Third Countries
Some technology or payment service providers may process personal data outside the European Economic Area. Any transfers to third countries will be carried out only in compliance with the conditions established by the GDPR, for example on the basis of an adequacy decision adopted by the European Commission or through appropriate safeguards, such as Standard Contractual Clauses, where applicable. Information concerning actual transfers, the countries involved and the safeguards adopted must be verified against the contracts and configurations of the service providers used.
8. Data Retention Periods
Personal data are retained for the period strictly necessary to fulfil the purposes for which they were collected, taking into account legal obligations and the need to protect potential legal rights.
In particular:
• Operational booking data: a retention period of 60 days from completion of the service is envisaged, subject to verification of whether certain data need to be retained for longer to comply with legal obligations, manage complaints or disputes, process refunds or protect legal rights.
• Payment data and accounting documentation: retained for the periods required by applicable tax, accounting and civil law. Documents subject to statutory retention requirements are not deleted when the 60-day period applicable to operational data expires.
• Customer support requests and complaints: retained for the time necessary to handle the request or complaint and, where necessary, for the subsequent period required to protect legal rights.
• Technical logs and security data: retained for the period strictly necessary for security purposes, according to criteria to be defined based on the systems used.
• Video surveillance images: retained for the period specified in the dedicated Video Surveillance Privacy Notice, currently envisaged as 30 days, subject to verification of necessity and proportionality.
• Cookie and analytics data: retained in accordance with the periods specified in the Cookie Policy and the settings of the individual services.
Where retention is necessary in connection with a dispute or legal obligation, data may be retained for the period strictly necessary for that purpose. At the end of the applicable retention periods, data are deleted or anonymised, where technically possible and subject to any further retention obligations.
9. Data Subject Rights
Data subjects may exercise the following rights, subject to the limits and conditions established by the GDPR:
• The right to access their personal data;
• The right to rectify inaccurate or incomplete data;
• The right to erasure, where provided for by law;
• The right to restriction of processing;
• The right to data portability, where applicable;
• The right to object to processing based on legitimate interests, on grounds relating to their particular situation;
• The right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
• The right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Requests may be sent to info@vaise.it, specifying the nature of the request and the company or location concerned. The data controller may request additional information reasonably necessary to verify the identity of the requester.
10. Cookies and Tracking Technologies
The website may use technical cookies and, subject to obtaining consent where required, third-party analytics cookies or tracking technologies, including certain Google services. For information about cookie categories, providers, retention periods and how to give, refuse or withdraw consent, please refer to the dedicated Cookie Policy available on www.vaise.it. Cookie preferences may be changed through the consent management system available on the website.
11. Automated Processing
No automated decision-making process, including profiling, is declared that produces legal effects or similarly significant effects concerning the data subject.
12. Amendments to This Privacy Policy
This Privacy Policy may be updated to reflect changes in legislation, organisational or technical arrangements, or the services provided. The updated version will be published on www.vaise.it, together with the date of the update. For any information regarding the processing of personal data, please contact info@vaise.it.
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA THROUGH VIDEO SURVEILLANCE
Pursuant to Article 13 of Regulation (EU) 2016/679 – GDPR
Last updated: October 2026
1. Data Controller
The data controller is the company managing the location where the cameras are installed:
• VAISE SRL, via Crosariole 6, 35010 Trebaseleghe (PD), Italy, VAT No. 05642830284, for the Venice locations;
• PLAYNET ITALIA SNC, via dell’Albero 10/R, Florence (FI), Italy, VAT No. 05463560481, for the Florence location.
For requests concerning the processing of video footage, please contact info@vaise.it, specifying the location concerned.
2. Purposes of Processing
Images are collected for the purposes of ensuring the safety of individuals and property, protecting the premises, preventing and investigating theft, damage, unauthorised access and other incidents, and safeguarding the data controller’s rights. Cameras are installed and operated only in areas strictly necessary to achieve these purposes. The system must not be used for purposes incompatible with those stated above.
