Privacy Policy

1. Introduction and Scope of This Privacy Policy

This Privacy Policy governs the collection, processing, storage, and use of personal data by rentcarbergamo.com, a car rental booking service operating in Bergamo, Lombardy, Italy. This policy applies to all visitors and customers who access our website, make a reservation, or contact us in connection with any vehicle hire service available in the Bergamo area, including Bergamo Orio al Serio International Airport, Citta Alta, Bassa Bergamo, and surrounding municipalities such as Dalmine, Seriate, and Curno.

We are committed to handling your personal data responsibly and in full compliance with applicable Italian privacy law, the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679), and the Italian Legislative Decree no. 196/2003 (Privacy Code) as amended by Legislative Decree no. 101/2018. The data controller for all personal information processed through this website is rentcarbergamo.com, reachable at info@rentcarbergamo.com.

By using our website or submitting a booking enquiry, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our services and contact us to have your data removed.

2. Personal Data We Collect from Car Rental Customers in Bergamo

When you interact with our website or booking system, we may collect the following categories of personal data:

2.1 Identity and Contact Information

Full legal name, date of birth, nationality, postal address, email address, telephone number, and driver licence number and issuing country. This information is necessary to confirm your eligibility to rent a vehicle in Italy and to fulfil your booking contract.

2.2 Booking and Reservation Data

Pick-up and drop-off locations (including Bergamo Orio al Serio Airport, city centre locations, and hotel addresses throughout the Bergamo province), rental dates and times, vehicle category selected, optional extras such as child seats and GPS navigators, and any special requests or notes you provide at time of booking.

2.3 Payment Information

We do not store full payment card details on our own servers. All payment transactions are processed through secure, PCI-DSS compliant third-party payment processors. We may retain a partial record of your transaction (such as the last four digits of your card and the transaction reference number) solely for customer service and dispute resolution purposes.

2.4 Browsing and Technical Data

When you visit our website, we automatically collect certain technical information including your IP address, browser type and version, operating system, referring website URL, pages viewed, time spent on each page, and device identifiers. This data is gathered through server logs and cookie technologies as described further in our Cookie Policy.

2.5 Location Data

With your explicit consent via your browser or device settings, we may collect approximate geolocation data to help suggest the nearest car rental pick-up point in the Bergamo area, including locations near Via Papa Giovanni XXIII, Porta Nuova, and the Orio al Serio terminal. You may withdraw this consent at any time through your browser settings.

3. How We Use Your Personal Data

rentcarbergamo.com processes your personal data only for specified, explicit, and legitimate purposes. The legal bases and purposes for which we use your data are as follows:

3.1 Processing and Fulfilling Your Car Rental Booking

The primary purpose for which we collect personal data is to confirm and manage your vehicle reservation in Bergamo, coordinate pick-up and drop-off logistics, issue booking confirmations and receipts, and communicate any changes relevant to your rental. This processing is necessary for the performance of a contract to which you are party (Article 6(1)(b) GDPR).

3.2 Customer Support and After-Service Communication

We use your contact details to respond to enquiries, handle complaints, assist with modifications or cancellations, and follow up on any incidents or damage reports relating to your rental in the Bergamo and Lombardy region. This is based on our legitimate interest in providing quality customer service (Article 6(1)(f) GDPR).

3.3 Service Improvement and Analytics

Aggregated and anonymised browsing data helps us understand how customers search for car hire options in Bergamo, which pages they visit, and how we can improve our booking process. We use this data in a way that does not identify individual users.

3.4 Marketing and Promotional Communications

Only with your explicit prior consent, we may send you promotional emails about seasonal car rental deals in Bergamo, special offers for long-term vehicle hire in Lombardy, and updates about new vehicle categories. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at info@rentcarbergamo.com. Withdrawal of consent does not affect the lawfulness of prior processing.

3.5 Legal and Regulatory Compliance

We may be required to process and retain your personal data to comply with Italian tax law, road traffic regulations, insurance obligations, and requests from competent authorities including the Guardia di Finanza, Italian traffic police (Polizia Stradale), or judicial bodies. This processing is based on legal obligation (Article 6(1)(c) GDPR).

