Boxyard SRL, Bucharest, Romania, is the data controller. Privacy questions: [email protected].
Account data: name, email, phone. Payment data: handled by our payment processor — we never store card numbers. Access data: door events and codes used, for security. Camera footage: yard and box-door cameras (never inside your box). App usage: technical logs, and analytics/marketing data only with your cookie consent.
To perform the rental contract (account, access, billing), for our legitimate interest in securing the yard (logs, footage), to meet legal obligations (invoicing, tax), and — only with consent — for analytics and marketing.
Account and billing data: for the contract plus legal retention periods. Access logs: 12 months. Camera footage: up to 30 days, longer only if needed for an incident. Consent-based data: until you withdraw consent.
Processors that run the service: payment provider, hosting, email delivery, analytics (with consent). Authorities, when the law requires it. We never sell your data.
Under the GDPR you can request access, correction, deletion, restriction, portability, and object to processing — write to [email protected]. You can also complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro).
Cookies are covered separately in our Cookie Policy, and you can change your choices anytime via COOKIE SETTINGS in the footer.