Privacy Policy

This notice provides you with information regarding the personal data processed by LEGACY MOTORS and the purposes for which such data is processed. It also outlines important details concerning data protection, including your rights.

A. Data Controller

The data controller responsible for processing your personal data is Legacy Motors S.r.l., Piazza Giuseppe Grandi 7, 20129 Milan (MI), Italy (hereinafter also “LEGACY MOTORS”).

For any questions regarding data protection, you may contact us at any time at: Email: info@legacymotors.it

B. Categories of Personal Data

We may process the following categories of personal data in relation to our services:

• Identification data: e.g. name, surname, address (private and/or business), date of birth

• Contact data: e.g. phone number, email address, communication content (emails, letters, etc.)

• Contractual data: e.g. rental details (vehicle category, pick-up and return dates and locations, additional services), contract number, booking number, driver’s license data and image, vehicle license plate, loyalty programs

• Financial data: e.g. credit card details

• Voluntarily provided data: e.g. preferences regarding vehicles or services

• Special categories of data: in case of accidents or damages (including health-related data where applicable)

• Third-party data: e.g. data of additional drivers or passengers

• Location data: when using the LEGACY MOTORS app or connected vehicles

C. Legal Basis for Data Processing

Processing is carried out in accordance with:

• Art. 6(1)(a) GDPR – Consent

• Art. 6(1)(b) GDPR – Contractual necessity

• Art. 6(1)(c) GDPR – Legal obligations

• Art. 6(1)(f) GDPR – Legitimate interests

• Art. 9(2)(f) GDPR – Legal claims (including health data where necessary)

D. Purposes of Data Processing

1. Vehicle Booking and Rental

We process personal data to:

• manage bookings and rental contracts

• provide customer support

• handle payments and billing

• prevent fraud and ensure security

• verify identity and creditworthiness

2. Marketing and Direct Marketing

We process data to:

• maintain customer relationships

• improve services and offers

• organize customer events

You may object to marketing at any time via:
info@legacymotors.it

3. Corporate Clients / Third-Party Payments

If a rental is paid by an employer or third party, relevant data may be shared with them for billing and contractual purposes.

4. Damages, Accidents, and Fines

We process data to:

• handle claims and damages

• manage accident assistance

• comply with legal obligations

• enforce contractual rights

5. Connected Vehicles

Certain vehicles may collect:

• location data

• vehicle status data (speed, sensors, safety systems)

These are used for:

• rental management

• fraud prevention

• accident and damage analysis

6. Legal Obligations

We process data to comply with legal and regulatory requirements, including accounting and tax obligations.

​

7. Process Optimization and Service Improvement

Data may be used to:

• improve operational efficiency

• analyze customer satisfaction

• optimize services and digital presence

8. Events

We may process contact data to invite you to events related to customer engagement.

​

9. Cookies

Our website uses cookies to:

• improve functionality

• optimize user experience

Cookies do not execute programs or contain viruses.

​

E. Data Transfers to Third Countries

Data may be transferred outside the European Economic Area where necessary. Such transfers are carried out in compliance with GDPR requirements (e.g. adequacy decisions or appropriate safeguards).

​

F. Data Retention

Personal data is retained:

• for the duration necessary to fulfill its purpose

• up to 10 years where required by law (e.g. accounting records)

• customer accounts may be deleted after 6 years of inactivity

G. Data Subject Rights

You have the right to:

• Access your data (Art. 15 GDPR)

• Rectify inaccurate data (Art. 16 GDPR)

• Erase data (Art. 17 GDPR)

• Restrict processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Object to processing (Art. 21 GDPR)

• Withdraw consent at any time

Right to Lodge a Complaint

You may lodge a complaint with:

Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
Piazza di Monte Citorio, 121
00186 Rome, Italy