COOKIE POLICY

Cookies allow our website to remember your preferences while browsing, improve your experience and make ads/banners more relevant to your preferences. Cookies are always traceable back to the website of origin or provenance.

We also use other technologies that have a very similar function to cookies and that allow us to constantly monitor and improve our website and our App. These technologies are used in connection with cookies in order to improve the management of the same infrastructures and collect information on online activities. Therefore, the cookie policy described in this part also involves the use of these technologies.

WHAT IS A COOKIE?

A cookie is a small text file that is installed on the user's browser and allows some information about their online behavior to be stored.

WHAT ARE COOKIES USED FOR AND WHY DO WE USE THEM?

Some cookies help the user to make navigation more efficient. For example, when we are consulting a car rental site and, perhaps by mistake, we close the internet session, it is a cookie that allows us to reopen that page and resume the navigation path left pending. Cookies have different functions and their use allows us to carry out - in compliance with the regulation of the privacy policy - the tasks listed below:

1. Strictly Necessary Cookies: allow the user to navigate the website, App or other technologies adopted and the possibility of performing actions such as accessing reserved areas and/or making a reservation, as required by the GDPR. These cookies expire at the end of the user's browsing session.

2. Performance Cookies: allow the collection of information about the user's interaction with the website, App or other technology adopted and are used to improve the user experience. They do not contain personal information about the user. These cookies normally expire after two days.

3. Functional cookies: allow the website, App or other adopted technology to remember the user's browsing choices and provide advanced and personal features regarding the storage of the user account, language and geographic preferences. The duration of these cookies does not exceed two years.

4. Profiling cookies: they track the profile of the user who navigates the website, App or other adopted technology, so as to keep track of his tastes and habits.

5. Advertising Cookies: they provide information necessary to carry out marketing and advertising campaigns through advertisements relevant to users browsing the website, App or other adopted technology.

For more information on our cookie policy and on the Third Parties that adopt the cookies listed above and to know how to disable them, you can consult our CMP (Consent Management Platform) which is OneTrust.

HOW CAN I MANAGE COOKIES?

Session cookies are used for the current browser session and expire when you close your browser. Persistent cookies are used to provide you with a more precise, faster and more relevant browsing experience to your tastes and characteristics and will remain on your device until you delete them or until they reach their set expiration date.

HOW TO DISABLE COOKIES BY CONFIGURING YOUR BROWSER

If you wish to learn more about how your browser stores cookies during your navigation, we invite you to follow these links on the websites of the respective suppliers: Mozilla Firefox, Google Chrome, Internet Explorer, Safari 6/7 Mavericks, Safari 8 Yosemite, Safari on iPhone, iPad, or iPod touch.

This cookie policy was updated on 08/26/2024.

PRIVACY POLICY

We inform you that, pursuant to art. 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”), Sirental Srl (hereinafter “Sirental” or “Owner”) will process the data provided by you in compliance with the legislation in force and as reported below.

1. OBJECT OF THE TREATMENT

The Data Controller processes personal and identifying data (for example, name, surname, company name, address, telephone number, e-mail, bank and payment details) communicated by you upon conclusion of the rental contract.

2. PURPOSE OF THE PROCESSING

Your personal data are processed:

Without your express consent, in accordance with the provisions of art. 6 letter b), e), f) GDPR, for the following Service Purposes:

(a) access to and use of the Sirental rental service, including the collection, storage and processing of data for the purposes of establishing and subsequently managing the operational, technical and administrative relationship and for sending communications relating to the performance of the services;

(b) execution of the obligations arising from the General Rental Conditions;

(c) payment management (with related processing of payment data in accordance with the law, including the identification details of credit cards and/or prepaid cards);

(d) fulfillment of legal, accounting, fiscal, administrative and contractual obligations connected to the provision of the requested services;

(e) management of relationships with third-party public authorities and bodies for purposes connected to specific requests, the fulfillment of legal obligations or specific procedures (e.g. re-notification to the actual offender of reports of violations of the Highway Code);

(f) claims management;

(g) preparation of measures aimed at protecting against credit risk, including activities aimed at identifying the customer and his economic reliability/solvency, even during the contractual relationship. Failure to communicate, incomplete or untruthful communication of the data necessary for registration will make it impossible to complete the registration and the consequent impossibility of using the service;

(h) exercise of the Data Controller's rights, such as the right to defense in court;

(i) for legitimate interest in carrying out direct marketing activities and for the purposes of measuring the degree of satisfaction with the quality of the services provided.

The communications referred to in point (i) above may take place in traditional ways (e.g. via post, telephone calls with an operator), automated ways (e.g. telephone calls without an operator) and similar ways (e.g. fax, e-mail, SMS, MMS), based on the data provided during the contractual stipulation phase.

Only with your specific and distinct consent (in compliance with the provisions of art. 7 GDPR) for the following additional purposes:

(k) sending by Sirental, its parent, subsidiary and affiliated companies, of newsletters, commercial communications and/or advertising material on products or services offered by a party other than the Data Controller;

(l) conducting market research and administering questionnaires for the purpose of measuring the level of satisfaction with the quality of services offered by a party other than the Data Controller;

(m) profiling of the user's personal data to offer personalized offers based on purchasing preferences.

