What happens to your data.

This is an English translation provided for convenience. The legally binding text is the Italian version.

1. Who processes the data

DP Automotive & D.C. Auto is a shared trading name used by two separate sole proprietorships, not a single company. On these pages you will find the contact details of both, and each of them is the data controller for the contacts that reach its own details: if you call or write to a number or an address, your data is processed by the business that number or address belongs to. The first is:

Business name

DP Automotive di Bessi Pierluigi

Legal form

sole proprietorship

Registered office

Località Torricella, 29122 Piacenza (PC)

VAT number

01785960335

REA number

PC-191238

Certified email (PEC)

bessi-auto@pec.it

Phone

+39 320 486 9364 — Pierluigi

Email

dpautomotive@libero.it

The second is:

Business name

D.C. Auto di Carini Dannj

Legal form

sole proprietorship

Registered office

Località Torricella, 29122 Piacenza (PC)

VAT number

01793930338

REA number

PC-192602

Certified email (PEC)

dcauto-carini@pec.it

Phone

+39 393 063 6202 — Danny

Email

dc.auto@libero.it

The forecourt is shared. If the vehicle you are interested in is sold by the other business we will tell you during the negotiation, and the contract and the invoice state who the seller is: from that moment on, that business processes your data for the sale.

No data protection officer (DPO) has been appointed: none of the cases in which Article 37 of the GDPR makes one mandatory applies. For any question about your data you can write directly to the contact details above.

2. What this website collects, and what it doesn't

It is worth spelling out, because it is less than you usually find.

• You send the message, and a copy reaches us. The two forms on the home page take what you have written, compose a message and open it in WhatsApp or in your email app: until you press send, that text goes nowhere, and before you press it you can change it. Both of them also send a copy of the request to our management system, which runs on the same machine as this website (section 9) and can only be accessed with personal accounts: the contact form with what you wrote — name, phone, email, reason and message — and the on-request search form with the model you are looking for and the contact details where we should let you know.
• There are no cookies. Not one. The website uses only two technical browser storage items, to remember the day or night mode and to avoid showing you the opening animation on every page: they stay in your browser and are not read by anyone. They are explained in the cookie policy.
• We don't track you. No Google Analytics, no Facebook pixel, no third-party analytics or profiling tool. The counts we make ourselves — how many times the pages were opened, and which website the visitors came from — are anonymous and do not concern you as a person: how they work is explained in section 6 of the cookie policy.
• We load nothing from third parties. Fonts, icons and images are on the website itself. In particular the fonts, which used to come from Google, are now hosted by us: opening a page does not share your IP address with any outside company. The only two things that come from elsewhere — the map at the bottom of the home page and the video of a vehicle, where there is one — only load if you ask for them, by pressing a button: before that, nothing is sent to Google. How they work is explained in sections 5 and 6 of the cookie policy.

In practice, browsing this website does not produce any personal data that reaches us. Processing only begins if you decide to contact us.

3. When you contact us

If you call us, write to us on WhatsApp or send us an email, we process what you give us in order to contact you: your number or email address, your name if you write it, and the content of the message — usually the vehicle you are interested in, or the details of the car you want to sell or leave with us on consignment.

Why. To reply to you, give you the information you ask for, arrange an appointment and carry on any negotiation.

On what legal basis. Taking steps at your request prior to entering into a contract, that is Article 6(1)(b) of the GDPR: you wrote to us to get an answer. For correspondence that does not concern a possible contract, the basis is our legitimate interest in replying to people who get in touch, point (f) of the same article.

Do you have to give us this data? No. But without contact details we cannot reply to you, and without the vehicle's details we cannot value it. Only write what is needed: please don't send us information you haven't asked us to use.

If you write to us using a form on the website, the message that opens contains only the fields you filled in, and you can delete or change any part of it before sending. To be complete: the copy that reaches our management system contains what was written in the form at the moment you pressed the button. If you then change the text in WhatsApp or in your email, we keep both versions — the one you send us and the one from the form. If one of the two was not meant to reach us, tell us and we will delete it: that is the right described in section 10, and you don't need to give a reason.

On the copy sent to the management system, two technical details we prefer to put in writing. The form contains a hidden field that no person sees or fills in: if it arrives filled in, the request comes from an automated program and is discarded without being recorded — which is why we don't ask you to solve a CAPTCHA. And so that repeated submissions don't flood the system, we count how many requests arrive from the same IP address in the last few minutes: that number lives in the program's memory, the address is not written down anywhere and disappears when the program restarts.

4. WhatsApp in particular

WhatsApp is convenient and we use it, but it is worth saying how it works.

When you write to our number on WhatsApp, the service is run by WhatsApp Ireland Limited (Meta group), which processes your data as an independent controller, under its own terms and its own privacy policy — not ours. We see your phone number, your profile name and picture if you have set them, and the messages you send us. Meta states that message content is end-to-end encrypted; data about the fact that a conversation is taking place, however, remains available to it.

The WhatsApp button on the website is a plain link: it does not load any Meta code into our pages and does not send anything before you press it.

If you'd rather not use WhatsApp, call us on +39 320 486 9364 (Pierluigi) · +39 393 063 6202 (Danny) or write to dpautomotive@libero.it (Pierluigi) · dc.auto@libero.it (Danny): under every form on the website there is the email link, and your request reaches us exactly as the other one would.

