Privacy Policy

The controller is Amine Bendarkaoui, Staffelsgasse 36, 53347 Alfter, Germany.

Amine Bendarkaoui operates a German sole proprietorship for IT consulting, software development and software-related services. MaghrebCars is a matchmaking platform for car rental services in Morocco.

Support and data protection contact until a dedicated privacy address is created: [email protected].

Because the controller is established in Germany, this information is written with European data protection rules in mind.

MaghrebCars is an electronic interface between customers and rental providers. MaghrebCars is not a traditional car rental company, does not own the vehicles and does not currently process online rental payments.

Data is processed to create accounts, publish offers, send booking requests, verify providers, provide support, secure the platform and operate the review system.

MaghrebCars follows a data minimization approach and requests only the data needed to operate the platform.

MaghrebCars does not collect CIN, identity card copies, passport copies or CIN front/back file paths for provider verification.

MaghrebCars does not ask users to enter card data, CVV/CVC, IBAN, RIB, passwords or secret codes in free-text fields. Text fields may be checked to avoid this type of data.

MaghrebCars does not currently process online rental payments.

Data is processed to create and secure accounts, receive and transmit booking requests, enable operational communication between customers and providers, verify providers, provide support, prevent abuse, protect the platform, send transactional emails and operate the review system.

Cloudflare Turnstile may be used to reduce automated abuse and fraudulent submissions. Google Maps and Google Places may be used for maps, place selection and location information.

When the user consents, Firebase Analytics may measure audience, navigation journeys and page performance to improve the platform. Consent can be withdrawn at any time through cookie settings.

When a customer sends a booking request, the relevant provider receives the information needed to process that request and manage its own booking.

The customer's email and phone are not shown to the provider while the request is pending. They become visible when the booking is confirmed, paid, completed or when a confirmed status makes contact operationally necessary.

Providers may use customer data only for the relevant booking, vehicle handover, operational support and obligations directly connected with the rental.

Provider verification is based on business identifiers: ICE, RC city, RC number and the Modele 7 register document.

Modele 7 is a private verification document. It is not public, is not included in public pages, search, public offers or emails, and is accessible only to the relevant provider and authorized administrators.

MaghrebCars does not request CIN, passport or other personal identity documents for this verification.

MaghrebCars uses Google Cloud and Firebase for hosting, authentication, Firestore, storage and application infrastructure, in European environments to the extent supported by the effective configuration.

Brevo is used for transactional emails. Google Maps and Google Places are used for maps, places and location selection. Cloudflare Turnstile is used for bot and abuse protection.

If an error analysis tool such as Sentry is enabled later, it must be configured to minimize personal data and avoid unnecessary default personal data collection. At public launch, Sentry is not used as an active production error-monitoring tool unless it is explicitly enabled later with privacy-minimizing settings.

Firebase Analytics, a Google service, is initialized only after explicit Analytics consent. It may process pseudonymous identifiers, technical information and an approximate geographic area to produce audience statistics.

MaghrebCars uses cookies or similar technologies that are strictly necessary for authentication, sessions, security, abuse prevention and proper platform operation.

Security technologies such as Cloudflare Turnstile may verify that certain actions are not performed by a bot. Analytics technologies are disabled by default and are loaded only after explicit consent. Refusal does not affect access to the service, and consent can be withdrawn at any time through cookie settings.

The main hosting is intended to run in Google Cloud/Firebase environments in Europe, according to the effective technical configuration.

Providers located in Morocco receive the data necessary to handle their own bookings. Some technical providers may involve international transfers depending on their infrastructure and contractual safeguards.

Applicable Moroccan requirements, including personal data protection requirements, may also be considered depending on the relevant data flows.

Data is retained for as long as necessary to provide the service, ensure security, provide support, preserve evidence and comply with applicable obligations.

Modele7/register documents are kept while the provider account is active and afterwards only as far as necessary for verification, security, evidence or legal purposes.

Booking data is kept as long as necessary for booking handling, support, evidence, dispute handling, tax, accounting or legal retention obligations.

Admin audit data is kept for a limited period where necessary for security, abuse prevention, traceability of administrative actions and compliance.

Technical logs and security data are kept for a limited period where necessary for troubleshooting, security, abuse prevention and platform stability.

Depending on applicable law, you may request access to your data, rectification, erasure, restriction of processing, objection to certain processing or data portability where this right applies.

You can contact [email protected]. You may also have the right to lodge a complaint with the competent data protection authority. Applicable Moroccan requirements, including personal data protection requirements, may also be considered depending on the relevant data flows.