Legislation on Privacy
Information pursuant to Articles 13 and 14 of GDPR 2016/679 (General Data Protection Regulation)
Dear Customer,
We wish to inform you that art. 13 of EU Regulation 2016/679 (“General Data Protection Regulation”) provides for the protection of individuals and other subjects with regard to the processing of personal data.
According to the legislation indicated, this processing will be based on the principles of fairness, lawfulness and transparency and the protection of your privacy and your rights, which have always inspired our activity.
Therefore, pursuant to art. 13 of EU Regulation 2016/679, we provide you with the following information:
1. Purpose of the processing
1.1 The data provided by you will be processed for the following purposes:
a) creation and execution of obligations arising from the rental and/or provision of the main services or accessories and related to the contract you requested (eg: vehicle maintenance, accident management, etc.). In such cases, we inform you pursuant to Article 24 of the Code that the acquisition of your consent, once the contract has been concluded, is not required if the processing is necessary to perform obligations arising from the contract, while, during negotiation, consent is not also required if the processing is necessary to fulfill – before the conclusion of the contract – your specific requests.
b) preparation of measures related to the protection against credit risk, including activities aimed at identifying the Customer, verifying the veracity of the data provided, its economic reliability/ solvency, even during the relationship.
c) preparation of measures to protect the company’s assets (e.g.: fleet, etc.) or staff of the company against any acts carried out by the customer and that are illegal or fraudulent or in any case in breach of the contract or the rules of law or the principles of proper conduct in business relations, including activities and processing aimed at identifying the person responsible for such acts and keeping the relevant information for subsequent determinations by the holding.
d) preparing initiatives to improve the services provided to our customers, such as market research, interactive commercial communications, economic and statistical analysis, commercial information, direct sales, sending of information/promotional material, Assessment of the degree of customer satisfaction.
2. Procedure for processing
2.1 In relation to the aforementioned purposes, the processing of data will be carried out in compliance with the rules in force, by means of manual, computer and telematic tools, with logic strictly related to the purposes indicated above, so as to ensure the security and confidentiality of data, including through the adoption of the minimum measures required by Articles. 31 ss. of the Code and of the Technical Specification concerning the minimum security measures referred to in Annex (B) to the Code.
3. Optional nature of the provision of data
3.1 The provision of your consent is optional for the processing of the relevant information, however any refusal to provide the data would make it impossible to provide the services you requested.
4. Persons to whom personal data may be communicated
4.1 With reference to the scope of communication of your data, we inform you that the information provided may be communicated to, or may become aware of, the following subjects or categories of subjects:
a) Police forces (including, for example, theft of the rented vehicle, which could be equipped with a satellite anti-theft system, capable of collecting information on the route of the vehicle), armed forces and other public administrations, for the fulfilment of obligations required by law, regulations or Community legislation. This area of communication also includes legal communications to the authorities proceeding – in accordance with the provisions of Article 126 C.d.s. and the Circular of the Ministry of Interior n. 300/A/1/44248/109/16/1 of 12 August 2003, as amended following the judgment of the Constitutional Court 27/2005 – in case it is necessary to re-certify or re-certify from third parties to your person sanctions applied as a result of violation of the rules of the Highway Code on the occasion of use by you of a vehicle of which you are the owner of our company and in respect of which you are the actual driver. It should be noted that in such cases Article 24 of the Privacy Code excludes the obligation to acquire the prior consent of the interested party to such communications.
b) Pegaso Limo consultants, partners and collaborating companies, including companies or other entities with which Pegaso Limo has concluded agreements or agreements for the rental of vehicles subsequently used by employees or other persons pursuant to to such companies or entities.
c) Insurance companies, companies and entities contractually linked to Pegaso Limo, responsible for the management and/or settlement of claims.
d) To credit protection companies, bodies, consortia and associations.
c) To companies specializing in the management of commercial advertising promotion information.
4.2 Even in the case of communication/ transfer abroad of data, the related processing will be in full compliance with the provisions of art. 42-45 of the Code, from the Directive of the European Union n. 46/95/EEC for the transfer within the EU, of the current General Authorizations relative to the transfer abroad of personal data to third countries not belonging to the European Union.
5. Processing of sensitive data
5.1 It may happen that, in relation to specific activities related to the execution of the rental contract (e.g. claims management), Pegaso Limo may proceed to the collection and processing of your sensitive data, as defined by article 4, paragraph 1, lett. (d) of the Code, by means of manual, computer and telematic tools. In particular, Pegaso Limo could proceed to the treatment of health data or suitable to reveal his state of health. In such cases, for which your written consent is required, we inform you that Pegaso Limo will process the data in full compliance with the provisions of the Code and the applicable General Authorizations of the Guarantor applicable in the matter of processing of sensitive data.
5.2 Your sensitive data, which will not be disseminated in any way, may be communicated only to the following categories of subjects:
a) Police, armed forces and other public administrations, for the sole purpose of fulfilling obligations under Community law, regulations or legislation, cases in which Article 26 of the Code excludes the obligation to acquire the prior consent of the interested party.
b) Insurance companies responsible for the settlement of claims, as well as companies or entities contractually linked to Pegaso Limo that carry out claims management activities.
5.3 The refusal of written consent in the case of letter b) above would have the consequence of preventing the completion of the related activities, without prejudice to the validity of the rental contract.
6. Data controller
6.1 The data controller is:
CONSORZIO PEGASO LIMO
C.F./P.I. 14601731004
Via Pietro L’Eremita, 3
00162 Roma
Tel. +39 064429001
7. Rights of the data subject
7.1 At any time, you may exercise, pursuant to Articles 15 to 22 of EU Regulation no. 2016/679, the right to:
a) request confirmation of the existence or otherwise of their personal data;
b) obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;
c) obtain the rectification and deletion of data;
d) obtain restriction of processing;
e) obtain the portability of data, that is to say, receive it from a controller, in a structured, commonly used and machine-readable format, and transmit it to another controller without hindrance;
f) oppose the processing at any time and also in the case of processing for direct marketing purposes; g) oppose an automated decision-making process relating to natural persons, including profiling.
h) ask the controller for access to and rectification or erasure of personal data or restriction of processing concerning the controller or to object to the processing of personal data, in addition to the right to data portability;
i) withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
j) lodge a complaint with a supervisory authority.
4. The person concerned shall have the right to oppose, in whole or in part:
a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of collection;
b) the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.
