Privacy notice

No Data Protection Officer has been appointed: for a business of this size and with this kind of processing it is not required. For anything about your data, write to the email address above.

When you book. The booking form asks for first name, surname, email address, phone number, date of birth, how many years you have held your driving licence and, if you wish, a free note. Date of birth and licence years are not curiosity: they decide which cars you may drive, and the check is done before you arrive so nobody is turned away at the desk. If you ask for a company invoice, the form also collects company name, VAT number, tax code, address and the recipient code or certified email for electronic invoicing.

When you write to us. From the contact form: first name, surname, email, phone number if you leave it, and your message.

When you use the chat assistant. The questions you type and the answers you receive. The assistant only knows what is on this website; if it cannot answer, it offers to take your name and email so that a person can call you back. In that case the last twenty messages of the conversation are sent to us together with your contact details, so whoever replies already knows what it is about. Please do not type card numbers or other sensitive data into the chat.

When you pay. The site never sees your card number. The deposit is paid inside a form provided by Stripe, which collects the card details directly and returns to us only the outcome, the amount and a receipt reference. We do not store or see the card number or the security code.

What we collect without asking. The technical data every website records in order to work: IP address, browser type, pages visited, processed by our hosting provider for security and diagnostics. To protect the booking forms from abuse, the site also counts how many requests arrive from the same IP address, keeping that counter for at most one hour. Visit statistics are collected without cookies and without identifying individual visitors: we see how many people visit which pages, never who.

We send no marketing. No newsletter, no promotions, no sharing of addresses with third parties. Should that ever change, a separate, optional consent would be asked first. The age check is a fixed rule of the rental conditions, not profiling: the site compares your date of birth with the minimum age of the car you chose and tells you the result at once.

Providing the data requested by the booking form is necessary to enter into the contract: without it the booking cannot be made. The service is for adults only: we do not knowingly collect data from anyone under 18.

Nobody buys it, sells it or receives it for advertising. It is processed only by the companies that make the site work, each for its own part, each bound by a contract that forbids any other use:

About Groq: by contract it may not use the chat questions and answers to train its systems, and it does not keep them by default; it retains logs for up to thirty days, only to diagnose faults or abuse.

Transfers outside the European Union. Some of these providers process data in the United States. The transfers rely on the European Commission's Standard Contractual Clauses included in each provider's data processing agreement, and, where the provider is certified, on the EU-US Data Privacy Framework. The database currently resides in the United States; its move to a data centre in the European Union is planned, and this notice will be updated when it happens.

When the period ends the data is deleted or anonymised. If a dispute is open, the data needed for it is kept until it is closed.

Anyone can, by writing to ds.autonoleggio@icloud.com:

• ask which data we hold about them and receive a copy;
• have a wrong piece of data corrected;
• ask for deletion, when no legal obligation requires us to keep it;
• ask us to restrict its use while a dispute is checked;
• receive it in a file to take it elsewhere;
• object to processing based on legitimate interest;
• withdraw a consent given, such as the one for the map, without affecting what was done before.

We reply within one month. Anyone not satisfied with the answer may complain to the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome), or apply to a court. garanteprivacy.it

The site uses only technical cookies, which need no consent: one remembers the language you chose, the others exist only for staff who sign in to the management panel and for the Stripe payment form. There are no profiling cookies and no advertising pixels. The Google map on the contact page loads only if you click to show it, and that click is your consent. Everything is described in the cookie policy. Read the cookie policy

If the site changes what it does with your data, this page changes with it and the date below is updated. The date of the version you accepted is stored with your booking or request.