INFORMATION ON THE PROCESSING OF PERSONAL DATA
European Regulation (EU) 2016/679 on the Protection of Personal Data.
This Information Notice, provided pursuant to Article 13 of the EU Regulation 2016/679 ("GDPR"), explains how personal data entered on the portal and which may become the subject of the contractual relationship with Co. Bar. S.r.l..
Data Controller
The data controller is Co. Bar. S.r.l. with registered office in via Fanelli, 238 - 70125 Bari, Italy, (hereinafter referred to as the "Data Controller"), which will process your personal data in accordance with the provisions of the applicable legislation on the protection of personal data and this Information Notice.
Object of Processing
For the purposes of this Notice, processing of personal data shall mean any operation or set of operations, carried out with the help of automated processes and applied to personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.
Co. Bar. S.r.l. will process personal data, communicated by you, manually and/or with the support of computer or telematic means.
In particular, the following personal data may be processed:
- Identification data: data that allow direct identification, such as personal data (such as first name, last name, tax code, VAT number, address, etc.), and the data of your authorization documents (driver's license, passport) that will be given to the Data Controller and processed for the purposes of registration on the portal and the signing of the rental contract;
- Economic and financial data: data necessary for payments (e.g., credit card) or proving the execution of payments (payment identification details);
- Contact Data: contact information such as telephone numbers, landline and/mobile, e-mail address, provided to the Controller during registration or in the course of finalizing the rental agreement, which enable the Controller to contact you for the purpose of managing the contractual relationship and/or to provide you with services tailored to your needs;
According to the indicated Regulations, the Data Controller guarantees that the personal data, subject to processing, will be handled with respect for the fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality, personal identity and the right to protection of personal data.
Purpose of Treatment
Co. Bar. S.r.l. will process your Personal Data for the achievement of specific purposes described in this Policy and only when there is a suitable legal basis provided by the applicable data protection law. Specifically, the Data Controller will process your Personal Data only upon the occurrence of one or more of the following legal bases:
- The Data Subject has given his/her free, specific, informed, unambiguous and express consent to the processing;
- The processing is necessary for the performance of a contract to which the data subject is a party or the execution of pre-contractual measures taken upon specific request;
- Where there is a legitimate interest of the Data Controller, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail;
- By virtue of a legal obligation to which Co. Bar. S.r.l. is obliged to.
The provision of your Personal and Contact Data is necessary in all cases where the processing is carried out on the basis of a legal obligation or to perform a contract or to fulfill pre-contractual obligations. In the latter cases, your refusal may result in Co. Bar. S.r.l. the inability to process your requests and the inability to provide you with the requested services.
For the purposes necessary for registration on the portal and booking the car rental service, data processing may take place even without express consent.
The processing of personal data related to the geolocation of vehicles will be the subject of specific information and will be carried out only after the acquisition of the consent of the person concerned. Failure to consent to the processing of data will result in the inability of the owner to conclude the contract for the rental of the vehicle.
The provision of your Personal Data, on the other hand, is voluntary for the pursuit of further purposes other than those indicated above, and failure to consent in relation to them will in any case have no consequence on the conclusion of the contract and management of the service. Consent for said purposes is always voluntary and, where given, may be revoked at any time, in the manner described in the "Rights of the Data Subject" section of this Notice.
In particular, your free and specific consent is required to process your Personal Data, personal and contact information, for market research, direct sales, including by telephone, for the placement of products or services, for commercial communications or marketing activities, relating to products and/or services offered by Co. Bar. S.r.l. or its partners, for profiling activities aimed at improving the commercial offer.
Should you formulate your consent, your Data will be processed until the consent given is revoked.
Communication and dissemination of data
For the pursuit of the purposes described above, Co. Bar. S.r.l. may need to communicate, your Personal Data to third parties, in order to execute the Contract, in fulfillment of legal obligations or for the performance of activities instrumental to the provision of the requested services.
Your Personal Data may be made accessible, for the purposes mentioned above:
- to employees and collaborators of Co. Bar. S.r.l., specially appointed persons authorized to process it;
- to third-party companies or other entities that carry out certain activities on behalf of Co. Bar. S.r.l., in their capacity as appointed data processors, as well as to their employees and collaborators specifically appointed as persons authorized to process. These parties will process your Personal Data, for example, in the context of:
- auto insurance services;
- billing services;
- customer management activities;
- roadside assistance services;
- Entities, public and private authorities and supervisory and control bodies, when required by specific legal, regulatory and authorization provisions;
- Banking institutions and credit card issuing companies; firms and companies within the scope of assistance and consulting relationships, including legal;
Subjects belonging to the above categories will process data as autonomous Data Controllers or as Data Processors or persons authorized to process data, specifically designated by Co. Bar. S.r.l.
To the Data Processors and Persons Authorized to the processing, possibly designated, Co. Bar. S.r.l. will issue adequate instructions, aimed at the adoption of appropriate security measures, in order to be able to guarantee the confidentiality, security and integrity of the data.
The data will not be subject, under any circumstances, to dissemination
Retention period
The personal data processed for the above purposes will be retained in accordance with the principles of proportionality and necessity, and in any case until the purposes of processing have been pursued and in accordance with any legal obligations that may be required.
In particular, personal data will be retained exclusively for the period useful for the notification, by the competent bodies, of any fines or for the time useful for the management of claims in which the vehicle was involved.
Transfer Data to a third country and/or international organization
Data of a personal nature provided, will not be transferred abroad within or outside the European Union.
Rights of the data subject
Every data subject has the right to exercise specific rights. In particular, the data subject has the right:
- to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet registered, as well as to ask the data controller for access to the personal data; he/she also has the right to receive in a structured, commonly used and machine-readable format the personal data concerning him/her;
- to obtain an indication of the origin of the personal data, the purposes and methods of processing, the logic applied in the case of processing carried out with the aid of electronic instruments, the identification details of the Data Controller and Managers, the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it;
- to obtain the updating, rectification or, when interested, the integration of the data, the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept in relation to the purposes for which the data were collected and subsequently processed;
- to oppose in whole or in part, for legitimate reasons, the processing of personal data concerning him/her, even if pertinent to the purpose of collection, as well as the processing of personal data for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Methods of exercising rights
The interested party may at any time exercise rights by sending written notice to the email address
A data subject who believes that the processing of data relating to him or her violates current privacy legislation has the right to lodge a complaint with the supervisory authority (www.garanteprivacy.it)
Owner, manager, appointees
The Data Controller is Co. Bar. S.r.l. which has appointed its own Personal Data Protection Officer (DPO) who can be reached at the email address
The updated list of data processors and data processors is kept at the offices of the Data Controller.