Privacy Policy

The data controller is the rental agency operating this website; its address, phone number, and email are published on the Contact page. For any privacy matter, contact us there.

We collect personal data only when you submit a reservation request:

• your name;
• your email address and phone number;
• the requested car, rental dates, and pickup location;
• anything you write in the message field, and your chosen language;
• the time you gave consent, plus technical anti-spam signals (a Cloudflare Turnstile check and rate limiting by IP address).

We process this data solely to handle your request:

• to answer your reservation request and prepare the rental — steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR);
• to send the optional acknowledgement email, based on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time;
• to protect the site against spam and abuse — our legitimate interest (Art. 6(1)(f) GDPR).

Your data is stored and processed by service providers acting on our instructions:

• Supabase (database hosting, EU region) — stores reservation requests;
• Vercel (website hosting) — serves the site and processes requests;
• Resend (email) — delivers notification and acknowledgement emails;
• Telegram (staff alerts) — notifies our team of new requests;
• Cloudflare Turnstile (spam protection) — verifies your submission is human;
• Plausible (analytics) — cookie-free, aggregated visit statistics with no personal profiles;
• Sentry (error monitoring) — technical error reports.

Reservation requests are kept while we handle them and for as long as needed to document the resulting rental, after which they are deleted. Requests that do not lead to a rental are deleted once handling is complete. We do not sell personal data or use it for advertising.

Under the GDPR you can at any time:

• request a copy of the data we hold about you (access);
• have inaccurate data corrected (rectification);
• have your data deleted (erasure);
• restrict or object to processing;
• receive your data in a portable format;
• lodge a complaint with your data-protection authority (in Italy, the Garante per la protezione dei dati personali).

To exercise any of these rights, contact us via the details on the Contact page.

The public site sets a single functional cookie (NEXT_LOCALE) to remember your language choice; it contains no personal data. Our analytics tool, Plausible, works without cookies and without cross-site tracking. Login cookies exist only in the staff-only administration area.

All traffic is encrypted with TLS (HTTPS), data is stored with an EU-hosted provider, and access to reservation data is restricted to authenticated staff accounts.

If this policy changes, the new version is published on this page with an updated date. Significant changes will be highlighted on the site.

For any question about this policy or your data, contact us via the address, phone number, or email on the Contact page.