DATA PROTECTION POLICY

COOKIE INFORMATION NOTICE

Who is the data controller?^[1]

Who is the data controller?^[2]

Noleggiare s.r.l., in the person of its legal representative with registered office in via Del Brennero n.62 38123 Trento (TN), (hereinafter, «Controller»),

How can I contact them The contact details of the company are:

Certified email: [email protected]

Email: [email protected]

Address: via Del Brennero, 62 — 38123 Trento (TN)

Has a DPO been appointed? What are their contact details?

The company has appointed as its DPO the lawyer Antonino Polimeni, who can be contacted at the following email address: [email protected]

What are cookies?

Cookies are text strings that websites visited by users (so-called Publishers or “first parties”) or different sites or web servers (so-called “third parties”) place and store within the user’s terminal device, so that they are then retransmitted to the same sites on the next visit. *

What are they for?

Cookies are used for different purposes: carrying out electronic authentications, monitoring sessions, storing information on specific configurations concerning users accessing the server, storing preferences, or to facilitate the use of online content, such as to track items in a shopping cart or information for filling out a computer form etc.; but they can also be used to profile the user, that is to «observe» their behavior, for example in order to send targeted advertisements, measure the effectiveness of the advertising message and adopt consequent commercial strategies. In this case we talk about profiling cookies. *

What are technical cookies?

These are cookies that are used for browsing or providing a service requested by the user. They are not used for any other purposes and are normally installed directly by the website owner.

Without the use of these cookies, some operations could not be carried out or would be more complex and/or less secure. *

Are analytics cookies technical cookies?

Analytics cookies can be assimilated to technical cookies if used for site optimization purposes directly by the owner of the site itself, which can collect statistical information in aggregate form on the number of users and how they visit the site.

If, on the other hand, the processing of these statistical analyses is entrusted to third parties, the user data must be minimized in advance and may not be combined with other processing or transmitted to other third parties. Under these conditions, the same rules, in terms of information and consent, provided for technical cookies also apply for analytics cookies. *

What cookies does this site use?

This site uses third-party cookies to:

1. Monitor visits and obtain statistics on user activity on the site

• Google Analytics (GA4)

Google Analytics is necessary to monitor visits and to obtain aggregated statistics on site activity. We do not know your identifier and have no ability to identify the user who visits the website. But Google can do that. Data processing takes place in Europe if you are a browser connected with a European IP. Here is the link to the privacy policy: https://policies.google.com/technologies/cookies?hl=en

• PHP

PHP transparently supports HTTP cookies. Cookies are a mechanism for storing data in the remote browser and then tracking or identifying returning users. Cookies are part of the HTTP header, so setcookie must be called before any output is sent to the browser. This is the same limitation that header has. You can use output buffering functions to delay script output until you decide whether to set cookies or send headers. Here the link to the privacypolicy: https://www.php.net/privacy.php

• Hotjar

Cookies are small portions of data that a website adds to a user’s browser. Hotjar tracking code cookies are set on a visitor’s browser when they visit a website that loads the Hotjar tracking code. These cookies allow Hotjar’s tracking code to function properly. In addition to cookies, Hotjar’s tracking code also uses local and session storage. Here is the link to the privacy policy: https://www.hotjar.com/legal/policies/privacy/

• Criteo

Criteo helps brands, e-commerce sites and other advertisers promote their products and services. We do this by allowing advertisers to tailor their campaigns and/or offers to the audience they wish to reach with the content they wish to promote, which in turn means you may receive advertisements that may interest you on our partners’ websites, mobile apps and other platforms. Here is the link to the privacy policy: https://www.criteo.com/privacy/

2. Targeting and Advertising

•  Remarketing with Google

Remarketing with Google is a remarketing and behavioral targeting service provided by Google LLC or Google Ireland Limited, depending on the location where the site is used, which connects the tracking activity carried out by Google Analytics and its Cookies with the Google Ads advertising network and the Doubleclick Cookie.

In essence, Google assigns an ID to the browser of the website, stored in a cookie. This ID will then be needed to customize the ads on the Google network and on all websites that use Adsense.

Data processing takes place in Europe if you are a browser connected with a European IP. Here is the link to the privacy policy: http://www.google.com/intl/it/policies/privacy/

• Facebook

Facebook identifies the user with their own IDs in order to personalize the advertising and profile the user. These IDs are then associated with the Facebook profile (if active) and, as a result of browsing our website, you may find ads on Facebook and Instagram.