4. Sharing Your Data with Trusted Third Parties

rentcarbergamo.com does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with carefully selected third parties only to the extent necessary to fulfil your booking and comply with our obligations:

• Vehicle Rental Suppliers and Fleet Partners: Local and international car rental operators at Bergamo Orio al Serio Airport and city centre locations receive your booking details to prepare your vehicle and verify your driver licence.
• Payment Processing Providers: PCI-DSS certified payment gateways handle all financial transactions. These providers operate under strict data processing agreements and may not use your payment data for any purpose beyond processing your transaction.
• Insurance Underwriters: Where insurance coverage is included in or added to your car hire in Bergamo, relevant booking and identity data may be shared with the insurance provider to validate your coverage and process any claims.
• Booking Aggregators and Technology Partners: We work with booking engine technology providers who assist in processing reservations. These partners act as data processors under binding contracts and may only process your data on our documented instructions.
• Legal and Regulatory Authorities: We may disclose personal data to Italian or EU authorities where required to do so by law, court order, or to protect the legal rights, safety, or property of rentcarbergamo.com or third parties.

All third parties with whom we share data are required to implement appropriate technical and organisational security measures and are prohibited from using your personal data for any purpose beyond those specified in our data processing agreements.

5. Data Retention Periods for Car Rental Records

We retain your personal data only for as long as is necessary for the purposes set out in this policy or as required by applicable law. Our standard retention periods are as follows:

• Booking and reservation records: Retained for 10 years from the date of the rental in accordance with Italian civil and tax law requirements applicable to commercial transactions.
• Customer account data: Retained for the duration of your active relationship with us and for 3 years after your last interaction, unless a longer period is required by law.
• Payment transaction records: Retained for 10 years in compliance with Italian fiscal regulations (D.P.R. 633/1972 and D.P.R. 600/1973).
• Marketing consent records: Retained for as long as you remain subscribed to our communications and for 3 years after unsubscription to demonstrate your consent was obtained lawfully.
• Technical and browsing data: Retained for a maximum of 13 months in line with Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) guidelines on web analytics data.
• Incident and damage reports: Retained for the duration of any claim or legal proceeding, plus an additional 5 years.

At the end of each applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

6. Your Rights as a Data Subject Under GDPR

As a resident or visitor whose personal data is processed by rentcarbergamo.com, you benefit from the following rights under the GDPR and Italian privacy law. To exercise any of these rights, please contact us at info@rentcarbergamo.com. We will respond to all verified requests within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you, including the categories of data processed, the purposes of processing, and the third parties with whom your data has been shared.

6.2 Right to Rectification

If any personal data we hold is inaccurate or incomplete - for example, an incorrect address in Bergamo or a misspelled name on your booking - you have the right to request that we correct or update it without undue delay.

6.3 Right to Erasure

Also known as the right to be forgotten, you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and there are no overriding legitimate grounds. This right may be limited by our legal obligations to retain certain records.

6.4 Right to Data Portability

Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.

6.5 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling related to marketing. You may also object to processing based on our legitimate interests, although we may demonstrate compelling grounds to continue processing in certain circumstances.

6.6 Right to Restriction of Processing

You may request that we temporarily restrict the processing of your data while a request for rectification is pending, while the lawfulness of processing is being assessed, or where you require data to be retained longer than our standard periods for the establishment or defence of legal claims.

6.7 Right to Lodge a Complaint

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the Italian supervisory authority: Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Roma, Italy, website: www.garanteprivacy.it.

7. Security Measures Protecting Your Car Rental Data

We take the security of your personal data seriously and have implemented a range of appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Secure HTTPS encryption across all pages of our website to protect data transmitted between your browser and our servers.
• Access controls ensuring that only authorised personnel involved in car rental operations have access to personal data, on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of our booking platform and data infrastructure.
• Data processing agreements with all third-party suppliers and partners, requiring them to maintain equivalent security standards.
• Staff training on data protection obligations and secure data handling practices.
• Incident response procedures to detect, report, and manage personal data breaches, including notification to the Garante per la Protezione dei Dati Personali within 72 hours as required by GDPR Article 33.

While we employ industry-standard safeguards, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at info@rentcarbergamo.com.

8. Updates to This Privacy Policy

rentcarbergamo.com reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements under Italian or EU law, or updates to our car rental services in Bergamo and the wider Lombardy region. The revised policy will be published on this page with the updated effective date shown at the top of the document.

Where changes are material, we will endeavour to notify registered customers by email prior to the changes taking effect. We encourage you to review this page periodically to remain informed about how we protect your personal information. Continued use of our website or booking services following any update constitutes your acceptance of the revised policy.

9. Contact Us Regarding Your Privacy Rights

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data in connection with car rental bookings in Bergamo, please contact us using the details below. We are committed to resolving all data protection enquiries promptly and transparently.

Email: info@rentcarbergamo.com
Phone: +39 328 171 1010
Address: Bergamo, Lombardy, Italy

This Privacy Policy was last reviewed and updated in 2025. It applies to all personal data collected by rentcarbergamo.com in connection with car hire services in Bergamo, including online bookings, telephone reservations, and in-person enquiries at our partner locations throughout Bergamo province.