Privacy Policy

Last updated: 18 July 2026

We take the protection of personal data seriously. This Privacy Policy explains which data we process on this website, for what purposes and which rights you have.

1. Controller

Trade name: Mada Car Drive

Company address Madagascar: III G 1 J AMBATOLAMPY AMBOHIBAO
Registration number / INSTAT: 49295 11 2025 0 00938

2. Hosting with IONOS

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

When the website is accessed, technically necessary server log data is processed, such as IP address, date and time of access, requested file, transferred data volume, referrer URL, browser, operating system and access status. This is necessary to deliver the website, maintain stability and security and detect misuse.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

3. Contact form, email and booking enquiries

If you contact us via the contact or enquiry form, by email or by phone, we process the information you provide, for example name, contact details, travel dates, group size, desired route and message.

We use this data to answer your enquiry, check availability, prepare an offer and handle a possible booking.

Legal basis: Art. 6(1)(b) GDPR for pre-contractual measures and contract performance, and Art. 6(1)(f) GDPR for efficient enquiry handling.

Confirmed bookings and temporary reservations are managed in a protected internal booking system. It may store your name, email address, telephone number, travel dates, assigned vehicle, communication source and voluntary notes. Public availability only shows whether a vehicle is available or occupied; names and contact details are never published.

Operational contact data is automatically anonymised after the trip has ended, the vehicle has been returned and the planned buffer day has elapsed. Information subject to statutory retention duties may remain in the required business records independently of this process.

4. WhatsApp

If you contact us via WhatsApp, the data you send is processed to handle your enquiry. The provider is WhatsApp Ireland Limited or Meta Platforms Ireland Limited. Processing outside the European Union cannot be ruled out.

Please do not send particularly sensitive data via WhatsApp. For binding booking details, we may switch to email communication.

5. Cookies and consent management

We use technically necessary cookies and local storage functions so that the website works and your cookie choice can be saved. Optional analytics and marketing services are only activated if you consent in the cookie banner.

The enquiry form uses a short-lived, technically necessary security cookie to protect it against abusive submissions. The internal administration area uses a technically necessary session cookie after successful login. These cookies are not used for advertising or audience measurement.

You can change your choice at any time using the round cookie button at the bottom left. If you reject or later withdraw analytics cookies, Google Analytics cookies are deleted where possible and no further analytics data is transmitted.

6. Google Analytics

This website uses Google Analytics 4 only after your consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand which pages are visited and how visitors use the website. Usage data is measured in two separate Google Analytics properties: one belonging to the website operator and one belonging to the agency that maintains and optimises this website technically. Both properties receive the same usage data. A data processing agreement under Art. 28 GDPR is in place with the agency.

We use Google Consent Mode. Analytics and advertising storage are disabled by default. Only after consent is Google Analytics loaded and the consent status transmitted to Google. If consent is withdrawn, the consent status is set to denied and analytics cookies are deleted.

Google may also transfer data to Google LLC in the USA. According to Google, such transfers are based on appropriate safeguards, in particular standard contractual clauses where required.

7. Recipients and processors

Recipients of personal data may include hosting, email and technical service providers who support us in operating the website and communication. Where these service providers process personal data on our behalf, data processing agreements under Art. 28 GDPR are in place.

8. Retention period

We store personal data only for as long as necessary for the respective purpose. Operational booking contact data is anonymised after vehicle return and the buffer day. Security logs do not contain plain-text IP addresses and are used only to protect the administration area. Data is then deleted or anonymised unless statutory retention obligations apply.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

10. Data protection contact

For data protection questions, contact us at: info@mada-car-drive.com