PRIVACY NOTICE
Privacy and Cookie Policy
This notice explains how NEXA Experiences processes the personal data of people who visit the website and request a quote, in accordance with Regulation (EU) 2016/679 (GDPR) and D.Lgs. 196/2003.
1. Data controller
NEXA EXPERIENCES DI CANGIALOSI GIUSEPPE, registered office at Via Luigi Cosenz 32, 90145 Palermo (PA). VAT no. (P.IVA) IT07431550826, REA 458348. Email: info@nexaexperiences.com. No Data Protection Officer (DPO) has been appointed, as this is not mandatory for our business.
2. Data collected
Through the quote request form we collect: first name, last name, email, phone number, pick-up and return dates, delivery location, vehicle of interest, optional services, any notes and the website language in use. The servers hosting the website record technical browsing data (IP address, browser type, pages requested) solely for security and proper operation. The website does not use analytics or profiling tools.
3. Purposes of processing
We use the data to respond to the quote request, organise the rental and delivery of the vehicle, manage any contract, comply with legal obligations and protect the website from abuse. We do not send promotional communications without separate and specific consent. We do not take decisions based solely on automated processing.
4. Legal basis and nature of the provision of data
Processing is based on the performance of pre-contractual measures requested by the data subject (art. 6.1.b GDPR), on legal obligations (art. 6.1.c) and on our legitimate interest in the security of the website (art. 6.1.f). The data marked as mandatory in the form are needed to prepare the quote: without them we cannot respond to the request.
5. Data retention
Data from quote requests are kept for 24 months from the last contact. Data relating to a contract and to invoicing are kept for 10 years, as required by law. Technical browsing data are kept by the hosting provider for the period strictly necessary for security. Once these periods have expired, the data are deleted or anonymised.
6. Recipients of the data
Data may be disclosed to the third parties responsible for providing and delivering the vehicle, solely to fulfil the customer's specific request, and to the technical providers that help us manage the website and emails, who are appointed as data processors (art. 28 GDPR). Data are not sold or used for the commercial purposes of third parties.
7. Technical providers
The website uses Vercel Inc. for hosting: the quote request form is processed on servers in the European Union (Frankfurt). The form emails are sent via Resend, which stores data in the EU region (Ireland). The info@nexaexperiences.com mailbox is provided by Register.it S.p.A. (Italy). If you choose to write to us on WhatsApp using the website buttons, the conversation goes through the WhatsApp service (Meta group), which processes the data as an independent controller in accordance with its own privacy notice; the website does not load any WhatsApp components until you open the link. Each provider has its own privacy policy, available on its website.
8. Transfers outside the European Union
The request form is processed on servers in the European Union (Frankfurt), and Resend stores email data in the EU region (Ireland). However, Vercel Inc. and Resend are companies based in the United States: some data, for example technical browsing data or data processed for support and security purposes, may therefore be processed outside the European Union. The transfer takes place on the basis of the EU-U.S. Data Privacy Framework, for certified providers, or of the standard contractual clauses approved by the European Commission.
9. Security
The website uses encrypted connections only (HTTPS). Access to the requests received is limited to the people who need to handle them.
10. Rights of the data subject
You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest. Write to info@nexaexperiences.com: we reply within one month. You may also lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority, www.garanteprivacy.it).
11. Cookies and browser storage
The website uses only technical tools necessary for its operation: a first-party technical cookie, NEXT_LOCALE, which remembers the website language and is deleted when you close the browser, and an item of data saved in your browser (localStorage) with the choice you made on the cookie banner, so that it is not shown to you again on every visit. We do not use analytics cookies, profiling cookies or third-party cookies for advertising purposes. You can delete this data at any time from your browser settings. If we introduce different tools in the future, we will update this notice and ask for your consent where required.
12. Changes to this notice
We may update this notice. Changes are published on this page together with the date of the last update.
Last updated: 26 October 2026