Privacy

This page explains what data we collect when you rent a car from us or use this site, why we collect it, and what you can ask us to do with it. It is written under Regulation (EU) 2016/679 (GDPR).

Who handles your data

The data controller is Rental Cars Monopoli di Elena Sardella, Via Baione, 19 - 70043 Monopoli (BA), P.IVA 08255660725 — info@rentalcarsmonopoli.com, +39 333 7248217. For anything concerning your data, write to that address: a person answers, not a form.

We have not appointed a Data Protection Officer: we are not required to, and given the size of the business we handle requests ourselves.

What we collect

To book: first and last name, email, telephone, dates and places of pick-up and return, the car chosen and any extras. If you ask for delivery to where you are staying, that address too.
For the contract and for the law: date and place of birth, citizenship, residence, tax code, identity document (type, number, place of issue), driving licence (number, issue and expiry date, issuing authority). The same for any second driver.
For payment: amounts, date and outcome. Your card details never pass through us: they are handled directly by the payment provider (Stripe or PayPal) on their own pages, and all we receive is confirmation that the payment went through.
During the rental: mileage and fuel level at handover and on return, photographs of the car and the marks on the damage sheet, any fines and damage.
If you write to us: the content of the message and the contact details you leave.
While browsing: the technical data every server records (IP address, date and time, page requested, browser) and the cookies described on their own page.

Why we use it

To give you the car. Handling the booking, preparing and signing the contract, handing over and taking back the vehicle, taking payment, issuing the invoice. Legal basis: performance of the contract (art. 6.1.b GDPR). Without this data the rental cannot happen.
Because the law requires it. Reporting the rental to the Italian State Police through the CaRGOS system, as required by the rules on self-drive vehicle rental; keeping invoices and accounting records. Legal basis: a legal obligation (art. 6.1.c GDPR). Neither we nor you have a choice here.
To defend ourselves if something goes wrong. Documenting the state of the car, handling damage, fines and insurance claims, keeping the site secure. Legal basis: our legitimate interest (art. 6.1.f GDPR) in protecting the business.
To ask how it went. Sending you an invitation to leave a review after the rental. Legal basis: our legitimate interest; tell us to stop and we stop.
To understand how the site is doing and to make ourselves known. Visit statistics and advertising tools, only if you accept them on the cookie banner. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time.

We make no automated decisions about you and do not profile you to decide whether to rent you a car: a person looks at every request.

Who we share it with

We do not sell your data and we do not pass it to anyone for their own purposes. It is seen only by those we need to work with:

the Italian State Police, through the CaRGOS system, for the legal obligation above;
our accountant and the Italian Revenue Agency (Sistema di Interscambio) for electronic invoicing;
Stripe and PayPal for online payments, each of them a controller in its own right for your card details;
our hosting provider and the service that sends our emails, which store data on our behalf as processors;
the insurance company, the authorities and, if needed, a lawyer, in case of accident, theft, penalty or dispute.

Our suppliers process data within the European Union. Where a service involves a transfer to a third country, it takes place on the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

How long we keep it

Contract, invoices and accounting records: ten years from the end of the rental, as required by Italian civil and tax law.
Identity document and driving licence: for the whole rental and then for as long as needed for legal obligations and to defend a right of ours.
Reports to the Police: for the period set by the rules that require them.
Photos of the car and damage sheet: up to one year from return, unless a dispute is open, in which case until it is settled.
Enquiries and messages that do not become a rental: two years.
Browsing data: a few months in the server's technical logs; for cookies, the durations on the cookie page apply.

Your rights

At any time you can ask to see the data we hold about you, to correct it if it is wrong, to have it deleted, to restrict its use, to object to processing based on our legitimate interest, and to receive it in a machine-readable format to take elsewhere. Where you gave consent, you can withdraw it at any time, without affecting what was done before.

On some things, though, we cannot oblige: for as long as the law requires us to keep the contract and the invoice, those stay, even if you ask us to erase everything. We would rather say so plainly than promise otherwise.

To exercise a right, just write to us. We answer within one month. If you think we are getting it wrong you can turn to the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome — garanteprivacy.it), or to a court.

Cookies

Which cookies we use, what they do and how to change your choice is explained on the cookie page.

If this page changes

If we change the way we handle data, we update this page and change the date below. If the change concerns something you consented to, we ask you again.