Privacy Policy

My Positano Private Car ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.mypositanoprivatecar.it (the "Site"), use our services, or otherwise interact with us.

Data Controller

For any privacy-related requests (access, correction, deletion, etc.), contact us using the details above.

Legal Basis and Scope

This Policy complies with the EU General Data Protection Regulation (GDPR) 2016/679, Italian Legislative Decree 196/2003 (as amended), and other applicable data protection laws.

We process personal data only when necessary, minimizing collection and using anonymized data where possible. We do not collect or process "special categories" of sensitive data (e.g., health, political opinions).

Types of Data Collected

Navigation Data (Automatically Collected)

During Site use, we collect technical data via Internet protocols, such as:

• IP address (anonymized where possible)
• Browser type, device info, OS, language, time zone
• Usage data (pages visited, timestamps, referral sources)

These are used solely for Site functionality, security, and anonymous analytics. Logs are retained for 12 months max, unless needed for legal investigations.

User-Provided Data

Data you voluntarily submit, e.g., via contact forms or emails:

• Name, email, phone, address, booking details
• Requests or messages

You are responsible for any third-party data you share (e.g., travel companions). We process it only to respond to your requests.

Cookies and Similar Technologies

We use essential cookies for Site functionality (session cookies, deleted on browser close). No personal data is stored in cookies.

Third-party cookies (analytics/marketing) require consent. Manage preferences via our Cookie Banner. See our Cookie Policy for details.

Third-Party Services

We integrate trusted providers. Data shared is subject to their policies and your privacy settings:

• Google Analytics (IP Anonymized): Usage analytics. Location: USA (EU-US Data Privacy Framework). Privacy Policy
• Google Tag Manager: Script management. Location: USA. Privacy Policy
• TripAdvisor Widget: Reviews/recommendations. Location: USA. Privacy Policy
• Google Ads Remarketing: Targeted ads. Location: USA. Privacy Policy

Transfers outside EU use Standard Contractual Clauses or adequacy decisions.

Purposes of Processing

Data is processed for:

• Service provision (e.g., bookings, inquiries) – Legal basis: Contract/legitimate interest
• Site security and analytics – Legal basis: Legitimate interest
• Marketing (newsletters, promotions) – Legal basis: Consent
• Legal compliance – Legal basis: Legal obligation

Data Retention

Data is kept only as long as needed:

• Contractual Duration of relationship + 10 years (legal/statute of limitations)
• Analytics: 14-26 months
• Marketing: Until consent withdrawal

Afterwards, data is deleted or anonymized.

Your Rights

Under GDPR, you have rights to:

• Access, rectify, erase ("right to be forgotten"), restrict processing
• Object to processing (including profiling)
• Data portability
• Withdraw consent anytime (no effect on prior processing)
• Lodge complaints with the Italian Data Protection Authority (www.garanteprivacy.it)

Exercise rights by emailing us. Response within 1 month (extendable).

Data Security and Sharing

We use technical/organizational measures (encryption, access controls) to protect data. Shared only with:

• Authorized staff/processors (e.g., hosting, legal advisors)
• Authorities if required by law

Full processor list available on request.

Changes to This Policy

We may update this Policy. Changes are posted here with the new "Last updated" date. Continued Site use constitutes acceptance.

Last updated: February 23, 2026