Patty Car

Privacy & Cookie Policy

Information on the processing of personal data

Last updated: April 2025

Introduction

This document provides information on how PATTY CAR SERVICE Srl and PATTY CAR di GHIRLANDI ENRICO (hereinafter "Patty Car", "we", "us", or "our") process personal data collected through the website www.pattycar.com.

1. Data Controller

The data controller for personal data collected through the website www.pattycar.com is PATTY CAR SERVICE Srl, with registered office in Rome, Via del Velodromo n. 44, VAT number 16640371007. Contact email: pattycar@pattycar.com

2. Website Developer Responsibility

The company that developed the website, SKEELS SRLS with registered office in Milan, Via Boscovich 31 - VAT number 11707420961, assumes full responsibility for ensuring that the website complies with applicable data protection legislation, in particular with Regulation (EU) 2016/679 (GDPR).

3. Purposes of Personal Data Processing

Personal data collected through the website www.pattycar.com are processed for the following purposes:

  • Provision of chauffeur service (NCC): Managing bookings, organizing and providing the requested service (including travel details, schedules, and chosen vehicle).
  • Management of contact requests: Responding to questions or requests sent through the contact form or other communication methods.
  • Tax and accounting compliance: To comply with legal, tax, and regulatory obligations, including the management of invoices and tax documents.
  • Direct marketing (optional): Sending promotional or marketing communications via email, if the user has explicitly provided consent for this purpose.
  • Statistical analysis and service improvement: Collection of data related to website usage for statistical analysis and to improve service quality.

4. Legal Basis for Data Processing

The processing of personal data is carried out on the following legal bases provided by the GDPR:

  • Performance of a contract (Art. 6(1)(b) GDPR): Processing necessary for the provision of the chauffeur service and to respond to user requests.
  • User consent (Art. 6(1)(a) GDPR): Processing for direct marketing purposes and for other optional activities, only with the explicit consent of the user.
  • Compliance with legal obligations (Art. 6(1)(c) GDPR): Processing to comply with legal obligations, such as issuing invoices or storing data for tax purposes.

5. Types of Data Processed

The personal data processed may include, but are not limited to, the following categories of information:

  • Identification data: name, surname, tax code.
  • Contact data: email address, phone number, residential address.
  • Payment data: information related to payments made, including credit card data, if applicable.
  • Navigation data: IP address, date and time of access, type of browser used, operating system.
  • Data related to the requested service: booking details (times, vehicle, destination), travel preferences, user feedback.
  • Other data that the user may voluntarily provide through the contact form, newsletter subscription, etc.

6. Data Processing Methods

The processing of personal data takes place through electronic (both automated and manual) and IT methods, and in some cases also on paper. Data are processed in compliance with adequate security measures to protect the confidentiality, integrity, and availability of personal data. Access to personal data is allowed only to authorized personnel, who use them exclusively for the purposes described.

7. Personal Data Retention

Personal data are kept for a period not exceeding that necessary for the purposes for which they were collected. In general, data will be kept for a period of 5 years from collection. However, in case of specific legal or contractual obligations, the retention period may be longer.

8. Communication of Data to Third Parties

Personal data collected will not be disclosed to unauthorized subjects. However, data may be communicated to third parties in the following situations:

  • Service providers (e.g., drivers, payment platforms) for the provision of the chauffeur service.
  • External professionals (tax consultants, legal advisors, auditors) for consulting needs or mandatory compliance.
  • Public entities and competent authorities (e.g., law enforcement) if required by law.

Personal data are not transferred to third parties outside the European Union, except in cases where it is necessary for the provision of the service (e.g., international payment services or invoice issuance).

9. International Transfer of Personal Data

Personal data are stored within the European Union. However, some services may involve the transfer of personal data to countries outside the European Union. In such cases, the transfer will only take place in compliance with the GDPR, using adequate legal instruments such as Standard Contractual Clauses.

10. Rights of the Data Subject

Under the GDPR, the user has the right to:

  • Access their personal data (Art. 15 GDPR): obtain confirmation of the existence of the data and a copy of the same.
  • Request rectification of data (Art. 16 GDPR): correct inaccurate or incomplete data.
  • Request erasure of data (Art. 17 GDPR - Right to be forgotten): request the removal of personal data in the circumstances provided by law.
  • Request restriction of processing (Art. 18 GDPR): limit the use of data in certain situations.
  • Object to processing (Art. 21 GDPR): object, for legitimate reasons, to the processing of data.
  • Request data portability (Art. 20 GDPR): receive the data in a machine-readable format and transmit it to another controller.
  • Withdraw consent (Art. 7 GDPR): withdraw consent provided for processing based on this legal basis.

To exercise these rights, users can send a request via email to pattycar@pattycar.com. If the user believes that their rights have been violated, they can lodge a complaint with the Data Protection Authority (https://www.garanteprivacy.it).

11. Data Protection Officer (DPO)

At present, a Data Protection Officer (DPO) has not been appointed. For any questions regarding data processing, or to exercise your rights, you can contact the data controller at pattycar@pattycar.com.

Cookie Policy

The website www.pattycar.com uses cookies to improve the browsing experience, to collect statistics, and for marketing purposes.

Types of Cookies Used

1. Technical Cookies:

Essential for the functioning of the website, such as those to keep the user's session active during navigation.

2. Analytical Cookies:

Used to collect aggregate data on website usage (e.g., Google Analytics).

3. Profiling Cookies:

Used to personalize advertising and send promotional content in line with the user's interests (e.g., Facebook Pixel, Google Ads).

Cookie Management

Cookie acceptance:

At first access, the site shows a banner that requests consent for the use of cookies. The user can choose to accept or customize their cookie preferences.

Cookie disabling:

Users can disable cookies through their browser settings. However, some website features may not be accessible without cookies.

Third-Party Cookies

The site uses third-party cookies, including for performance analysis and advertising. The user can consult the relevant policies for more details.

12. Changes to the Privacy & Cookie Policy

The controller reserves the right to modify this Privacy and Cookie Policy at any time. Any changes will be communicated through the website and will be binding from the date of publication of the update.

13. User Responsibility

The user undertakes, by accessing and using the website www.pattycar.com, to fully comply with the provisions of the Privacy Policy, Cookie Policy, and Terms of Service, as well as all applicable regulations regarding the protection of personal data and Italian laws.