Welcome
Log in to your bagly account and access your content.
Your data are safe with us
We store your information in encrypted form on our server in Germany.
Need help?
Help & Contact
Log in to your bagly account and access your content.
We store your information in encrypted form on our server in Germany.
Need help?
Help & Contact
(1) These General Terms and Conditions (hereinafter referred to as the “GTC”) apply to the use of the “bagly” service, including the bagly Progressive Web App, the mobile bagly apps for iOS and Android, the digital codes, QR codes,
Public Tokens and found-item notification functions provided via bagly, as well as to the ordering, purchase and delivery of goods (e.g. physical luggage tags) and the management of digital or physical luggage tags via our online shop.
(2) The provider of the service is:
bagly Deutschland
Robert S. Berg
Rossäckerstrasse 33/2
74189 Weinsberg
Germany
Email: info@usebagly.de
VAT Identification Number: DE420897876
(hereinafter referred to as “bagly Deutschland”).
(3) These GTC apply both to consumers and to entrepreneurs, unless expressly provided otherwise.
(1) bagly is a digital service for creating, managing and using luggage tags with individual codes and QR codes. Users create so-called “baglys” in their user account, manage them and link them to digital codes or physical
luggage tags.
(2) A bagly is used to assign a QR code to an item of luggage. If a finder scans this QR code in the event of a lost or found item of luggage, the finder sends a found-item notification directly to the user via a finder page.
(3) The QR code contains a Public Token through which the respective bagly is uniquely assigned. The Public Token does not serve to publicly disclose all user data, but rather provides the technical assignment of the luggage tag within
the bagly system.
(4) Users may store information about the traveller, travel itinerary, destinations and contact details. Using the visibility settings provided, the user determines which information is visible to a finder after scanning a valid
and active QR code.
(5) bagly is available as a Progressive Web App as well as a native app via the Apple App Store and Google Play Store. An integrated online shop is also operated via the website and the apps, through which physical goods
and digital content can be purchased.
(1) The presentation of the service, goods and products on the website, in the online shop or in the app stores does not constitute a legally binding offer, but rather a non-binding invitation for the user to submit an offer (order).
(2) When registering a free user account, the user submits an offer by sending the registration form. The contract is concluded when bagly Deutschland confirms the registration by email or activates the account.
(3) When purchasing paid digital codes or physical goods in the online shop, the user may place products in the virtual shopping cart without obligation. Before submitting the order, the user may view, change or delete the entered data and the contents of the shopping cart
at any time. By clicking the order button (e.g. “Order with obligation to pay”), the user submits a binding offer to purchase.
(4) The contract is concluded as follows:
(1) Subject matter: Digital content within the meaning of these GTC comprises all data not supplied on a tangible medium that is provided in digital form (in particular digital codes for activating bagly functions, QR code templates and PDF generations).
(2) Provision: The digital content is provided immediately after successful purchase by directly generating and assigning the individual digital code to the user's account. The user is not entitled to
provision in any other form.
(3) Rights of use (licence): bagly Deutschland grants the user a simple, non-transferable and unlimited right of use (subject to deletion of the account in accordance with § 8) to use the digital code provided for private purposes or for
contractual business purposes for a specific bagly. Any use beyond this scope, in particular manipulation, reproduction, resale or disclosure to unauthorised third parties, is prohibited.
(4) Updates: Where required by law (in particular in B2C contracts concerning digital products), bagly Deutschland ensures that updates required to maintain the conformity of the digital content
(e.g. security updates) are made available to the user.
(1) All prices stated in the online shop are final prices and include the applicable statutory German VAT.
(2) Any shipping costs incurred for physical goods are clearly displayed to the user in the respective offer and in the shopping cart before submission of the binding order and must be borne by the user. No shipping costs apply
to purely digital content.
(3) The payment methods offered in the online shop are available to the user (e.g. credit card, PayPal or payments via the payment service provider Mollie).
(4) Unless otherwise agreed (e.g. in the case of advance payment), payment claims arising from the concluded contract are due immediately. The user's account will be charged after completion of the ordering process or in accordance with the terms and conditions of the
payment service provider used.
