Privacy Policy

1. Data Controller

2. Data Collected

We collect the following personal data:

• Full name
• Email address
• Phone number
• ID document (for driver verification)
• Date of birth
• Payment data (processed by PCI-DSS certified third party)

3. Purpose of Processing

• Management of booking and rental agreement
• Communications related to the booked service
• Compliance with legal and tax obligations
• Sending promotional communications (only with explicit consent)
• Service improvement and anonymized statistical analysis

4. Legal Basis

• Consent: for newsletter subscription and promotional communications
• Contract execution: for booking and rental management
• Legal obligation: for tax and regulatory compliance

5. Data Retention

Personal data is retained for a maximum of 24 months from the date of the last rental. Data required for tax compliance is retained for the period specified by applicable law (10 years). Newsletter data is deleted upon consent withdrawal.

6. Data Subject Rights

In compliance with EU Regulation 2016/679 (GDPR), you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Deletion of data (right to be forgotten)
• Data portability in structured format
• Object to processing
• Withdraw consent at any time

To exercise your rights, contact the Data Controller at the email address shown in section 1.

7. Cookie Policy

The site uses technical cookies necessary for operation and anonymised analytical cookies to improve user experience. Profiling cookies are activated only with the user's explicit consent. Some personal data (payment, email communications, possible document verification) is transmitted to third-party providers based outside the European Union, in particular in the United States: Stripe Payments Europe Ltd. and Stripe Inc. (payments and identity verification), Resend Inc. (transactional email). These providers are certified under the EU-US Data Privacy Framework. For identity document verification (Stripe Identity), biometric data is processed (special category under art. 9 GDPR): the legal basis is the explicit consent of the data subject and the performance of the contract. For further details see the dedicated Cookie page.

8. Data Protection Officer Contact