{"id":7662,"date":"2026-01-09T15:52:14","date_gmt":"2026-01-09T14:52:14","guid":{"rendered":"https:\/\/uat.locautorent.com\/legal-notes\/privacy-policy\/"},"modified":"2026-09-15T09:42:34","modified_gmt":"2026-09-15T07:42:34","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.locautorent.com\/en\/legal-notes\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"
\n

PERSONAL DATA PROTECTION NOTICE FOR POTENTIAL CUSTOMERS OR CUSTOMERS
\nPursuant to Articles 13 and 14 of EU Regulation 2016\/679 and Legislative Decree 196\/2003 (PRIVACY CODE) as amended<\/h2>\n

The protection of customers\u2019 personal data plays a central role for Locauto Rent S.p.a. (hereinafter \u201cLocauto\u201d). This Data Protection Notice (hereinafter also the \u201cNotice\u201d) is intended to provide clear and complete information regarding the methods of processing your personal data by the Company. As the data controller, Locauto is responsible for the collection and processing of personal data carried out as part of its activities. The purpose of this Notice is to allow for an understanding of which personal data regarding potential customers or customers are processed, as well as the purposes for which such data are used and shared, the applied retention periods, the rights recognized to customers, and the methods for their exercise.<\/p>\n

1. DATA CONTROLLER<\/h2>\n

The Data Controller is Locauto Rent S.p.a. (Tax Code\/VAT No. 04367650969) with registered office in Piazza Silvio Pellico n. 5 – 38122 Trento (TN), reachable via e-mail at the address privacy@locautorent.it<\/p>\n

 <\/p>\n

2. DATA PROTECTION OFFICER<\/h2>\n

The Data Controller has appointed, pursuant to Art. 37 GDPR, a DPO (Data Protection Officer or Responsabile per la Protezione dei Dati) who can be contacted at the e-mail address: dpo@locautorent.it<\/p>\n

 <\/p>\n

3. PERSONAL DATA PROCESSED<\/h2>\n

The GDPR defines \u201cpersonal data\u201d as \u201cany information regarding an identified or identifiable natural person\u201d. The GDPR also precisely defines what is meant by \u201cprocessing\u201d, namely \u201cany operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, deletion or destruction\u201d.
\nTo provide its services, Locauto Rent S.p.A. may process the following personal data:
\n\u2022 identification data (e.g. name, surname, place and date of birth, Tax Code, identity card, driver’s license…)
\n\u2022 contact data (e.g. e-mail, telephone number…)
\n\u2022 image data
\n\u2022 banking and financial data (e.g. credit card number, IBAN…)
\n\u2022 data relating to the vehicle rental agreement (e.g. contract number, vehicle license plate, customer identification number…)
\n\u2022 data relating to geo-localization
\n\u2022 judicial data pursuant to art. 10 of the Privacy Regulation relating to criminal convictions or offenses, provided by the judicial authority or other subjects authorized by law as part of their requests;
\nLocauto never asks for personal data relating to racial or ethnic origins, political opinions, religious or philosophical beliefs, trade union membership, genetic data or data relating to the sexual orientation of the potential customer or customer, unless this is necessary to comply with legal regulations. Data may be provided directly by the potential customer or customer or obtained from the following sources:
\n\u2022 publications\/databases made available by authorities
\n\u2022 databases made publicly accessible to third parties<\/p>\n

 <\/p>\n

4. THE LEGAL BASES FOR DATA PROCESSING BY LOCAUTO RENT S.P.A.<\/h2>\n

The GDPR establishes that any processing of personal data must be founded on a legal basis. The legal bases are listed in art. 6 of the GDPR and are:
\n\u2022 art.6, comma 1, lett. a) Consent: the data subject has expressed consent to the processing of their personal data for one or more specific purposes;
\n\u2022 art. 6, comma 1, lett. b) Fulfillment of a contract or pre-contractual measures: processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures adopted at the request of the data subject;
\n\u2022 art. 6, comma 1, lett. c) Legal obligation: processing is necessary to fulfill a legal obligation to which the data controller is subject;
\n\u2022 art. 6, comma 1, lett. d) Protection of vital interests: processing is necessary for the protection of the vital interests of the data subject or of another natural person (not applicable to the Company’s reality);
\n\u2022 art. 6, comma 1, lett. e) Public interest or public powers: processing is necessary for the performance of a task in the public interest or connected to the exercise of public powers with which the data controller is invested (not applicable to the Company’s reality);
\n\u2022 art. 6, comma 1, lett. f) Legitimate interest: processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, in particular if the data subject is a minor.<\/p>\n

