Privacy notice

Data controller

The data controller is Salvatore Fadda, individual promoter of the Bosa in Scooter project. Privacy contact: info@bosainscooter.it.

Data, purposes and lawful bases

For validation we collect requested period, scooter quantity, age range, 50cc/125cc preference, stay location, origin macro-region and whether the licence has been held for more than five years. We do not ask for a name, exact age, address or documents. An optional notes field is available with a 500-character limit and must not contain sensitive data.

Responses are designed not to identify a person directly and are used to measure demand, seasonality and product fit. Any technical data strictly required for security and operation is processed under the controller's legitimate interests, GDPR Article 6(1)(f), following a necessity and balancing assessment.

If you voluntarily request contact, we collect your email on the basis of consent under Article 6(1)(a). Consent is separate, optional and withdrawable. If you later make a specific availability or information request, necessary data may be processed to take pre-contractual steps at your request under Article 6(1)(b).

Required and optional data

The fields without direct identifiers and confirmation that the notice was read are required to submit a response. Notes, contact, email and related consent are always optional. Without contact, the form does not display or submit an email address.

Recipients and providers

The provider responsible for receiving and storing responses has not yet been selected. The form will not be enabled in production until the provider, processing location, privacy role and any safeguards for international transfers have been verified and included in this notice.

Transfers outside the EEA

No international transfers through the form will take place until the actual processing location and applicable safeguards have been verified and described in the preceding section. If the provider processes data outside the European Economic Area, this notice will state the safeguards that actually apply.

Retention and deletion

Raw responses are used for market research and undergo a documented necessity review at least every 24 months. If an individual record is no longer necessary, it is erased or converted into genuinely anonymous aggregate data. Irreversibly anonymous statistics may be retained without a fixed end date.

Email addresses are kept only while needed to communicate service availability or until consent is withdrawn. Necessity is reviewed at least every 24 months; if the purpose is no longer current, the email is erased or renewed consent is requested. The absence of an erasure request does not justify unlimited retention.

Rights and withdrawal

You may request access, rectification, erasure, restriction, objection and, where applicable, portability. You may withdraw contact consent at any time by writing to the controller; withdrawal does not affect processing carried out lawfully before withdrawal.

You may lodge a complaint with the Italian Data Protection Authority. Responses without an email do not contain direct identifiers, but dates, locations, timestamps or notes may still make them personal data. If there is not enough information to locate one, a request concerning an individual response may not be technically actionable.

Cookies and analytics

The site does not install third-party analytics or non-essential cookies. Only technical data necessary for operation and security may exist. Before any non-essential tool is introduced, this notice must be updated and a valid user choice collected where required.

Updates

This notice must be updated whenever the controller, contacts, providers, purposes, lawful bases, retention periods or tracking technologies change. Organisational review: August 2026.