Privacy Policy

Dear Customer/Supplier, Pursuant to Article 13 of the EU Regulation 2016/679 hereinafter referred to as the "Regulation" and in relation to the personal data concerning you, our company, as the data controller, as a result of existing contracts wishes to provide you with the following information.

1.Identification details of the data controller

The data controller is Mantovana Macchedil di Rentstore srls s.a.s. with registered and operational office in Via Novellara, 1 - 46100 Mantova (MN). The contact details are as follows: Telephone (+39) 391294 Fax. (+39) 0376 391307 E-mail: info@macchedil.it. Please note that in view of the fact that the data controller is established within the European Union, it is not necessary to appoint a representative of the data controller.

2.Contact details of the Data Protection Officer

Following verification of the applicability of the provisions of Article 37 of the Regulation, the appointment of a Data Protection Officer was ruled out, as the company does not fall into any of the cases covered.

Purpose of the processing for which the data are intended and legal basis

The processing is directed to the performance of the following activities: - Fulfilment of legal and/or contractual obligations, fulfilment of customs and habits, regarding the company's business activities; - Accounting and administrative processing; - Management of legal fulfilments and disputes; Fulfilments related to current legislation on health and safety at work; - Fulfillments connected to the application of the company's internal Management System; - Sending communications relating to offers and promotions; - User registration for e-commerce purposes; - Geolocation and registration of the driving parameters of vehicles rented or given on loan, the data for which will be used by the Lessor in the event of theft, failure to return the vehicle, accidents or other unlawful conduct involving the rented or loaned vehicle. The legal basis for the processing shall be the following: contract for the acquisition/provision of goods or services, Legislative Decree 81/2008 as amended and supplemented with regard to current legislation on health and safety at work and regulations related to the application of the Civil Code and Criminal Code. The processing is carried out by means of operations or series of operations and in particular: collection, registration, organisation, storage, processing, modification, comparison, interconnection; selection, extraction, consultation, communication, blocking, deletion and destruction; it is carried out with or without the aid of electronic means; it is carried out by the organisation of the Data Controller and by trusted companies, the list of which is available at the Data Controller's office, which are our direct collaborators and which operate in total autonomy as separate external data controllers, obliged to fulfil on their own and according to a contract with our company the regulations on the protection of personal data. company to the data protection regulations. Personal data are not subject to dissemination.

4.Legitimate interests of the data controller

Where processing within the meaning of Article 6(1)(f) is carried out, it shall be carried out solely for the purpose of meeting the legitimate interests of the data controller.

5.Recipients of personal data

The personal data collected may be communicated to - all subjects whose right of access to such data is recognised by virtue of regulatory provisions; - our collaborators within the scope of their respective duties; - all those natural and/or legal, public and/or private persons when the communication is necessary or functional to the performance of our activity and in the manner and for the purposes illustrated.

6.Transfer of personal data abroad

The data controller has no intention of transferring personal data to third countries or international organisations outside the European Union.

7.Period of retention of personal data

The data retention time limit for tax purposes currently in force (10 years) is taken as a parameter.

8.Rights of the data subject

The data subject has the right (Chapter III Rights of the Data Subject) to request from the data controller access to and rectification or erasure of personal data, as well as restriction or objection to their processing and data portability. To exercise these rights, please refer to the contact details mentioned above.

9.Withdrawal of consent

The data subject has the right to revoke the consent given pursuant to Articles 6(1)(a) and 9(2)(a).

10.Right to Complain to the Control Authority

The data subject has the right to lodge a complaint with the Supervisory Authority, which can be reached at the following addresses Garante per la protezione dei dati personali - Piazza di Monte Citorio n. 121 00186 ROMA Fax: (+39) 06.69677.3785 Telephone switchboard: (+39) 06.696771 E-mail: garante@gpdp.it Certified mail: protocollo@pec.gpdp.it . The references and procedures for exercising the right to complain can be found on the website of the Garante della Privacy http://www.garanteprivacy.it.

11.Disclosure of personal data

The communication and subsequent processing of personal data is a necessary condition for the conclusion of the contract with our company. Failure to provide such information will result in the contract not being enforceable.

Automated decision-making process

Personal data collected will not be subject to automated decision-making processes, including profiling.