 <\/p>\n

5. PURPOSES AND LEGAL BASIS OF DATA PROCESSING<\/h2>\n

5.1. Providing the rental service. Locauto uses the personal data provided for the management of the rental contract or to fulfill a request before the conclusion of a contract with the customer, as well as to carry out technical and logistical assistance activities, including by telephone; to activate and provide extra services, to plan vehicle maintenance activities, for the operational management of the vehicle fleet, for activities necessary for the recovery of the vehicle at the end of the rental contract, to provide insurance services and other contractual guarantees, to manage the resolution of disputes (e.g. for debt collection), for the management of claims (including insurance requests) and for the management of invoicing.
\nLegal Basis: performance of a contract to which the data subject is a party or performance of pre-contractual measures adopted at the request of the customer.<\/p>\n

5.2 Fulfilling regulatory, administrative, tax and accounting obligations. Managing relationships with third-party authorities and public bodies for purposes connected to specific requests, the fulfillment of legal obligations or specific procedures.
\nLegal Basis: fulfillment of legal obligations. The Company will process personal data to comply with obligations of a legal and\/or regulatory nature.<\/p>\n

5.3 Responding to an official request from an authority. Responding to an official request from a financial, tax, administrative, criminal or judicial authority, local or foreign, duly authorized, or from arbitrators or mediators, law enforcement agencies, state agencies or public authorities (e.g. in order to identify the driver or the customer and communicate the data to the competent public authorities, following offenses, road accidents, etc.)
\nLegal Basis: fulfillment of legal obligations. The Company will process personal data to comply with obligations of a legal and\/or regulatory nature.<\/p>\n

5.4 Collecting documentation relating to previous claims, prevention activities and verification of any fraud and more generally to protect company assets. For commercial vehicles, this collection may also be done using Dashcams. Please refer to the dedicated information at the bottom of this document.
\nLegal Basis: legitimate interest of the Controller.<\/p>\n

5.5 Managing claims and related activities for vehicle recovery. Providing assistance to the customer in case of damage, opening the claim with the insurance company, managing compensation requests, processing and settlement of damage, exercising rights in court.
\nLegal Basis: fulfillment of contractual measures (e.g. towards insurance companies) suitable for processing the data provided to define insurance files. Legitimate Interest: correctly reconstructing and managing damage or accident files, including the legitimate interest to exercise or defend legal rights in the management of damage and accidents.<\/p>\n

5.6 Managing reports and penalties for violations of the Highway Code. E.g.: re-notification to the actual offender of reports of violation of the rules of the Highway Code.
\nLegal Basis: fulfillment of legal obligations.<\/p>\n

5.7 Asserting and defending its rights also in court, as well as in the context of debt collection and assignment of credits to authorized companies, also through third parties.
\nLegal Basis: legitimate interest of the Controller.<\/p>\n

5.8 Sending to Customers and\/or Users, subject to consent, marketing communications on products and services, activities and events organized by or in collaboration with Locauto.
\nLegal Basis: consent. Processing for marketing purposes is based on the explicit, free, specific and optional consent of the Customer and\/or User, easily revocable at any time.<\/p>\n

5.9 Sending reminder communications via e-mail to the potential customer or customer in the event that they have started but not concluded the purchase process for products and\/or services on the Locauto website, provided that the potential customer or customer has the right to object at any time to the receipt of such communications; in case of failure to complete the purchase order, Locauto will send no more than 3 reminder communications via e-mail no later than 7 days following the date of start and non-completion of the purchase process by the user (see relative notice).
\nLegal Basis: consent.<\/p>\n

5.10 Sending advertising communications relating to services\/products similar to those requested pursuant to article 130 paragraph 4 of the Privacy Code, without the need to acquire the User’s consent, marketing communications exclusively via e-mail having as their object services and\/or products similar to those provided by Locauto and which have already been purchased by the user (so-called \u201csoft-spam\u201d) without prejudice to the possibility for the data subject to object to the processing initially or on the occasion of subsequent communications, by following the instructions at the bottom of the email or by writing to the address privacy@locautorent.it.
\nLegal Basis: art. 130 paragraph 4 Privacy Code. This rule allows the Company to send communications, solely via e-mail, regarding services and\/or products similar to those already purchased by the user, in the absence of the latter’s consent. The possibility for the data subject to object to the processing initially or on the occasion of subsequent communications remains firm, by following the instructions at the bottom of the email or by writing to the address privacy@locautorent.it.<\/p>\n

