Privacy & Cookie Policy

Data Controller

The Data Controller is Ride in Florence Srl, with registered office at Piazzetta Montalcino, 4 — 50100 Firenze (FI), Italy. You can contact the Data Controller for any matter relating to the processing of your personal data at the addresses indicated at the bottom of this page.

Types of data collected

Depending on how you interact with us, we may collect the following categories of personal data:

Data you provide directly

• Contact form data: name, email address, phone or WhatsApp number, dates of your stay, number of riders, free-text message and any preferences about the vehicle or tour you are interested in.
• Booking and rental data: identification details (full name, date of birth, place of residence), driving licence number and category, copy of identity document and licence where required by law, payment information processed by certified third-party providers.
• Customer-care correspondence: any content of messages, emails or calls you exchange with our team.

Data collected automatically

• Browsing data: IP address, browser and device type, language, pages visited, referrer, timestamp of access. This information is collected only in aggregate form for statistical and security purposes.
• Cookies and similar technologies: see Section 9 for details.

Provision of data marked as required in our forms is necessary to respond to your request or to provide the requested service. Provision of optional data (e.g. consent to marketing) is free and refusal will not affect the main service.

Purposes of processing

We process your personal data for the following purposes:

1. To respond to your enquiries sent through our contact form, email, phone or messaging apps.
2. To execute the rental or tour contract, including identification of the rider, vehicle delivery, insurance management, billing and any operations connected to the service.
3. To comply with legal obligations (accounting, tax, insurance, public-security obligations relating to motor-vehicle rental).
4. To ensure the security of the website and prevent fraud, abuse or attacks on our infrastructure.
5. For our legitimate interest in managing customer relationships, internal analysis and quality improvement of the service.
6. With your explicit consent, to send marketing communications, newsletters and promotional offers, and to carry out limited profiling activities to tailor offers to your interests. Consent is free, may be refused without consequences on the main service, and can be withdrawn at any time.

Legal basis

Our processing of your personal data is based on:

• Pre-contractual measures and performance of the contract (art. 6(1)(b) GDPR) for purposes 1 and 2.
• Legal obligation (art. 6(1)(c) GDPR) for purpose 3.
• Legitimate interest of the Data Controller (art. 6(1)(f) GDPR) for purposes 4 and 5.
• Your explicit consent (art. 6(1)(a) GDPR) for purpose 6, freely given and revocable at any time.

Data recipients

Your personal data may be shared, only within the limits strictly necessary for the purposes described above, with the following categories of recipients:

• Authorised members of our staff, instructed on the protection of personal data.
• Suppliers of IT and hosting services, web infrastructure, email and form-handling platforms (e.g. Formspree or equivalent providers), acting as data processors.
• Insurance companies and roadside-assistance partners involved in the rental.
• Payment service providers and banks for the management of payments and refunds.
• Accounting and tax consultants, when necessary to comply with legal obligations.
• HP Motorrad and other rental partners, where the rental of specific vehicles is operated in cooperation with them.
• Public authorities and judicial bodies, where required by law.

Your data will not be sold or disclosed to third parties for autonomous marketing purposes.

Transfers outside the EU

Some of our service providers may operate from countries outside the European Economic Area. In such cases, any transfer is carried out only if one of the safeguards provided by GDPR is in place: an adequacy decision of the European Commission, Standard Contractual Clauses, binding corporate rules or other appropriate guarantees. You may request a copy of the safeguards in place by contacting us at the addresses below.

Retention period

We retain your personal data only for the time necessary to achieve the purposes for which they were collected:

• Contact-form requests not followed by a booking: up to 24 months from the last interaction.
• Booking and rental data: for the duration of the contract and for the time required by tax, accounting and insurance regulations (generally 10 years).
• Marketing data based on consent: until consent is withdrawn or up to 24 months from the last interaction, whichever comes first.
• Browsing and security logs: for the technical time strictly necessary, generally not exceeding 12 months.

At the end of the retention period, data is securely deleted or anonymised.

Your rights

In accordance with articles 15–22 GDPR, you have the right to:

• Obtain confirmation of whether your personal data is being processed and access it.
• Request rectification of inaccurate data and integration of incomplete data.
• Request erasure of your data (“right to be forgotten”) where applicable.
• Request restriction of processing in the cases provided by law.
• Object to the processing carried out on the basis of legitimate interest or for direct marketing purposes.
• Receive your data in a structured, commonly used and machine-readable format and transmit it to another controller (data portability).
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.gpdp.it) or with the competent authority in your country of residence.

To exercise your rights, please write to info@rideinflorence.com. We will respond within the legal deadlines.

Cookies

This website uses cookies and similar technologies to ensure correct functioning, to analyse traffic in aggregate form and, only with your consent, to deliver marketing-related content.

Categories of cookies

• Technical cookies: strictly necessary to the operation of the site and to provide the services you request. They do not require consent.
• Analytics cookies: used in anonymised form to measure traffic and improve content. They are treated as technical cookies where IP addresses are masked and the data are not shared with third parties.
• Profiling and marketing cookies: activated only after your explicit consent, used to personalise communications and measure the effectiveness of campaigns.

Managing your preferences

You can accept, reject or customise your cookie preferences at any time through the cookie banner displayed at your first visit, or by changing your browser settings. Disabling technical cookies may affect the functioning of the website.

For a full list of cookies used and their retention periods, please contact us at the email address below.

Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or unlawful processing. These measures include encrypted connections (HTTPS), restricted access for staff, regular software updates and the selection of providers that guarantee adequate security standards.

Updates to this policy

This Privacy & Cookie Policy may be updated to reflect changes in the law, in our services or in our processing operations. The latest version will always be published on this page with the date of the last update at the top of the document. We invite you to consult it periodically.

Contact us