Discover monthly offers
Drivalia - Planet Mobility
Home
Rent Lease Subscribe Share

Privacy Policy

WEBSITE
REGISTRATION
SERVICE
CONTACT REQUEST

PRIVACY SITO WEB

GENERAL INTRODUCTION

This Policy aims to describe the management methods of the Drivalia S.p.A. website. (hereinafter, “Drivalia”), in reference to the processing of personal data of users who consult it.

This information is provided pursuant to the EU Regulation on the protection of personal data, no. 2016/679 and current Italian legislation on privacy to those who interact with the web services of Drivalia S.p.A. starting from the address www.drivalia.com, corresponding to the home page of the Drivalia website. The information is provided only for the Drivalia website and not for other websites that may be consulted by the user via links.

1. DATA CONTROLLER

The Data Controller is Drivalia S.p.A., with registered office in Turin, Corso Orbassano 367, VAT number 05406791003.

2. TYPE OF DATA PROCESSED

2.1) Data provided voluntarily by the user

You have the right, after reading the specific information, to release your personal data on the site to access certain freely chosen products and/or services. On the basis of your consent, your personal data will be processed for the purposes of activating the product and/or service freely chosen by you. The provision of any consent requested is optional and, in the absence of the same, it will not be possible to proceed with the carrying out of the activities. You have the right to revoke at any time the consent previously given with reference to the purposes possibly described using the methods indicated in the following point 6).

The treatments will always take place:

  • in full compliance with existing legislation, on the basis of the information provided and in a fair and transparent manner;

  • collecting a minimum number of Data and in any case collecting only the Data necessary for the services covered by the contract;

  • in a precise and updated manner;

  • retaining the Data only for the time necessary to carry out the services covered by the contract.

2.2) Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses, browser type, operating system, domain name and website addresses from which access was made or exited, information on the pages visited by users within the site, access time, permanence on a single page, internal path analysis and other parameters relating to the operating system and the user's IT environment. Such technical/IT data are collected and used in an aggregate and anonymous manner for the sole purpose of:

  • improve the quality of the service and optimize the functionality of the site;
  • understand user behavior in order to improve online communication;
  • prepare statistical information regarding the use of the site.

This data can also be used:

  • to fulfill the requirements dictated by national regulations and communicate as well as provisions issued by Supervisory and Control Bodies, also in relation to the monitoring obligations of operational and credit risks at Banking Group level as well as to ascertain responsibility in the event of hypothetical crimes computer systems to the detriment of the site and for investigations in the event of any disputes.

  • The provision of the data described above is necessary for browsing the website, and any refusal to provide them will make it impossible to carry out this activity. The data provided will be processed for the time necessary to carry out the operations described here. This site uses technical and analytical cookies to allow correct use of the site and improve your browsing experience. To find out more, know the cookies used and possibly disable them, access the Cookie Policy.

2.3) Marketing and promotion

Furthermore, on the basis of your consent, on the pages dedicated to the collection of your personal data, your personal data will be processed for the following purposes:

a) receive promotions regarding the various types of Drivalia S.p.A. products.

This processing includes traditional and unconventional marketing activities, commercial information, sending of advertising material or carrying out market research, direct sales activities or interactive commercial communications on products, services and other activities of the Data Controller, and refers to any product already active at the time of subscription or activated in the future.

The provision of data is optional and failure to consent for such processing jeopardizes the performance of the activities described above. You have the right to revoke the consent previously given at any time with reference to the purposes referred to in this paragraph using the methods indicated in point 6).

The data provided will be processed for 36 (thirty-six) months from their provision and will subsequently be anonymized or eliminated.

b) receive only the promotions that best match your preferences and habits.

This processing includes the analysis of personal data collected in order to evaluate and predict certain personal aspects including economic situation, preferences, interests, behavior, location or movements to limit promotional activities to products or promotions only similar based on the analyzes previously carried out.

The provision of data is optional and failure to consent to such processing jeopardizes the performance of the activities described above.

You have the right to revoke the consent previously given at any time with reference to the purposes referred to in this paragraph using the methods indicated in point 6).

The data provided will be processed for 12 (twelve) months from their provision and will subsequently be anonymized or eliminated.

c) receive commercial promotions relating to products and services offered by other companies.

