Privacy Policy

Privacy and Personal Data Protection Policy

This notice is provided, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “GDPR”), to users of ncc.montagnin.com (the “Site”). It explains how we collect and process personal data when you browse the Site, contact us, request a quote, or use our services.

Data Controller

The Data Controller is Valter Montagnin (NCC Montagnin).

Registered office: Via G. Falcone 21, 36045, Alonte (VI), Italy.

Contact: info@ncc.montagnin.com

Where processing takes place

Processing is carried out at the Controller’s registered office and/or at the data centers of our service providers located in the EU or, where applicable, outside the EU subject to appropriate safeguards.

Categories of data we process

  • Identity and contact data (first name, last name, email address, phone number).
  • Service-related data you provide (pickup/drop-off, itinerary, dates and times, number of passengers, notes and preferences).
  • Device and usage data (IP address, browser and device information, pages visited, timestamps).
  • Security and anti‑fraud data (reCAPTCHA token and related signals).
  • Communications content (messages you send us and our replies).

Purposes and legal bases

  • Providing the Site, responding to inquiries and quote requests, and performing pre‑contractual steps.Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR).
  • Ensuring security of the Site, preventing abuse and fraud (including the use of Google reCAPTCHA).Legitimate interests (Art. 6(1)(f) GDPR).
  • Measuring and improving the Site and our services (analytics and statistics).Consent where required (Art. 6(1)(a) GDPR).
  • Error/bug collection and diagnostics to maintain and improve service reliability.Legitimate interests (Art. 6(1)(f) GDPR).
  • Compliance with legal obligations (e.g., accounting and tax).Legal obligation (Art. 6(1)(c) GDPR).

Recipients and processors

We share personal data with trusted service providers acting as data processors, such as hosting and cloud infrastructure, email and communications, database and backup, analytics, error/bug monitoring, and IT security services.

Google services: this Site uses Google reCAPTCHA and Google Maps/Places to prevent abuse and provide mapping functionality. These services are provided by Google LLC and are subject to Google’s Privacy Policy and Terms.

All such parties process personal data under written agreements and on our documented instructions.

International transfers

Where recipients are located outside the European Economic Area (EEA), we ensure appropriate safeguards, such as adequacy decisions or the European Commission’s Standard Contractual Clauses.

Further information on transfer mechanisms is available upon request.

Data retention

Contact and quote requests: up to 24 months from the last interaction, unless a longer period is required to handle your request or defend legal claims.

Contractual and invoicing data: retained for the period imposed by applicable law (typically up to 10 years).

Server logs and security events: up to 12 months.

Analytics data: retained up to 26 months (or as otherwise configured).

Error/bug reports: up to 12 months.

Cookies and similar technologies

We use strictly necessary technologies to operate the Site, secure our forms, and deliver the functions you request. These technologies do not require separate consent when they are genuinely necessary for security or for providing the service you actively use.

Google reCAPTCHA is used to protect forms against abuse and spam. Google Maps or Places may be loaded where needed to show our location or support map and location-related features of the Site.

We use PostHog analytics only with your consent. If you accept analytics, we may measure page views and key interactions to improve the Site. If you reject analytics, PostHog remains disabled.

You can review or change your analytics preference at any time through the cookie preferences link available on the Site.

Security measures

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and regular backups.

Your rights under the GDPR

You may exercise your rights of access, rectification, erasure, restriction, objection, and data portability under Articles 15–22 GDPR. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact: info@ncc.montagnin.com. You also have the right to lodge a complaint with a supervisory authority; in Italy: Garante per la protezione dei dati personali (www.garanteprivacy.it).

Children

Our services are not directed to children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this notice

We may update this notice from time to time. Material changes will be posted on this page. Last updated: 29 October 2025.