Last updated: 24 October 2025

1. Who we are

RosCar Madeira is an online aggregator of car rental offers from local rental companies in Madeira. We are not a party to the rental agreement. We process personal data to let you find, compare, and book a car.

2. Scope

This Policy explains how we collect, use, share, and protect your personal data when you use our website, booking forms, email, and other communication channels.

3. Data controller and contacts

Controller: RosCar Madeira. For data protection queries, contact: [email protected].

4. Data we collect

Identification data: first and last name, country of residence, driver’s age.
Contact data: email, phone number.
Booking data: pickup/return dates and locations, car class, extras, flight number (optional).
Payment data: information needed to process the 20% prepayment via a payment provider. Card details are processed directly by the provider and are not stored by us.
Technical data: IP address, cookies, device/browser identifiers, event logs.
Communications: chat/email messages, feedback, and claims.

5. Data sources

We obtain data directly from you, and automatically via cookies and similar technologies on our site.

6. Purposes and legal bases

Booking creation and management — performance of a contract or steps at your request prior to a contract.
Sharing data with the local supplier — performance of a contract and our legitimate interest in providing the service.
Payment processing (20% prepayment) — performance of a contract and legitimate interests in fraud prevention.
Customer support, communications, dispute mediation — performance of a contract and our legitimate interest.
Analytics, service improvement, statistics — our legitimate interest; for marketing cookies — your consent.
Legal obligations — compliance with laws (accounting, tax, regulatory requests).

7. Cookies and similar technologies

We use necessary cookies for site functionality, and analytics/marketing cookies with your consent. You can manage consent via the banner or your browser settings. Disabling optional cookies may affect site performance.

8. Who we share data with

Local rental companies in Madeira — as independent controllers to fulfill your booking.
Payment providers — as processors for prepayment handling.
IT and hosting providers — as processors supporting our infrastructure.
Advisers/legal counsel — where necessary and lawful.
Public authorities — where required by law.

9. International transfers

Processing occurs in the EU/EEA (Portugal). If data is transferred outside the EEA, we apply appropriate safeguards such as EU Standard Contractual Clauses.

10. Data retention

We keep personal data only as long as needed for the purposes described here: booking data up to 6 years for legal obligations; communication data up to 3 years; technical logs up to 12 months unless a longer period is legally required. After these periods, data is deleted or anonymised.

11. Security

We implement technical and organisational security measures (encryption, access controls, logging) to protect data from unauthorised access, alteration, or loss.

12. Children’s data

Our services are intended for adults. We do not knowingly collect children’s data. If we learn we collected such data without parental consent, we will delete it.

13. Your rights (GDPR)

Right of access to your data.
Right to rectification of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) in cases provided by law.
Right to restriction of processing.
Right to data portability.
Right to object to processing, including where based on legitimate interests or for direct marketing.
Right to withdraw consent at any time where processing is based on consent.
Right to lodge a complaint with a data protection authority in your country or in Portugal (CNPD).

14. How to exercise your rights

Send a request to [email protected]. We will respond within one month. We may request additional information to verify your identity.

15. Marketing communications

We send service emails about your booking without consent. Marketing emails are sent only with your consent. You can unsubscribe at any time via the link in the email or by contacting us.

16. Automated decisions and profiling

We do not make decisions producing legal effects based solely on automated processing. Limited profiling may be used for fraud prevention and analytics with appropriate safeguards.

17. Changes to this Policy

We may update this Policy from time to time. The new version takes effect upon publication on the website. Please check for updates periodically.

18. Contacts

RosCar Madeira
Email: [email protected]
Support: daily 09:00–19:00 (GMT+0)

Privacy Policy