5.11 Communicating data for marketing purposes to third-party companies, which will process them as independent data controllers, for commercial information purposes, statistical surveys, market research, direct offers of their products and services, carried out through traditional contact methods and through automated contact methods.
\nLegal Basis: consent. Failure to provide the same does not entail consequences on contractual relationships. Consent can be revoked at any time by writing to the address privacy@locautorent.it.<\/p>\n

5.12 For profiling purposes subject to explicit, free, specific and optional consent, Locauto may process the personal data voluntarily provided by the user, as well as those collected during the use of the services, in order to carry out analysis activities, both automated and manual, aimed at identifying preferences, choices and consumption habits, with the aim of improving the services offered and presenting commercial proposals more in line with the interests and expectations of the individual user.
\nLegal Basis: consent. Failure to provide the same does not entail consequences on contractual relationships. Consent can be revoked at any time by writing to the address privacy@locautorent.it.<\/p>\n

5.13 To carry out a survey on the degree of customer satisfaction for the improvement of the quality of Locauto’s products and services.
\nLegal Basis: legitimate interest.<\/p>\n

5.14 To manage so-called \u201cwhistleblowing\u201d reports as per specific policy available on the website www.locautorent.com to which reference is made.
\nLegal Basis: legal obligation.<\/p>\n

5.15 To manage reservations through pre-registration of driver data on its own portals and online platforms, Locauto will process personal and contact information in order to issue the rental agreement at the branch selected.
\nLegal basis: implementation of pre-contractual measures adopted at the request of the interested party. Legal obligation regarding compliance with tax regulations.<\/p>\n

5.16 To prevent car rental fraud by entering user data into the centralized anti-fraud database managed by ANIASA (the trade association of car rental companies), in the event of car theft, embezzlement, or fraud related to your rental, and where the conditions for reporting are met.
\nLegal basis: legitimate interest<\/p>\n

5.17 Connected vehicles. In relation to the services provided, Locauto may collect data relating to the vehicle\u2019s location, fuel level, mileage, warning lights, and maintenance indicators, using the connectivity provided by on-board devices. The data collected is intended to offer greater safety to vehicle drivers, improve rental services, and protect the company\u2019s assets and property.
\nLegal basis: legitimate interest<\/p>\n

5.18 Geolocation. For fleet protection purposes, Locauto may process vehicle telematics data, including geolocation data, exclusively in cases where there is reasonable suspicion of unlawful conduct or contractual violations. These include, but are not limited to, the need to locate the vehicle in the event of theft, misappropriation, or failure to return it, as well as any other situation attributable to unauthorized use of the vehicle. Locauto may also process telematics data to ascertain, reconstruct, and document any damage suffered by the vehicle, including in relation to the management of claims or potentially damaging events. The data generated by connected vehicles during the rental period (information on fuel consumption, mileage, maintenance warning lights, geolocation) is collected directly by the vehicle manufacturers via OEM devices and then made available to Locauto based on predefined settings (e.g., maintenance warning lights) or upon request (e.g., in the event of vehicle theft). Connected vehicle manufacturers process this data as independent data controllers. In such circumstances, the privacy policies and processing terms established by each vehicle manufacturer apply.
\nCommercial vehicles may be equipped with a dashcam device with vehicle geolocation. The purpose of processing this data is to protect the fleet and to establish liability in the event of a road accident, vandalism, theft, or damage to the vehicle. Please refer to the specific information at the bottom of this document.
\nLegal basis: legitimate interest of the Data Controller in protecting its assets and defending itself in civil\/criminal\/judicial proceedings and legal obligation in the event of cooperation with the Judicial Authorities.<\/p>\n

 <\/p>\n

6. PROVISION OF DATA<\/h2>\n

The provision of data to Locauto is necessary in order to provide the requested services and to fulfill specific regulatory obligations. Failure to provide such data prevents the provision of the services requested by the Data Subject. Any refusal by the data subject to provide personal data may result in the impossibility (partial or total) of fulfilling legal obligations, or of stipulating or correctly executing the contract or service. In such event, without prejudice to the data subject’s right not to provide their data, the Controller reserves the right to suspend, interrupt or not establish the contractual relationship. The provision of data based on consent is optional and failure to provide it does not compromise the provision of services.<\/p>\n

