G Rent Srl
Privacy policy
Information on the processing of personal data provided under Article 13 of Regulation (EU) 2016/679 (GDPR) to visitors of grent.online and to anyone who contacts G Rent about a rental.
Last updated: 15 October 2026
1. Data controller
The data controller is:
G Rent SrlVia Dorsale 13
54100 Massa (MS)
Italy
P. IVA IT 01487470450
REA MS-266085
Capitale sociale € 1.000,00
reservation@grent.online
For any question about this notice or to exercise your rights you can write to reservation@grent.online.
2. What data we process, why and on what legal basis
Registration is optional and is only needed to use the customer area. The website does not use statistical analysis or profiling tools and does not send newsletters. Online payments, when available, are made on the Viva.com payment page: G Rent neither receives nor stores card details. The processing actually carried out is as follows.
| Processing | Data | Purposes | Legal basis |
|---|---|---|---|
| Browsing and security | IP address, date and time of the request, page requested (including any search parameters in the address), browser and operating system, response codes. | Making the website available, ensuring its operation and security, preventing and detecting abuse. | Legitimate interest of the controller (Art. 6(1)(f) GDPR) in running a secure and working website. |
| Requests by email | Data you choose to include in your message: name, contact details, vehicle of interest, dates and times, destination, number of people, content of the request. | Replying, checking availability and preparing a quotation. | Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). |
| Availability and booking requests | Vehicle, pick-up and return dates and times, duration, indicative total, delivery or departure location, contact details. | Confirming availability, terms and price; concluding and managing the booking. | Pre-contractual steps and performance of the contract (Art. 6(1)(b) GDPR). |
| Contractual and administrative management | Personal details, identity document, driving licence and other data requested in the confirmation of the individual rental, billing and payment data according to the agreed method, communications relating to the contract. | Performance of the contract, accounting and tax obligations, handling of damage, fines and disputes, protection of rights in court. | Performance of the contract (Art. 6(1)(b)), legal obligations (Art. 6(1)(c)) and legitimate interest in protecting the controller's rights (Art. 6(1)(f) GDPR). |
| Customer area account | Email and password (the password is stored in encrypted form by the authentication service and is not visible to G Rent), verification codes sent by email, session data; optional data you choose to add to your profile: first name, last name, phone, date of birth, driving licence details (number, issuing authority, issue and expiry dates), billing details; list of the requests and bookings linked to your email. | Creating and protecting the account, verifying the email address, showing you your requests and bookings, preparing delivery and rental documents more quickly. | Pre-contractual steps and performance of the contract (Art. 6(1)(b) GDPR); for billing details, also legal obligations (Art. 6(1)(c) GDPR). |
| Images of the driving licence (optional) | Photos of the front and back of the driving licence that you choose to upload in the customer area. | Checking driving entitlement before the vehicle is handed over. | Performance of the contract and pre-contractual steps (Art. 6(1)(b) GDPR). The images are kept in a private, non-public archive, accessible only to you and to authorised G Rent staff, through temporary links. |
| Staff private area | Email and credentials of authorised staff, authenticated session data, access logs of the authentication service. | Allowing access to the management system only to authorised people and protecting it from unauthorised access. | Legitimate interest of the controller in the security of its systems (Art. 6(1)(f) GDPR). |
| Jetwist flight search widget | Only after you choose to open the search: IP address and technical browser data sent to the servers of Jetwist and Google Fonts; search data you enter in the widget. | Offering, at your request, the private flight search of our partner Jetwist within the website. | The widget is loaded only following an explicit action of yours (click). See section 4. |
The booking panel on the vehicle pages sends G Rent the request with the data you enter in the form; if the online service is not available, it instead prepares an email message that you can review and decide whether to send with your email program. The parameters of the home page search (for example destination and dates) appear in the page address and may therefore be recorded in the technical browsing logs.
When you open an address of the website that does not specify a language, the hosting service derives only the country of origin from the IP address, which we use at that moment to show you the Italian or English version of the website; G Rent does not keep this information. If you choose the language with the IT/EN switch, your choice is remembered with the technical cookie described in the Cookie policy.
We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.
3. Whether providing data is required
Providing browsing data is necessary to consult the website. Providing data in requests and contracts is optional, but without the necessary data we cannot reply, prepare a quotation or conclude the rental. The documents required for each vehicle are indicated in the confirmation. Registration in the customer area, the optional profile data and the images of the driving licence are not mandatory: if you do not provide them online, you can present them at handover.
