FixyBag
EN|PL

Privacy Policy

FixyBag · Next Service Sp. z o.o.

§ 1. General provisions

  1. This Privacy Policy sets out the rules for processing and protecting the personal data of users of the website operating at https://fixybag.com (the “Service”).
  2. This document reflects the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, the “GDPR”).
  3. The owner of the Service and the Personal Data Controller is Next Service Sp. z o. o., with its registered office at Aleja Krakowska 264, 02-210 Warsaw, entered in the Register of Entrepreneurs of the National Court Register under KRS: 0000584355, tax identification number NIP: 5223043546 (the “Controller”).
  4. You can contact the Controller on privacy matters and the exercise of your rights by email at info@fixybag.com or by post at the company’s registered address.

§ 2. Purposes and legal bases of processing

The Controller processes the personal data of Service users only for specific, legitimate purposes:

  1. Quotes and handling of service requests and expert assessments: We process data (name, email address, phone number and the submitted description of the defect with photos of the damaged suitcase) to prepare and present a baggage repair offer. The legal basis is the Controller’s legitimate interest in responding efficiently to quote requests and building customer relationships (Art. 6(1)(f) GDPR).
  2. Conclusion and performance of the repair contract: If you accept the quote and proceed with the repair, your data is processed to perform the contract, including logistics and settlements (Art. 6(1)(b) GDPR).
  3. Compliance with legal obligations: Processing of data (invoicing details) to meet tax and accounting obligations under Polish law (Art. 6(1)(c) GDPR).
  4. Newsletter: If you have given voluntary and explicit consent, your email address is processed to send you commercial information, promotions and news about FixyBag services (Art. 6(1)(a) GDPR).
  5. Establishing, pursuing or defending claims: Based on the legitimate interest of protecting the company’s rights and interests (Art. 6(1)(f) GDPR).

§ 3. Data retention period

Users’ personal data is stored only for as long as necessary for the purposes for which it was collected:

  1. Data from quote and contact forms – for the duration of the correspondence and handling of the enquiry, no longer than 2 years from the last contact, unless a contract has been concluded.
  2. Data related to the performance of contracts (suitcase repair and other leather goods services) – for the duration of the contract and, after its completion, for the period required by tax law (5 years from the end of the tax year) and until the limitation period for any claims arising from the service or guarantee has expired.
  3. Data processed for marketing purposes (Newsletter) – until you withdraw your consent or object to the processing.

§ 4. Rights of data subjects

Every user of the FixyBag Service has full control over their personal data. To exercise your rights, simply send a message to info@fixybag.com. You have the right to:

  • Access your data and obtain a copy of it,
  • Rectify (correct) your data if it is inaccurate or incomplete,
  • Erasure of your data (the “right to be forgotten”), unless other legal grounds require its further retention (e.g. tax matters),
  • Restrict the processing of your data,
  • Data portability to another controller,
  • Object to processing based on the Controller’s legitimate interest (e.g. for statistical or direct marketing purposes),
  • Withdraw consent at any time (for the Newsletter), without affecting the lawfulness of processing carried out before its withdrawal.

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

§ 5. Recipients of personal data

  1. To ensure the proper operation of the Service and the efficient provision of repair services, the Controller may share personal data with third parties under data processing agreements. These recipients include:
    • Providers of hosting and technical maintenance of the Service’s infrastructure,
    • Providers of accounting, invoicing and CRM software supporting customer service,
    • Logistics operators and courier companies (to the extent necessary to collect the damaged suitcase or bag and return the repaired one to the Customer).
  2. The Controller does not transfer personal data to third countries (outside the European Economic Area); any use of global support tools (e.g. email delivery systems) relies on EU standard contractual clauses guaranteeing a high level of protection.

§ 6. Final provisions

  1. Providing personal data in the Service’s forms is voluntary, but necessary to prepare a quote, contact you or perform the repair service.
  2. The Controller reserves the right to amend this Privacy Policy in the event of changes in the law or in the operation of the Service. New versions will be published directly on this page.

Last updated: 19 October 2026