Privacy and cookie policy

Last updated 4 October 2026

Who handles your data

Data controller: CARSERVICE NCC di Carlo Scarpato (impresa individuale) · Viale delle Rose 9, 80040 San Sebastiano al Vesuvio (NA) · P.IVA 08285501212 · REA NA-945775 · info@scarpatoncctravel.com · +39 348 065 7464. For any privacy question write to info@scarpatoncctravel.com.

What data we collect

Browsing data: like every website, the server automatically records technical data (IP address, date and time, page requested, browser type) to run the site and protect it from abuse.
Data from the «Check availability» form: service, pick-up, drop-off, date, time, number of passengers, name, phone, email (optional) and any notes you write.
Direct messages: if you contact us via WhatsApp, Telegram, phone or email, the data contained in your message.

Why, and on what legal basis

We use your data only to reply to your request, check availability and organise the service (pre-contractual measures and contract, Art. 6(1)(b) GDPR); to keep the site secure (legitimate interest, Art. 6(1)(f)); and to meet legal obligations such as tax rules if the service takes place (Art. 6(1)(c)). No marketing, no profiling, no selling or sharing of data.

Who receives it

Only the technical providers we need: Vercel Inc. (website hosting, USA, participates in the EU-U.S. Data Privacy Framework — privacy); Web3Forms (forwards the form to our email — privacy; data may pass outside the European Union); our email provider (IONOS); TomTom International B.V. (Netherlands — privacy) and, only if TomTom does not respond, Photon / komoot (Germany, OpenStreetMap data): they only receive the text you type in the «Pick-up» and «Drop-off» fields to suggest addresses and accommodation — nothing is sent unless you type in those fields. If you choose to message us on WhatsApp or Telegram, their rules also apply.

How long we keep it

Requests that do not turn into a booking are deleted within 12 months. Data about services provided is kept for the period required by Italian tax law (10 years). Technical logs are kept by the hosting provider for the period set out in its terms.

Cookies and similar tools

This site uses no profiling cookies, no statistics or analytics, and loads no third-party content: fonts, photos and videos are served from our own domain. Your browser only stores the language you chose (local storage), a technical tool that needs no consent — which is why there is no cookie banner. Links to Instagram, Facebook, Tripadvisor, Telegram and WhatsApp open external sites with their own rules.

Your rights

You can ask at any time to access, correct or delete your data, restrict its use, receive it in a readable format, or object to its processing (Arts. 15-22 GDPR) by writing to info@scarpatoncctravel.com. You can also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.