Autonoleggio Costa Smeralda

Privacy Policy

Privacy & Cookies Policy – GDPR UE2016/679

We inform you, under art. 13 Regulation UE n. 2016/679 (hereinafter “GDPR”) that Cars&bikes di
Giovanni Falzoi (hereinafter “Cars&bikes” or “Owner”) will proceed in processing the provided
data given in compliance with current legislation and according to what follows.

The Owner processes the identification personal data (for example, name, surname, business name,
address, telephone number, e-mail, bank and payment references) – as a result, “personal data” or
also “data”) communicated at the issuance of the rental contract.

Your data are processed: Without explicit consent according with art. 6 b), e), f) GDPR, for the
following purposes:
(a) access and usage of Cars&bikes rental services, including collection, preservation and
elaboration of data relevant to the establishment and the following operation management, technical
and administrative of the relationship and execution of communications related to the services
(b) execution of obligations derived from the General Rental Conditions;
(c) management of payments (with related processing compliance with law of payment data,
including credit cards and/or prepaid cards identification details);
(d) fulfilment of legal, accounting, fiscal, administrative and contractual obligations linked to the
required services execution;
(e) management of the relations with authorities and third parties public entities for purposes linked
to particular requests, execution of law obligations or to particular procedures (e.g.: reassignment to
the actual violator of the reports of violations of the rules of the Highway Code);
(f) claim management;
(g) arrangement of actions finalized to protect against credit risk, including activities finalized in
identifying customer and economic/solvency reliability, also during the contractual relation. A
missing, incomplete or untrue communication of necessary data for the subscription involves the
impossibility of the completion of it and the consequent impossibility to use the service;
(h) exercise of the Owner rights, for example the right to defense in court;
(i) for legitimate interest in carrying out direct marketing and to detect the satisfaction level on the
quality of services provided. Communications referred to the previous points (i) could be sent via
ordinary way (e.g. mail, telephone calls with the operator), or automated (e.g. telephone calls
without operator) and similar (e.g. fax, e-mail, SMS, MMS), as per data provided in the occasion of
the conclusion of the rental contract. Only with your specific and clear consent (art. 7 GDPR):
(k) sending from Cars&bikes, of parent companies, controlled and linked, of newsletter,
commercial communications and/or advertising material on products or services provided by any
entity different than the holder;
(l) conduction of market analysis and surveys in order to check the satisfaction level on the quality
of services. Communications referred to the previous points could be sent in ordinary way (e.g.
mail, telephone calls with the operator), or automated (e.g. telephone calls without operator) and
similar (e.g. fax, e-mail, SMS, MMS), as per data provided in the occasion of the conclusion of the
rental contract.

Processing personal data is realized through operations indicated in art. 4 n. 2) GDPR and precisely:
collection, registration, organization, preservation, consultation, elaboration, modification,
selection, extraction, comparison, use, interconnection, block, communication, cancellation and
destruction of data. Your personal data are submitted to both ordinary and electronic/automated
processing. The Owner will process the personal data for the necessary time in order to accomplish
the above purposes and in any case for no longer than 10 years after the relation termination for
Services Purposes and for no longer than 5 years from the collection of data for Marketing

Your data will be made accessible for purposes in art. 2), point a) a i) and, if allowed, from k) to l):
– to employees, collaborators, affiliates and franchisee of the Owner or of companies of Cars&bikes
group, as internal responsibles or processing and/or administrators of the system; – to third parties
companies or other entities (insurance companies responsible for accidents repayment; specialized
companies in debt collection; specialized companies in the commercial information management or
related to credit, or in advertising promotion; other companies contractually linked to Cars&bikes
which conduct activities on accident management, subcontractors, subundertakers and/or financial
intermediaries, professional firms which provide assistance activities and consultancy towards our
companies as well as banks, data processing centers, public entities, for the granting of
contributions and aids of any kind linked to the provision of services) that provide activities on
assignment and by order of the Owner, in their capacity as external responsibles of processing.

Without explicit consent (e.g. art. 6 b) and c) GDPR), the Owner will communicate your data for
purposes art. 2) from a) to i) to: police, military and other public administrations, supervisory
entities, judicial authorities, to insurances companies for supplying insurances services, as well as to
those entities for who the communication is mandatory both for law and for the accomplishment of
the above purposes. These entities will process these data in their capacity as independent
processing owners. Your data won’t be communicated.

Your personal data will be kept on Cars&bikes servers, located in Italy, inside the European Union.
In any case the Owner, where necessary, will have the possibility to move the servers also extra-
EU. In this case, the Owner reassure from now that the data transfer extra-EU will be done in
accordance with the applicable legal provisions, prior stipulation of contractual standard clauses
expected by the European Commission.

The contribution of data for purposes art. 2), from a) a i) it’s mandatory. Without them, we could
not guarantee our services of art. 2. point from a) to i). The contribution of data for purposes art. 2),
da k) from l) is, indeed, optional. Hence you can decide to contribute data or subsequently refuse
the possibility to process the already provided data.

We inform you, also, that Cars&bikes vehicles could be provided with geolocation systems.
Geolocation under current legislation; data processing collected by third parties will be made in
anonymous. Cars&bikes won’t collect nor process confidential data related to customers.
Cars&bikes vehicles could be provided with navigational system or infotainment system, these last
ones directly and independently dealt by Cars&bikes from the vehicles manufacturer. In the event
of usage of navigational and infotainment systems, you will be deemed responsible for the entered
information which you will need to remove from the used devices; failing that these data could be
visible to the following vehicle user.