 <\/p>\n

7. SCOPE OF COMMUNICATION, SUBJECTS AUTHORIZED FOR PROCESSING<\/h2>\n

Data may be communicated to external subjects operating as independent data controllers, such as public or private subjects legitimate to process data: public administrations, judicial authority, banks and credit institutions, insurance companies responsible for settling claims, accountants, notaries, lawyers and other professionals or to companies for which Locauto provides services under a contractual relationship.
\nData may be processed, on behalf of the controller, by external subjects designated as data processors, who perform specific activities on behalf of the controller. The list of data processors is constantly updated and available by writing to privacy@locautorent.it or at the registered office of Locauto.
\nData may be communicated to third-party companies or other subjects (such as companies specialized in debt collection; companies specialized in the management of commercial or credit information, or advertising promotion; other companies contractually linked to Locauto that carry out claims management activities, sub-suppliers, sub-contractors and\/or financial intermediaries, professional firms providing assistance and consultancy activities to Locauto as well as data processing centres, public subjects, for the granting of contributions and aids of any kind connected to the provision of services) that carry out activities on behalf and by order of the Controller, in their capacity as external data processors. Data may be processed by employees of the corporate functions responsible for the pursuit of the purposes indicated above; such employees have been expressly authorized for processing and have received adequate operational instructions; data may also be processed by collaborators, affiliates and franchisees of the Controller in their capacity as authorized persons and\/or external data processors and\/or system administrators as well as by Locauto S.p.A. in light of the joint controllership agreement pursuant to art. 26 GDPR whose essential content is available upon request of the data subject. Data are not subject to dissemination.<\/p>\n

 <\/p>\n

8. PROCESSING OF DATA FOR CUSTOMERS OF ENTERPRISE RENT-A-CAR, ALAMO RENT A CAR,
\nNATIONAL CAR RENTAL<\/h2>\n

In the case of customers booking through the brands Enterprise Rent-A-Car, Alamo Rent A Car and National Car Rental, Locauto will disclose Customer Personal Data to (i) Enterprise Rent-A-Car UK Ltd., (ii) Enterprise Holdings, Inc. and\/or any of relevant subsidiaries (for details please see EHI\u2019s Privacy Policy at https:\/\/www.enterprise.co.uk\/en\/privacy-policy.html) (together \u201cEHI\u201d), all acting as independent data controllers.
\nCustomer Personal Data will be shared for the following purposes:<\/p>\n

8.1 Process Customer Personal Data to manage the rental and the commercial relationship, communicate with the Customer about or assist with his rental. EHI processes Customer Personal Data for this purpose on the basis of (i) contractual necessity (e.g. billing) or (ii) its legitimate interests in ensuring the effective delivery of the requested services, when these interests are not overridden by the Customer\u2019s \u2013 and any applicable additional authorised drivers\u2019 \u2013 data protection rights;<\/p>\n

8.2 Store Customer Personal Data that relates to any incident arising from the Customer\u2019s dealings or an additional authorised driver’s dealings with EHI if it thinks that, as a result of such incident, the Customer or an additional authorised driver could be a risk for future rentals. EHI processes Customer Personal Data for this purpose on the basis of its legitimate interests in protecting its employees, other customers, the public and its property from safety or financial risks based on past customer conduct, when these interests are not overridden by the Customer\u2019s \u2013 and any applicable additional authorised drivers\u2019 \u2013 data protection rights;<\/p>\n

8.3 Process Customer Personal Data in order to carry out electronic customer satisfaction surveys. EHI processes Customer Personal Data for this purpose on the basis of its legitimate interests in ensuring customer satisfaction of the services which it provides, when these interests are not overridden by the Customer\u2019s \u2013 and any applicable additional authorised drivers\u2019 \u2013 data protection rights;<\/p>\n

8.4 Send the Customer marketing communications (for instance by post or electronic communications) about similar products or services which EHI thinks may be of interest to him. This can include the provision of targeted advertising on EHI sites, selected partner sites and social networks. EHI processes Customer Personal Data for this purpose on the basis of its legitimate interests in conducting such marketing, when these interests are not overridden by the Customer\u2019s \u2013 and any applicable additional authorised drivers\u2019 \u2013 data protection rights but, where required, will seek the Customer consent to do so at the time of data collection;<\/p>\n

