Website And App Privacy Policy

This privacy policy on the processing of personal data (“Policy“) applies to the processing of your personal data by Rome Shuttle Limousine Soc. Cooperativa (hereinafter, “RSL.” or “Controller“) carried out through the website romeshuttlelimousine.com/ (“Site“) and through the mobile application “RSL Rental” (“App“), in accordance with the provisions of Regulation (EU) 2016/679 (“GDPR“), Legislative Decree 196/2003, as amended. (“Privacy Code“), the relevant measures and guidelines of the national and European data protection authorities, as well as applicable national and European legislation (jointly, “Applicable Legislation“).

Purposes Legal basis Categories of personal data
To enable you to use the Site and/or App and access the content made available through the Site and/or App.
Necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR). Details of the web browser used and the IP address and any other data relating to navigation.
To process and respond to any requests, as well as to allow you to use the rental service through the contact and booking channels indicated on the Site and/or App (e.g. bookings, contacts, new booking). Necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR). Identification, contact and payment data provided by you (i.e. first name, last name, e-mail address and payment data) as well as any other information provided by you and/or necessary for the handling of your requests.
To comply with legal obligations and/or respond to requests from competent authorities. To comply with a legal obligation to which we are subject (Art. 6(1)(c) GDPR). Any information that may be required by law or to comply with requests received from competent authorities.
To safeguard our rights and those of our employees and contractors, both in judicial and extrajudicial proceedings.
Pursuit of our or a third party's legitimate interest (Art. 6(1)(f) GDPR). Any information necessary to fulfill this purpose.
To carry out extraordinary operations concerning the Data Controller (including mergers, acquisitions, disposals, corporate reorganizations, corporate restructuring), to the extent strictly necessary for the pursuit of such purpose and on the basis of the legitimate interest of the Data Controller following an appropriate balancing with the fundamental rights and freedoms of the data subjects.
Pursuit of our or a third party's legitimate interest (Art. 6(1)(f) GDPR). Any information necessary to fulfill this purpose.