Telematics and black boxes on a rental fleet in Italy

A black box or GPS tracker fitted to a rental car records three things: where the vehicle is, when it moves and how far it has gone. For an independent rental operator it serves three clearly bounded purposes: recovering a stolen or unreturned vehicle, reconstructing mileage and timings when a customer disputes damage, and scheduling maintenance on real odometer readings instead of from memory.

The technical half is the easy one: the devices all resemble each other. The half that decides whether the system holds up or exposes you is the other one: which legal basis you rely on, what you wrote in the privacy notice and in the contract, how long you keep the location history, and who in the agency may open it.

What a telematics device actually records

There are three families of device: units that plug into the OBD diagnostic socket, units hard-wired and hidden under the dashboard, and data coming straight from the control unit of a car already connected at the factory. What changes is the installation and how easily someone can unplug it; what they record barely changes. In practice a fleet device collects:

• The vehicle's position, available on request, with a history of its movements.
• Engine start and stop, so the real hours of use and the stops.
• The odometer, the most underrated figure and the most useful one in the back office.
• Impact events detected by the accelerometer, with date and time.
• Basic diagnostics: engine warning lights, starter battery status and, on some units, fuel level.
• Geofencing alerts when the vehicle enters or leaves an area you have set.

Real use cases on a small fleet

On a few dozen vehicles the device is not there so you can watch a dashboard all day. It earns its place in the rare moments when a precise question needs a documented answer. Next to each case, what the device cannot do for you.

Stolen or unreturned vehicle: the sequence that matters

The device is valuable, but it remains an operational lead: it replaces neither the police report nor the work of the authorities. Taking recovery into your own hands is the fastest way to turn an administrative problem into a criminal one of your own.

When the vehicle has been stolen

1. 1Check the current position and the last trip, and keep a dated copy of the history before it is overwritten.
2. 2File a report with the Carabinieri or the Polizia di Stato with the plate, the chassis number, the rental contract and the reference of the installed device.
3. 3Tell the officers that the vehicle can be located and leave the intervention on the ground to them.
4. 4Notify your insurer within the policy deadlines and block the vehicle in the calendar.

When the car simply does not come back

If the customer is known and the car does not return, this is not a theft: the contract has expired and the vehicle is being withheld. The offence usually discussed is appropriazione indebita, misappropriation, which is prosecuted only on the formal complaint of the injured party, so nothing moves without an act from you. The sensible practice is a phone call and a written message, then a formal demand to return the vehicle within a short deadline, and only then the complaint. Location data tells you whether the vehicle is parked in a yard or still circulating, and shows investigators where to look. Have a lawyer draft the formal demand once: you will reuse it for years.

Mileage data when a customer disputes damage

The everyday scenario: the customer returns the car, the check turns up a deep scratch on the bumper, and he insists it was already there. The device does not say who caused the damage. It does say other things that often end the argument or, on the contrary, show you that you are wrong:

• The actual mileage of the rental, comparable with what the customer declared.
• The times of movement and standstill, useful when the customer places the damage at a moment when the car was parked on your lot.
• Any recorded impact event with date and time: it indicates a shock, not its severity nor the liability.
• The presence of the vehicle in a given area, when you need to cross-check against a fine or a third party's report.

The evidence that stands up in a dispute, though, is the handover and return report: dated photos of all four sides, the roof, the wheels and the windscreen, signed by both parties. Telematics completes it, it does not replace it. If you do not yet take systematic photo reports, that is the investment to make before the GPS.

On what basis may you track a rental car

Location data that can be linked to an individual falls under the European data protection regulation. There is no ban on tracking a rental car, but there is no automatic permission either just because the car is yours. The mechanism is this: you identify a legal basis and can document it, usually the rental operator's legitimate interest in protecting its own assets, balanced in writing against the customer's rights. Then you make it transparent before the keys change hands, with two documents: the privacy notice, explaining what you collect, why, for how long and to whom you disclose it, and a contract clause where the customer reads in black and white that the vehicle carries a tracker. Declaring it afterwards, or only verbally at the counter, is the classic way to be caught out.

Limited purposes, minimisation, retention

• Narrow purposes: anti-theft, vehicle recovery, technical fleet management. Not surveillance of driving style or of the customer's private movements.
• Minimisation: record the position at the lowest useful frequency and, where the supplier allows it, prefer on-request location to continuous tracking.
• Retention periods defined, written down and respected, with automatic deletion when they expire.
• Named access: decide who in the agency may open a vehicle's history and keep a trace of those accesses.
• A data protection impact assessment where monitoring is systematic, and an up-to-date record of processing activities.
• A contract with the telematics supplier as processor, stating where the data is held.

If one of your employees is driving

If one of your employees drives the same car, even only to move it between lots or for a home delivery, the picture changes. Article 4 of the Statuto dei lavoratori on remote monitoring comes into play, under a far stricter regime: exhaustively listed purposes, an agreement with the union representatives or an authorisation from the Ispettorato territoriale del lavoro, the local labour inspectorate, and specific information to the worker on how the tool is used and on the checks performed. The Garante per la protezione dei dati personali, Italy's data protection authority, has intervened on company fleets more than once over exactly this: inadequate notices, continuous monitoring and retention beyond what was needed. Build this part with an employment adviser and a lawyer; the Garante's site is the official source to start from, and the rules have to be checked when you apply them, not once and for all.

ZTL fines, tolls and the paperwork

Telematics does not spare you the fines, it helps you handle them. Almost every Italian historic centre has a ZTL, a limited traffic zone watched by plate-reading cameras: with a rental car the penalty reaches the registered owner months later, and the company has to identify the driver and answer the issuing authority within the deadline, adding its own administration fee. Rules, hours, gates and amounts are set by each individual Comune and change often: the only reliable source is the website of the Comune concerned. Milano also applies its own access measures to the central areas. A movement history lets you match a fine to the right contract in minutes. The same goes for tolls: most of the motorway network in the north and the centre is tolled, while in Sicilia and on other southern stretches several sections are free, and the Telepass transponder on board generates statements that have to be reconciled with the rentals.

Low season, maintenance and workshop downtime

Out of season the value of the device changes nature. An up-to-date odometer lets you schedule servicing while the vehicles are idle, instead of suffering workshop downtime on a peak weekend. The history tells you which vehicles worked and which sat on the lot draining their battery, and helps you decide which to keep in service, which to park and which to sell. Geofencing alerts, provided they are covered by the contract and the privacy notice, flag a vehicle leaving the operating area or approaching the border when you have forbidden taking it abroad.

Where telematics meets booking management

The device answers the question of where the vehicle is. It does not answer how many days it sat idle and why, which is where the margin leaks: that lives in the calendar, in the contracts and in the channels where you publish availability. DRIVO is a European marketplace connecting travellers with independent and local rental agencies: listing a fleet costs 0 €, there is no monthly fee, and commission applies only to completed bookings, so an empty week costs the agency nothing. The back office handles bookings, calendar and fleet, listings are multilingual, payouts arrive automatically through Stripe, and a verified profile with reviews keeps working when the agency is closed.