Privacy Policy

Dear Customer,

The data controller is Leasys Rent SpA (above the “Controller”), with registered office in Bolzano, Corso Italia 17,  VAT n. 05406791003.

As described in the following sections, your data (above “The data”) will be processed for  the following  macro purposes:

A)  performance and management of the contractual relation;

B) geolocation activities;

C) caring and marketing activities.


A) Performance and management of the contractual relation 

The data collected during the investigation, the signing of the contract and during the contractual relationship with Leasys Rent SpA will be processed for purposes strictly connected and required for the performance of the pre-contractual and / or contractual relationship, to protect the rights of the Data Controller as well as to comply with legal and regulatory obligations imposed by authorities legitimated by law, by Supervision bodies and Controlling bodies.  

In the preliminary phase, Leasys Rent S.p.A. reserves the right to carry out checks and verifications on Data provided by you within the limits permitted by law, also through the use of public databases to which the FCA Bank S.p.A. Group has access. 
In the event of a negative outcome of the verification described above, it will not be possible to provide the requested rental service.

In order to prevent the risk of fraud and identity theft, the Data Controller is also authorized to request from its parent company FCA Bank SpA, by virtue of a mandate given to it and in order to check the documentation presented by you, to interrogate SCIPAFI, Identity Theft Fraud Protection System owned by the Ministry of Economy of Finance (MEF), managed by Consap SpA having its registered office in Rome, via Yser 14, and to make use of information legitimately held by FCA Bank S.p.A. for the same purpose.

The data required for the purposes referred to in this point are necessary for the conclusion of the contract, and any refusal to supply them makes it impossible to carry out the activities needed for the conclusion and performance of the contract.

In addition, such data may be used for administrative and management purposes, such as reporting, control and/or internal audit activities, study activities for the development of new products, as well as for the management of complaints, claims and accidents, for activities aimed at improving products and/or services already distributed on the legal basis of legitimate interest.

The data provided will be processed as strictly necessary for the contractual purposes, in accordance with the principle of proportionality and the requirements of the relevant legislation on the protection of personal data  and, the data collected will be processed for up to 10 (ten) years from the date of conclusion of the contract, subject to compliance with the timing provided for by law and subject to the different retention terms provided for in the Contract, by other indication of the Data Controller, by law or by sector legislation.


The data collected is acquired by Leasys Rent SpA (the Data Controller) and by the Data Processors in the phase of subscription or request for the services offered. In particular by way of example, through:

▪      the websites managed by Leasys Rent SpA 
▪      phone calls made by customers directly to Leasys Rent SpA’s reservation department and/or assistance phone lines 
▪      the filling of rental agreements issued in the Leasys Rent’s national and international circuits
▪      the filling of subscription forms for the Leasys Rent loyalty programs
▪      websites and booking software used by Italian and international travel agencies
▪      written statements and / or reports related to claims and / or injuries connected with the rentals 
▪      communications from other companies linked to the Leasys Rent by commercial agreements for the purpose of promoting and selling the services of the Data Controller.

B) Geolocation activity

Leasys Rent S.p.A’s fleet’s vehicles are equipped with satellite anti-theft devices which can geolocalize the movement of the vehicle.

The processing of geolocation data is carried out by Leasys Rent S.p.A. to verify successfully the vehicle tracking requests in the event of theft, loss and/or misappropriation of the vehicle, , for the fulfillment of the related legal obligations (such as the obligation to return the vehicle within the Italian territory), for the protection of rights in court, as well as for the protection of company assets (for example in case the vehicle is not returned on the agreed deadline, the geolocation will be activated).

Furthermore, in order to protect the safety of drivers in the event of an accident, the Data Controller will process the data of geolocation, acquiring the elements useful for the reconstruction of any claims reported by the Customer and / or by the counterparty insurance company, to locate and recover the rented vehicle and for the reconstruction of any accident.

