Privacy Policy — Milan Super Car Rental

The data controller is Milan Super Car Rental, the brand operating milansupercarrental.com and serving clients in Milan. For any question about this policy, about a booking, or to exercise your rights, write to [email protected].

We collect data directly from you, through:

• the enquiry form: name, email, phone number (optional), chosen car (optional), pick-up and drop-off dates, flight number (airport delivery form only), your free-text message, plus the page URL and referrer the form was submitted from;
• email, phone calls and WhatsApp messages you send us directly;
• a click record created when you tap a WhatsApp button on the site, which stores the page URL, referrer, language and the prefilled message text before WhatsApp opens;
• standard server logs generated automatically when you visit the site: IP address, time, requested page and browser.

We do not collect payment data through the website, because bookings are not paid online.

We use your data for the following purposes:

• to answer your enquiry and prepare a written quote, as a pre-contractual step at your request;
• to confirm, manage and perform a booking once accepted in writing, on the basis of the contract between us;
• to keep the website and our systems secure against misuse, on the basis of our legitimate interest;
• to keep booking, tax and accounting records, on the basis of our legal obligations.

We do not use your data for automated decision-making or profiling, we do not sell it, and we do not send marketing emails unless you ask us to.

Depending on the stage of your request, your data may be seen by:

• our own team, through the internal messaging tool we use to reply quickly to enquiries;
• the captain or chauffeur who performs the service, if your booking involves chauffeur-driven hire or a wedding car, so the right person can meet you at the agreed point;
• our hosting provider, which stores the website and the booking system;
• Google, which receives your IP address when the site loads Google Fonts;
• jsDelivr, the content delivery network that serves the intl-tel-input library used by the phone-number field;
• WhatsApp, operated by Meta, if you start a conversation through a WhatsApp button — that conversation then runs under WhatsApp's own privacy policy, not ours.

None of these providers sets cookies on our behalf, and we do not pass your data to anyone for their own marketing purposes.

Google Fonts, the jsDelivr CDN and WhatsApp/Meta may process data outside the European Economic Area as independent providers, under their own safeguards. We do not otherwise transfer personal data outside Italy or the EU, and our hosting, booking system and team handle your enquiry within the normal course of running Milan Super Car Rental.

Enquiries that do not lead to a confirmed booking are kept only for a limited period and then deleted. Booking records, including the details needed for invoicing, are kept for as long as Italian tax and accounting rules require. Server logs are kept for a short period for security purposes only.

Once a booking is confirmed in writing, we need to see and record your driving-licence and identity-document details when the car is handed over. This is required to verify that you are legally entitled to drive the vehicle, to match the renter to the contract, and to meet our legal obligations as a rental business. This information is collected at handover, not through the website.

We limit access to enquiry and booking data to the people who need it to serve you, keep server logs only for the time needed for security monitoring, and use a hosting setup designed to keep the site and booking system running safely. No method of transmission or storage is completely risk-free, and we review our practices as the business and the tools we use evolve.

Under the GDPR and the Italian Privacy Code (Legislative Decree 196/2003), you may ask us to:

• give you access to the personal data we hold about you;
• correct inaccurate data;
• delete your data, where we are not required to keep it;
• restrict or object to certain processing;
• receive the data you gave us in a portable format.

Send your request to [email protected]. We may ask you to confirm your identity before acting on it, and we will respond within one month. If you believe your data has not been handled correctly, you may lodge a complaint with the Garante per la protezione dei dati personali at www.garanteprivacy.it.

The website itself does not set cookies, and no analytics, advertising or social-media tracking is installed. Two small pieces of browser storage are used instead:

• a local-storage entry that remembers you closed the cookie notice;
• a session-storage entry that remembers which car you clicked so the enquiry form can be prefilled; it is removed when you close the tab or submit the form.

Neither of these contains your name, contact details or any information that identifies you.

Our services are intended for adults able to enter into a car rental contract, and we do not knowingly collect data from children. We may update this policy if our practices, tools or legal obligations change; the version published on milansupercarrental.com at the time of your visit or enquiry applies.