(1) bagly Deutschland discloses the user's personal data to third parties only where this is strictly necessary for the performance of the contract, where there is a legal obligation to do so, or where the user has expressly consented.
(2) In order to fulfil our contractual obligations, we work with external service providers to whom data is transmitted to the extent necessary:
(3) The found-item notification function is based on deliberate and user-controlled disclosure. If a finder scans the QR code, only the data (e.g. travel itinerary, temporary contact details) that the user has explicitly made visible through the visibility settings
in their user account is displayed to the finder.
(4) The legal bases and detailed provisions regarding data processing and data protection are set out in the separate Privacy Policy.
(1) Registration with bagly Deutschland is required in order to use the app and its management functions. An email address and password are required for registration. The user is obliged to provide truthful information and
to keep their login credentials confidential.
(2) The user account is personal or company-specific and may not be transferred to other persons or companies without the consent of bagly Deutschland.
(1) The user may delete their user account themselves or request its deletion. An additional confirmation is required before final deletion.
(2) Following deletion or deactivation of the user account, any active codes assigned to the user account will be deactivated. These codes can no longer be used by other users.
(3) Following deletion or deactivation of the user account, scanned former baglys can no longer be assigned to the user.
(4) Where statutory retention obligations apply, in particular in relation to previous purchases, invoices or tax-relevant transactions from the online shop, the data required for these purposes will remain stored for the statutory
retention periods.
(1) An individual digital code is required in order to use a printable or actively usable bagly. Digital codes are generated after successful purchase and assigned to the respective bagly in the user account.
(2) Each code applies to a specific bagly and may not be transferred to another user account or another person without the express consent of bagly Deutschland.
(3) Digital codes are generally valid for an unlimited period as long as the user account remains active, the code has not been deleted or deactivated and there is no misuse. A deleted or deactivated code is
invalid.
(1) In addition to digital codes, physical bagly tags are also available. Physical tags can be purchased via the bagly Deutschland online shop, retailers, tour operators, luggage manufacturers or other partners.
(2) Physical tags are already equipped with individual codes. An activation code is required to activate a physical tag. A physical tag can only be activated within an active user account.
(3) A physical tag is generally assigned to only one user account. Transfer to another user account is not possible unless bagly Deutschland provides a different function in an individual case. If
a physical tag is lost, the user is entitled to deactivate the corresponding entry in the app; the code linked to it will thereby also be deactivated.
(4) Delivery conditions: Unless otherwise stated in the online shop, physical goods will be delivered within 3–5 business days to the delivery address specified by the customer. If delivery fails for reasons for which the customer
is responsible (e.g. an incorrect address), the customer shall bear the resulting additional costs for return transport and reshipment.
(5) Retention of title: The delivered goods (physical luggage tags) remain the property of bagly Deutschland until the purchase price owed has been paid in full.
(1) The preproduction of codes and QR codes is carried out exclusively by bagly Deutschland or by technical systems authorised by bagly Deutschland.
(2) The sale or commercial distribution of purely digital codes by unauthorised intermediaries is prohibited.
(3) Physical tags are distributed through retailers, tour operators, luggage manufacturers or other partners. The end customer independently activates the physical tag purchased through a partner in accordance with § 10 of these GTC within their own
user account.
(4) Warranty: The statutory provisions on liability for defects apply to all physical goods and digital content from our online shop. For entrepreneurs, the warranty period for physical goods supplied by us is
12 months from delivery of the goods.
(1) No lost property office: bagly Deutschland is not a lost property office, a storage facility for lost or found luggage, or a transport, logistics or shipping service provider. We do not accept, store, inspect, forward or
return items of luggage.
(2) No return guarantee: bagly Deutschland does not guarantee that a lost item of luggage will be found, reported, returned or handed over to the user.
(3) No real-time tracking: bagly does not provide real-time location tracking or GPS tracking of luggage. Location data is transmitted only if a finder voluntarily and actively submits their location as part of a found-item notification.