8.5 Compile statistics and analysis about the Customer \u2013 and any applicable additional authorised drivers\u2019 \u2013 use of EHI products and services, including statistics based on anonymized data, which enable EHI to provide the Customer and other customers in the future with better customer service, products, features and functionalities.<\/p>\n

EHI participates in and is responsible for the processing of personal data received under the EU-U.S. Data Privacy Framework. For more information regarding EHI\u2019s data transfer compliance or if the Customer has an unresolved privacy or data use concern that EHI has not addressed to the Customer\u2019s satisfaction, please see EHI\u2019s Privacy Policy to find out more information on how to contact EHI\u2019s third party dispute resolution provider.
\nBoth Lessor and EHI retain Customer Personal Data for commercially reasonable periods of time or in accordance with specific laws or policies.<\/p>\n

The Customer has the right to:
\n\u2022 access and port his personal data (including in certain cases in a commonly used, machine readable format)
\n\u2022 have his personal data rectified (where it is inaccurate or incomplete)
\n\u2022 have his personal data erased where Lessor or EHI no longer has any legitimate reasons to process it
\n\u2022 have his personal data restricted
\n\u2022 object to Lessor or EHI\u2019s processing of his personal data in certain circumstances
\n\u2022 lodge a complaint with the applicable supervisory authority<\/p>\n

If the Customer has any queries in relation to the above use of his personal data, he should contact Lessor in the first instance by e-mail privacy@locautorent.it<\/p>\n

 <\/p>\n

9. DATA PROCESSING METHODS<\/h2>\n

The processing of personal data may be carried out with the aid of both analog and electronic or in any case automated means, with methods and procedures strictly necessary for the pursuit of the purposes described above.<\/p>\n

 <\/p>\n

10. EXTRA-EU TRANSFER OF DATA<\/h2>\n

Provided personal data of a personal nature will not be transferred to non-EEA countries. In any case, it is understood that, where necessary, the Controller may transfer personal data also to non-EU countries, guaranteeing right now that the transfer of personal data outside the EU will take place in compliance with the provisions of the law and in particular with the provisions of art. 46 of the GDPR.<\/p>\n

 <\/p>\n

11. RETENTION PERIOD<\/h2>\n

Locauto retains the Customer’s personal data for the time necessary to achieve the purposes for which it was collected or for any other related legitimate purpose. The data will be retained for up to 10 years and 6 months from the invoice date to fulfil contractual, accounting, and tax obligations, to manage any violations of the Highway Code, insurance claims, complaints, and legal disputes, without prejudice to any additional time necessary to ensure the exercise or defence of its rights. For the management of soft spam, marketing, data communication to third parties, and profiling, the data will be retained from the moment consent is given until its revocation.<\/p>\n

 <\/p>\n

12. RIGHTS OF THE DATA SUBJECT<\/h2>\n

The legislation on the protection of personal data (artt. 12-22 of EU Regulation 679\/2016) guarantees the data subject a series of rights:
\n\u2022 Access: they can obtain information in relation to the processing of personal data, and a copy of such personal data.
\n\u2022 Rectification: in the event that the data are incomplete or have changed, they can request that such data be modified accordingly.
\n\u2022 Erasure: they can request the deletion of personal data, within the limits permitted by law.
\n\u2022 Limitation: they can obtain the limitation of the processing of personal data.
\n\u2022 Objection: the data subject may object to the processing of their personal data for reasons connected to the particular situation. They have the absolute right to object to the processing of their personal data for direct marketing purposes, including profiling connected with such direct marketing.
\n\u2022 Withdrawal of consent: where the data subject has provided their consent for the processing of personal data, they have the right to revoke it at any time.
\n\u2022 Data portability: in the cases provided for by law, they have the right to obtain the return of the data they provided to us, and where technically feasible, to obtain their transfer to a third party.<\/p>\n

To exercise their rights and for more detailed information on data processing, the data subject may contact Locauto Rent S.p.A. by writing to the e-mail inbox: privacy@locautorent.it<\/p>\n

Where the data subject believes their rights have been violated, they may protect themselves by lodging a complaint before the Garante for the protection of personal data.<\/p>\n

In the event of any discrepancies between the Italian text and translations of this document into other languages, the Italian text shall prevail. Translations into languages other than Italian (available on the Locauto website www.locautorent.com and available, upon the Customer’s request, in hard copy at each of the Lessor’s rental locations) are merely translations.<\/p>\n