5. If you buy or sell a vehicle

When a contact turns into a contract, more data is needed, and this is not optional: the law requires it in order to register a vehicle and to issue an invoice.

• Personal details, Italian tax code, identity document and, where needed, driving licence and residence: for the contract, the invoice and the deed of sale.
• Vehicle details — number plate, chassis number, registration document, mileage, ownership history: for the sale, the valuation or the consignment.

Legal basis: performance of the contract, point (b), and compliance with legal obligations, point (c) — tax obligations, registration of the change of ownership and retention of accounting records. You have no right to object to the processing of this data: without it, the vehicle cannot be registered.

6. Who else may see the data

Only those needed to do what you gave it to us for:

• the people who work in the two businesses, for the tasks they are responsible for;
• the vehicle paperwork agency and the public offices involved in the change of ownership (the Italian Public Vehicle Register and the Motor Vehicle Department);
• the accountant and tax adviser, for invoices and records;
• the email provider, which technically stores the messages you send us;
• Brevo (Sendinblue SAS, France), which delivers to our two addresses the notification of a request received through the website's forms. That notification contains what you wrote in the form — name, contact details, reason and message — because it is the request itself. It is not used to send anything to you: no communication to you is sent from that address, and if we reply we do so from our own mailbox or through the channel you chose. The servers are in the European Union;
• WhatsApp Ireland Limited, if you choose that channel, as an independent controller (section 4);
• banks and financial intermediaries, only if you ask for payment in instalments and only with the data needed for the application;
• authorities and law enforcement, in the cases provided for by law.

We record the data of people who contact us and of people who negotiate a vehicle in our own management system, hosted on the same machine that serves this website (section 9) and accessible only with personal accounts: every operation remains linked to whoever carried it out. It is not a third-party service we give the data to, it is the tool we use to keep it in order.

Providers who process data on our behalf are appointed as data processors under Article 28 of the GDPR. We do not sell, rent or give the data to anyone for advertising purposes, and we do not carry out profiling or automated decision-making: no reply you receive is produced by an automated system.

7. Transfers outside the European Union

As far as it depends on us, no: the data stays in Italy and in the European Union.

The only case of a transfer outside the Union is WhatsApp, if you choose that channel: the Meta group also processes data in the United States, on the basis of the safeguards it describes in its own privacy policy. It is not a transfer we can control, which is why there is always an alternative next to the WhatsApp button.

8. How long we keep it

• Requests that don't turn into a negotiation: we delete them when the conversation ends and in any case within twelve months.
• Negotiations that don't lead to a sale: up to twenty-four months, because people who have seen a car sometimes come back months later.
• Contracts, invoices and change-of-ownership documents: ten years, as required by Italian civil and tax rules on the retention of accounting records. This period is not up to us.

WhatsApp conversations are also subject to that service's rules, which has its own retention arrangements on devices and on its systems.

9. Where the website is hosted

To be reachable, a website has to sit on a server: whoever hosts it records in their technical logs the IP address of anyone who opens the pages, the date and the request. This processing is necessary for security and operation, happens before and independently of anything the website does, and has to be disclosed by saying who carries it out.

This website is hosted by Hetzner Online GmbH, on servers in Germany, appointed as data processor under Article 28 of the GDPR. The technical logs are kept by the provider for as long as security and diagnostics require, and we do not use them to profile anyone.

10. Your rights

You can exercise the rights set out in Articles 15 to 22 of the GDPR over your data:

• access: find out what data we hold and get a copy;
• rectification: correct data that is wrong or incomplete;
• erasure: have it deleted, when there is no legal obligation requiring us to keep it;
• restriction: ask us to suspend its use while a dispute is being resolved;
• objection: object to processing based on legitimate interest;
• portability: receive it in a machine-readable format, or have it transferred, for processing based on the contract or on consent.

You exercise them by writing to dpautomotive@libero.it (Pierluigi) · dc.auto@libero.it (Danny), or to the certified email (PEC) address of the business indicated in section 1. It is free of charge and we reply within one month; if the request is complex, the deadline may be extended by two months, and we will tell you. To identify you we may ask for an identity document, and we will not use it for anything else.

11. Complaints to the Italian data protection authority

If you believe your data is not being processed lawfully, you can contact the Italian supervisory authority:

Authority

Garante per la protezione dei dati personali

Address

Piazza Venezia 11 — 00187 Roma, Italy

Phone

(+39) 06 696771

Email

protocollo@gpdp.it

Certified email (PEC)

protocollo@pec.gpdp.it

Website

www.garanteprivacy.it

You can also go to the courts. The two routes are alternatives: if you lodge a complaint with the authority, you cannot then take the same facts to court, and vice versa.

12. Minors

The website is not aimed at minors and does not knowingly ask for or collect data from people under eighteen. If we realise we have received data from a minor without the knowledge of the person responsible for them, we delete it. If this applies to you, write to us and we will remove it.

13. Changes to this notice

If the processing changes — for example if we add a form, a field that asks for additional data or an analytics tool — this page is updated before the change takes effect, and the date below changes with it.

Last updated: 12 September 2026. Version published together with the first online version of the website.