1. Data controller
SCF LUXURY S.R.L., VAT no. 06458120489, is the controller of personal data collected through this website to manage the car rental service. You can contact us at luxuryrent@scf.group or +39 342 016 7368. This policy explains how data is processed when you browse, search for a vehicle, book and request assistance, under Regulation (EU) 2016/679 (GDPR).
2. Data we process
We process contact details entered when booking or provided to customer service, rental details, delivery and return dates and locations, selected services, and booking and payment status. Technical systems may process IP addresses, browser and device information, and security logs. Addresses entered for delivery are sent to the address lookup service. Card details are entered in the payment provider’s checkout rather than this website’s forms.
3. Purposes and legal bases
We use data to answer enquiries, issue offers and manage bookings, payments, delivery and support, based on pre-contractual steps and performance of the contract (GDPR Article 6(1)(b)). Administrative and tax obligations and lawful authority requests are based on legal obligations (Article 6(1)(c)). Website security, abuse prevention, error diagnosis and protecting our rights are based on legitimate interests (Article 6(1)(f)), balanced against individuals’ rights. Data requested for the service is necessary: without it we may be unable to complete your request. Booking does not subscribe you to promotional communications.
4. Service providers and recipients
Data is accessible to authorised staff and providers needed for the service: Vercel infrastructure and hosting, the ROP booking management platform, Google Places for address lookup, Viva for payments, and transactional email providers used by the booking platform. Sentry receives filtered technical diagnostics to reduce personal data. Providers act as processors or independent controllers depending on the service and their respective roles. Data may also be shared with advisers and authorities when necessary for legal obligations or protecting rights. We do not sell personal data.
5. International transfers and security
Some providers may process data outside the European Economic Area. Where required, transfers are subject to GDPR safeguards, such as adequacy decisions or standard contractual clauses and relevant supplementary measures. You can request information about applicable safeguards using the contact details provided. We apply technical and organisational measures proportionate to risk, including HTTPS connections, access controls and protected booking links. Keep personal access links private; no transmission or storage system can guarantee absolute security.
6. Data retention
We retain data for as long as needed to handle your request and contractual relationship, meet legal obligations and protect rights within applicable limitation periods. Accounting documents subject to the ordinary retention obligation are kept for ten years, subject to further obligations or disputes. Technical data is retained according to security and diagnostic needs and the settings of the relevant services. Cookie and browser storage lifetimes are described below; they do not determine how long booking records are retained in management systems.
7. Cookies and browser storage
The website uses functional cookies for preferences and bookings. scf-language and scf-currency remember language and currency for one year. scf-distribution-session and cookies prefixed scf-booking-attempt- support booking continuity and recovery for up to 30 days; cookies prefixed scf-offer-access- retain offer access until the relevant expiry, within a 30-day limit. The localStorage entry scf-booking-v2 stores an unconfirmed search, including dates, locations, selected addresses and technical result receipts; it does not contain customer contact details or credentials for a started booking. It may remain until confirmation or deletion of site data. You can delete or block this data in your browser settings; some features and recovery may become unavailable. The website does not integrate advertising cookies or marketing profiling; the external checkout applies its own policy.
8. Your rights
Where provided by the GDPR, you may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests. You may withdraw any consent without affecting earlier processing. Write to luxuryrent@scf.group: we normally respond within one month, subject to permitted extensions for complex requests. We may request information strictly necessary to verify your identity. You may complain to the Italian Data Protection Authority (www.garanteprivacy.it) or the competent supervisory authority in your country.
9. Policy updates
This policy may be updated to reflect changes to services or legislation. The current version is available on this page with its update date. For material changes, we will provide any further notices required by law.
Customer service and contact details
For information, booking support, cancellation requests or questions about your data, contact SCF Luxury. Include your booking reference where necessary, without sending payment card details.
SCF LUXURY S.R.L.luxuryrent@scf.group
+39 342 016 7368