C)  Caring and Marketing activities

Leasys Rent S.p.A., based on the needs assessed on a case-by-case basis and after balancing the activity with the rights and freedoms of the interested, reserves the right to carry out "Caring" activities (meaning, by way offor example, transparency improvement activities on products for which the Customer has already subscribed a contract, communication activities and information to the Customer on the advantages he could obtain with respect to the type of contract that has already signed etc ...) by sending useful documentation to the Customer, who will always be free to exercise the rights mentioned in point H) of this Notice.

Without prejudice to the activities referred to in the previous purposes of legitimate interest referred to in point C) that do not require the subject to the consent of the interested party, personal data will be processed, subject to your consent, for the following purpose:

1. To receive promotions regarding the various range of Leasys Rent products.

The processing includes traditional and unconventional marketing activities, telemarketing, commercial information, sending of advertising material or for market research, direct sales activities or interactive commercial communications about products, services and other activities of the Controller, and it refers to any product already activated at the time of subscription or activated at a later stage.

The transmission of data is optional and the lack of consent for such treatment prejudices the performance of the activities described above.

The customer has the right to revoke at any time the consent previously given with reference to the purposes referred to in this paragraph through the methods indicated under letter H).

The data collected will be retained for 36 (thirty-six) months from their acquisition or after the conclusion of the contractual relationship and will be subsequently anonymized or eliminated.


2. To receive only promotions closest to your preferences and habits.

The processing includes the analysis of personal data collected in order to evaluate and predict certain personal aspects, including economic situation, health, personal preferences, interests, behaviour, location or movements, in order to limit promotional activities to only related products or promotions based on the analysis previously carried out.

The transmission of data is optional and the lack of consent for such treatment prejudices the performance of the activities described above.

The customer has the right to revoke at any time the consent previously given with reference to the purposes referred to in this paragraph through the methods indicated under letter H).

The data collected will be retained for 12 (twelve) months from their acquisition  or from  the conclusion of the contractual relationship and will be subsequently anonymized or eliminated.


3. To receive commercial promotions regarding products and services offered by others companies

The processing includes the communication of personal data to partner companies of the Controller - including, as example and not limited to, third parties and / or other companies of the Leasys Group, of the FCA Bank S.p.A. group, Crédit Agricole Group SpA, Stellantis Group, Jaguar Land Rover Italia S.p.A, as well as to your car dealer or sales representative and / or manufacturer-  for purpose of traditional and unconventional marketing activities, telemarketing, commercial information, sending of advertising material or for market research, direct sales activities or interactive commercial communications about products, services and other activities of third parties.

The transmission of data is optional and the lack of consent for such treatment prejudices the performance of the activities described above.

The customer has the right to revoke at any time the consent previously given with reference to the purposes referred to in this paragraph through the methods indicated under letter H).

The data collected for the activities referred to in this paragraph,  will be retained for 36 (thirty-six) months from their acquisition  or from  the conclusion of the contractual relationship and will be subsequently anonymized or eliminated.


D) Type of data processed 

Leasys Rent SpA in the activity of car rental without driver, collects tehe following data relating to its customers for the purpose of completing the Rental Agreement:

1. name, surname, address, telephone and fax number, e-mail address, place and date of birth, driving license details, fiscal code.

2. name of the company for which the customer works, employee number and / or employee identification number.

3. information relating to possible memberships in companies, associations, loyalty programs for the purpose of applying the agreed rates.

4. information regarding the date and time of collection and return of the rental vehicle, flight number and the name of the used airline.

5. information relating to consumer surveys and/or regarding past and current solvency of the company for which the customer works.

6. information relating to accidents occurring during the rental (also regarding the data of any counterparties,  public security authorities and / or others involved in various ways.