 <\/p>\n

PRIVACY POLICY \u2013 DASHCAM INSTALLATION ON COMMERCIAL VEHICLES<\/h2>\n

Subject: Information pursuant to Articles 13 and 14 of EU Regulation 679\/2016 (GDPR) on the processing of personal data pursuant to Legislative Decree 196\/2003<\/p>\n

Pursuant to Regulation (EU) 2016\/679, this notice describes how we process data subjects’ personal data collected through dashcams installed on commercial vehicles. This notice supplements the above privacy policy, to which you are referred for anything not detailed here.<\/p>\n

 <\/p>\n

1. Data Controller<\/h3>\n

The Data Controller is Locauto Rent S.p.A.
\nThe Data Controller may process data directly, through its authorized employees, or through external collaborators, who in this case act as Data Processors, as well as by Locauto S.p.A. in light of the joint controllership agreement pursuant to Art. 26 GDPR, the essential content of which is available upon request of the data subject.
\nThe updated list of Data Processors is made available by the Data Controller upon request.<\/p>\n

 <\/p>\n

2. Data Protection Officer<\/h3>\n

The Company has appointed a DPO who can be reached at dpo@locautorent.it<\/p>\n

 <\/p>\n

3. Type of data processed and categories of data subjects<\/h3>\n

The data processed by Dashcams are:
\n– Video and image data relating solely to the external environment of the vehicle, with a 140-degree viewing angle.
\n– Data that may reveal racial or ethnic origin or any data relating to the health of individuals (e.g., tattoos, physical problems, etc.); please note that faces will be automatically made unrecognizable by the system.
\n– Vehicle license plates
\n– Geolocation data: GPS position, sudden braking associated with the event, or the presence of potholes.
\nCategories of data subjects: Rental vehicle drivers and third parties (including, for example, passengers, other drivers, pedestrians).<\/p>\n

 <\/p>\n

4. Purpose and legal basis of data processing<\/h3>\n

The data is processed for the following purposes:
\n4.1 Protection of assets and defense of rights in court: reconstruction of road accidents, prevention and investigation of vandalism, theft, or vehicle damage.
\nLegal basis: legitimate interest of the Data Controller in protecting company assets and defending its rights in civil, criminal, or insurance proceedings.
\n4.2 Response to formal requests from judicial authorities or law enforcement agencies.
\nLegal basis: legal obligation<\/p>\n

 <\/p>\n

5. Processing methods<\/h3>\n

The processing will be carried out using appropriate IT and telematic methods and procedures, with logic strictly related to the purposes indicated in the previous point above and in any case in a manner that guarantees the confidentiality and security of personal data.
\nThe device activates, records, and automatically saves data to the cloud only in the event of collisions, impacts, vandalism, or strong acceleration. The recording includes 9 seconds before the event, the event itself, and up to 9 seconds after the event.
\nThe frame is exclusively oriented towards the road at a 140-degree angle.<\/p>\n

 <\/p>\n

6. Data retention period<\/h3>\n

Personal data collected by the Dashcam system installed on the vehicle is retained for the time strictly necessary to ensure the aforementioned purposes, according to the following methods:
\nContinuous background recording (temporary buffer): video images captured during normal traffic or in monitoring mode with the vehicle parked are temporarily stored in a volatile buffer. This content is continuously overwritten after a few seconds and is permanently deleted if no abnormal events occur.
\nRecording in the event of an abnormal event (impact\/crash\/sudden braking): if the impact sensors (G-sensors) are activated, the system saves the video of the event, including the 9 seconds immediately before and after the impact.
\nGeolocation data is uniquely associated with video files and follows the same retention and deletion times and methods indicated above for video recordings (immediate deletion in the buffer or extended retention only in the event of an incident).
\nIn cases necessary to reconstruct or document an accident or act of vandalism, the data will be retained for up to 2 years, except for any additional time necessary to ensure the exercise or defence of the Company’s rights.<\/p>\n

 <\/p>\n

7. Obligation or option to provide data<\/h3>\n

Providing data to Locauto is necessary to provide the requested services and to fulfil specific regulatory obligations. Failure to provide such data will prevent the provision of the services requested by the Data Subject. Any refusal by the Data Subject to provide personal data may make it impossible (partially or totally) to fulfil legal obligations, or to enter into or properly execute the contract or service. In such an event, without prejudice to the Data Subject’s right not to provide their data, the Data Controller reserves the right to suspend, terminate, or not establish the contractual relationship. Providing data based on consent is optional, and failure to provide such data will not compromise the provision of services.<\/p>\n

