- Data Controller The Data Controller is Autonoleggi Demontis S.p.A. (Avis Budget Italia S.p.A. Dealership) with registered office in Via Predda Niedda, 23/A, 07100 Sassari, VAT number: 00327370904, in the person of the Legal Representative
- Purpose of data processing The personal data you provide to Autonoleggi Demontis S.p.A. are processed for the following purposes:
- For preliminary needs prior to entering into sales contracts and/or providing the following services: camper rental, car sales, van rental (e.g., obtaining information prior to entering into contracts, executing transactions based on the obligations arising from the contract entered into with the interested party, etc.), to execute the same and to protect the resulting credit positions; to respond to and fulfill any customer requests and for any technical or organizational communications;
- as part of the normal activity of issuing and managing payments and collections (in addition to related and instrumental activities) and for operational, management and accounting needs;
- to fulfill any type of obligation contemplated and foreseen by current laws, regulations, related provisions and commercial practices, in particular in tax/fiscal matters, as well as by provisions issued by authorities legitimated by law and by supervisory and control bodies;
- assert one’s rights in court and in litigation;
- for the sending of informative or promotional communications, newsletters, of a commercial and marketing nature, advertising material and/or offers and services by post, fax, internet, telephone, email, SMS, regarding the rental of cars, commercial vehicles, campers, and motorcycles by Autonoleggi Demontis S.p.A., for which the user must expressly and specifically consent (art. 7 GDPR).
The legal basis for the processing indicated in points A) to C) is identified in relation to the execution of pre-contractual measures adopted by the data subject or contractual obligations established between the parties and compliance with legal obligations to which the Data Controller is subject; the processing carried out for the purposes indicated in point D) is based on the legitimate interest of the Data Controller; for point E), the user has the right to express, specific, and freely given consent to the processing carried out for additional purposes.
Please note that, if you are already our customer, we may send you commercial communications relating to the Data Controller’s services or products similar to those you have already used, unless you expressly and freely express your dissent by contacting the Data Controller using the methods established in point VII) of this policy.
- Categories of data processed The data processed by you that you make available to Autonoleggi Demontis S.p.A. are personal (personal, tax, communication and contact information).
- Recipients or potential categories of recipients of personal data: Within the company, the customer’s personal data may be disclosed to the Board of Directors, company personnel, particularly administrative, operational, and technical staff, and, in any case, to individuals appointed and authorized by the Data Controller to process personal data. To carry out some of its activities, Autonoleggi Demontis S.p.A. also uses external parties. To this end, the data subject’s personal data may be disclosed to the following categories of parties, including external parties:
- subjects who are involved in carrying out the processing necessary for the execution of existing relationships with the interested party or who provide Autonoleggi Demontis S.p.A. with services or performances instrumental to the purposes indicated above;
- entities involved in the control and optimization of the activities of Autonoleggi Demontis S.p.A. (e.g. auditing firms and consultants), for the control of financial risk and fraud, or for debt collection.
- Qualified individuals who provide Autonoleggi Demontis S.p.A. with services as consultants who assist the company in various capacities, particularly with regard to legal, tax, social security, accounting, and organizational matters; and any other individual to whom the data must be disclosed pursuant to an express provision of law.
The entities performing the above-mentioned activities, to whom the data may be disclosed, will use the data as “data processors,” pursuant to Article 28 of the GDPR. Naturally, the procedures aimed at ensuring the confidentiality of personal data remain unchanged. A list of these entities is available at the headquarters of Autonoleggi Demontis S.p.A.
Personal data will not be disclosed.
- Data transfer to a third country Data processing is carried out mainly within the European Community
- Data retention period: Acquired data will be retained for the minimum period necessary to achieve the purposes indicated above. Specifically, data relevant to:
- tax data will be kept for the time required by current national legislation (currently 10 years);
- for marketing purposes they will be kept for 2 years.
At the end of these periods, the data will be made anonymous or deleted where technically possible.
- Data Subject Rights For any questions or to exercise any other rights relating to your personal data, please contact and/or write to: Autonoleggi Demontis S.p.A., as Data Controller, with registered office in Via Predda Niedda, 23/A, 07100 Sassari, VAT number: 00327370904, Telephone: 079/2639015, email: privacy.gdpr@autonoleggidemontis.com. The Data Controller hereby informs you that it has appointed a Data Protection Officer (DPO), who can be contacted to exercise the rights granted by the GDPR at the following email address: dpo@autonoleggidemontis.com.
- The data subject has the right to request from the data controller access to his or her personal data (Article 15 of the GDPR), rectification (Article 16 of the GDPR), erasure (Article 17 of the GDPR), and restriction of processing (Article 18 of the GDPR). He or she also has the right to object to processing and to request data portability.
- If the data subject has freely and specifically given consent to the processing of data for marketing purposes, he or she may at any time exercise his or her right to withdraw such consent without prejudice to the lawfulness of the processing based on the consent given before its withdrawal.
- The interested party has the right to lodge a complaint with a supervisory authority.
- Provision of data and consequences of refusal. The provision of personal data is mandatory to pursue the processing purposes indicated above in points A), B), C), and D). Failure to provide and process the data subject’s data would make it impossible to fulfill the obligations arising from the contract, as well as from legislative provisions. The provision of personal data is optional for the purposes indicated in point E), and refusal to consent will have no consequences.
- Data Processing Methods In relation to the purposes indicated, the processing of personal data, in compliance with the law and confidentiality obligations, takes place through manual processing, IT and telematic tools, with logic strictly related to the purposes themselves and, in any case, in a way that guarantees the security and confidentiality of the data (even in the case of the use of remote communication techniques).
Updated on March 19, 2021.
