Privacy policy

This notice explains how NCC ROMA processes the personal data of visitors to https://noleggioncc.com and of anyone requesting a chauffeur (NCC) service, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and the Italian Data Protection Code (Legislative Decree 196/2003).

1. Data controller

• Controller: NCC ROMA
• Registered office: Roma, Italy
• Phone: +393453255325
• Privacy contact: info@noleggioncc.com

For any question about your data or to exercise your rights, write to the email address above.

2. What data we process

Data you give us when booking

• Identification and contact details: name and surname, email, phone number (also used for SMS and WhatsApp), preferred language.
• Trip details: pick-up and drop-off addresses, dates and times, flight, ship or train number, number of passengers, luggage and extras requested (for example child seats), name for the welcome sign, notes for the driver.
• Payment details: chosen method and payment status. If you pay online, card details are entered directly on Stripe's secure page and are never received or stored by us.
• Billing details, if you ask for an invoice.
• Data about other people (for example other passengers or the person to be met): enter them only after informing them of this notice.

Device location

Only if you tap the "Use my location" button will your browser, after asking your permission, send the device coordinates to the site to fill in the pick-up address. Your location is not tracked over time: the coordinates are saved only as part of the booking address and are not kept longer than needed to handle it. You can always type the address yourself.

Browsing and security data

The systems running the site record some technical data (IP address, browser type, pages requested, date and time). With the booking request we also save the IP address and the time you accepted this notice and the terms, as proof of consent and to prevent abuse.

Special needs

We do not ask for health data. If you tell us about special needs in the notes (for example reduced mobility or a wheelchair), we use this information only to arrange the service accordingly, based on the explicit consent you give by entering it.

3. Purposes and legal bases

4. Whether providing data is mandatory

Name, contact details and trip details are required to handle the booking: without them we cannot provide the service. The flight, ship or train number is optional but lets us adjust the pick-up time in case of delay. Consent to offers and promotions is optional and does not affect the service.

5. How we process data

Data is processed electronically by authorised and trained staff, who access it with personal credentials and only as needed for their tasks. The site uses an encrypted connection (HTTPS), login passwords are stored in non-reversible form and the credentials of connected services are encrypted.

6. Who we share data with

• Drivers, employees or contractors assigned to the service, who receive only the data needed for the ride (name, phone, route, times, sign, notes).
• Authorised administrative staff.
• Providers processing data on our behalf as data processors (Art. 28 GDPR): website hosting and maintenance, email and messaging services.
• Active messaging services: email service provider.
• Map and address search services: Photon (Komoot, dati OpenStreetMap), OSRM (dati OpenStreetMap), CARTO (dati OpenStreetMap).
• Advisers (for example accountants and lawyers) and public authorities, where required by law.
• Other licensed chauffeur companies, only if needed to guarantee the service when we are unavailable, after informing you.

Data is not published or sold to third parties.

7. Transfers outside the European Union

Some providers (for example for payments, messaging or statistics) may process data outside the European Economic Area, in particular in the United States. In these cases the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework for participating companies) or on the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR). You can ask us for information on the safeguards in place.

8. How long we keep data

• Booking data and service messages: for as long as needed to perform the service and handle any requests or disputes, generally up to 24 months after the last booking.
• Tax and accounting records (receipts, invoices and related data): 10 years, as required by Article 2220 of the Italian Civil Code and tax rules.
• Data for offers and promotions: until you withdraw consent.
• Location coordinates: only as part of the booking address, with the same retention.
• Technical and security logs: up to 18 months.
• In case of legal proceedings, for their whole duration and until the time limits for appeal expire.

9. Your rights

At any time you can exercise the rights under Articles 15 to 22 GDPR:

• access to your data and a copy of it;
• rectification of inaccurate or incomplete data;
• erasure, when the data is no longer needed or the processing is unlawful;
• restriction of processing;
• portability of the data you provided, in a commonly used format;
• objection to processing based on legitimate interest and, always, to promotional messages;
• withdrawal of consent, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise them, write to info@noleggioncc.com. We will reply without undue delay and in any case within one month, which may be extended by two months for complex requests.

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

10. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you (Art. 22 GDPR). The online quote applies the published fares automatically, but every request can be reviewed by our staff.

11. Minors

Bookings must be made by an adult. Data about minors is processed only when provided by the adult making the booking, to arrange the trip (for example for child seats).

12. Changes to this notice

We may update this notice, for example following changes in the law or in the services we use. The updated version is always published on this page with the date of the last update.

Last updated: 15 September 2026