Statement of Information
Introduction
Welcome to Yestogo Chianti. Your privacy is important to us and we are committed to protecting it. This privacy policy explains how we collect, use, maintain and protect your personal data when you visit our website or use our services. We have updated this policy to be in line with the General Data Protection Regulation (GDPR) and current regulations in 2024.
Data controller
The data controller is Yestogo Chianti, based in Viale Vittorio Veneto, 55D, 50022 Greve in Chianti, FI, Italy. If you have any questions or requests regarding privacy, you can contact us by email at: info@yestogo.it
Types of data collected
- Contact information: Name, surname, address, driving licence, email address, telephone number.
- Booking information: Rental dates, type of Vespa chosen, additional options selected.
- Payment data: Information needed to process payments (e.g. credit card details).
- Browsing data: Information collected automatically when browsing our website (e.g. IP address, browser type, pages visited).
Purpose of processing
- Reservation management: To process and manage your booking requests.
- Communications: To answer your questions and provide assistance.
- Marketing: To send you promotional communications, if you have given your consent.
- Service improvement: To analyse data and improve our services and our website.
- Security: To ensure the security of our systems and prevent fraud.
Legal basis for processing
- Consent: You have given your consent to the processing of your data for one or more specific purposes.
- Performance of a contract: Processing is necessary for the performance of a contract to which you are party or for the performance of pre-contractual measures taken at your request.
- Legal obligations: The processing is necessary to fulfil a legal obligation to which we are subject.
- Legitimate interests: Processing is necessary for the pursuit of our legitimate interests, provided that your fundamental rights and freedoms do not override those interests.
Data Retention
We only retain your personal data for as long as it is necessary to fulfil the purposes for which it was collected. The criteria used to determine retention periods include:
- The duration of our relationship with you.
- The legal obligations to which we are subject.
- The need to retain data to defend or exercise our legal rights.
Data Sharing
We do not sell, rent or disclose your personal data to third parties, except in the following cases:
- Service providers: We share data with third-party service providers who help us run our business (e.g. payment processing, marketing).
- Legal obligations: We may disclose your data if required by law or to respond to legal proceedings.
- Legitimate interests: We may share data to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.
Data Security
We take appropriate security measures to protect your personal data from unauthorised access, loss, misuse, disclosure or alteration. These measures include:
- Encryption: We use encryption to protect sensitive data transmitted online.
- Access control: We restrict access to your personal data to employees, agents and service providers who need to know it to perform their duties.
- Staff training: We regularly train our staff on data security practices.
Rights of data subjects
- Access to your personal data: You can request a copy of the personal data we process about you.
- Correcting your personal data: You may request the correction of inaccurate or incomplete personal data.
- Deleting your personal data: You can request the deletion of your personal data under certain circumstances.
- Limiting processing: You may request to limit the processing of your personal data in certain circumstances.
- Objecting to processing: You may object to the processing of your personal data under certain circumstances.
- Data portability: You can request to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another data controller.
- Withdrawal of consent: You may withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent before the withdrawal.
To exercise these rights, please contact us by email at: info@yestogo.it
Amendments to this notice