Privacy policy

Last Modified: 8 April 2026
Date of entry into force: 29 May 2025

This notice describes how Mobilitas S.r.l., with registered and operational headquarters at Via Vigone 55a, 10139 Turin (Italy), email info@mobilitasrent.com, phone +39 338 469 1484, as Data Controller, collects, uses, stores and protects the personal data of users of the sitewww.mobilitasrent.comand customers who interact with the services offered by Mobilitas, in accordance with Regulation (EU) 2016/679 (“GDPR”).

This notice applies to the processing of personal data collected:

during browsing on the site;
through contact forms, requests for information or quotes;
during the booking and purchase of rentals, experiences, events, gift cards, vouchers and gift boxes;
during the management of the customer relationship, including assistance, payments, invoicing and communications;
for marketing purposes, where specific consent has been given;
through cookies and tracking tools, as described in the relevant Cookie Policy.

Data Controller

The Data Controller is:

Mobilitas S.r.l.
Via Vigone 55a
10139 Turin (Italy)
Email: info@mobilitasrent.com
Phone: +39 338 469 1484

Categories of personal data processed

Mobilitas may collect and process, depending on the service requested, the following categories of personal data:

identifying data, such as first name and surname;
contact data, such as email address and phone number;
data related to the booking or requested service;
data necessary for the organisation of the service, such as the number of participants, heights of participants, departure location, delivery address or useful information for the provision of the service;
billing data and administrative-accounting data, where necessary;
data related to payments, managed through authorised third-party providers, such asStripe;
data voluntarily provided by the user via email, WhatsApp, forms or support requests;
browsing data and technical data, such as IP address, type of device, browser, operating system, pages visited, time spent, interactions with the site and data collected through cookies or similar tools;
data related to marketing consent and communication preferences.

Mobilitas does not intentionally collect special categories of personal data under Article 9 of the GDPR, except as may be voluntarily communicated by the user and strictly necessary for the management of the requested service.

Purposes of processing and legal bases

Personal data are processed for the following purposes.

a) Management of contact requests, information and quotes

To respond to requests sent via the website, email, WhatsApp or other contact channels.

Legal basis: execution of pre-contractual measures adopted at the request of the data subject.

b) Management of bookings, rentals, experiences, events and ancillary services

To confirm, organise, provide and manage the requested services, including e-bike rentals, experiences, events, tastings, gift cards, vouchers, gift boxes and ancillary services.

Legal basis: execution of a contract or pre-contractual measures.

c) Management of payments, accounting and tax and administrative obligations

To collect payments, manage invoices, receipts, accounting documentation and obligations required by applicable law.

Legal basis: execution of the contract and compliance with legal obligations.

d) Management of customer assistance, complaints and operational communications

To send confirmations, updates, useful information related to the booked service, as well as to manage assistance requests and complaints.

Legal basis: execution of the contract, pre-contractual measures and the legitimate interest of the Data Controller in the proper management of the relationship with the customer.

e) Sending promotional communications and newsletters

To send newsletters, commercial offers, updates on events, promotions and initiatives from Mobilitas.

Legal basis: consent of the data subject, where required by applicable law.

The user may revoke consent at any time, without affecting the lawfulness of the processing carried out before the revocation.

f) Statistical analysis and improvement of the website and campaigns

To analyse the use of the site, measure the performance of campaigns and improve services, user experience and the effectiveness of communications.

Legal basis:

legitimate interest of the Data Controller, for activities strictly necessary for the security, technical functioning and management of the site;
user consent, where required for cookies, pixels or non-technical tracking tools.

Nature of data provision

The provision of personal data requested for:

information requests;
bookings;
payment management;
invoicing;
service organisation;

is necessary to allow Mobilitas to respond to the user, conclude the contract or properly provide the requested service.

Failure to provide the necessary data may result in the inability to provide the service, confirm the booking or comply with legal obligations.

The provision of data for marketing purposes is instead optional. Failure to consent does not affect the ability to browse the site or use Mobilitas services in any way.

Processing methods

The processing of personal data takes place using paper, computer and telematic tools, according to principles of lawfulness, fairness, transparency, minimisation, integrity and confidentiality.

Mobilitas adopts appropriate technical and organisational measures to protect personal data from unauthorised access, loss, disclosure, alteration or destruction.

Recipients of personal data

Personal data may be communicated, within the limits of the purposes indicated above, to the following categories of subjects:

IT service providers, hosting and website management;
payment service providers, such as Stripe;
tax, accounting, legal or administrative consultants;
suppliers or partners involved in the provision of the booked service, where necessary;
email, newsletter, communication or customer management service providers, where used;
providers of analysis and marketing tools, within the limits of any consent given;
public authorities or entities authorised to receive the data under the law.

These subjects act, depending on the case, as data processors, independent controllers or authorised persons.

Transfer of data to third countries

Some technical, payment, analysis or marketing providers used by Mobilitas may process personal data outside the European Economic Area.

In such cases, the processing will be carried out in compliance with applicable regulations and by adopting appropriate safeguards, such as adequacy decisions from the European Commission, standard contractual clauses or other instruments provided for by the GDPR.

Data retention period

Personal data are retained for the time strictly necessary to achieve the purposes for which they were collected and, subsequently, for the period required by applicable regulations or necessary to protect the rights of the Controller.

In particular:

data relating to contact requests, information or quotes may be retained for up to 24 monthsfrom the last interaction, unless there is a different obligation or need for protection;
data relating to bookings, services provided, contractual relationships and administrative documentation may be retained for the time necessary to manage the relationship and, subsequently, for the applicable legal terms;
tax, accounting and billing data are retained for 10 years, as required by current legislation;
data processed for marketing purposes are retained until the withdrawal of consentor the request to object, unless there is a different need for documentation of the consent given;
data collected through cookies and tracking tools are retained as indicated in the Cookie Policy and in the settings of the respective tools.

Rights of the data subject

The data subject may exercise at any time the rights granted by Articles 15 and following of the GDPR, including:

obtaining confirmation of the existence or non-existence of personal data concerning them;
accessing their personal data;
requesting the rectification of inaccurate data or the completion of incomplete data;
requesting the deletion of data in cases provided for by law;
requesting the restriction of processing;
objecting to processing, in cases provided for by legislation;
receiving data in a structured, commonly used and machine-readable format, in cases of portability;
withdraw consent at any time, where the processing is based on consent;
file a complaint with the Data Protection Authority.

To exercise your rights, you can write to: info@mobilitasrent.com

Complaint to the Supervisory Authority

The data subject has the right to file a complaint with the Data Protection Authority, according to the procedures indicated on the Authority's official website.

Cookies and tracking tools

The site uses cookies and tracking tools for technical, statistical purposes and, with consent, for marketing and measurement.

For more information on the types of cookies used, their purposes, the parties involved, and how to manage preferences, please consult ourCookie Policy.

Changes to this notice

This notice may be updated over time, also in consideration of regulatory, technical or organisational changes.

The updated version will be published on this page with the indication of the last update date.

Contacts

For questions, requests or reports regarding this privacy notice, you can contact: