Privacy Policy

Pursuant to Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.

Updated: 4 May 2026

This notice describes how De Renzo Agency processes personal data through the website derenzo.it and in the course of providing private chauffeur (NCC) transfer services.

1. Data Controller

De Renzo Agency
Registered address: Via Cavour 25, 89900 Vibo Valentia (VV), Italia
VAT: IT03729080790
Email: derenzoagency@gmail.com
Phone: +39 320 684 5258

2. Categories of data collected

Booking data: name of the lead passenger, email, phone, pickup and drop-off locations, date and time, number of passengers, special requirements (child seats, pets, oversized luggage), notes for the driver.

Contact-form data: name, email, phone, subject and message.

Browsing data: IP address, browser, operating system, pages visited, time spent, referrer, approximate geolocation derived from IP.

3. Purposes and legal bases

Performance of contract (Art. 6.1.b GDPR): delivering the transfer, sending confirmations, coordinating with the driver, handling changes or cancellations.

Legal obligations (Art. 6.1.c GDPR): issuing invoices, accounting retention, NCC transport regulations.

Legitimate interest (Art. 6.1.f GDPR): site security, fraud prevention, booking-experience improvements.

Consent (Art. 6.1.a GDPR): analytics and marketing cookies, commercial communications. Consent can be withdrawn at any time.

4. Cookies and third-party tools

The site may use analytics and marketing tools (e.g. Google Analytics, Google Ads, Meta Pixel) only after consent is given via the cookie banner. Purposes and durations of each cookie are listed in the preferences panel accessible from the footer.

5. Disclosure of data

Data are not sold or transferred for commercial purposes. They may be shared with:

Assigned drivers (passenger name, phone, logistics) only as needed to perform the service.
Technical providers for hosting, email, electronic payments, analytics, under contract and with appropriate safeguards.
Professional advisors (accountants, lawyers) within their respective engagements.
Competent authorities where required by lawful order.

6. Extra-EU transfers

Some providers (Google, Meta) may involve transfers to non-EU countries. In such cases we rely on European Commission adequacy decisions or standard contractual clauses, ensuring a level of protection equivalent to the GDPR.

7. Retention periods

Booking and invoicing data: 10 years (tax obligations). Contact-form requests: 24 months. Anonymous browsing data: per individual tool settings (typically 14-26 months).

8. Data-subject rights

Under Articles 15-22 GDPR you may exercise access, rectification, erasure, restriction, objection, portability and withdrawal of consent at any time by writing to derenzoagency@gmail.com. We respond within 30 days. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

9. Security

We adopt appropriate technical and organisational measures (TLS in transit, named access, backups, credential management) to protect data against loss, unauthorised access or disclosure.

10. Automated decision-making

No fully automated decisions or profiling within the meaning of Article 22 GDPR are performed.

11. Changes

De Renzo Agency may update this notice. Updates are published on this page with the latest revision date.

12. Contact

For any question on data processing:

Email: derenzoagency@gmail.com
Phone: +39 320 684 5258
WhatsApp: +39 320 684 5258