1. Introduction and Data Controller

2. Types of Data Collected and Purpose of Processing

A. Appointment Management and Workshop Services

• Data collected: First name, last name, phone number, email address, license plate and vehicle model, requested date and time for the service.
• Purpose: To manage booking requests, organize maintenance, repair, or inspection services at the workshop, and provide timely feedback to the user.
• Legal basis: Performance of pre-contractual or contractual measures taken at the request of the data subject (Art. 6, par. 1, let. b of the GDPR).

B. Reminder Services

• Data collected: Email address, phone number, data related to vehicle deadlines (e.g., periodic inspection and service).
• Purpose: To send automated or manual periodic notifications and reminders to alert the user of their vehicle’s maintenance and safety deadlines.
• Legal Basis: Performance of a contract or pre-contractual measures, as well as the legitimate interest of the Data Controller to offer targeted and timely assistance (GDPR, Art. 6, para. 1, (b) and (f)).

C. Newsletters and Commercial Communications

• Data collected: Email address, name.
• Purpose: Sending informative communications, updates on workshop activities, commercial promotions, dedicated discounts, and vehicle care tips.
• Legal basis: Express consent of the data subject (Art. 6, par. 1, let. a of the GDPR), revocable at any time.

3. Data Retention Methods and Period

• Data for appointments and reminders are kept for the time necessary to provide the service and subsequently for the terms required by tax and civil law (generally 10 years).
• Data processed for newsletter purposes are kept until the user revokes their consent (opt-out).

4. Data Recipients and Transfer

5. Rights of Data Subjects

• Accessing their personal data and verifying its accuracy;
• Requesting the rectification or erasure of the data, or the restriction of processing;
• Objecting to the processing for legitimate reasons;
• Requesting data portability;
• Revoking consent at any time (for processing based on consent), without affecting the lawfulness of processing based on consent before its withdrawal;
• Lodging a complaint with a supervisory authority (Garante per la protezione dei dati personali).

6. Changes to the Privacy Policy