3. Legal Basis
The legal basis for processing is the data controller’s legitimate interest in ensuring the safety of individuals, protecting property, and preventing and investigating incidents, pursuant to Article 6(1)(f) GDPR, subject to an assessment of necessity and a balancing of interests against the rights and freedoms of the data subjects. The installation and use of the system must also comply with all other applicable legislation, including any provisions relating to the protection of workers and remote monitoring.
4. Methods of Image Collection
Images are collected through cameras installed at the relevant locations. Areas subject to video surveillance are identified by appropriate signs placed before entering the monitored areas. These signs refer to this full Privacy Notice.
5. Retention Period
The current retention period is 30 days from the date of recording, unless specific circumstances justify longer retention where permitted by law, for example in connection with an incident or a request from the competent authorities.
6. Recipients of the Images
Images may be accessed exclusively by authorised personnel and, where necessary, by technical service providers appointed to manage the system, within the limits of their respective duties. Images may also be disclosed to the competent authorities where required by law or necessary to investigate incidents and protect legal rights. Images are not made publicly available.
7. Data Subject Rights
Data subjects may exercise their rights of access, erasure, restriction of processing and objection, within the limits established by the GDPR, taking into account the specific conditions applicable to video surveillance and the rights of any third parties who may appear in the footage. Requests may be sent to info@vaise.it, specifying the location, date and, where possible, an approximate time range for the recording. The data controller may request additional information necessary to identify the relevant footage and verify the identity of the requester. The right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) remains unaffected.
8. Additional Information
For further information about the processing of personal data, please consult the general Privacy Policy available at www.vaise.it or contact info@vaise.it.
COOKIE POLICY
Information on the use of cookies and tracking technologies
Last updated: October 2026
1. What Are Cookies?
Cookies are small text files that websites may store on a user’s device while they browse. Among other things, they allow websites to maintain an active session, remember preferences, collect statistical data and support advertising activities. The website www.vaise.it may use cookies and similar technologies, depending on the tools and configurations actually implemented.
2. Types of Cookies
2.1 Technical Cookies
These cookies are necessary for the website to function and to provide the requested services, for example by enabling navigation, managing sessions and completing bookings.
These technologies may be used without consent where they are strictly necessary for the features requested by the user, in compliance with applicable legislation.
2.2 Statistical and Analytics Cookies
The website may use analytics tools, including Google Analytics services, where applicable, to collect information about website usage and improve its performance.
The classification of these tools and whether consent is required depend on their actual configuration, the information collected, the anonymisation methods used and any links with other data. Tools requiring consent will not be activated until the user has given their consent.
3. Third-Party Services
The website may incorporate services provided by third parties, including Google services for website traffic analysis. These providers may collect information through cookies or other technologies, in accordance with their respective configurations and privacy policies.
4. Consent Management
On the user’s first visit to the website, non-essential technologies requiring consent must remain disabled until the user has made a choice.
The consent management system must allow users to:
• Accept non-essential cookies;
• Reject non-essential cookies;
• Select their preferred cookie categories;
• Subsequently change or withdraw their preferences.
The options to accept or reject cookies must be presented clearly and without influencing users to give their consent. Preferences may be changed through the cookie management link or control available on the website, where implemented.
5. Managing Cookies Through the Browser
Users may also configure their browser to block or delete certain cookies. However, disabling technical cookies may affect the proper functioning of the website or certain booking features.
6. Personal Data Protection
Information collected through cookies or tracking technologies that constitutes personal data is processed in accordance with VAISE’s general Privacy Policy, available at www.vaise.it.
The legal basis for processing depends on the category of technology used and the purposes for which it is employed. Where consent is required, users may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
7. Updates
This Cookie Policy may be updated to reflect changes to the services used, the cookies installed or the applicable legislation. The updated version will be published on www.vaise.it, together with the date of the update. For further information, please contact info@vaise.it.