EU Regulation 2016/679 (GDPR) · Art. 13
Privacy and cookie policy
Last updated: 19 October 2026
This notice describes the processing of personal data of users who visit the site flee-to.com e interact with FleeTO S.r.l. via the contact details and features available on the website.
This notice applies exclusively to this site and not to third-party sites that may be accessible via external links.
1. Data controller
| Controller | FleeTO S.r.l. |
| Registered office | Via Chambery 79/11, 10142 Torino (TO) |
| VAT no. / Tax code | IT13130920013 / 13130920013 |
| Phone | +39 011 99 630 90 |
| Privacy email | privacy@flee-to.com |
| Certified email (PEC) | fleetosrl@pec.it |
For inquiries regarding the processing of personal data and to exercise your rights, you may write to privacy@flee-to.com.
2. Data we process
The site contains a single form, “Request a reservation,” which collects the following types of data:
- identification and contact details: first name*, surname*, email*, telephone*, company or organization (optional);
- details of the requested service: departure location*, arrival location*, date*, time*, number of passengers*, service type (optional), preferred vehicle (optional), notes (optional);
- consent: acknowledgment of the privacy notice*, including the date and time of acceptance;
- technical data recorded upon submission: IP address, browser type and operating system (user agent), page language, page from which the request was sent and initial entry page, referring site (referrer), any campaign parameters (UTM), screen dimensions, time taken to complete the form, and date and time of submission.
Fields marked with * are mandatory. The form does not use cookies; anti-spam protection relies on a hidden field and the IP address, which is stored in encrypted form for a few seconds.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Handling your request: contacting you, providing information and a quote, organising and confirming the service. | Performance of pre-contractual measures and of the contract (Art. 6(1)(b)) |
| Sending you an acknowledgement email with a summary of your request. | Performance of pre-contractual measures (Art. 6(1)(b)) |
| Keeping the website secure and preventing abuse, automated submissions and spam (technical data). | Legitimate interest of the controller (Art. 6(1)(f)) |
| Understanding, without profiling, through which channels clients reach us (referrer and UTM parameters). | Legitimate interest of the controller (Art. 6(1)(f)) |
| Complying with accounting, tax and other legal obligations relating to the services provided. | Legal obligation (Art. 6(1)(c)) |
| Establishing, exercising or defending legal claims. | Legitimate interest of the controller (Art. 6(1)(f)) |
The data are not retained longer than necessary for the purposes for which they were collected, subject to any retention obligations and the need to protect rights.
4. Nature of the provision of data
Providing the data required to handle a request is necessary to ensure an appropriate response. Failure to provide essential information may prevent FleeTO from responding or carrying out the requested activity.
Providing data for promotional purposes, where applicable, is optional. A refusal to provide consent does not affect the ability to browse the site or request information.
5. Processing methods and recipients
The data are processed using electronic and, where necessary, paper-based means, with measures appropriate for their protection.
Your data is processed by the controller’s authorised and trained staff and may be disclosed to:
- technology service providers appointed as data processors (Art. 28 GDPR):
- website hosting: Register.it S.p.A.;
- email service: Teseo Informatica S.r.l.;
- chauffeurs and private hire (NCC) partners engaged to carry out the service, limited to the data they need (name, phone number, places and times);
- tax and legal advisers, for compliance with legal obligations;
- public authorities, where required by law.
Your data is not published or transferred to third parties for their own purposes.
6. Transfers outside the European Economic Area
The email service is provided by Teseo Informatica S.r.l. on servers located in Italy; the website is hosted by Register.it S.p.A. on servers located in the European Union. Should a provider process data outside the European Economic Area, the transfer will take place only on the basis of a European Commission adequacy decision (for example the EU-U.S. Data Privacy Framework) or standard contractual clauses (Art. 46 GDPR).
7. Rights of the data subject
In the cases and within the limits provided for by applicable law, the data subject may request access to their data, as well as their rectification, erasure, restriction of processing, and portability, and may also object to the processing.
When processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal.
Request can be sent to privacy@flee-to.com or via certified email (PEC) to the address fleetosrl@pec.it
The data subject may also lodge a complaint with the Data Protection Authority.
8. Cookies and similar technologies
This website does not use cookies: no technical, profiling or third-party cookies, and no advertising tools. Fonts and images are hosted on our own server, so browsing the website does not involve connections to third-party services.
To know how many people visit the website and where they come from, we count visits with an in-house system, without cookies and without external services: we record the page viewed, the referring website or campaign (for example a search engine or an ad), the device type (smartphone, tablet or computer) and clicks on the contact buttons (phone, WhatsApp, email, form submission). Your IP address is not stored: an irreversibly computed technical fingerprint, which changes every day, is only used to avoid counting the same visit twice on the same day and does not allow us to identify you or follow you over time. These are aggregate statistics, viewed only by the controller, not shared with third parties and deleted after 25 months; for this reason, under the Garante’s Guidelines, they do not require consent.
The anti-spam protection of the booking form does not use cookies: it relies on your IP address, stored in hashed form for a few seconds. This is why the website does not display a cookie banner (Art. 122 of the Italian Privacy Code and the Garante’s Guidelines of 10 June 2021).
The restricted area used by the controller’s staff to update the website content uses technical authentication cookies, set only for users who log in.
9. Updates and amendments to the policy
This notice may be updated and/or modified as a result of changes to services, processing activities, or applicable regulations. The updated version will be published on this page, along with the relevant date.