This policy explains which personal data we process when you visit rsservicerent.com, send us a request or write to us, why we do it, how long we keep the data and what your rights are. It is provided under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
- Company name
- RS SERVICE DI RIZZO STEFANO
- Registered office
- VIA GREZZAGO, 39/A, 20069 VAPRIO D’ADDA (MI)
- VAT
- IT09581400968
- [email protected]
- Telephone
- +39 393 510 5150
For any question about your data or to exercise your rights, write to [email protected].
2. Browsing data
Like every server, the server that hosts the site records some technical data of each request: IP address, date and time, page requested, browser and operating system. We need it to run the site, keep it secure and block abuse. Legal basis: our legitimate interest in the security of the site (article 6.1.f GDPR). These logs are deleted automatically on rotation, unless they are needed to investigate abuse.
3. Site statistics, without cookies
To know how many people visit the site, which pages they read and how it works on phones and computers, we use our own statistics system, which runs on our server.
- It uses no cookies and stores nothing in your browser.
- It does not keep your IP address: to count the visits of a day it uses an anonymous code, made from IP address and browser with a random key that changes every day and is then deleted. The next day that code can no longer be linked to you.
- It records the pages viewed, reading time, clicks, the type of device, the country (provided by the Cloudflare network) and the page or campaign you came from.
- Single visits are kept for 90 days; after that only the totals remain.
Legal basis: our legitimate interest in improving the site (article 6.1.f GDPR). You can object by writing to us.
4. Requests sent from the site
When you send us a request with the form on the site, we process the data you enter: name, email, phone, car, dates, delivery and return places, how you prefer to be contacted and your notes. If you give them, also the details of the driver and of the company to invoice. With the request we record the page you sent it from, any advertising campaign you came from and the type of device.
We use this data to reply to you, prepare the quote and arrange the rental. Legal basis: the pre-contractual steps you ask us for (article 6.1.b GDPR). Without this data we cannot reply to your request.
When a request arrives, the system alerts our staff with an email and with an encrypted notification on the devices where they have turned it on.
5. Email, phone and WhatsApp
If you email us, call us or write to us on WhatsApp, we use your address or number and what you write to reply to you and, if you ask, to arrange the rental (article 6.1.b GDPR).
- We receive and send emails through our email provider. The site's alerts are also sent from our mail server.
- WhatsApp is a service of WhatsApp Ireland Limited. The site loads nothing from WhatsApp: the buttons only open the app or WhatsApp Web. The pre-written message shows at the bottom the page of the site and any campaign you came from: you can delete them before sending. WhatsApp's own privacy rules also apply to the conversation.
6. Cookies, third-party statistics and advertising
The site only uses technical tools that do not need consent. If we turn on Google tools (Google Analytics 4, Google Ads), the Meta pixel (Facebook and Instagram) or other advertising tools, they start only after you give your consent in the cookie banner, and you can withdraw it at any time. With your consent these providers receive data about your visit (pages viewed, device, cookie identifiers) and, to measure advertising, the fact that you sent a request or clicked on WhatsApp, phone or email: never your name, email or phone number. Legal basis: your consent (article 6.1.a GDPR). The details are in the cookie policy.
We record your choice in the banner (a random code, the date and the choices made), with no data that identifies you, so that we can prove your consent.
7. Who receives the data
The data is processed only by the members of our staff who need it and by these providers, acting on our behalf:
- whoever technically runs the site and the server that hosts it;
- Cloudflare, Inc., which protects the site and makes it fast: all visits pass through its network;
- our email provider;
- tax and legal advisers, when needed to meet legal obligations.
When you write to us on WhatsApp or accept the Google and Meta tools, these companies also process the data as independent controllers, under their own policies. We do not sell your data and we do not use it to send you advertising without your consent.
8. Data outside the European Union
Cloudflare, Google and Meta may also process data in the United States. The transfer takes place with the safeguards provided by the GDPR: the EU-US adequacy decision (EU-US Data Privacy Framework) and the standard contractual clauses of the European Commission.
9. How long we keep the data
- Requests sent from the site: we delete closed requests 24 months after their last update, and those recognised as spam after 30 days.
- Contracts and invoices: 10 years, as required by Italian law.
- Emails and messages: for as long as needed to handle the request or the rental and any disputes.
- Site statistics: single visits for 90 days, then only totals that identify no one.
- Cookie choice: the banner asks you again after 12 months.
10. Your rights
At any time you can ask us to:
- tell you which data we hold about you and give you a copy;
- correct or complete it;
- delete it, when we are not required by law to keep it;
- restrict its use, or object to processing based on our legitimate interest;
- give it to you in a readable format so you can pass it to others;
- withdraw your consent, without affecting what was done before.
Write to [email protected]: we reply within one month. If you think your data is not handled correctly, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live.
11. Minors
The service is for adults: you must be at least 21 to drive our cars. We do not knowingly collect data from minors.
12. Changes
We may update this policy when the site or the rules change. The date of the last update is shown on this page.