(4) General liability: bagly Deutschland shall only be liable for damages in cases of intent and gross negligence. In cases of slight negligence, bagly Deutschland shall only be liable for breaches of material contractual obligations (cardinal obligations),
in which case liability is limited to the typical and foreseeable damage arising from the contract. Liability for damages resulting from injury to life, limb or health remains unaffected.
(1) The service may be used worldwide, provided that it is technically available and legally permissible at the user's current location.
(2) No specific minimum age is required to register a free user account. The purchase of paid digital codes or physical tags in the online shop requires the user to have full legal capacity
or to act with the express consent of their legal representative.
(1) The law of the Federal Republic of Germany shall apply, excluding the United Nations Convention on Contracts for the International Sale of Goods (CISG). If the user places an order as a consumer and has their habitual residence in another country at the time of the order, the application of mandatory
provisions of the law of that country shall remain unaffected by this choice of law.
(2) If the user is a merchant, a legal entity under public law or a special fund under public law, the place of jurisdiction for all disputes arising out of or in connection with this contract shall be the registered office of bagly
Deutschland. As the provider is based in Weinsberg, Heilbronn is agreed as the competent place of jurisdiction.
(3) Should individual provisions of these GTC be or become invalid, the validity of the remaining provisions shall not thereby be brought about.
Last updated: 14 August 2026
The protection of your personal data is important to us. This Privacy Policy explains which personal data we process when you use the “bagly” service, our Progressive Web App (PWA), the QR code finder pages or our online shop.
Personal data means any information relating to an identified or identifiable natural person.
This Privacy Policy covers in particular:
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
bagly Deutschland
Robert S. Berg
Rossäckerstrasse 33/2
74189 Weinsberg
Germany
Email: info@bagly-deutschland.de
The hosting and technical management of our systems are provided by ELBE Webservices.
The underlying server infrastructure is provided by:
ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
The server infrastructure is located in Germany. Where the above-mentioned service providers process personal data on our behalf, such processing is carried out under a data processing agreement in accordance with Article 28 GDPR.
When you access our websites, the PWA, the online shop or a QR code finder page, technical data is automatically transmitted to the web server.
The following data may in particular be processed:
The processing is carried out in order to provide our services securely and reliably, to analyse technical errors and to detect and prevent misuse and attacks.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically error-free operation of our systems.
Web server log files generated by the hosting infrastructure used are generally deleted no later than seven days after they are created. Longer storage may be necessary in individual cases, for example where there are specific indications of an attack, misuse or another security incident.
Registration of a user account is required in order to use certain bagly features.
In particular, we process the following data:
The original password is not stored by us in plain text.
The data is processed for the purpose of creating, providing and managing the user account and authenticating the user.
Legal basis: Article 6(1)(b) GDPR.
An email address and password are required to create a user account. Without this information, a user account cannot be created.
Other profile information is generally voluntary unless it is required for a specific order, billing process or use of a particular feature.
Within your user account, you may voluntarily provide information relating to your bagly luggage tags.
This may in particular include:
This data is processed in order to provide the bagly features selected by you and, in particular, to enable contact to be established or information selected by you to be displayed in the event that your luggage is found.
Legal basis: Article 6(1)(b) GDPR.
Providing this information is voluntary. If particular information is not provided, only those features that depend on that information may be unavailable or restricted.
You determine, through the available visibility settings, which information is displayed on the finder page.
Please only enter personal data relating to other persons if you are authorised to do so. Where appropriate, you should inform the person concerned about the processing of their personal data.
Free-text fields are not intended for the storage of special categories of personal data within the meaning of Article 9 GDPR, such as health data, religious beliefs or information concerning sexual orientation.
Each activated bagly luggage tag may be assigned a technical code or public token.
The public token:
Because the token can be associated with a user or luggage tag within our systems, we treat it as a pseudonymous identifier.
When a QR code is scanned, only the personal information that you have selected for display through the relevant visibility settings is shown on the finder page.
The recipient of this information may in principle be any person who has access to the relevant QR code or public token and opens the finder page.
Legal basis: Article 6(1)(b) GDPR.
