Privacy Policy

1. Data controller

The data controller is GOTTARDO GROUP ITALY S.r.l.s., VAT no. 14722830966, with registered office at Viale Leone Tolstoy, 66, 20146 Milano (MI).

For any request concerning the processing of data, you may contact the controller using the details provided on the Contact page of the website.

2. Types of data processed

In the context of the services offered, the following may be processed:

• Personal and contact details (first name, last name, address, email, telephone);
• Tax data (tax code, VAT number, recipient code/certified email) required to issue the invoice;
• Identity documents and driving licence, collected to verify eligibility at check-in;
• Images and videos (e.g. verification selfie and contract signature) collected during the check-in procedure;
• Data relating to the booking and the rental (vehicle, dates, services);
• Payment data, managed by the payment service provider;
• Browsing data and technical cookies (see Cookie Policy).

3. Purposes and legal bases

The data is processed for the following purposes:

• Performance of the rental contract and management of the booking (Art. 6.1.b GDPR);
• Compliance with legal and tax obligations, including the issuance and retention of invoices (Art. 6.1.c GDPR);
• Verification of the legal requirements for driving (age, licence) through the check-in documents (Art. 6.1.b and c GDPR);
• Management of payments, deposits, claims and disputes (Art. 6.1.b and f GDPR);
• Any service communications relating to the booking.

4. Methods of processing

Processing is carried out using IT and electronic tools, adopting technical and organisational measures appropriate to ensure the security and confidentiality of the data and to prevent unauthorised access. The documents and content uploaded during check-in are stored in a protected form and accessible only to authorised personnel.

5. Recipients of the data

The data may be disclosed to third parties acting as processors or independent controllers, including:

• Payment service providers, for processing transactions and deposits;
• The Interchange System (SdI) and the Italian Revenue Agency, for electronic invoicing and tax obligations;
• Technology service providers (hosting, database and storage) acting as data processors;
• Insurance companies and competent authorities in the event of a claim;
• Consultants, professionals and authorities in the cases provided for by law.

6. Data transfer

The data is processed mainly within the European Union. Where some providers entail a transfer outside the EU, this will take place in compliance with the safeguards provided for by the GDPR (e.g. standard contractual clauses or adequacy decisions).

7. Retention period

The data is retained for the time necessary for the purposes for which it is collected and in compliance with the legal terms. In particular, tax data and invoices are retained for the period required by tax legislation (generally ten years). The check-in verification documents and content are retained for the time strictly necessary to manage the rental and the related obligations.

8. Rights of the data subject

As a data subject, the user has the right to:

• Access their data and obtain a copy of it;
• Request its rectification or erasure;
• Request the restriction of or object to the processing;
• Receive the data in a structured format (portability);
• Withdraw consent, where processing is based on consent;
• Lodge a complaint with the Italian Data Protection Authority.

9. Nature of the provision of data

The provision of personal and tax data and of the documents required to verify eligibility is mandatory for the conclusion and performance of the rental contract and for compliance with legal obligations: failure to provide such data prevents the supply of the service.

10. Cookies

The website uses technical cookies necessary for its operation. For further details, please refer to the Cookie Policy available on the website.

11. Changes to this policy

The controller reserves the right to update this policy. The current version is always published on this page with an indication of the date of the last update.