PRIVACY POLICY RELATING TO THE MGC AUTONOLEGGIO 1900 SERVICE
The personal data of the Interested Parties will be processed by MGCautonoleggio1900 for the purposes outlined in this privacy policy. Additionally, the Passengers’ data will be shared with the NCC company and/or individual NCC driver who will handle the booked ride from time to time.
1. DATA CONTROLLER
The Data Controller of personal data is MGCautonoleggio1900 (“MGC” or “Company”) with its registered office in Rome (RM), reachable at the email address info.cimarelliautonoleggio1900@gmail.com.
2. PERSONAL DATA COLLECTED AND DATA SOURCE
2.1 MGC will process the following User data to enable registration for the Service and/or use of the Service for booking an NCC ride, for themselves or others:
Identification data (name and surname);
Contact details (e.g., email address and phone number).
2.2 MGC will also process the following Passenger data:
Identification data (name and surname);
Contact details (e.g., email address and phone number);
Information regarding the booked ride (e.g., departure and destination addresses);
Any requests for special vehicles for disabled Passengers, subject to the Passenger’s consent at the time of booking.
If the booking is made by a User other than the Passenger, MGC will receive the Passenger’s personal data from the User making the booking.
3. PURPOSES AND LEGAL BASIS OF PROCESSING
Personal data will be processed by MGC for the following purposes:
A) Purposes related to the use of the Service by all Users, particularly for:
Registration for the MGC Service (via website);
Ride booking;
Managing the provision of the Service (e.g., the handling of the ride by the NCC and sending related service notifications via push notification, SMS, and/or email).
The legal basis for processing is the provision of the Service, as regulated by the applicable Terms and Conditions of the MGC service.
4. PURPOSES AND LEGAL BASIS OF PROCESSING
Personal data will be processed by MGC for the following purposes:
A) Purposes related to the use of the Service by all Users, particularly for:
The legal basis for processing is the provision of the Service, as regulated by the applicable Terms and Conditions of the MGC AUTONOLEGGIO 1900 service.
The provision of data is mandatory, and the refusal to provide data will make it impossible to register for the MGC service and/or use the Service.
Data related to each NCC ride will be retained for 10 years from the end of each ride, in compliance with the applicable statutory limitation periods.
B) Sending information and promotional communications related to the MGC Service via email to all Users. Data will be retained until Users request not to receive these communications, which can be done at any time by clicking the appropriate link in each communication sent by MGC.
C) Data will be retained until the consent is revoked or for two years from the last account activity related to the service.
D) Fulfillment of legal obligations, ascertainment, exercise or defense of a right of MGC or third parties (e.g., management of complaints, disputes, legal disputes and/or transactions). The data will be retained for 10 years to ensure compliance with the legal, judicial and administrative obligations of MGC AUTONOLEGGIO 1900, as well as to manage the participation of MGC in any administrative and/or judicial proceedings.
E) Processing of aggregate statistical analyses related to the MGC AUTONOLEGGIO 1900 service.
The data collected by MGC will be processed anonymously for the creation of aggregate statistics related to activities conducted within the scope of the MGC service.
The legal basis for processing is the Company’s legitimate interest in analyzing the functioning of the MGC service to improve its features and performance based on its use.
4. PAYMENT DATA
4.1 To receive payment for the service, MGC AUTONOLEGGIO uses the payment service provided by Nexi Payments S.p.A.
Nexi will be responsible for collecting the payment data and performing data processing activities necessary to manage payments.
MGC does not collect or process any payment-related data and will only process information regarding the payment outcome to allow MGC to provide the Service.
4.2 For information on data processing by Nexi, please refer to the privacy policy on the nexi.it website.
5. DATA DISCLOSURE
5.1 Personal data will be processed, for the purposes indicated in paragraph 3, by MGC’s internal personnel, expressly authorized to process personal data. Additionally, personal data may be disclosed for the following purposes to the following entities:
The NCC company and/or individual NCC driver who will handle the booked ride from time to time, as an independent data controller;
Entities providing services on behalf of MGC, such as data processors (e.g., IT service providers or other service providers);
Public or private entities (e.g., insurance companies, banks, public authorities, judicial bodies, tax agencies) that will process the data as independent data controllers.
6. TERRITORIAL SCOPE OF PROCESSING
Personal data will not be transferred outside the European Economic Area.
7. RIGHTS OF THE DATA SUBJECTS
The data subjects may exercise, in the cases provided for by the Regulation, the following rights under Articles 15 et seq. of the GDPR:
Right of access: request confirmation of whether data is being processed and, if so, access the relevant information;
Right of rectification: request correction or completion of inaccurate or incomplete data;
Right to erasure: request the deletion of data from MGC;
Right to restriction of processing: request the limitation of processing;
Right to data portability: request to receive data in a structured, commonly used, and machine-readable format, or to have the data transmitted directly to another controller, where technically feasible;
Right to object: object, in whole or in part, for legitimate reasons and in cases provided for by the GDPR, to the processing of data concerning them.
Pursuant to Article 7 of the GDPR, registered Users may withdraw their consent at any time without affecting the lawfulness of the processing based on the consent given prior to withdrawal.
Data subjects may exercise the above rights by sending an email to info.cimarelliautonoleggio1900@gmail.com.
Additionally, if a data subject believes that their data has been unlawfully processed, they may lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).
MGC AUTONOLEGGIO 1900
Thanks for your trust and collaboration.