Privacy policy

1. Data controller

The controller is V.M. Service S.r.l., single-member limited liability company, registered office at Via San Rocco 11/A, 40122 Bologna (BO), VAT/tax code 03369591205, REA BO-513940. Contact: info@pinbo.it; certified email vmservicesrl@legalmail.it.

2. Data processed

We process identity and contact details, booking data, licence plate and vehicle type, garage, dates and times, customer communications, administrative information, payment status and technical data required for security. With consent, Google Analytics 4 processes website usage data; Google Maps receives technical data when a map is opened; the Meta Pixel measures advertising events without receiving the name, email, phone or licence plate entered in the form. Full payment credentials are entered directly in Stripe Checkout. For Garage San Rocco we also process the request for a ZTL permit linked to the licence plate and parking period.

3. Purposes and legal bases

• booking and parking service: pre-contractual measures and contract;
• support, changes, cancellations, refunds and disputes: contract and legitimate interest;
• tax, accounting and legal duties: legal obligation;
• security and abuse prevention: legitimate interest;
• Analytics, Maps and advertising measurement: consent, which can be withdrawn at any time;
• San Rocco ZTL authorisation: performance of the contract.

Required fields are necessary to manage the booking.

4. Recipients

Data may be processed by authorised personnel and suppliers for hosting, booking storage, the OpenAI website platform, n8n automation, Aruba email, Stripe payments, Google services and Meta advertising measurement, under the roles required by data-protection law. For the collection and transmission of Meta Pixel data, the controller and Meta Platforms Ireland Ltd act as joint controllers under Article 26 GDPR. When a San Rocco ZTL permit is requested, the licence plate and parking period are communicated to the City of Bologna, acting as an independent controller.

5. Transfers outside the EEA

Where a supplier processes data outside the European Economic Area, the controller relies on the safeguards allowed by the GDPR, including adequacy decisions, the EU–US Data Privacy Framework where applicable, or standard contractual clauses.

6. Retention

• unconfirmed requests: up to 12 months, unless required for legal defence;
• completed bookings and contractual records: for the service and up to 10 years where required by tax, accounting or legal rules;
• technical and security logs: normally no more than 30 days, unless an anomaly requires longer retention;
• consent preferences: six months; Analytics and Meta data according to their configured retention periods.

7. Your rights

You may request access, correction, deletion, restriction, portability where applicable, object to processing and withdraw consent. Write to info@pinbo.it or the certified email above. You may also complain to the Italian Data Protection Authority.

8. Automated decisions and governing text

Booking data is not used for solely automated decisions producing legal or similarly significant effects. This translation is provided for convenience; in case of conflict, the Italian version prevails.