Skip to main content

Privacy Policy

PRIVACY

The processing of data is always based on the principles of lawfulness and fairness in compliance with all applicable regulations, and appropriate security measures are adopted to protect the data. This privacy policy is also provided as a brief information notice pursuant to Article 13 of Legislative Decree 196/2003 and Article 13 of Regulation (EU) No. 679/2016 (the so-called GDPR) on privacy, as well as pursuant to Provision No. 229 of 8 May 2014 on cookies, we wish to inform site visitors about the use of the data entered and the cookies used by the site itself. This information notice is also provided pursuant to Recommendation No. 2/2001 adopted by the Working Party established by Article 29 of Directive No. 95/46/EC to those who interact with the web services of this site, for the purpose of protecting personal data accessible electronically.

 

PROCESSING OF PERSONAL DATA

C.F. CAR SRL- AUTOPNOLEGGI E SERVIZI Operational Headquarters: Via San Nicola, 1 – 73100 Lecce – VAT Number 03613950751 (hereinafter the "Data Controller"), as data controller, informs you pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter the "Privacy Code") and art. 13 of EU Regulation no. 2016/679 (hereinafter "GDPR") THAT YOUR DATA WILL BE PROCESSED IN THE FOLLOWING WAYS AND FOR THE FOLLOWING PURPOSES:

  1. Object of Processing
    The Data Controller processes personal, identifying data (e.g., name, surname, company name, address, telephone number, email address, bank and payment details) – hereinafter, "personal data" or "data" – provided by you when entering into contracts for the Data Controller's services.

  2. Purpose of Processing
    Your personal data is processed: 

    Without your express consent (Article 24, letter a) of the Privacy Code and Article 6, letters b), e), and f) of the GDPR, for the following Service Purposes:

    1. conclude contracts for the Data Controller's services;
    2. fulfill pre-contractual, contractual, and tax obligations arising from existing relationships with you;
    3. fulfill obligations established by law, regulation, EU legislation, or an order from the Authority (such as anti-money laundering);
    4. exercise the rights of the data controller;
    5. Payment management (with the related processing of payment data, including credit and/or prepaid card details, in accordance with the law);
    6. Management of relationships with third-party authorities and public bodies for purposes related to the fulfillment of legal obligations or specific procedures (re-notification to the offender of traffic violation reports);
    7. claims management


    Only with your specific and separate consent (Articles 23 and 30 of the Privacy Code and Article 7 of the GDPR), for the following Marketing Purposes:

    1. To send you via email, post, text message, and/or telephone contact, newsletters, commercial communications, and/or advertising material about products or services offered by the Data Controller, and to measure customer satisfaction with the quality of services;
    2. Send you commercial and/or promotional communications from third parties (e.g., business partners, insurance companies, other companies) via email, post, and/or text message and/or telephone contact;
    3. Send you commercial and/or promotional communications from third parties (for example, business partners, insurance companies, other companies) via email, post, and/or text message and/or telephone;
    4. In the event of your specific and separate consent (Articles 23 and 130 of the Privacy Code and Article7 GDPR), your personal data will be processed for Profiling Purposes: in particular, to create your business profile and to analyze your preferences, habits, or consumer choices. Your personal data will be processed for profiling purposes according to the methods indicated in paragraph 5 (Processing Methods);
    5. In the event of your specific and separate consent (Articles 23 and 130 of the Privacy Code and Article 7 GDPR), your personal data will be processed for Profiling Purposes: in particular, to create your business profile and to analyze your preferences, habits, or consumer choices. Your personal data will be processed for profiling purposes according to the methods indicated in paragraph 5 (Processing Methods).

    Finally, we inform you that if you are already our customer, we may send you commercial communications relating to the Data Controller's services and products similar to those you have already used, unless you object (Article 130, paragraph 4, Privacy Code).

