Privacy policy

The data controller is Rental shop — Piazza della Neve 1, 00000 Località (IT) — P.IVA/VAT IT00000000000.

For any request about your data you can write to privacy@example.com or call us at +39 000 000000.

• Contact and account data: name, email, phone, preferred language.
• Booking data: dates, pick-up and return locations, equipment, amounts and payment status.
• Rider data (optional, provided by you): age or age group, height, weight, shoe size, skiing level, used only to recommend and prepare correctly sized equipment.
• Technical data: IP address in hashed form and user agent for security purposes and proof of consent.

1. Managing the booking and the rental contract (Art. 6.1.b GDPR): without this data we cannot provide the service.
2. Tax and accounting obligations (Art. 6.1.c GDPR).
3. Website security and fraud prevention (legitimate interest, Art. 6.1.f GDPR).
4. Newsletter and promotional messages only with your explicit consent (Art. 6.1.a GDPR), which you can withdraw at any time.

Data is processed by our authorised staff and by providers acting as processors: hosting and storage, transactional email delivery, payments (PayPal, which processes payment data as an independent controller). We never sell your data.

Account data is kept while the account is active and deleted or anonymised after 24 months of inactivity. Booking data is kept for the period required by tax law (10 years), with riders' physical data removed after the rental ends. Marketing consent is kept until withdrawn.

At any time you can request access, rectification, erasure, restriction, data portability and object to processing (Arts. 15-22 GDPR). From your account you can download your data and request deletion of your account; alternatively write to privacy@example.com.

You also have the right to lodge a complaint with the supervisory authority (in Italy: www.garanteprivacy.it).