Please note that once information has been displayed to a finder, we have no control over whether that person records, copies or otherwise stores the information shown.
bagly does not provide GPS tracking or permanent location monitoring of luggage.
A finder may submit a report relating to a bagly luggage tag via the finder page. The data required to process the report, assign it to the relevant luggage tag and notify the owner is processed and stored.
The following data may in particular be processed:
The data is processed in order to assign the finder report to the correct luggage tag and user account, notify the owner that the luggage has been found, enable contact between the finder and the owner, manage the processing and notification status, and ensure the functionality and security of the finder feature.
Legal basis: Insofar as the data is required to provide the finder feature to the bagly user, the legal basis is Article 6(1)(b) GDPR.
The processing of information voluntarily provided by the finder and technical data required for the secure operation of the finder feature is based on Article 6(1)(f) GDPR. Our legitimate interest is to enable reliable contact in the event that luggage is found, ensure that finder reports are delivered correctly and protect the finder feature against misuse.
The finder may additionally choose to voluntarily share the location of the found luggage item.
The following location data may be processed and stored:
Location data is not determined automatically. Location data is only processed if the finder actively uses the relevant feature and permits access to their location via their device or browser.
The location data is used exclusively to inform the owner of the location of the found luggage item as provided by the finder.
bagly does not perform permanent location monitoring and does not provide GPS tracking of the luggage item or the finder.
Legal basis: Article 6(1)(a) GDPR.
Sharing location data is voluntary. A finder report can also be submitted without providing location information.
Consent may be withdrawn at any time with effect for the future. The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.
Personal data stored in connection with a finder report is retained in the active database for 14 days from the date the finder report is created and is then automatically deleted.
The deletion includes, in particular, the finder's contact details, the submitted message, any location data provided, the IP address and user agent, as well as the technical assignment, notification and processing information associated with the finder report.
We send emails that are necessary or requested in connection with the use of bagly.
These may in particular include:
Legal basis: Article 6(1)(b) GDPR. In the case of communications exclusively relating to security, processing may additionally be based on Article 6(1)(f) GDPR.
If you enable web push notifications, we store the technical data required to send these notifications. This includes, in particular, a push endpoint generated by the browser or push service, the required technical keys and the assignment to your user account.
Legal basis: Article 6(1)(a) GDPR.
You may disable push notifications at any time through your user account settings or your browser settings.
Depending on the browser used, the technical delivery of a push notification may be handled through the push service of the respective browser or platform provider. In this context, technical connection data may be processed by that provider.
Where we offer you the option of consenting to receive marketing communications, we use your email address only on the basis of your prior consent.
Legal basis: Article 6(1)(a) GDPR.
Consent is voluntary and may be withdrawn at any time with effect for the future. Withdrawal of consent does not affect your ability to use your normal bagly user account.
If you purchase physical products, such as bagly luggage tags, or digital content or activation codes, we process the data required to complete your order.
This may in particular include:
The processing is carried out for the purpose of processing the order, handling payment, delivering physical products or providing digital content, issuing invoices and handling any related enquiries.
Legal basis: Article 6(1)(b) GDPR and, in relation to data that must be retained by law, Article 6(1)(c) GDPR.
Information marked as mandatory during the ordering process is required in order to enter into and perform the relevant contract. Without this information, we cannot process the respective order.
For payment processing, we use Mollie B.V., Netherlands.
Depending on the payment method selected, additional payment service providers, financial institutions, card schemes or wallet providers may be involved through Mollie.
In connection with a payment, the following data may in particular be processed:
Mollie processes personal data in connection with its payment services as an independent controller.
Full credit card details are generally processed directly by the payment service providers involved. We primarily receive information regarding the payment status and the transaction reference required to assign the payment to the relevant order.
Legal basis for the transmission of data by us: Article 6(1)(b) GDPR.
If you select PayPal as your payment method, the information required for payment processing is transmitted to or collected by PayPal.
For users within the European Economic Area, the responsible entity is generally:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
PayPal processes personal data in connection with its payment services under its own responsibility as a data controller.
When you purchase physical products, we transmit the information required for delivery to the shipping provider used by us.
