pursuant to art. 13 of Italian Legislative Decree 196/2003 and art. 13 of Regulation (EU) no. 2016/679
Dear Sir / Company,
In compliance with the obligations provided by art. 13 of Italian Legislative Decree no. 196 of 30.06.2003 (hereinafter referred to as the “Privacy Code”) and art. 13 of Regulation (EU) 2016/679 (hereinafter referred to as “GDPR”), we hereby inform you that the company:
RENTACAR NO CREDIT CARD
Registered Office: Treviso (TV), Italy
(hereinafter referred to as the “Data Controller”)
will process personal data concerning you that have been or will be communicated to us by you or by third parties. The processing of personal data will be carried out in compliance with the applicable regulations and under the following conditions.
The Data Controller will process personal and identifying data (such as name, surname, company name, address, telephone number, email address, bank and payment details, hereinafter referred to as “personal data” or “data”) provided by you during the conclusion of contracts for services offered by the Data Controller.
Your personal data are processed:
A) Without your express consent
(pursuant to art. 24 letters a), b) and c) of the Privacy Code and art. 6 letters b) and c) of the GDPR), for the following purposes:
Performance of contracts for the services provided by the Data Controller;
Fulfilment of pre-contractual, contractual and tax obligations arising from existing relationships;
Fulfilment of obligations required by laws, regulations, EU legislation or orders of competent authorities (including anti-money laundering obligations);
Exercise of the rights of the Data Controller, such as the right of defence in legal proceedings.
B) Only with your specific and explicit consent
(pursuant to arts. 23 and 130 of the Privacy Code and art. 7 of the GDPR), for the following marketing purposes:
Sending newsletters, commercial communications and/or promotional material related to products or services offered by the Data Controller, via email, SMS, telephone or postal mail;
Sending promotional or commercial communications from third parties (e.g. business partners, insurance companies).
Personal data are processed using the operations indicated in art. 4 of the Privacy Code and art. 4(2) of the GDPR, including collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction.
Processing is carried out using paper, electronic and automated tools.
Personal data will be stored:
for no longer than 10 years from the termination of the contractual relationship for service purposes;
for no longer than 2 years from data collection for marketing purposes.
The provision of data is:
a) mandatory to comply with legal or regulatory obligations;
b) necessary for the establishment and continuation of the contractual relationship.
Failure to provide such data may make it impossible for the Company to perform the requested services, process orders or issue invoices.
Personal data may be communicated to third parties only where necessary to:
comply with legal obligations;
ensure proper execution of the contractual relationship.
Data may be communicated, within the limits of their respective competence, to public or private entities such as banks, payment service providers, legal and consultancy firms, accountants, public authorities, IT service providers, logistics and transport companies.
Personal data will not be disclosed.
Personal data are stored on servers located within the European Union.
If it becomes necessary to transfer data outside the EU, the Data Controller guarantees that such transfers will take place in compliance with GDPR provisions, including the adoption of Standard Contractual Clauses approved by the European Commission.
As a data subject, you have the rights provided for by art. 7 of the Privacy Code and arts. 15–21 of the GDPR, including:
the right to access your personal data;
the right to rectification or erasure;
the right to restriction of processing;
the right to data portability;
the right to object to processing for marketing purposes;
the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
The Data Controller is Rentacar No Credit Card S.R.L., with registered office in Treviso (TV), Italy.
For any request regarding personal data, you may contact us via the Contact section of the website.
The provision of consent for marketing purposes is optional.
In the absence of consent, the Company will process personal data only to the extent required by law or contractual obligations, with the consequences described in point 4 above.
We kindly ask you to acknowledge receipt of this information and, where applicable, to provide your consent to the processing of personal data as described above.
Yours faithfully,
Rentacar No Credit Card