The communications referred to in the previous points may take place in traditional ways (e.g. via post, telephone calls with an operator), automated ways (e.g. telephone calls without an operator) and similar ways (e.g. fax, e-mail, SMS, MMS), based on the data provided during the contractual stipulation phase.

3. METHODS OF TREATMENT

The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and/or automated processing. The Data Controller will process the personal data for the time necessary to fulfill the purposes set out above and in any case for no more than 10 years from the termination of the relationship for Service Purposes and for no more than 5 years from the collection of data for Marketing Purposes.

4. ACCESS TO DATA

Your data will be made accessible for the purposes referred to in art. 2), letters a) to i) and, if permitted, k) to am): – to employees, collaborators, affiliates and franchisees of the Data Controller or of Sirental companies, in their capacity as authorised and/or internal data controllers and/or system administrators; – to third-party companies or other subjects (insurance companies responsible for the settlement of claims; companies specialising in debt collection; companies specialising in the management of commercial or credit-related information, or advertising promotion; other companies contractually linked to Sirental that carry out claims management activities, sub-suppliers, subcontractors and/or financial intermediaries, professional firms that provide assistance and consultancy to our Companies as well as banks, data processing centres, to public bodies, for the granting of contributions and aids of any kind connected to the provision of services) that carry out activities on behalf of and by order of the Data Controller, in their capacity as external data controllers. Your data will also be made accessible for the purposes referred to in art. 2), letters a) to i) and, if permitted, k) to am): – to EAN Data Services UK Ltd., Enterprise Holdings, Inc. and its associated and/or controlled companies; these entities will process the data in their capacity as independent data controllers. For further details, please read EHI's Privacy Policy, including information regarding data retention, on the website https://www.enterprise.co.uk/en/privacy-policy.html

5. COMMUNICATION OF DATA

Without the need for express consent (pursuant to art. 6 letters b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2) letters a) to i) to: police forces, armed forces and other public administrations, supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes. These subjects will process the data in their capacity as independent data controllers. Your data will not be disclosed.

6. DATA TRANSFER

Personal data is stored on servers located at the Microsoft Azure cloud infrastructure in Ireland, within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

7. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO RESPOND

The provision of data for the purposes referred to in art. 2), letters a) to i) is mandatory. In their absence, we will not be able to guarantee you the Services referred to in art. 2, letters a) to i). The provision of data for the purposes referred to in art. 2), letters k) to m) is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided.

8. GEOLOCATION, SATELLITE NAVIGATORS AND INFOTAINMENT SYSTEMS

We also inform you that Sirental vehicles may be subject to geolocalization. The geolocalization activity will be carried out in accordance with current legislation; the processing of data collected in this way by third parties will be anonymous. Sirental does not collect or process any sensitive data relating to customers. Sirental vehicles may be equipped with satellite navigation and infotainment systems, the latter managed directly and independently by Sirental from the vehicle manufacturer. In the event of use of satellite navigation and infotainment systems, you will be responsible for the information entered therein. Sirental does not guarantee the confidentiality of such information, which you will be responsible for deleting from the devices used; otherwise, such data may be visible to the next user of the vehicle.

9. RIGHTS OF THE INTERESTED PARTY

In your capacity as interested party, you have the rights set forth in art. 15 GDPR and specifically the rights to: – obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form; – obtain the indication of: a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the owner, managers and designated representative pursuant to art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or agents; – obtain: a) the updating, rectification or, when interested, integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected; – to oppose, in whole or in part: a) for legitimate reasons, the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by e-mail and/or through traditional marketing methods by telephone and/or paper mail. Please note that the interested party's right to object, set out in point b) above, for direct marketing purposes via automated methods extends to traditional methods and that in any case the interested party retains the possibility of exercising the right to object even only partially. Therefore, the interested party can decide to receive only communications via traditional methods or only automated communications or neither of the two types of communication. Where applicable, the interested party also has the rights set out in articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Guarantor Authority.

10. HOW TO EXERCISE YOUR RIGHTS

You may exercise your rights at any time by sending: – a registered letter with return receipt to Sirental – Operational headquarters in Pachino, in Viale Sebastiano Fortuna, 21; – an e-mail to info@sirental.it

11. OWNER, RESPONSIBLE PERSON AND APPOINTED PERSONS

The Data Controller is Sirental (CF/P.IVA 01730140892), with registered office in Viale Sebastiano Fortuna 21, Pachino (SR) tel. 3337089526; email: info@sirental.it. The Data Controller has designated, pursuant to art. 37 GDPR, a DPO (Data Protection Officer), who can be contacted for all matters relating to the processing and protection of personal data and the exercise of the rights of the interested party at the registered office of the Data Controller or by writing to info@sirental.it. The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.

12. CHANGES AND UPDATES TO THE PRIVACY POLICY

This version of the information is released on August 26, 2024. If the Data Controller intends to modify its information, it will proceed to inform the interested parties by making an updated version available.