Privacy Policy

Data controller

Company nameMarenetto S.R.L. Unipersonale
Registered officeS.S. 113 n° 73, 90015 Cefalù (PA), Italy
VAT no.06471740826
REAPA-323391
SDIM5UXCR1
Certified email (PEC)offroadstoresrl@cgn.legalmail.it
Privacy contactoffroadstoresrl@cgn.legalmail.it
DPONot appointed: the conditions of Art. 37 GDPR are not met; this decision is reviewed periodically.

1. Who is the controller of your data

The controller for the operation of the Rent Me Now marketplace (account, search, booking, online payment, anti-fraud and transactional emails) is the company indicated above.

The rental company where you book the vehicle is an independent controller of the data it collects to perform the rental contract (personal details, ID documents, check-in). We identify the relevant rental company at the time of booking.

2. What data we process

  • Contact and booking data: first name, last name, email, phone, dates, vehicle, amounts, payment status.
  • Account data (if you create one): credentials managed by the authentication provider.
  • ID documents, driving licence and signature: when you complete the online check-in (uploaded by you).
  • Vehicle photos: at pick-up and return, as protection against disputes over any damage.
  • Minimal anti-abuse technical data: (e.g. anti-bot challenge token).

3. Why we process it and on what legal basis

  • Performance of the contract and pre-contractual measures (Art. 6.1.b): managing the booking, payment and check-in.
  • Legal obligations: e.g. accounting and tax (Art. 6.1.c).
  • Legitimate interest (Art. 6.1.f): platform security, fraud prevention, evidence of the vehicle's condition.
  • Consent (Art. 6.1.a): marketing communications, where you give it; you can withdraw it at any time.

4. Documents and AI-assisted OCR

If you complete the online check-in, the photos of your documents may be processed by an artificial-intelligence system that automatically extracts the data (number, dates, name) to pre-fill the fields. This is a support tool: the final verification is always carried out by a person from the rental company.

For this feature the images are transferred to a provider based in the United States (see table). In accordance with the EU Artificial Intelligence Act, we transparently inform you of the use of this tool at the moment you use it. No automated decisions with legal effects on you are taken.

5. How long we keep the data

We keep the data for as long as necessary to provide the service and to comply with legal obligations (in particular accounting and tax). Data and documents relating to the rental are kept by the rental company as controller according to its own retention policies.

6. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection (Art. 15-22 GDPR), and withdraw any consent given at any time. For requests concerning data collected by the rental company we invite you to contact it directly; we can nonetheless assist you with forwarding.

By writing to the privacy contact indicated above you will receive a reply within the legal time limits.

7. Geolocation of rental vehicles

Some vehicles offered on the platform may be fitted with GPS tracking devices installed and managed by the rental company where you pick up the vehicle. The controller of this processing is the rental company, which provides you with the relevant notice and, where necessary, collects your consent at pick-up.

Rent Me Now, as a booking platform, neither receives nor processes the vehicle's location data during the rental. To exercise your rights over this data you can contact the rental company directly.

Recipients and transfers outside the EU

To provide the service we rely on third-party providers acting as data processors. Some are based in the United States: transfers take place on the basis of standard contractual clauses (SCC) and/or membership of the EU-US Data Privacy Framework. You can ask us for the updated list and a copy of the safeguards.

ProviderPurposeCountryTransfer safeguard
ReplitHosting, database, object storageUSASCC
ClerkUser authenticationUSAEU-US DPF / SCC
StripePayment processingUSAEU-US DPF / SCC
ResendEmail deliveryUSASCC
OpenAIAI-assisted data extraction from documents (AI OCR)USAEU-US DPF / SCC
CloudflareAnti-bot protection (Turnstile)USA / globalEU-US DPF / SCC

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it). This policy may be updated: the version in force is always published on this page.