Privacy notice

This notice informs you, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), which personal data we collect when you use this website or request a journey, and how we handle it.

Controller

Auto Günther des Messner Günther, owner Günther Messner

Weg zur Platte 11, 39040 Natz-Schabs / Naz-Sciaves (BZ), Italy

Phone: +39 327 881 3667

E-mail: autogunt70@gmail.com

Certified e-mail (PEC): messner.guenther@pec.it

For data protection questions and to exercise your rights, an informal message to these contact details is sufficient. No data protection officer (DPO) has been appointed; we are not legally required to do so.

What data we process

Booking form details: first and last name, e-mail address, phone number, pick-up and destination, date and time, number of passengers, chosen vehicle, requested extras (for example child seat, luggage, animals, sports equipment), flight number, optional notes, return trip details and the calculated price.

Evidence data for the request: the time you accepted this notice, IP address, browser identifier (user agent) and selected language.

Communication data: content and time of your enquiries by phone, e-mail or WhatsApp.

The fields marked as required in the form are needed to prepare a quote and carry out the journey. Without them a booking is not possible.

Purposes and legal bases

Quotation, handling and performance of the journey including confirmation e-mails: Art. 6(1)(b) GDPR (contract and pre-contractual measures).

Invoicing, bookkeeping and retention of business records: Art. 6(1)(c) GDPR in conjunction with Italian tax and commercial law, including Art. 2220 of the Civil Code.

Protecting the form against misuse and spam and evidencing the consent given (IP address, timestamp): Art. 6(1)(f) GDPR (legitimate interest in a functioning, abuse-resistant service).

Answering general enquiries by phone, e-mail or WhatsApp: Art. 6(1)(b) or (f) GDPR.

Recipients of your data

Your data is shared only as far as necessary for the purposes stated above. We use:

Website hosting (Netlify)

Database for booking requests (Supabase)

Sending confirmation and notification e-mails (Resend)

Website content management (Sanity)

Address search and route calculation (LocationIQ, openrouteservice): these requests are made by our server; your IP address is not transmitted to these providers.

Map display (OpenStreetMap Foundation): when the map in the booking form loads, your IP address and the requested map tiles are transmitted to the map service. This is technically necessary to display the map.

Tax advice and bookkeeping by our accountant

WhatsApp (Meta Platforms Ireland Ltd.), if you contact us via WhatsApp. WhatsApp's own privacy terms additionally apply to that processing.

Authorities and courts, where we are legally obliged to disclose.

Except for WhatsApp and the partner companies mentioned below, these providers act as processors on our behalf under Art. 28 GDPR and are bound by our instructions.

Passing a journey on to partner companies

If we are exceptionally unable to carry out a confirmed journey ourselves, for example due to illness or overlapping appointments, we pass the job to another private hire or taxi company. Only the details required to perform the journey are transmitted: name, phone number, pick-up and destination, time and number of passengers. The company instructed is itself responsible for its own processing. Legal basis: Art. 6(1)(b) GDPR and our legitimate interest in reliably fulfilling the booking (Art. 6(1)(f) GDPR).

Transfers outside the EU

Some of the providers listed are established or operate servers outside the European Union, in particular in the United States. Any transfer takes place solely on the basis of an adequacy decision of the European Commission (EU-US Data Privacy Framework) or the standard contractual clauses under Art. 46 GDPR.

Retention periods

Data on confirmed and completed journeys: 10 years from the end of the financial year, in line with tax and commercial retention obligations.

Requests that did not lead to a booking or were declined or not confirmed: 12 months.

Technical evidence data such as IP address and user agent: 12 months.

Communication by e-mail or WhatsApp: until your matter has been dealt with, at most 24 months, unless a longer statutory retention obligation applies.

After these periods the data is deleted or anonymised.

Cookies and storage on your device

This website uses no analytics, tracking or advertising cookies, no profiling and no social media plugins. Only technically necessary elements are used:

NEXT_LOCALE: stores the language you selected so the website is shown in that language.

Browser session storage (sessionStorage): keeps your booking form entries while the browser tab is open so they are not lost between steps. This data stays on your device and is not transmitted to us.

Under the guidelines of the Italian data protection authority, technically necessary elements do not require consent, so no cookie banner is shown.

The fonts used are served from our own server. No connection to Google Fonts is established.

Automated price calculation

The price shown in the booking form is calculated automatically from distance, travel time and our tariff. This is not an automated decision within the meaning of Art. 22 GDPR: every request is reviewed by us personally and the contract is only concluded once we expressly confirm it.

Video recording in the vehicle

No dashcams or video cameras are currently in use in our vehicles. Should this change, we will provide advance notice here and by signage in the vehicle.

Advertising and newsletter

We do not currently send a newsletter. You will only receive promotional e-mails if you have expressly consented. You can withdraw that consent at any time with effect for the future, for example by e-mail to the address above.

Your rights

You have the right to access the data held about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21).

A message to the contact details above is sufficient to exercise these rights. We reply within the statutory period of one month.

You also have the right to lodge a complaint with the supervisory authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy, e-mail garante@gpdp.it, www.garanteprivacy.it.

Changes to this privacy notice

We update this notice when our services, the providers we use or the legal requirements change. The version published on this page applies; the date of the last update is shown above.