This notice is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 ("GDPR") and describes how the personal data of users who browse the rialrent.it website, or who get in touch with RIAL S.r.l. to use its rental services, are processed.
1. Data Controller
RIAL S.r.l., Via Privata Platone, Milan (MI) — Italy.
VAT no. 12430320965.
Email: info@rialrent.it
Phone: +39 320 293 4909.
To exercise your privacy rights or for requests relating to the processing of data you may write to info@rialrent.it.
2. Types of data collected
- Identification and contact data (first name, surname, email, phone) provided via the contact form, WhatsApp or quote request.
- Rental-related data (driving licence, identity document, credit card details for deposit and payment) collected at the time the contract is signed.
- Browsing data (IP address, user agent, pages visited, date and time) collected automatically by the IT systems.
- Data collected through cookies and similar technologies, according to the preferences expressed in the banner (see Cookie Policy).
3. Purposes and legal bases
- Performance of a contract (Art. 6.1.b GDPR): handling the quote request, signing and managing the rental contract, invoicing.
- Legal obligations (Art. 6.1.c GDPR): tax, accounting and public-security obligations (e.g. communication of driver data).
- Legitimate interest (Art. 6.1.f GDPR): website security, fraud prevention, handling of complaints and disputes.
- Consent (Art. 6.1.a GDPR): sending commercial communications, statistical and marketing cookies, profiling for advertising campaigns.
4. Processing methods and retention
Data are processed using electronic and paper-based tools, with technical and organisational measures appropriate to ensure their security, integrity and confidentiality.
Indicative retention periods:
- Contractual and tax data: 10 years from the conclusion of the contract.
- Contact data for unsuccessful quotes: 24 months.
- Statistical and marketing cookies: duration indicated in the Cookie Policy.
- Commercial communications: until consent is withdrawn.
5. Recipients and transfers
Data may be disclosed to parties carrying out activities instrumental to the service as Data Processors pursuant to Art. 28 GDPR, including: insurance companies, IT and hosting service providers, tax and legal advisors, payment institutions, providers of CRM and messaging systems (e.g. WhatsApp Business).
Any transfers to non-EU countries take place only where there is an adequacy decision by the European Commission or appropriate safeguards (standard contractual clauses).
6. Rights of the data subject
At any time you may exercise the rights provided for by Articles 15–22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
To exercise your rights write to info@rialrent.it.
7. Changes
This notice may be updated. Changes will be published on this page with an indication of the new update date.