  3. Data Controller
    The data controller, identified as the owner and legal representative pro tempore, is: of the company C.F.CAR SRL - CAR RENTALS AND SERVICES with Operational Headquarters: Via San Nicola, 1 – 73100 Lecce – VAT Number 03613950751 – Certified Email cfcar@pec.it
    The Data Controller guarantees the security, confidentiality, and protection of the data in its possession. At any stage of the data processing, the data collected is used in compliance with current privacy legislation (Legislative Decree 196/2003 and GDPR 679/2016).
  4. Place of Processing
    The data will be processed by the Data Controller at its registered office and operational headquarters.
  5. Processing Methods
    The processing of your personal data is carried out using the operations indicated in Article 4 of the Privacy Code and Article 4(2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, comparison, use, interconnection, blocking, communication, erasure, and destruction of data. Your personal data is subject to both paper-based and electronic and/or automated processing. The Data Controller will process the personal data for the time necessary to fulfill the aforementioned purposes and, in any case, for no longer than 10 years from the termination of the relationship for Service Purposes and for no longer than 5 years from the date of data collection for Marketing and Profiling Purposes.
  6. Access to Data
    Your data may be made accessible for the purposes referred to in Articles 2.1 and 2.2:
    1. To employees and collaborators of the Data Controller in Italy and abroad, in their capacity as persons in charge and/or internal data processors and/or system administrators;
    2. To third-party companies or other entities (for example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that perform outsourced activities on behalf of the Data Controller, in their capacity as external data processors.
  7. Disclosure of Data
    Without the need for express consent (pursuant to Article 24, letters a-b-d of the Privacy Code and Article 6, letters b) and c) of the GDPR), the Data Controller may disclose your data for the purposes referred to in Article 24, letters a-b-d of the Privacy Code and Article 6, letters b) and c) of the GDPR), the Data Controller may disclose your data for the purposes referred to in Article 24, letters a-b-d of the Privacy Code and Article 6, letters b) and c) of the GDPR. 2 letters a) to i) to supervisory bodies (such as IVASSS), judicial authorities, police forces, armed forces, insurance companies for the provision of insurance services, as well as to those entities to whom disclosure is required by law for the fulfillment of the aforementioned purposes. These entities will process the data in their capacity as independent data controllers. Your data will not be disclosed.

     
  8. Data Transfer
    Personal data is stored on servers located in Italy and the EU. In any case, it is understood that the data subject may exercise the right to object evenand only in part. Therefore, the data subject may decide to receive communications only through traditional means, only automated communications, or neither. Where applicable, the data subject also has the rights set forth in Articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
  9. Nature of the Data Provision
    The provision of data for the purposes referred to in Article 2, letters a) to g) is mandatory. Failure to provide such data will make it impossible to provide the services referred to in Article 2. 2, letters a) to g)
  10. Geolocation
    We inform you that C.F.CAR SRL vehicles may be subject to geolocation. Geolocation is carried out in accordance with current legislation; the data collected is processed anonymously. C.F.CAR SRL does not collect or process any sensitive customer data.
  11. Rights of the data subject
    1. Obtain confirmation as to whether or not personal data concerning you exists;
    2. Obtain information on: a) the source of the personal data; b) the purposes and methods of the processing; c) the logic applied in the case of processing carried out with the aid of electronic means; d) the identification details of the data controller, data processors, and the designated representative pursuant to Article 3, paragraph 1 of the GDPR; e) the persons or categories to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge;
    3. Obtain: a) updating, rectification, or integration of data; b) erasure, transformation, or blocking of data processed unlawfully.
    4. Object, in whole or in part: a) for legitimate reasons, to the processing of personal data; b) to the processing of personal data concerning you for the purpose of sending advertising or direct selling materials or for conducting market research or commercial communications.

 

EXERCISE OF RIGHTS

You may exercise your rights at any time by sending:

  • A registered letter with return receipt to C.F.CAR SRL- AUTONOLEGGI E SERVIZI- Via San Nicola,1 73100 Lecce
  • A certified email to cfcar@pec.it

 

This document was last modified: 02/11/2025