 <\/p>\n

8. Communication and dissemination of data<\/h3>\n

The data may be communicated to external parties acting as independent data controllers, such as public or private entities authorized to process the data: public administrations, judicial authorities, banks and credit institutions, insurance companies responsible for claims settlement, accountants, notaries, lawyers, and other professionals, or to companies for which Locauto provides services under a contractual relationship.
\nThe data may be processed, on behalf of the data controller, by external parties designated as data processors, who perform specific activities on the data controller’s behalf.
\nThe list of data processors is constantly updated and is available by writing to privacy@locautorent.it or at Locauto registered office.
\nThe data may be disclosed to third-party companies or other entities (such as debt collection companies; companies specializing in the management of commercial or credit-related information, or advertising promotion; other companies contractually linked to Locauto that perform claims management activities; subcontractors, subcontractors, and\/or financial intermediaries; professional firms that provide assistance and consulting services to Locauto) that perform activities on behalf of and by order of the Data Controller, in their capacity as external data processors.
\nThe data may be processed by employees of the company departments responsible for pursuing the purposes indicated above; these employees have been expressly authorized to process the data and have received adequate operating instructions. The data may also be processed by collaborators of the Data Controller in their capacity as authorized persons and\/or external data processors and\/or system administrators, as well as by Locauto S.p.A. in accordance with the joint controllership agreement pursuant to Art. 26 GDPR, the essential content of which is available upon request.
\nThe data is not subject to disclosure.<\/p>\n

 <\/p>\n

9. Transfers to non-EU countries<\/h3>\n

The personal data provided will not be transferred to countries outside the EEA.
\nIn any case, it is understood that, if necessary, the Data Controller may also transfer personal data to non-EU countries. The Data Controller hereby guarantees that the transfer of personal data outside the EU will be in compliance with the law, in particular the provisions of Article 46 of the GDPR.<\/p>\n

 <\/p>\n

10. Rights of the data subject<\/h3>\n

The legislation on the protection of personal data (Articles 12-22 of EU Regulation 679\/2016) guarantees the data subject the right to be informed about data processing and the right to access the data at any time and to request its updating, integration, and rectification. Where the conditions set forth in the legislation are met, the data subject may also exercise the right to erasure of the data, to limit its processing, to data portability, to object to processing, and not to be subject to decisions based solely on automated processing.
\nIf the processing of personal data is based on the data subject’s consent, the data subject has the right to withdraw that consent.
\nTo exercise their rights and obtain more detailed information on data processing, the data subject may contact Locauto Rent S.p.A. by emailing privacy@locautorent.it
\nIf the data subject believes their rights have been infringed, they may protect themselves by filing a complaint with the Italian Data Protection Authority.<\/p>\n

 <\/p>\n

Last updated on September 15th 2026<\/strong><\/div>\n","protected":false},"excerpt":{"rendered":"

PERSONAL DATA PROTECTION NOTICE FOR POTENTIAL CUSTOMERS OR CUSTOMERS Pursuant to Articles 13 and 14 of EU Regulation 2016\/679 and Legislative Decree 196\/2003 (PRIVACY CODE) as amended The protection of customers\u2019 personal data plays a central role for Locauto Rent S.p.a. (hereinafter \u201cLocauto\u201d). This Data Protection Notice (hereinafter also the \u201cNotice\u201d) is intended to provide […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":7303,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_seopress_titles_title":"Privacy Policy | Locauto","_seopress_titles_desc":"Information on the protection of personal data of potential clients or customers.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"both","_seopress_redirections_param":"","_seopress_redirections_type":301,"_seopress_analysis_target_kw":"","footnotes":""},"class_list":["post-7662","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/pages\/7662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/comments?post=7662"}],"version-history":[{"count":15,"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/pages\/7662\/revisions"}],"predecessor-version":[{"id":11462,"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/pages\/7662\/revisions\/11462"}],"up":[{"embeddable":true,"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/pages\/7303"}],"wp:attachment":[{"href":"https:\/\/www.locautorent.com\/en\/wp-json\/wp\/v2\/media?parent=7662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}