Privacy Policy
Information on the processing of personal data pursuant to GDPR (EU Reg. 2016/679)
Last updated: 05/07/2026
This notice describes how Dipaola Viaggi S.R.L. collects, processes and protects the personal data of users who browse the website or use the airport transfer services.
1. Data Controller
DIPAOLA VIAGGI S.R.L.
Piazza Arigò, 1 – 98044 San Filippo del Mela (ME)
info@autonoleggiodipaola.com
090 9391520
VAT no. 03369700830
2. Types of data collected
When browsing the website or using the services, the following personal data may be collected:
- Personal and contact details: first name, last name, email, phone number
- Payment data: transaction-related data (card details are not stored)
- Travel data: timetables, stops, stated preferences
- Browsing data: IP address, browser type, access times, technical or profiling cookies subject to prior consent
- Minors' data (school shuttle service): name, school and stop of the transported minor
Data relating to the transported minor are provided by the parent/guardian making the booking, who warrants that they hold parental responsibility/guardianship and is responsible for the accuracy of such data.
3. Purposes of processing
Personal data are processed for the following purposes:
- Managing bookings for the shuttle service to and from Catania Airport
- Service-related communications (timetable changes, delays, confirmations, customer support)
- Compliance with legal obligations (invoicing, accounting)
- Direct marketing, subject to explicit consent
- Statistical analysis in aggregate form to improve the service
4. Legal basis for processing
Processing is based on:
- Contract — for the management of bookings
- Legal obligation — for tax and accounting purposes
- Explicit consent — for marketing purposes and profiling cookies
5. Processing methods
Data are processed electronically and in paper form. Appropriate security measures are in place to protect data against unauthorised access, loss or destruction, in accordance with the technical and organisational requirements of the GDPR.
6. Data retention
| Purpose | Retention period |
|---|---|
| Contractual and fiscal purposes | 10 years |
| Marketing purposes | Until consent is withdrawn, max 24 months |
| Security and access logs | 12 months |
7. Disclosure to third parties and transfer outside the EU
Data may be disclosed exclusively to the following parties, acting as external data processors or independent controllers for their respective purposes:
- IT service providers and hosting (Vercel Inc.)
- Delera / HighLevel Inc. — CRM and automation platform used to manage contacts, service-related communications (including the school shuttle service) and internal notifications
- Google Ireland Ltd — for Google Analytics 4 and Google Tag Manager (traffic analysis, campaign measurement, server-side tracking via Measurement Protocol)
- E-commerce booking partner (booking.autonoleggiodipaola.com) — sends Enhanced Ecommerce events to our GTM container autonomously
- Tax and accounting consultants
- Competent authorities for legal compliance purposes
Transfer of data outside the EU: US providers (Google and Delera/HighLevel Inc.) may transfer data to the United States. The transfer is governed by Standard Contractual Clauses (SCC) approved by the European Commission and, where applicable, adherence to the EU-U.S. Data Privacy Framework, mechanisms that ensure an adequate level of protection pursuant to Articles 45-46 GDPR.
8. Your rights
At any time you may exercise the rights provided for by Articles 15–22 of the GDPR:
- Access to data
- Rectification
- Erasure
- Restriction
- Portability
- Withdrawal of consent
To exercise your rights, write to info@autonoleggiodipaola.com or contact us on 090 9391520. We will respond within 30 days of receiving your request.
9. Cookie Policy
The website uses technically necessary cookies and, subject to explicit consent, third-party cookies for analytical or advertising purposes. For more details, please refer to our Cookie Policy.
10. Changes to this notice
This privacy notice may be updated following regulatory or organisational changes. Users will be informed via a notice on the website. The updated version is always available on the dedicated page.
Current version: 05/07/2026
