Privacy Policy
Data controller
| Company name | Marenetto S.R.L. Unipersonale |
|---|---|
| Registered office | S.S. 113 n° 73, 90015 Cefalù (PA), Italy |
| VAT no. | 06471740826 |
| REA | PA-323391 |
| SDI | M5UXCR1 |
| Certified email (PEC) | offroadstoresrl@cgn.legalmail.it |
| Privacy contact | offroadstoresrl@cgn.legalmail.it |
| DPO | Not appointed: the conditions of Art. 37 GDPR are not met; this decision is reviewed periodically. |
1. Who is the controller of your data
The controller for the operation of the Rent Me Now marketplace (account, search, booking, online payment, anti-fraud and transactional emails) is the company indicated above.
The rental company where you book the vehicle is an independent controller of the data it collects to perform the rental contract (personal details, ID documents, check-in). We identify the relevant rental company at the time of booking.
2. What data we process
- Contact and booking data: first name, last name, email, phone, dates, vehicle, amounts, payment status.
- Account data (if you create one): credentials managed by the authentication provider.
- ID documents, driving licence and signature: when you complete the online check-in (uploaded by you).
- Vehicle photos: at pick-up and return, as protection against disputes over any damage.
- Minimal anti-abuse technical data: (e.g. anti-bot challenge token).
3. Why we process it and on what legal basis
- Performance of the contract and pre-contractual measures (Art. 6.1.b): managing the booking, payment and check-in.
- Legal obligations: e.g. accounting and tax (Art. 6.1.c).
- Legitimate interest (Art. 6.1.f): platform security, fraud prevention, evidence of the vehicle's condition.
- Consent (Art. 6.1.a): marketing communications, where you give it; you can withdraw it at any time.
4. Documents and AI-assisted OCR
If you complete the online check-in, the photos of your documents may be processed by an artificial-intelligence system that automatically extracts the data (number, dates, name) to pre-fill the fields. This is a support tool: the final verification is always carried out by a person from the rental company.
For this feature the images are transferred to a provider based in the United States (see table). In accordance with the EU Artificial Intelligence Act, we transparently inform you of the use of this tool at the moment you use it. No automated decisions with legal effects on you are taken.
5. How long we keep the data
We keep the data for as long as necessary to provide the service and to comply with legal obligations (in particular accounting and tax). Data and documents relating to the rental are kept by the rental company as controller according to its own retention policies.
6. Your rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection (Art. 15-22 GDPR), and withdraw any consent given at any time. For requests concerning data collected by the rental company we invite you to contact it directly; we can nonetheless assist you with forwarding.
By writing to the privacy contact indicated above you will receive a reply within the legal time limits.
7. Geolocation of rental vehicles
Some vehicles offered on the platform may be fitted with GPS tracking devices installed and managed by the rental company where you pick up the vehicle. The controller of this processing is the rental company, which provides you with the relevant notice and, where necessary, collects your consent at pick-up.
Rent Me Now, as a booking platform, neither receives nor processes the vehicle's location data during the rental. To exercise your rights over this data you can contact the rental company directly.
Recipients and transfers outside the EU
To provide the service we rely on third-party providers acting as data processors. Some are based in the United States: transfers take place on the basis of standard contractual clauses (SCC) and/or membership of the EU-US Data Privacy Framework. You can ask us for the updated list and a copy of the safeguards.
| Provider | Purpose | Country | Transfer safeguard |
|---|---|---|---|
| Replit | Hosting, database, object storage | USA | SCC |
| Clerk | User authentication | USA | EU-US DPF / SCC |
| Stripe | Payment processing | USA | EU-US DPF / SCC |
| Resend | Email delivery | USA | SCC |
| OpenAI | AI-assisted data extraction from documents (AI OCR) | USA | EU-US DPF / SCC |
| Cloudflare | Anti-bot protection (Turnstile) | USA / global | EU-US DPF / SCC |
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it). This policy may be updated: the version in force is always published on this page.