Privacy Policy

1. Introduction and Applicable Law

This Privacy Policy describes how the website of Blue Island Rent is managed regarding the processing of personal data of users who browse it and use our quote request or booking services for scooter rentals in Lampedusa.

This information is provided pursuant to Article 13 of EU Regulation 2016/679 (General Data Protection Regulation - GDPR) and current Italian data protection legislation.

2. Types of Data Collected

During normal browsing and use of our website services, we may collect the following categories of data:

• Data provided voluntarily by the user: optional, explicit, and voluntary sending of messages via WhatsApp, phone calls, or email to the contact addresses listed on this site entails the acquisition of the sender's contact details (name, surname, phone number, email address), as well as any other personal data included in the communication required to formulate a quote or confirm the rental (e.g., stay dates in Lampedusa, requested scooter model, driver's license details during contract signing at our office).
• Browsing data: the computer systems and software procedures used to operate this website acquire, during normal operation, some technical data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, operating system, access time). This data is used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning.

3. Purpose and Legal Basis of Processing

Personal data provided by users is processed for the following purposes:

1. Managing contact and quote requests: to answer questions regarding vehicle availability, pricing, and rental conditions. The legal basis is the execution of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR).
2. Execution of the rental contract: for formal signing of the scooter rental contract at our office, managing vehicle pick-up and drop-off, and insurance coverage. The legal basis is the execution of the contract.
3. Legal, tax, and accounting compliance: for invoicing and complying with legal obligations under Italian tax and accounting laws. The legal basis is compliance with a legal obligation (Art. 6(1)(c) GDPR).
4. Asset protection and security: for protecting company vehicles, managing traffic accidents, traffic violations, or legal disputes. The legal basis is the legitimate interest of the Controller (Art. 6(1)(f) GDPR).

4. Processing Methods and Security

Data processing is carried out using IT tools and paper archives, implementing appropriate technical and organizational security measures to prevent data loss, unlawful or incorrect use, and unauthorized access. Data is processed exclusively by the Data Controller and authorized personnel instructed on confidentiality requirements.

5. Data Retention Period

Personal data collected for pre-contractual purposes (quote requests not followed by a contract) will be deleted within 12 months of the request.

Data related to concluded rental contracts and fiscal documentation (invoices, signed contracts) will be stored for 10 years from signing, in compliance with Italian civil and tax statutory retention obligations.

6. Data Sharing and Disclosure

Personal data will never be disclosed to the general public nor sold to third parties for marketing or commercial profiling purposes. Data may only be communicated to:

• Accounting and tax advisors of the Controller for legal and fiscal compliance;
• Insurance companies in case of traffic accidents or vehicle damages;
• Judicial or law enforcement authorities for legal obligations or in the event of traffic violations during the rental period.

7. Data Subject Rights (Art. 15-22 GDPR)

At any time, data subjects have the right to request from the Data Controller:

• Right of Access (Art. 15): obtain confirmation of whether your personal data is being processed and receive a copy;
• Right to Rectification (Art. 16): request correction of inaccurate data or completion of incomplete data;
• Right to Erasure (Art. 17): request deletion of your data where applicable ("right to be forgotten");
• Right to Restriction (Art. 18): obtain restriction of processing in specific cases;
• Right to Data Portability (Art. 20): receive data provided in a structured format and transmit it to another controller;
• Right to Object (Art. 21): object completely or partially to processing for legitimate reasons.

To exercise your rights, you can send a formal communication via Certified Email (PEC) to: palmisano-gianfranco@pec.it or directly contact the Controller by phone at +39 327 789 9233.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe processing violates GDPR provisions.