4. Third-party services and links
Jetwist. The Private Jet page and the “Private Jet” tab of the home page search include the official Jetwist widget, which is not loaded automatically: on the Private Jet page it is activated only with the “Open the flight search” button, on the home page only after selecting the “Private Jet” tab. Before these actions the website makes no request to the servers of Jetwist or Google Fonts. After the click the browser downloads the script from widget.jetwist.com, contacts api-2.jetwist.com (including to record that the widget was displayed) and downloads a typeface from Google Fonts (fonts.googleapis.com and fonts.gstatic.com): these parties therefore receive the IP address and technical browser data. Searches made in the widget and any later activity on the Jetwist website are subject to Jetwist's notices, available at jetwist.com (opens in a new tab), and, for typefaces, to Google's notices.
External links. The website contains links to third-party websites, such as jetwist.com (opens in a new tab) and powermarine.it (opens in a new tab). Once opened, the notices of those websites apply; G Rent has no control over them.
5. Recipients of the data
The data are processed by authorised and instructed G Rent staff. They may also be received, to the extent necessary, by:
- Vercel Inc., provider of the website hosting, as data processor;
- Supabase Inc., provider of the authentication, database and file storage services (customer area and staff private area), as data processor;
- Aruba, provider of the email service of the mailbox reservation@grent.online, for receiving and managing messages;
- Viva.com, for online payments and the pre-authorisation of the security deposit: it receives the data necessary for the payment and processes them under its own privacy notice;
- accounting, tax and legal advisers, and banks for handling the agreed payments;
- where necessary to handle a claim, insurance companies, loss adjusters and counterparties;
- public authorities and parties to whom disclosure is required by law, for example in the case of administrative fines relating to the rental period.
Jetwist and Google receive the technical data described in section 4 only if you choose to open the flight search. The data are not disseminated.
6. Transfers outside the European Economic Area
Some of the website's providers, such as Vercel and Supabase, are based in the United States and may process data outside the European Economic Area. Any transfer of data processed on behalf of G Rent takes place in compliance with Chapter V of the GDPR, on the basis of the safeguards provided for in the agreements with the providers. The data that the browser sends to Jetwist and Google when you open the flight search are subject to the notices of those parties. You can ask for information by writing to reservation@grent.online.
7. How long we keep the data
| Data | Retention |
|---|---|
| Technical browsing logs | For the period set by the configuration of the hosting service, unless needed to establish unlawful acts or abuse. |
| Requests with no contractual follow-up | For the time needed to handle the request and the further contacts you asked for; they are then deleted. |
| Contractual data and accounting documents | For the duration of the relationship and, for accounting records and documents, for ten years as required by Article 2220 of the Italian Civil Code; longer only if necessary for an ongoing dispute. |
| Customer area account and profile data | As long as the account remains active; data linked to requests and bookings follow the periods set for contractual data and for legal obligations. The retention criteria after the account is closed will be defined by G Rent's retention policy; you can request deletion by writing to reservation@grent.online. |
| Images of the driving licence | For the time needed for checks and for managing rentals. You can delete them at any time from the customer area, except where retention is necessary for contractual or legal obligations; the exact periods will be defined by G Rent's retention policy. |
| Staff private area account | As long as the person is authorised to access the management system; the session ends on sign-out. |
8. Your rights
In the cases provided for by Articles 15-22 GDPR you can request at any time:
- access to your data and a copy of it;
- the rectification of inaccurate data or the completion of incomplete data;
- the erasure of your data or the restriction of processing;
- the portability of the data you have provided to us, for processing based on the contract;
- to object to processing based on legitimate interest, on grounds relating to your particular situation (Article 21 GDPR).
To exercise them write to reservation@grent.online. We will reply without undue delay and, as a rule, within one month.
9. Complaint to the supervisory authority
If you believe that the processing infringes the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Article 77 GDPR), Piazza Venezia 11, 00187 Rome, in the manner indicated at garanteprivacy.it (opens in a new tab), or with the authority of the Member State in which you live or work.
10. Changes
We will update this notice when the processing changes, for example when online payments or new services are activated. The date of the last update is shown at the top. Information on cookies: Cookie policy.