Last updated: 31 August 2026
This privacy notice describes how AbruzzoRental processes the personal data of visitors and users of the website abruzzorental.it, pursuant to Regulation (EU) 2016/679 (the “GDPR”). AbruzzoRental provides film and cinema equipment rental services in Abruzzo: the website is a showcase featuring an equipment catalogue and a quote request system.
1. Data Controller
The Data Controller is:
AbruzzoRental — Pietro Calvarese — sole trader, Via San Luca 60, 67058 San Benedetto dei Marsi (AQ) — P.IVA 02216040663
Contact email: abruzzo.cine.rental@gmail.com
For any matter relating to the processing of personal data, you may write to the email address indicated above.
2. Categories of data processed and sources
We process only the data that users provide to us directly through the website, together with certain technical data generated automatically whilst browsing.
2.1 Data provided voluntarily by the user
- Quote request form: name, email, telephone number, company/production, type of production, location, rental period, notes and requested items.
- Contact form: name, email and message text.
- Client area registration: first name, surname, email, company (optional) and password (stored in protected form).
- Professional profile (optional): role, biography, city, website, specialities, own equipment and past work, together with the files the user chooses to upload: the profile photograph and the curriculum vitae (PDF or image). The CV is not published on the website: it can be consulted only by the Data Controller, who uses it to assess the profile and to put the professional forward to productions looking for those skills. The photograph may be displayed on the profile card. Uploaded files are stored in the website’s media area and remain reachable via their direct address, which is neither published nor indexed. All of these data are optional and may be amended or removed at any time from the client area.
2.2 Browsing data and technical data
- IP address: used for security purposes (limiting the frequency of form submissions, known as rate limiting) and processed technically by the servers that deliver the website and its associated services (hosting and Google Fonts, see sections 4 and 7).
- Visit statistics: we collect website usage statistics without cookies and without storing the IP address, linked to a pseudonymous code that changes every day: page-visit counts and interaction events (e.g. quote-builder opens, clicks on categories/contacts, scroll depth and time on page) and the approximate geographic area (country/region/city, estimated from the connection address via a local database, without ever storing the IP address), using a non-identifying code that changes every day. These data do not make it possible to identify any individual visitor and are not used for profiling. Geolocation is estimated entirely on our servers using the free DB-IP Lite database (IP Geolocation by DB-IP, CC BY 4.0 licence); no data is sent to third parties.
- Quotes in progress: when a visitor builds a quote with the online quote builder, the content of that quote is recorded on our servers even if it is never sent: items selected, quantities, unit price, estimated total, rental days, language, device type and approximate geographic area (country, region, city). The record is linked to the same daily pseudonymous code described above, contains neither the IP address nor any contact details, and is used to understand which equipment is requested most often and at which point quotes are abandoned. If the visitor empties the quote, the record is deleted immediately; in any event it is automatically erased after 120 days. Legal basis: the legitimate interest of the Data Controller in measuring and improving the operation of the website (Art. 6(1)(f) GDPR).
- Technical cookies and localStorage: described in section 7.
All data are collected directly from the data subject: we do not obtain data from third-party sources.
3. Purposes of processing and legal bases
- Responding to quote requests and contact messages. Legal basis: taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
- Creating and managing the client area account and the professional profile, and providing the service. Legal basis: performance of a contract to which the data subject is party (Art. 6(1)(b) GDPR).
- Website security and spam prevention, by limiting the frequency of submissions per IP address (rate limiting) and through invisible anti-bot trap fields (honeypots). Legal basis: the legitimate interest of the Data Controller in protecting the website from abuse (Art. 6(1)(f) GDPR).
Provision of the data requested in the forms is necessary in order to act on the request: without it, we will be unable to respond to the quote request or activate the account. The professional profile data, by contrast, are entirely optional.
We do not carry out marketing activities, newsletters, profiling or automated decision-making. The website does not handle online payments.
4. Recipients of the data
The data are neither sold nor disclosed to the public. They may be accessed only by:
- Aruba S.p.A. — the website’s hosting provider, with servers located in Italy (European Union), acting as data processor.
- Google Ireland Ltd — emails generated by the website (for example, notifications of quote requests) are sent via the Google/Gmail SMTP service; in the course of providing that service, Google may process the data contained in the communications. Google also provides the Google Fonts service (see section 7).
- Couriers and shipping companies — for rentals that are shipped, within Italy or abroad, we share with the appointed courier only the data needed for pick-up and delivery: name or company name, address, phone number and contact email where applicable. The courier processes this data as an independent controller, for the performance of the transport.
- Any authorised persons acting on behalf of the Data Controller, duly instructed.
5. Transfers to countries outside the EU
For rentals shipped to countries outside the European Union, the data shown on the waybill is shared with the courier and with the customs authorities of the destination country only to the extent necessary for the performance of the contract (Art. 49(1)(b) GDPR).
6. Retention period
- Quote requests and contact messages: for the time necessary to handle the request and the related business relationship, after which they are deleted or anonymised.
- Client area account and professional profile: until the account is deleted by the user (deletion may be requested at any time, including by email).
- Technical security data (IP rate limiting): for the short period strictly necessary for the anti-spam function.
- Visit statistics: kept in aggregate form; the non-reversible daily identifiers can no longer be linked to any visitor from the following day.
- Quotes in progress that are never sent: kept for a maximum of 120 days, then automatically deleted. They are erased immediately if the visitor empties the quote.
7. Cookies and similar technologies
The website uses technical cookies only, which are necessary for its operation and for which the GDPR and the ePrivacy rules do not require consent. We do not use profiling, marketing or analytics cookies.
7.1 Technical cookies
- wordpress_* — session and authentication cookies for the WordPress client area.
- wp-settings-* — WordPress technical cookies for usage preferences in the restricted area.
7.2 Technical localStorage
The browser stores locally (in localStorage) certain purely technical preferences, which never leave the user’s device:
- ar_dark — dark theme preference.
- ar_qb_cart and ar_qb_days — items and duration selected in the quote builder.
- ar_cookie_consent — record of the choice made in the cookie banner.
7.3 Google Fonts
The pages of the website load typefaces via the Google Fonts service from Google’s CDN: whilst browsing, the visitor’s IP address therefore reaches Google’s servers, and Google acts in accordance with its own terms and its own privacy policy. Google does not receive any other data identifying the visitor from our systems.
Images
All images on this site are hosted directly on our own servers: loading them involves no request to any external provider and installs no cookies.
8. Rights of the data subject
Pursuant to Articles 15-22 of the GDPR, users have the right to:
- access their personal data and obtain a copy thereof;
- rectify inaccurate or incomplete data;
- obtain the erasure of their data (the “right to be forgotten”), in the cases provided for;
- restrict processing, in the cases provided for;
- receive their data in a structured format and transmit them to another controller (data portability);
- object to processing based on legitimate interest.
To exercise these rights, simply send an email to abruzzo.cine.rental@gmail.com, stating your request and a contact address for the reply. We will respond without undue delay and in any event within one month, as provided for by Art. 12 GDPR.
9. Complaints to the Supervisory Authority
If users consider that the processing of their data infringes the GDPR, they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), or with the supervisory authority of the EU Member State in which they reside or work, without prejudice to any other administrative or judicial remedy.
10. Updates to this privacy notice
This privacy notice may be updated to reflect regulatory changes or changes in the processing carried out. The updated version is always published on this page, together with the date of the last update. In the event of substantial changes, we will give notice of them on the website.