In their capacity of interested party, has the rights of art. 15 GDPR and precisely the rights of: –
obtain the confirmation of the existence or non-existence of personal data which linked to you, even
if not recorded yet, and their communication in intelligible form; – obtain the indication of:
a) source of personal data;
b) of the purposes and processing modality;
c) of the applied logic in case of processing made with the aid of electronic tools;
d) from the Owner identification details, of responsibles and representative appointed under art. 3,
point 1, GDPR;
e) entities or categories of entities to which data could be communicated or could be informed in
capacity of appointed representative in the State territory, responsibles or appointed; – obtain:
a) the update, the correction and, when there is interest, the data integration;
b) the cancellation, the transformation in anonymous or the blocking of data processing violation of
the law, including the ones for which it is not necessary the preservation in relation to the purposes
for which data have been collected or successively processed;
c) the attestation that the operations of point a) and b) have been disclosed, also concerning its
content, the ones to which data have been communicated or spread, except the case that the
fulfilment is impossible or means an excessive use respect to the protected right; – oppose, in whole
or in part:
a) for legitimate reasons of the personal processing data which concern you, although linked to
b) to the personal processing data which concern you for sending advertising material or for direct
sell or to accomplish market researches or for commercial communications, throughout automated
tools for telephone calls without an operator action through e-mail and/or through traditional
marketing modality through telephone and/or ordinary e-mail. We remind you that the right of
opposition of the interested party, indicated in the above point b), for direct marketing purposes
through automated modality which extends to the traditional ones and in any case remain safe the
possibility for the interested party to exercise the opposition right also in part. Therefore, the
interested party can decide to receive only communications throughout traditional modality hence
only automated communications or none of the two communications type. Where applicable, you
also have the rights in art. 16-21 GDPR (Rectification right, oblivion right, right to limit the
processing, right to data portability, opposition right), as well as the right to claim to the Guarantor

You will be able in any moment to exercise your rights sending: – a registered mail a.r. A
Cars&bike di Giovanni Falzoi – Operational Headquarter located in Olbia, in Via Farris, 12; – an email

The data controller is Cars&bikes di giovanni Falzoi (Tax Code / VAT 02302940909), with
registered office in Via Farris 12, 07026 Olbia; email: The Data
Controller has proceeded to designate, pursuant to art. 37 GDPR, a DPO (Data Protection Officer)
who can be contacted for all questions concerning the processing and protection of personal data
and the exercise of the rights of the interested party at the registered office of the Data Controller or
by writing to The updated list of data processors and appointees is kept at
the registered office of the Data Controller.
This Privacy Policy version has been released on July 28, 2020. If the Data Controller wishes to
change his information, he will proceed to inform the interested parties, making available an
updated version

Cookies Policy

What are cookies

Cookies are small text files used to improve websites. Thanks to cookies, navigation preferences such as the spoken language, display options, etc. can be stored by the browser in use.

Cookies are saved in the device used, to facilitate the use of content and are readable exclusively by the site that generated them.

No user personal data is acquired by the site in the simple navigation of web pages. Cookies is not used for the transmission of personal information.

The site uses the following cookies:

Technical cookies

These cookies are fundamental to allow you to surf the site and use its features. Technical cookies are strictly necessary for the operation and navigability of the site and cookies related to saving preferences for the purpose of optimizing use (example: language preferences) without cookies it is possible that some features are not accessible or do not work properly.

Performance Cookies (third parties)

This site uses the Google Analytics service, provided by Google Inc. to collect statistical information on the use of the site in the clear intention of improving performance and usability.

All information collected by these cookies are aggregated in anonymous form and are used only to improve the site’s functionality.

Below you can find the privacy information of Google Inc.

Profiling cookies (third parties)

Some cookies can also be used to show special offers consistent with the preferences manifested while browsing with the aim of improving the user’s experience and conditions. Cookies we use for profiling do not collect such information to personally identify the user who browses the pages of the site.

The site does not use profiling cookies connected with the “Remarketing” function of Google AdWords or others.

Social Network Cookies (third parties)
The site integrates the main social networks through scripts made by them. These scripts can use cookies in order to facilitate sharing content on social networks or interaction with other subscribers.

These types of cookies are managed by the various companies that are responsible for individual social networks each of which is responsible for their own cookies.

Through the links below it is possible to explore the privacy policies published:

Google + / YouTube:






Consent manifestation

To provide your consent to the processing of data and the use of all cookies, it is sufficient to exit this statement by closing the relevant page, continue browsing the site or click any one element. To deny consent or configure differently cookies management follow the instructions contained in the following paragraph.

Configure cookies management in the browser

The main browsers allow you to change the settings for cookies management. It is possible to decide to: to allow saving by websites, completely denying the saving of cookies, decide from time to which cookies accept.

These settings vary depending on the browser used to navigate, below are links to the informative pages of the most common:



Internet Explorer:



For in-depth information on the use of cookies by third-party services and additional instructions on managing cookies in the browser, see the following address:

If you decide to set the browser to refuse cookies of this site, we remind you that some features may not be available and access to some sections may be limited.

and the managers and representative designated pursuant to Article 5, paragraph 2;
e) of the subjects or categories of subjects to which personal data can be communicated or who can learn about the representative designated in the territory of State, of managers or charges.
The interested party has the right to obtain:
a) updating, rectification or, when it has interest, data integration;
b) the cancellation, the transformation into anonymous form or the blocking of the data processed in law, including those of which conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c) the certification that the transactions referred to in letters a) and b) have been carried out, also with regard to their content, those to whom the data has been communicated or disseminated, except for the case in which this fulfillment yes This reveals impossible or involves a use of means manifestly disproportionate compared to protected right.
The interested party has the right to oppose: in whole or in part:
a) for legitimate reasons to the processing of personal data concerning him, even if relevant to the purpose of the collection;
b) to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for the fulfillment of market research or commercial communication.