7. Data relating to the vehicle geolocation exclusively within the limits set forth in paragraph B) of the this document 


E) Recipients of the personal data

For the different purposes described above, in compliance with the rights and guarantees provided for by the current legislation, the Data Controller may communicate customer data to: 

• companies of the Leasys S.p.A. group, or in any case subsidiaries or associated companies;
• companies in the FCA Bank, FCA and Crédit Agricole group;
• car dealer or reference sales person, as affiliated with the Controller;
• supervisory and control authorities bodies and in general subjects, public or private, with important public enforcement functions; Tax Registry, Judicial Authority and police forces;
• insurance companies for the management of accident claims;
• entities who perform acquisition and data processing services necessary for the execution of the provitions received from customers;
• agencies operating in the automotive sector and public offices competent for the registration of vehicles;
• entities engaged in providing services for the management of the information system and telecommunications networks (including e-mail);
• entities engaged in the transmission, enveloping, transport and handling of communications with the involved;
• entities engaged in filling of documentation and data entry;
• entities engaged in customer assistance activities (eg: call centers, customer services, etc.);
• companies managing national and international systems for fraud control; studies or companies in the field of assistance and consultancy relationships;
• entities engaged in debt collection activities;
• entities engaged in activities of promotion and sale of products / services of the Data Controller;
• entities in charge of control, revision and certification of the company activities also for the interests of customers.
• entities to whom the Owner delegates the recovery of the vehicle in case of default by the Customer.

 If necessary, the indicated entities will be appropriately appointed as Data Processors in accordance to the current legislation.

Leasys Rent S.p.A. may share aggregated or anonymized information within and outside the Leasys Group and FCA Bank S.p.A., with partners such as research groups, universities or advertisers.

Your Data can be aggregated into anonymous statistics which can be offered to professionals for assist them in developing their business. In this case, your personal data will never be disclosed and whoever receives these anonymous statistics will not be able to identify you.


F) Data Processing Rules

The processing of data for each of the aforementioned purposes will be performed through automated and telematic means, and in particular, by ordinary or electronic mail, telephone (also through automated calls, SMS, MMS etc.), fax and any other IT channel (eg websites, mobile apps) and on paper.


G) Data Protection Officer

For any direct - formal and urgent contact, other than the rights provided for by paragraph H) – the customer can contact the Data Protection Officer through the following contact:
• Email: leasysrent-italia-dataprotectionofficer@fcagroup.com;


H) Rights of data subjects

In relation to the processing of personal data listed above the customer has the right at any time to request:

• the confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and to be informed of their contents and origin, the purposes of the processing,  meaningful information about the logic involved in case of processing by electronic means;
• the integration, updating, rectification, erasure, anonymisation of personal data that have been processed;
• to block or refuse the personal data processing;
• to receive the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller (so-called right to data portability);
• the attestation that the requested operatons  have been forwarded and communicated to each recipient to whom the personal data have been disclosed;
You are entitled to exercise your rights by contacting the Customer Care of Leasys Rent S.p.A. at the following email address: privacy@leasysrent.it;

The data controller shall reply to your request within 30 (thirty) days from receipt unless this period is extended by 60 (sixty) days, taking into account the complexity and number of requests; once the aforementioned terms have expired you have the right to make a complaint with the  Data Protection  Authority in the forms and methods provided for by the current legislation.


I) Transfer of data outside the European Economic Space

Your data will not be transferred to a third country outside the EU or to an international organization, if not in exceptional and strictly necessary cases.

If necessary, for technical or operational reasons, the same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, for which it exists specific adequacy decision of the European Commission. Any transfers of your data personal to non-EU countries, in the absence of an adequacy decision by the European Commission, will be possible only if adequate guarantees of a nature are provided by the Owners and Managers involved contractual or agreement, including standard contractual clauses of data protection. The transfer of His Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be carried out only where strictly necessary and in cases and according to the procedures established by the GDPR.


L) Updates to this notice

In case of change or as a result of any updates or modifications, this Information is provided through periodic communications or can be found on the website in the appropriate section dedicated to the protection of personal data and at your request.