Data protection

1. responsible person & contact

MOTEZZA RENT A CLASSIC di Gerhard Huber
Registered office: Greve in Chianti (FI), Italy
Phone: +39 353 451 6525 - E-Mail: info@motezza.com

2. scope of application

This declaration applies to motezza.com, associated subpages, communication (e-mail/telephone) and the processing of rental contracts. In the case of forwarding to third-party providers (e.g. payment service providers or booking platforms), the data protection notices of the respective providers apply.

3. data types

• Master data (name, contact details, address, date of birth if applicable).
• Contract data (booking details, rental period, vehicle, prices, payment status).
• Identification data (driving license data, number and validity - only if required).
• Usage data (access to the website, log files, cookie settings).
• Telematics data (GPS location/movement of the vehicle, only during the rental period; see §10).
• Communication data (content of inquiries by form/e-mail/telephone).

4. purposes & legal bases

• Website operation & security (provisioning, error management, IT security, misuse detection) Legal basis: legitimate interests, Art. 6 para. 1 lit. f GDPR.
• Inquiries & Communication (answering, documentation) - Legal basis: pre-contractual/contractual measures, Art. 6 para. 1 lit. b GDPR; legitimate interests, Art. 6 para. 1 lit. f GDPR.
• Contract processing (booking, payment, handover/return, claims handling) - - Legal basis: Art. 6 para. 1 lit. b GDPR; legal obligations (e.g. tax/archive), Art. 6 para. 1 lit. c GDPR.
• GPS/Telematics (theft protection, security/breakdown assistance, contract enforcement, fleet management) Legal basis: Legitimate interests, Art. 6 para. 1 lit. f GDPR; if necessary contract fulfillment, Art. 6 para. 1 lit. b GDPR.
• Cookies/Non-essential tools (comfort, statistics, marketing) - Legal basis: Consent, Art. 6 para. 1 lit. a GDPR; revocable at any time.

5. recipients & processors

We only transfer data to service providers if necessary and with an order processing contract (Art. 28 GDPR), e.g:

• Hosting/IT maintenance and e-mail provider.
• Telematics/GPS service provider for vehicle tracking (only for rental).
• Payment service providers and banks (depending on your selection).
• Insurance companies, experts, legal counsel, authorities (on an ad hoc basis).

6. transfers to third countries

If recipients outside the EEA process data, we ensure an appropriate level of protection (e.g. adequacy decision - such as the EU-US Data Privacy Framework - or EU standard contractual clauses). Information is available on request.

7. storage durations

• InquiriesUntil completion of processing and max. 12 months thereafter.
• Contract/booking dataaccording to statutory retention obligations in Italy, usually up to 10 years (tax/trade) plus statutory limitation periods.
• Telematics/GPS: 365 days (see §10), in the event of incidents/claims until final clarification.
• Server logsUsuallyUsually 7-30 days; longer storage in case of security incidents.
• ConsentsProof of consent/revocation up to 3 years after last use.

8. contact (form/e-mail/telephone)

When you contact us, we process the data you provide for processing and for further inquiries. Optional information helps us to categorize your request. Data will only be passed on if necessary for processing.

9. booking, payment & identity check

For the rental, we require personal details, contact details and driving license data. Depending on the payment method selected, payment data is processed directly by the respective payment service providers. We do not store complete credit card details on our systems.

We check your driver's license and identity upon handover. We only keep the information required to execute the contract.

10. GPS positioning (telematics)

Our vehicles are equipped with GPS tracking. During the rental period Location/movement data of the vehicle and recorded for 365 days saved. Purposes: Theft protection/retrieval, security & breakdown assistance, contract enforcement (e.g. in the event of loss, misuse, damage clarification), fleet management & maintenance.

• Legal basis: legitimate interests of Motezza (Art. 6 para. 1 lit. f GDPR) and - insofar as necessary for the rental agreement - Art. 6 para. 1 lit. b GDPR.
• Recipient: contracted telematics/IT service providers; insurers, investigative/security authorities or legal counsel, as necessary.
• Security & access: Access only by authorized persons; on an ad hoc basis as required.
• No tracking outside the rental period: Localization is limited to the rental period.

11. cookies & consent management

We use technically necessary cookies to provide the website. Functions that are not absolutely necessary (convenience, statistics, marketing) are only used with your consent. Consent. You can access these at any time via the Cookie settings change.

• Necessarye.g. language selection, security functions, shopping cart/booking.
• Functional/ComfortOptional features for operation.
• Statisticsanonymous/aggregated usage measurement (only with consent).
• Marketinge.g. embedded content, maps, videos (only with consent).

12. integrated content & services

12.1 Google Maps (integration if required)

When using map content, your IP address may be transmitted to Google and processed there. Provider: Google Ireland Limited, Dublin, Ireland. Data may be transferred to the USA (see §6). Legal basis: Consent (unnecessary content) or legitimate interest in easy findability.

12.2 WhatsApp contact

If you contact us via WhatsApp, Meta Platforms will process the communication data in accordance with their terms and conditions. We recommend that you do not share sensitive information via WhatsApp. Legal basis: pre-contractual/contractual communication (Art. 6 para. 1 lit. b) and legitimate interest (lit. f).

12.3 External videos/embeddings

Only when you activate external content (e.g. YouTube/Vimeo) will data be transmitted to the respective provider. This content is recognizable as such. Legal basis: Consent.

13. server log files

When our pages are accessed, the server automatically collects logs (e.g. IP address, date/time, URL accessed, referrer, user agent). The processing serves the purpose of secure operation and the detection of misuse (Art. 6 para. 1 lit. f GDPR). The log data is i. d.Usually deleted after 7-30 days.

14 Your rights

You have the right to information, correction, deletion, restriction, data portability, objection and revocation of consent at any time. To exercise these rights, please contact info@motezza.com.

You can send complaints to the Garante per la protezione dei dati personali (www.garanteprivacy.it).

15. safety of processing

We take technical and organizational measures to protect data against loss, misuse and unauthorized access (including access controls, encryption, backups, need-to-know principle).

16. amendments to this declaration

We will adapt this declaration if the legal situation, processing or services change. The current version is published here. We communicate significant changes transparently.

Version: 11/2025