Shipping is currently carried out in particular by Deutsche Post.
Only the information required for delivery is generally transmitted, in particular:
Legal basis: Article 6(1)(b) GDPR.
For the operation of our websites, online shop and PWA, we use technically necessary storage and access technologies.
These may in particular include:
Where the storage of or access to information on your terminal device is strictly necessary in order to provide a service expressly requested by you, this is carried out on the basis of Section 25(2) TDDDG.
Where personal data is processed in connection with these technologies, the processing is carried out, depending on the respective purpose, in particular on the basis of Article 6(1)(b) or Article 6(1)(f) GDPR.
Technologies that are not necessary to provide the expressly requested service will only be used where any consent required by law has been obtained.
If you contact us by email or by another means, we process the information you provide in order to handle your enquiry.
This may in particular include:
If your enquiry relates to an existing or intended contractual relationship, the legal basis is Article 6(1)(b) GDPR.
For other enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in properly handling and documenting enquiries.
Personal data is only disclosed where this is necessary to provide our services, where we are legally required to do so, where you have given your consent or where another legal basis permits disclosure.
Potential recipients or categories of recipients include in particular:
We do not sell personal data.
User account, luggage, travel and shop data operated directly by bagly is stored on the server infrastructure used by us in Germany.
However, when external service providers are used, personal data may in certain circumstances be processed outside the European Union or the European Economic Area. This may apply in particular to certain payment, browser or push services.
Where personal data is transferred to a third country, such transfers are carried out only in accordance with the requirements of Articles 44 et seq. GDPR. This may include, in particular, an adequacy decision by the European Commission or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Mollie and PayPal may also use service providers or affiliated companies outside the EEA in connection with their own payment services.
We generally store personal data only for as long as it is required for the respective processing purpose or for as long as statutory retention obligations apply.
User account data is generally processed for as long as the user account exists.
If you delete your user account or request its deletion, publicly accessible associations linked to the account are deactivated. Assigned digital codes or public tokens are deactivated so that personal data relating to the deleted user account can no longer be accessed through the finder feature.
Profile, luggage and travel data is deleted unless statutory obligations or compelling technical reasons prevent immediate deletion.
Data may temporarily remain in technically necessary backup copies. Such data is removed as part of the regular backup and overwrite cycles and is generally not restored to productive systems.
Data relating to orders, payments and invoices is stored in accordance with applicable statutory commercial and tax retention requirements.
For accounting records, the statutory retention period is generally eight years. Depending on the type of document concerned, statutory retention periods of six or ten years may also apply.
Legal basis: Article 6(1)(c) GDPR in conjunction with the applicable commercial and tax regulations.
After expiry of the applicable statutory retention period, the data is deleted unless there is another legitimate reason for continued storage.
Web server log files are generally deleted no later than seven days after they are created. In the event of a specific security incident, longer storage may be necessary for investigation and preservation of evidence.
Personal data stored in connection with a finder report is automatically deleted from the active database 14 days after the finder report is created.
This includes, in particular, contact details and messages provided by the finder, any location information provided, the IP address and user agent, as well as the associated technical assignment, notification and processing information.
Data relating to support requests is deleted as soon as it is no longer required to process the respective request and provided that no statutory retention obligations or legitimate interests in retaining evidence prevent its deletion.
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access or unauthorised disclosure.
These measures include in particular:
Our security measures are reviewed and adjusted in line with technological developments.
Subject to the applicable legal requirements, you have in particular the following rights:
Where processing is based on Article 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.
You may withdraw consent at any time with effect for the future. The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.
To exercise your rights, you may contact us at:
info@bagly-deutschland.de
You have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority.
The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Germany
Email: poststelle@lfdi.bwl.de
Irrespective of this, you may in particular also lodge a complaint with the supervisory authority at your habitual place of residence, your place of work or the place of the alleged data protection infringement.
bagly does not carry out solely automated decision-making, including profiling, within the meaning of Article 22 GDPR.
We may amend this Privacy Policy if legal requirements, our technical systems or the features and services offered by us change.
The version currently published shall apply.
Last updated: 14 August 2026