Privacy Policy

Privacy and Personal Data Protection Policy

This notice is provided, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “GDPR”), to users of ncc.montagnin.com (the “Site”). It explains how we collect and process personal data when you browse the Site, contact us, request a quote, or use our services.

Data Controller

The Data Controller is Valter Montagnin (NCC Montagnin).

Registered office: Via G. Falcone 21, 36045, Alonte (VI), Italy.

Contact: [email protected]

Where processing takes place

Processing is carried out at the Controller’s registered office and/or at the data centers of our service providers located in the EU or, where applicable, outside the EU subject to appropriate safeguards.

Categories of data we process

  • Identity and contact data (first name, last name, email address, phone number).
  • Service-related data you provide (pickup/drop-off, itinerary, dates and times, number of passengers, notes and preferences).
  • Device and usage data (IP address, browser and device information, pages visited, timestamps).
  • Security and anti‑fraud data (reCAPTCHA token and related signals).
  • Communications content (messages you send us and our replies).

Purposes and legal bases

  • Providing the Site, responding to inquiries and quote requests, and performing pre‑contractual steps.Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR).
  • Ensuring security of the Site, preventing abuse and fraud (including the use of Google reCAPTCHA).Legitimate interests (Art. 6(1)(f) GDPR).
  • Measuring and improving the Site and our services (analytics and statistics).Consent where required (Art. 6(1)(a) GDPR).
  • Error/bug collection and diagnostics to maintain and improve service reliability.Legitimate interests (Art. 6(1)(f) GDPR).
  • Compliance with legal obligations (e.g., accounting and tax).Legal obligation (Art. 6(1)(c) GDPR).

Recipients and processors

We share personal data with trusted service providers acting as data processors, such as hosting and cloud infrastructure, email and communications, database and backup, analytics, error/bug monitoring, and IT security services.

Google services: this Site uses Google reCAPTCHA and Google Maps/Places to prevent abuse and provide mapping functionality. These services are provided by Google LLC and are subject to Google’s Privacy Policy and Terms.

All such parties process personal data under written agreements and on our documented instructions.

International transfers

Where recipients are located outside the European Economic Area (EEA), we ensure appropriate safeguards, such as adequacy decisions or the European Commission’s Standard Contractual Clauses.

Further information on transfer mechanisms is available upon request.

Data retention

Contact and quote requests: up to 24 months from the last interaction, unless a longer period is required to handle your request or defend legal claims.

Contractual and invoicing data: retained for the period imposed by applicable law (typically up to 10 years).

Server logs and security events: up to 12 months.

Analytics data: retained up to 26 months (or as otherwise configured).

Error/bug reports: up to 12 months.

Cookies and similar technologies

We use strictly necessary cookies to operate the Site. With your consent where required, we may also use analytics and measurement technologies to understand usage and improve our services.

You can manage cookie preferences via your browser settings and any consent tools provided on the Site. Google reCAPTCHA and Maps may set cookies or read device identifiers to prevent abuse.

Security measures

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and regular backups.

Your rights under the GDPR

You may exercise your rights of access, rectification, erasure, restriction, objection, and data portability under Articles 15–22 GDPR. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact: [email protected]. You also have the right to lodge a complaint with a supervisory authority; in Italy: Garante per la protezione dei dati personali (www.garanteprivacy.it).

Children

Our services are not directed to children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this notice

We may update this notice from time to time. Material changes will be posted on this page. Last updated: 29 October 2025.

NCC Montagnin