This processing includes the communication of personal data to partner companies of CA Auto Bank - including, by way of example and not limited to, vehicle manufacturing and sales companies, third parties and/or other companies of the CA Auto Bank Group and the Crédit Agricole Group - for traditional and unconventional marketing purposes, commercial information, sending advertising material or carrying out market research, direct sales activities or interactive commercial communications on products, services and other activities regarding products of subjects third parties.

The provision of data is optional and failure to consent to such processing jeopardizes the performance of the activities described above.

You have the right to revoke at any time the consent previously given with reference to the purposes referred to in this paragraph using the methods indicated in point 6)

The data provided will be processed for 36 (thirty-six) months from their provision and will subsequently be anonymized or eliminated.

3. RECIPIENTS OF PERSONAL DATA

For the different purposes described so far, the Data Controller may communicate your data, always in compliance with the rights and guarantees provided for by current legislation, to:

  • companies of the Drivalia Group or in any case associated or controlled companies;
  • companies of the CA Auto Bank Group or and of the Crédit Agricole Group;
  • vehicle manufacturing and vehicle sales companies;
  • your dealer or sales representative, in his capacity as an entity affiliated with the Owner;
  • supervisory and control authorities and bodies and in general subjects, public or private, with public-related functions, Tax Registry, Judicial Authority and police forces;
  • insurance companies for claims management;
  • subjects who carry out data acquisition, processing and processing services necessary for the execution of the instructions received from customers;
  • automotive registration agencies and public offices responsible for vehicle registration;
  • entities that provide services for the management of the information system and telecommunications networks (including e-mail);
  • subjects who carry out transmission, enveloping, transport and sorting of communications with the interested party;
  • subjects who carry out documentation archiving and data entry activities;
  • subjects who carry out customer assistance activities (e.g. call centers, customer services, etc.);
  • management company of national and international systems for fraud control - firms or companies in the context of assistance and consultancy relationships;
  • subjects who carry out debt collection activities;
  • subjects who carry out promotion and sales activities of the Owner's products/services;
  • subjects who carry out investigative and/or market research activities aimed at monitoring the level of quality of the services provided;
  • subjects who carry out control activities (such as, by way of example and not limited to, control and/or fight against terrorism activities) also on behalf of the parent company CA Auto Bank, review and certification of the activities carried out by the Bank also in the interest of customers;
  • subjects to whom the Owner delegates the recovery of the vehicle in the event of default by the Customer. Where requested, the indicated subjects will be appropriately appointed as Data Controllers in the forms required by current legislation.

4. METHODS OF TREATMENT

The data processing is carried out using automated and/or manual methods for the time strictly necessary to achieve the purposes for which the data are collected, in compliance with the relevant regulations in force. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. The provision of personal data by minors under 16 is also expressly prohibited.

5. DATA PROTECTION OFFICER

For any direct contact - formal and urgent, other than the exercise of the rights provided for in paragraph 6) - you may contact the Data Protection Officer via the following contact details:

Email: dpo-italia@drivalia.com

6. EXERCISEABLE RIGHTS

In relation to the processing of personal data listed above, you may request:

  • confirmation of whether or not personal data concerning you is being processed and, in this case, to obtain access to the personal data as well as the origin of such data, the purposes, methods of processing and the logic applied in the event of processing carried out with the aid of electronic instruments;

  • the updating, integration, rectification, cancellation or transformation into anonymous form of personal data concerning you;

  • to limit or oppose the processing of personal data concerning you;

  • to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning you or the transmission of the same to another data controller (so-called right to portability);

  • certification that the requested operations have been brought to the attention of those to whom the data were communicated or disseminated.

You have the right to exercise your rights by contacting Drivalia S.p.A. Customer Care. at the following addresses:

Email: cs@drivalia.com

The Data Controller will respond to your requests within 30 (thirty) days of receipt, subject to an extension of 60 (sixty) days, taking into account their complexity and number; once the deadlines indicated above have expired, you have the right to lodge a complaint with the Guarantor Authority for the Protection of Personal Data in the forms and methods provided for by current legislation.

7. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Your data will not be transferred by us to a third country outside the EU or to an international organisation, except in exceptional and strictly necessary cases. If necessary, for technical or operational reasons, the same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, for which there is a specific adequacy decision by the European Commission. Any transfers of your personal data to non-EU countries, in the absence of an adequacy decision from the European Commission, will be possible only if adequate guarantees of a contractual or contractual nature are provided by the Data Controllers and Managers involved, including standard contractual data protection clauses, or for brevity “SCC”.

Drivalia may make changes to this policy and it is the user's responsibility to check it on a regular basis.