Data Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by baricarrent.com ("we", "us", "our"), operated in connection with car rental services in Bari, Apulia, Italy. This policy governs how we handle information when you visit our website, make a booking, or contact our team.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR - EU 2016/679), the Italian Personal Data Protection Code (Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018), and any other applicable data protection legislation in force in Italy and the European Union.

This policy applies to all users of our website, prospective customers, confirmed booking customers, and any individual whose personal data we process in connection with our car hire services at Bari Karol Wojtyla Airport (BRI), Bari Centrale station, the Port of Bari, and city-center delivery locations across Bari, Apulia.

By using our website or making a reservation, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal information is:

baricarrent.com
Bari, Apulia, Italy
Email: [email protected]
Phone: +39 391 897 5197

For any data protection enquiries, please contact us using the details above and reference "Data Privacy" in your subject line.

3. Information We Collect

We collect personal data through several channels - directly from you during the booking process, automatically via your use of the website, and occasionally from third-party integrations. The categories of data we collect include:

3.1 Personal Identification Data

When you make or enquire about a booking, we collect: full name, email address, phone number, driver's licence number and issuing country, date of birth (required for young driver verification and insurance purposes), and nationality.

3.2 Booking and Rental Data

We collect details related to your reservation, including: pickup and return location (e.g., Bari Airport BRI, Port of Bari, Bari Centrale), rental dates and duration, selected vehicle category, optional extras (child seats, GPS, additional driver), and any special requests or notes submitted with your booking.

3.3 Payment Information

We do not store full payment card details on our servers. Payment processing is handled exclusively by PCI-DSS compliant third-party processors. We may retain a transaction reference number and the last four digits of a card for reconciliation purposes. For bookings completed without a credit card deposit - our primary offering - only minimal payment verification data is retained.

3.4 Browsing and Technical Data

When you visit baricarrent.com, we automatically collect certain technical data including: IP address, browser type and version, operating system, referring URLs, pages visited, session duration, and device type. This data is collected via cookies and similar tracking technologies. Please refer to our Cookie Policy for full details.

3.5 Location Data

If you grant location permissions in your browser, we may use your approximate location to suggest the nearest pickup point (such as the Bari Airport terminal or city-center delivery zones). We do not track your location during the rental period.

3.6 Communications Data

If you contact us by email or phone, we retain records of that correspondence, including the content of messages, your contact details, and timestamps, to the extent necessary to respond to and resolve your enquiry.

4. How We Use Your Data

We process personal data only for lawful purposes and only to the extent necessary. Our primary purposes are:

4.1 Processing and Managing Your Booking

We use your data to confirm reservations, issue booking confirmations, coordinate vehicle pickup at Bari Airport or alternative locations, process no-deposit bookings, verify driver eligibility, and manage any amendments or cancellations. This processing is necessary for the performance of a contract with you.

4.2 Customer Support

We use contact and booking data to respond to queries, resolve complaints, and provide assistance during your rental period. This is based on our legitimate interest in delivering reliable customer service.

4.3 Service Improvement

Anonymised and aggregated usage data helps us understand how customers navigate the website, which vehicle categories are most in demand in Bari during peak season, and where the booking flow can be simplified. No individual is identified in this analysis.

4.4 Marketing Communications

With your explicit consent, we may send promotional emails about special offers, seasonal deals for car hire in Bari, or travel inspiration for Apulia road trips. You can withdraw consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

4.5 Legal and Regulatory Compliance

We may process your data where required by Italian law, EU regulation, court order, or in connection with insurance and liability obligations arising from the vehicle rental contract.

4.6 Fraud Prevention and Security

We may use identification and technical data to detect and prevent fraudulent bookings, identity misuse, or abuse of our no-deposit booking service.

5. Data Sharing with Third Parties

We do not sell your personal data. We share your data only with trusted partners where it is necessary to deliver our services:

5.1 Payment Processors

Encrypted payment data is transmitted to our authorised PCI-DSS compliant payment gateways. These processors act as data processors under our instruction and under contractual data protection obligations.

5.2 Insurance Providers

Driver details and licence data are shared with our vehicle insurance partners as required to validate cover for each rental period. This is a contractual requirement of the rental agreement.

5.3 Booking and Fleet Management Integrators

We use third-party reservation management platforms to coordinate availability across vehicle categories. Booking data is processed by these platforms under data processing agreements compliant with GDPR Article 28.

5.4 Legal and Regulatory Authorities

We may disclose personal data to Italian law enforcement, judicial authorities, or regulatory bodies where legally required or where necessary to protect the safety of persons or property.

5.5 International Transfers

Where any of our service providers operate outside the European Economic Area, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data at the same level as within the EU.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Booking and rental records - retained for 10 years from the date of the rental, in line with Italian civil and tax law obligations.
• Customer support communications - retained for 2 years from the date of the last interaction.
• Marketing consent records - retained until consent is withdrawn, plus 1 year for audit purposes.
• Technical/browsing data - retained for up to 13 months from collection in line with CNIL and EDPB guidance on cookie analytics.
• Fraud prevention records - retained for up to 5 years from the date of the relevant incident.

Once data is no longer required, it is securely deleted or anonymised.

7. Your Rights Under GDPR

As a data subject under EU and Italian data protection law, you have the following rights with respect to your personal data:

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.

7.2 Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.

7.3 Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful - subject to our legal retention obligations.

7.4 Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request that your data be provided to you in a structured, commonly used, and machine-readable format.

7.5 Right to Object

You have the right to object to processing based on our legitimate interests, including any direct marketing communications. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.6 Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances, such as while a dispute regarding accuracy is being resolved.

7.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions made solely by automated processing that produce legal or similarly significant effects, unless such processing is necessary for a contract, authorised by law, or based on your explicit consent.

7.8 How to Exercise Your Rights

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Subject Request". We will respond within 30 days. We may need to verify your identity before fulfilling a request.

7.9 Right to Lodge a Complaint

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (Garante), at www.garanteprivacy.it, or with the supervisory authority in your EU member state of residence.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability testing of our booking platform.
• Data processing agreements with all third-party service providers handling personal data.
• Incident response procedures aligned with GDPR Article 33 breach notification requirements (72-hour notification to supervisory authority where applicable).

Despite these measures, no internet transmission is completely secure. If you have concerns about the security of your data, please contact us immediately at [email protected].

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure functionality, analyse traffic, and - with your consent - deliver personalised content. A full breakdown of cookie categories, their purpose, and your opt-out options is available in our dedicated Cookie Policy. You may manage or withdraw cookie consent at any time via the consent tool displayed on your first visit to the site.

10. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us so we can take appropriate action to delete it promptly.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. When we make material changes, we will update the "Last Updated" date at the bottom of this page and, where required by law, notify affected users by email or prominent notice on the website.

We encourage you to review this page periodically. Continued use of our website or services after changes have been posted constitutes your acknowledgement of the updated policy.

12. Contact for Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please reach out to us:

[email protected]
Bari, Apulia, Italy
+39 391 897 5197

We aim to respond to all privacy-related enquiries within 5 business days.

Last Updated: June 2025