Privacy Policy
MadeiraSpot ('we', 'us', 'our') is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is MadeiraSpot, operated by Goorentalcars Lda, Funchal, Madeira, Portugal. Contact: info@madeiraspot.com
2. Data We Collect
We collect information you provide directly (name, email, phone when making a booking or submitting a review), data collected automatically (IP address, browser type, pages visited, time spent on site via analytics cookies), and data from third parties (login data if you use Google OAuth).
3. Purpose and Legal Basis
We process your data to: provide and improve our services (legitimate interest), process booking requests (contract performance), send transactional emails (contract performance), analyse site usage with anonymous analytics (legitimate interest / consent), and comply with legal obligations.
4. Cookies
We use necessary cookies (essential for site operation), analytics cookies (anonymous usage data via Umami Analytics — only with your consent), and no advertising/tracking cookies from third parties. You can manage your cookie preferences at any time via the cookie banner.
5. Data Sharing
We do not sell your personal data. We may share data with: service providers who assist us in operating the site (hosting, email delivery) under data processing agreements, and businesses listed on MadeiraSpot when you make a booking request (only the information necessary to process your request).
6. Data Retention
We retain personal data only as long as necessary for the purposes described. Booking enquiry data is kept for 2 years. Account data is kept until you delete your account. Analytics data is anonymised and retained for 13 months.
7. Your Rights
Under GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data ('right to be forgotten'), restrict processing, data portability, and object to processing. To exercise any of these rights, contact us at info@madeiraspot.com. You also have the right to lodge a complaint with your national data protection authority.
8. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over HTTPS.
Contact Us
For any privacy-related questions or to exercise your rights, please contact us at: info@madeiraspot.com
info@madeiraspot.com