Privacy Policy

Category: Non categorizzato

Published: 26 May 2018

Processing of Personal Data Pursuant to Article 13 of Legislative Decree No. 196/2003:

This Application collects some Personal Data from its Users.

Data Controller

FRANK SRL - General Management: Via G.Giolitti, 34 - 00185 Rome (RM) - VAT No. 09689111004

Data Controller's Email Address: This email address is being protected from spambots. You need JavaScript enabled to view it.

Types of Data Collected

Among the Personal Data collected by this Application, either independently or through third parties, are: Cookies and Usage Data.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application specifically states that some Data is optional, Users are free to refrain from providing such Data without any consequences on the availability or operation of the Service.
Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.
The possible use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.

The data you provide will be processed to fulfill obligations arising from contractual obligations, related to reservation operations, the management of our services, and post-contractual management. In some cases, processing may also involve sensitive data (e.g., health status for special fittings and/or transportation; membership in parties, unions, and associations if the reservation is made by the secretariats of such entities or following agreements with these entities). Additionally, there may be the possibility that the rented vehicle contains a tracking system that records the vehicle’s geographic location data. These data are processed solely for corporate asset protection, personal safety, and claims management.
The data you provide will be processed to fulfill obligations arising from contractual obligations, related to reservation operations, the management of our services, and post-contractual management. In some cases, processing may also involve sensitive data (e.g., health status for special fittings and/or transportation; membership in parties, unions, and associations if the reservation is made by the secretariats of such entities or following agreements with these entities). Additionally, there may be the possibility that the rented vehicle contains a tracking system that records the vehicle’s geographic location data. These data are processed solely for corporate asset protection, personal safety, and claims management.
Processing will be carried out manually and electronically by staff within our organization who are responsible for personal data processing and possess personal authentication credentials to access electronic tools.
Providing data is optional, but refusal to provide it may partially or completely prevent us from delivering our services.
Data may be disclosed to third parties to complete mandatory requirements or for performing some services related to the provision of our services (for example, communications to agents and affiliates for direct service management, service companies for administrative management, tax consultants regarding data shown on invoices, law firms for dispute management, insurance companies, and banks for credit management).
You may exercise your rights at any time with respect to the data controller, pursuant to Article 7 of Legislative Decree No. 196/2003. The data subject may contact the data controller or the Data Protection Officer to exercise rights as provided by Article 7 of Law No. 196/03. According to the law, you can always exercise the right to obtain confirmation of the existence or otherwise of your personal data from the controller and to receive the data in an intelligible form, to request deletion, anonymization, or blocking of data processed unlawfully, as well as updating, rectification, integration of the same, or to object to the processing itself, by sending an email to This email address is being protected from spambots. You need JavaScript enabled to view it. addressed to the Data Protection Officer.
Personal data may be used to send commercial offers and information material related to our services.

Methods and Place of Data Processing

Processing Methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Application (administrative, commercial, marketing, legal staff, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data and may also, if necessary, be appointed as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Legal Basis for Processing

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

The User has given consent for one or more specific purposes. Note: in some jurisdictions, the Data Controller may be allowed to process Personal Data without the User's consent or any other legal bases specified below, until the User objects to such processing (“opt-out”). This does not apply when the processing of Personal Data is subject to European legislation on Personal Data protection;
The processing is necessary for the execution of a contract with the User and/or for any pre-contractual obligations;
The processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
The processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

It is always possible to request the Data Controller to clarify the concrete legal basis for each processing operation and, in particular, to specify if the processing is based on law, contract, or necessary to conclude a contract.

Place

Data is processed at the operational offices of the Data Controller and at any other places where the parties involved in the processing are located. For more information, contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the place of processing, the User can refer to the section concerning details on the processing of Personal Data.

The User has the right to obtain information about the legal basis for the transfer of Data outside the European Union or to an international organization of public international law or formed by two or more countries, such as the UN, as well as the security measures taken by the Data Controller to protect the Data.

If one of the transfers described above takes place, the User may refer to the relevant sections of this document or request information from the Data Controller by contacting them at the contact details provided in the opening.

Retention Period

Data is processed and stored for the time required by the purposes for which it was collected.

Therefore:

Personal Data collected for purposes related to the execution of a contract between the Data Controller and the User will be retained until such contract has been fully executed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained as long as needed to fulfill such interest. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User's consent, the Data Controller may retain Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period whenever required to do so to comply with a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data will be deleted. Therefore, the right to access, deletion, rectification, and the right to Data portability cannot be enforced after the expiration of this period.

Purposes of Data Processing

The User's Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Remarketing and behavioral targeting, Statistics, Interaction with live chat platforms, Infrastructure monitoring, and Display of content from external platforms.

For further detailed information on the purposes of processing and on the Personal Data concretely relevant for each purpose, the User may refer to the relevant sections of this document.