Privacy policy

Last updated: 22 October 2026

This is a translation: in case of differences, the Italian text prevails. Italian version

This policy explains how CASALE AUTONOLEGGIO di Casale Antonio Gerardo (“we”) processes the personal data of people who visit autonoleggiocasale.it and of those who contact us, as required by Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

CASALE AUTONOLEGGIO di Casale Antonio Gerardo
Registered office: Via Torino 4, 83047 Lioni (AV)
VAT No. 03151790643
Email: casaleautonoleggio@gmail.com
Certified email (PEC): antoniogerardocasale@pec.it
Phone: +39 349 310 2503

What data we process

Browsing data: IP address, browser and device type, pages visited, date and time. It is collected automatically by the systems that run and protect the site.
Form data: first name, surname, phone number, email, travel date, service, number of people, pick-up location, destination and message.
WhatsApp messages: your number, your profile name and what you write to us, including attachments.
Emails and phone calls: your email address or your number, and what you write or say to us.

In your messages, write only what your request needs: no health data or other special categories of data, such as religious beliefs or political opinions.

Why we use the data and on what legal basis

For each use, we state the legal basis, that is, the point of Article 6(1) GDPR that allows it.

Replying to your requests and, if you ask, preparing a quote or an offer for you: pre-contractual measures taken at your request (point (b)).
Managing the contract that arises from the request: performance of the contract (point (b)).
Replying to other messages, for example a report or a job application: legitimate interest in replying to those who write to us (point (f)).
Complying with legal obligations, for example tax and accounting obligations: legal obligation (point (c)).
Protecting the site from abuse and from automated programs: legitimate interest in security (point (f)).
Exercising or defending a right: legitimate interest (point (f)).

Mandatory and optional data

Giving us your data is your choice: without the data we need, however, we cannot reply to you.

In the form you must fill in your first name, phone number, email, travel date, pick-up location and destination; the other fields are optional.

When we ask for your consent, giving it is optional: if you say no, the site and the service work just the same.

How and for how long we keep the data

We process the data with IT tools and, when necessary, on paper. Only authorised people can see it, and we protect it with appropriate security measures.

The site has a password-protected private area from which CASALE AUTONOLEGGIO di Casale Antonio Gerardo updates the content and reads the requests sent through the form. Visitors to the site do not access the private area and do not receive its cookies.

Browsing data is kept by the provider that hosts the site for as long as needed for security, according to its own rules.
Requests sent through the form stay in the private area for 6 months from when they are sent, then they are deleted automatically; if you ask us to delete them sooner, we do so straight away. Technical backups, where they exist, are renewed automatically: a deleted request also disappears from them within 30 days.
Other messages that do not lead to a contract, received by email, on WhatsApp or by phone, are kept for as long as needed to reply and to follow up the negotiation, and in any case for no more than 6 months from the last contact.
To protect the form and the private area from abuse, the site keeps for a short time, 48 hours at most, a fingerprint of the IP address calculated with a secret key, which does not contain the address in readable form.
If a contract arises from the request, we keep the data for its entire duration and then for 10 years, as the law requires for accounting and tax documents (Article 2220 of the Codice civile, the Italian Civil Code).

Who receives the data

The data is neither sold nor disseminated. Only the following parties may receive it, each for its own part:

persons authorised by CASALE AUTONOLEGGIO di Casale Antonio Gerardo, who are bound by confidentiality;
OnlinePerTutti.com (T.H.K. Consulting Limited, Hong Kong), which built and manages the site: it processes the data on our behalf, only for the technical management of the site;
Cloudflare, Inc. (United States), which hosts and protects the site and provides the technical tools described on this page: it processes the data on behalf of OnlinePerTutti.com, as its supplier;
WhatsApp Ireland Limited, if you write to us on WhatsApp: it processes the messages as an independent controller (WhatsApp privacy policy);
our accountant and other consultants, banks and public authorities, when required by law or by the contract.

Data outside the European Union

Some of the providers listed are based outside the European Union, for example in the United States, and may process part of the data there. They do so with the safeguards provided for by the GDPR (Articles 44-46):

for US companies that participate in the EU-U.S. Data Privacy Framework, the European Commission’s adequacy decision of 10 July 2023 (Commission Implementing Decision (EU) 2023/1795);
in other cases, the standard contractual clauses approved by the European Commission (Commission Implementing Decision (EU) 2021/914).

OnlinePerTutti.com (T.H.K. Consulting Limited) is based in Hong Kong, which does not have an adequacy decision from the European Commission. The data is stored on the systems of the providers listed above: T.H.K. Consulting Limited accesses it only for the technical management of the site, on our behalf.

For information about these safeguards, or a copy of them, write to casaleautonoleggio@gmail.com.

Your rights

At any time, you can ask us:

to see your data and get a copy of it (access, Art. 15 GDPR);
to correct or complete it (rectification, Art. 16);
to delete it, when it is no longer needed or the law does not require us to keep it (erasure, Art. 17);
to restrict its use (restriction, Art. 18);
to receive it in a machine-readable format, to take it elsewhere (portability, Art. 20);
to object to its use based on our legitimate interest and, always, to its use for promotional purposes (objection, Art. 21).

If you have given us your consent, you can withdraw it at any time: withdrawal does not affect what we did before (Art. 7(3)).

To exercise your rights, write to casaleautonoleggio@gmail.com or to our PEC (certified email) antoniogerardocasale@pec.it. We will reply within one month. In more complex cases, this period can be extended by two further months: if so, we will tell you within the first month (Art. 12(3)).

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22).

Complaint to the Garante

If you believe that your data is being processed in a way that does not comply with the GDPR, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it (Art. 77 GDPR).

Which cookies and similar tools the site uses, and how you can manage them, is explained in the cookie policy.

Changes to this policy

This policy may change, for example if the site adds a feature or a regulation changes. The version in force is always this page, with the date at the top.