In essence, when you browse our website, Facebook installs a cookie on your hard drive and, subsequently, when you browse on Facebook or Instagram, these two platforms will search for the cookie and then target the advertisements according to the instructions provided by it.

The processing is entirely by Facebook and we have no way of identifying the user.

The service is provided by Facebook Inc. or Facebook Ireland Ltd, depending on the location of the site visitor. Data processing takes place in Europe if you are a browser connected with a European IP. Here is the link to the privacy policy: https://it-it.facebook.com/policy.php

Below is the list of cookies used by the site:

HOW TO DISABLE COOKIES?

• HOW TO DISABLE COOKIES:

We also inform you that, below, you can find instructions for disabling cookies:

– If using Internet Explorer: http://windows.microsoft.com/it-it/windows7/block-enable-or-allow-cookies

– If using Chrome: https://support.google.com/accounts/answer/61416?hl=it

– If using Firefox: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie

– If using Safari on iPad, iPhone, iPod: https://support.apple.com/it-it/HT201265

– If using other browsers: http://en.wikihow.com/Disable-i-Cookies”),

• ANONYMOUS BROWSING

To find out how to activate the option on the main search engines click on the browser you use:

Internet Explorer (http://windows.microsoft.com/en-US/windows7/Block-enable-or-allow-cookies),

Google Chrome (https://support.google.com/chrome/answer/95464?hl=en),

Mozilla Firefox (https://support.mozilla.org/en/kb/Anonymous browsing),

Opera Browser (http://help.opera.com/opera/Windows/1781/en/private.html#privateWindow),

Apple Safari (https://support.apple.com/en-us/HT6074).

What are my rights and how can I exercise them?

1. RIGHT OF ACCESS (Art. 15 GDPR)

The data subject has the right to obtain confirmation of the existence or not of personal data concerning them, even if not yet registered, and their communication in intelligible form.

2. RIGHT TO RECTIFICATION (Art. 16 GDPR)

The data subject has the right to obtain the rectification of inaccurate personal data concerning them and also the integration of incomplete personal data.

3. RIGHT TO ERASURE (Art. 17 GDPR)

The data subject has the right to obtain the erasure of personal data in the presence of particular reasons such as withdrawal of consent, objection to processing or if the data are no longer necessary with respect to the purposes for which they were collected and processed or in case of unlawful processing. It will not always be possible to proceed with erasure but it will certainly be the responsibility of the data controller to provide adequate motivation.

4. RIGHT TO RESTRICTION OF PROCESSING (Art. 18 GDPR)

The data subject has the right to obtain restriction of processing in the presence of particular hypotheses such as, for example, in the case of a request for rectification or objection during the request evaluation time.

5. RIGHT TO PORTABILITY (Art. 20 GDPR)

If the processing is based on consent or on the contract and is carried out with automated tools, the data subject can receive them in a structured format, commonly used and readable by the device or ask to transmit them to another controller.

6. RIGHT TO OBJECT (Art. 21 GDPR)

The data subject has the right to object, in whole or in part:

1. a) for legitimate reasons to the processing of personal data concerning them, even if pertinent to the purpose of collection;
2. b) to the processing of personal data concerning them for the pursuit of purposes not contemplated by Art. 2.

The user can make a request for objection to the processing of their personal data pursuant to Article 21 of the GDPR in which they give evidence of the reasons that justify the objection: the Data Controller reserves the right to evaluate the request, which would not be accepted in case of existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the user.

7. RIGHT TO LODGE A COMPLAINT

The data subject has the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR if they consider that the processing of their data is contrary to current legislation.

1. b) Exercising methods:

The data subject may at any time exercise the rights referred to in the previous article by contacting the data controller at the addresses indicated above.

(* taken from: privacy supervisory authority — faq cookie)

[1] Pursuant to Art. 4 No.7 GDPR: the data controller determines the purposes and means of the processing of personal data and its responsibilities are identified by Art. 24 GDPR.

[2] Pursuant to Art. 4 No.7 GDPR: the data controller determines the purposes and means of the processing of personal data and its responsibilities are identified by Art. 24 GDPR.