This notice is provided pursuant to arts. 13 and 14 of EU Regulation 2016/679 ("GDPR") and describes how the personal data of users browsing rialrent.com or contacting RIAL S.r.l. for rental services are processed.
1. Data controller
RIAL S.r.l., Via Privata Platone, Milan (MI) — Italy.
VAT 12430320965.
Email: info@rialrent.it
Phone: +39 320 293 4909.
To exercise privacy rights or for requests related to data processing, you can write to info@rialrent.it.
2. Categories of data collected
- Identification and contact data (first name, last name, email, phone) provided via contact form, WhatsApp or quote request.
- Rental-related data (driver's license, ID, credit card data for deposit and payment) collected at contract signing.
- Browsing data (IP address, user agent, pages visited, date and time) automatically collected by IT systems.
- Cookies and similar technologies per the preferences expressed in the banner (see Cookie Policy).
3. Purposes and legal bases
- Performance of a contract (art. 6.1.b GDPR): managing the quote request, signing and managing the rental contract, invoicing.
- Legal obligations (art. 6.1.c GDPR): tax, accounting and public-security obligations (e.g. driver data reporting).
- Legitimate interest (art. 6.1.f GDPR): site security, fraud prevention, complaint and dispute management.
- Consent (art. 6.1.a GDPR): sending commercial communications, statistics and marketing cookies, advertising profiling.
4. Processing methods and retention
Data are processed with electronic and paper-based tools, with technical and organizational measures adequate to ensure security, integrity and confidentiality.
Indicative retention periods:
- Contractual and tax data: 10 years from contract conclusion.
- Contact data for unsuccessful quotes: 24 months.
- Statistics and marketing cookies: duration stated in the Cookie Policy.
- Commercial communications: until consent is withdrawn.
5. Recipients and transfers
Data may be shared with parties performing service-related activities as Data Processors under art. 28 GDPR, including: insurance companies, IT and hosting providers, tax and legal advisors, payment institutions, CRM and messaging providers (e.g. WhatsApp Business).
Transfers outside the EU only occur with European Commission adequacy decisions or appropriate safeguards (standard contractual clauses).
6. Data-subject rights
At any time you may exercise the rights provided by arts. 15–22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
To exercise your rights, write to info@rialrent.it.
7. Changes
This notice may be updated. Changes will be published on this page with the new update date.