1. Who We Are
BBKW, Lda.
Controller of personal data, both when acting as a direct operator and when managing the BlockStorage platform, a commercial brand owned by BBKW.
Contact email: mail@bbkw.eu
Tax number (NIF): 513 788 360
When the User books a Unit from a partner Operator, that Operator is the controller responsible for processing data related to the booking and the performance of the contract.
In such cases, BBKW, through the BlockStorage brand, acts as a processor or technical intermediary under Article 28 of the GDPR.
2. Personal Data We Collect
Depending on how you interact with the website and our services, we may collect the following data:
2.1. Account and booking data
- Full name
- Email address and telephone contact
- Address and country of residence
- Tax identification number (where required for invoicing)
- Payment details (securely processed through certified providers)
- Booking history, transactions and invoices
2.2. Technical and browsing data
- IP address, device type and browser
- Cookies, session identifiers and language preferences
- Information on interactions with the website (pages visited, browsing time, clicks, etc.)
2.3. Operational data (where applicable)
- Access data to Units (entry/exit records, PIN codes, access logs)
- Copy of identification document (where required for security or contractual purposes)
3. Purposes of Processing
Personal data is processed exclusively for specific and legitimate purposes, namely:
- Management of bookings and contracts: account creation, Unit reservations, invoicing and contractual communications;
- Marketplace service provision: connection between Users and Operators, management of payments and commissions;
- Compliance with legal obligations: tax, accounting and fraud prevention requirements;
- Communications and customer support: handling requests, technical assistance and operational notifications;
- Marketing and personalisation (subject to consent): newsletters, promotions, suggestions of nearby Units or related campaigns;
- Physical and digital security: access control, video surveillance (where applicable) and infrastructure protection.
4. Legal Basis for Processing
The processing of personal data is based on the following legal grounds:
- Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR);
- Compliance with legal obligations (Article 6(1)(c));
- Legitimate interests of BBKW/BlockStorage (Article 6(1)(f)) — namely fraud prevention, service improvement and operational security;
- Consent of the data subject (Article 6(1)(a)) — where the User accepts marketing communications, optional cookies or provides optional data.
5. Data Sharing and Recipients
Data may only be shared with:
- Partner Operators, where a booking is made for a Unit managed by third parties (for contract performance);
- Service providers contracted by BBKW/BlockStorage (e.g. payment processors, email providers, web hosting, booking management systems);
- Public authorities, where required by law (such as the Tax Authority, law enforcement bodies or the CNPD);
- Technical partners responsible for platform maintenance and information security.
Under no circumstances is data sold or transferred for commercial purposes to unauthorised third parties.
6. Data Retention
Personal data is retained only for the period necessary to fulfil the purposes for which it was collected:
- Booking and invoicing data: 10 years (tax and accounting obligations);
- Contact and marketing data: until consent is withdrawn;
- Access and security data: up to 12 months after the end of the contract.
After these periods, data is securely anonymised or deleted.
7. Data Subject Rights
Under applicable legislation, the User has the following rights:
- Access to their data and how it is processed;
- Rectification of inaccurate or outdated data;
- Erasure (“right to be forgotten”);
- Restriction or objection to processing;
- Data portability in a structured format;
- Withdrawal of consent where processing is based on it;
- Lodging a complaint with the Comissão Nacional de Proteção de Dados (CNPD) if they believe their rights have been violated.
Requests may be sent to mail@bbkw.eu or mail@blockstorage.pt and will be handled within a maximum of 30 days.
8. Cookies and Similar Technologies
BlockStorage, operated by BBKW, uses cookies and equivalent technologies to improve the browsing experience, analyse statistics and present personalised content.
Users may manage or disable non-essential cookies via the consent banner displayed on the website or through their browser settings.
The detailed cookie policy is available at [Cookie Policy].
9. Information Security
BBKW adopts appropriate technical and organisational measures to protect data against loss, destruction, unauthorised access, alteration or disclosure.
These measures include:
- Encrypted communications (SSL/TLS);
- Secure storage on servers located within the European Union;
- Access control and user authentication;
- Internal confidentiality policies and staff training.
Despite these measures, Users acknowledge that no system is entirely secure and that online data transmission carries residual risks.
10. International Data Transfers
Personal data is not transferred outside the European Economic Area (EEA), unless the service provider ensures an adequate level of protection under Articles 45 to 49 of the GDPR (e.g. EU standard contractual clauses).
11. Changes to the Privacy Policy
BBKW, Lda. may update this Privacy Policy periodically.
Changes will be published on this page with the corresponding update date.
Continued use of the website following such changes implies acceptance of the revised version.