Privacy Policy

Data collected

We only process the data needed to answer requests and manage bookings:

• Identification and contact details: first and last name, email, phone.
• Invoicing details: tax code or VAT number and home or company address.
• Ride details: pick-up and destination, date and time, passengers and luggage, flight, train or ship number, extra services (child seats, animals) and notes.
• Messages sent through the contact form: name, contact details and the text of the message.
• Technical booking data: IP address and type of browser or app it comes from, kept for security and to handle any disputes.
• Accessibility needs (vehicle for wheelchair users): this is health data (art. 9 GDPR); we process it only if you choose to provide it, with your explicit consent, and only to organise the service.

Purposes and legal basis

• Managing the booking, performing the chauffeur service and sending you operational messages (email, SMS, WhatsApp): performance of the contract (art. 6(1)(b) GDPR).
• Answering contact form messages: pre-contractual steps taken at your request (art. 6(1)(b)).
• Invoicing and tax and legal obligations: legal obligation (art. 6(1)(c)).
• Service security, abuse prevention, defence of our rights and anonymous aggregate statistics: legitimate interest (art. 6(1)(f)).
• Accessibility needs: explicit consent (art. 9(2)(a)), which you can withdraw at any time.

Without the booking data we cannot take on the booking. We do not take decisions based solely on automated processing.

Marketing

Offers and promotions by email only if you accept them with the dedicated box, which is optional and not pre-ticked (art. 6(1)(a) GDPR). You can withdraw your consent at any time via the link in every email or by writing to us.

Retention

• Bookings and tax documents: 10 years, for civil-law and tax obligations.
• Marketing: until consent is withdrawn or after 2 years of inactivity.
• Contact form messages: as long as needed to handle the request.

Payments

Card payments take place on the secure page of Nexi Payments S.p.A. Cimarelli Group 1900 neither sees nor stores card details; it only receives the outcome of the payment.

Recipients

Data may be disclosed to:

• authorised staff of Cimarelli Group 1900;
• chauffeur-service (NCC) companies and drivers performing the ride;
• technical and payment service providers: Hetzner Online GmbH (servers in Finland) for hosting the website, app and bookings; the email provider of the cimarelliautonoleggio.it domain; Google (Gmail, for the office mailbox, and Google Maps Platform, to which we send pick-up and destination addresses to calculate distance and price); Nexi Payments S.p.A. for card payments;
• WhatsApp (Meta), if you write to us or choose to receive messages on WhatsApp;
• public authorities, banks and insurers, where required by law.

Transfers outside the European Union

Google and WhatsApp (Meta) may also process data in the United States. The transfer relies on the European Commission's adequacy decision for companies participating in the EU-U.S. Data Privacy Framework (art. 45 GDPR), in which Google and Meta participate. All other data stays in the European Union.

Cookies

The website only uses technical cookies and storage needed for it to work: the chosen language and the record that you have seen the cookie notice. We use no analytics, advertising or profiling cookies, first- or third-party, nor any other tracking tools, and browsing sends no data to third-party providers: this is why we do not ask for your consent. Should we introduce any in the future, we will update this notice and ask for your consent first. You can still block or delete cookies in your browser settings.

Your rights

You can request access, rectification, erasure, restriction and portability, and object to processing (arts. 15–22 GDPR), and withdraw any consent at any time, without affecting processing already carried out. Write to info.cimarelliautonoleggio1900@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).