Last updated: 24 September 2025

Introduction

This privacy policy explains, in a detailed and transparent manner, the categories of personal information we may collect through GassyTour’s website, the purposes for which those data are processed, the possible recipients of such information, the safeguards we implement to protect that information, the retention periods that apply, the rights available to you as a data subject, and the procedures for managing and consenting to cookies and other technical or advertising trackers used on our site.

1. Who we are and how to contact us

GassyTour is the data controller responsible for personal information collected via this website, and if you have any questions, requests for information, or wish to exercise your rights you may contact us by email at gassytour@gassytour.com, by telephone using the numbers shown on the site, or by postal mail at the address shown at the bottom of the page; these contact channels enable you to reach our team in charge of data protection and to receive a reply within the timeframes required by applicable law.

2. Scope of this policy

This policy applies to all personal data we collect when you browse our site, use our booking forms, subscribe to our newsletters, communicate with our customer service, post reviews or photos via our dedicated spaces, and to technical information collected by the information systems and third-party tools integrated into the site; it applies equally to individuals residing in Madagascar and to individuals residing outside Madagascar when our services are offered to them or when they use the site.

3. Principles governing processing

We commit to respecting the principles of lawfulness, fairness and transparency; to collect only data that are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; to ensure that data are accurate and kept up to date; to retain data in an identifiable form only for as long as is necessary for the purposes for which they were collected; and to implement appropriate technical and organizational measures to ensure the security and confidentiality of data, with these commitments applied in a manner proportionate to the risks associated with the processing activities carried out.

4. Data collected and circumstances of collection

Depending on the services you use and the actions you perform, we may collect identification and contact data (such as your name, first name, postal address, email address and telephone number) when you create a booking or an account; travel-related data (such as date of birth, passport or identity card number, travel information and, if necessary for the organization of services, certain health information or medical requirements); payment and billing information, which is generally processed by secure payment service providers on our behalf; technical connection and navigation data (such as IP address, browser type, pages accessed and timestamps) which are automatically collected by our servers and analytics tools to ensure the proper functioning of the site and to improve our services; and content you voluntarily provide (messages, photos, reviews) when you interact with our services or participate in promotional operations.

5. Purposes of processing and legal bases

The data we collect are processed principally to perform the contracts that bind you to GassyTour, notably to book and organize travel services; to handle billing and payment processing in accordance with our contractual and legal obligations; to answer your requests and provide the necessary assistance in connection with your trip based on contract performance or our legitimate interest to improve our services; to send you marketing communications and personalized offers only if you have consented to receive them; and to comply with our legal, tax and accounting obligations and to ensure security, fraud prevention and the management of disputes where such purposes require processing of personal data.

6. Recipients of data

Your personal data may be disclosed, strictly within the scope of the purposes set out above, to external providers with whom we work and who act as processors on our behalf (such as hosting and site maintenance providers, payment service providers, agencies and suppliers of travel services such as hotels, carriers, transfer companies and local guides, and email and analytics service providers), these providers processing data on our instructions and under contracts that impose confidentiality obligations and appropriate technical and organizational safeguards; furthermore, we may disclose your data to the competent authorities when such disclosure is necessary to comply with a legal obligation or to protect our rights in legal proceedings.

7. International data transfers

Because some of our providers host infrastructure or process data outside Madagascar (or outside the European Union), it is possible that international transfers of personal data may occur; in such cases we ensure that appropriate safeguards are in place (for example by using standard contractual clauses, additional contractual commitments or mechanisms recognized by competent authorities) in order to guarantee a level of protection for personal data that is equivalent and compatible with applicable legal requirements.

8. Data retention periods

We retain your personal data only for the time strictly necessary for the purposes for which they were collected: reservation and travel file information is retained for the periods required by accounting, tax and legal obligations; account-related data are kept while your account is active and then archived for the duration necessary to establish the proof of a right or contract; marketing data are retained until you withdraw your consent; and technical logs and navigation data are retained for a limited and proportionate period to ensure the security and proper functioning of the site, with these retention periods subject to specification and update in accordance with evolving legal and operational constraints.

9. Security and data protection

We have implemented appropriate technical and organizational measures, such as encrypting data in transit where feasible, performing regular backups, applying access controls based on the need-to-know principle, and operating internal security procedures to prevent loss, unauthorized disclosure or alteration of data; however, no technical solution can guarantee absolute security, and we therefore recommend that you also take appropriate precautions on your side, including securing access to your email account and choosing robust passwords if you create a user account.

10. Your rights as a data subject

Subject to applicable law, you have the right to request access to your personal data, to request correction of inaccurate data, to request deletion of your data where the legal conditions are met, to request restriction of processing, to request portability of the data you have provided when processing is based on a contract or your consent, to object to processing for legitimate reasons, and to withdraw your consent at any time where processing relies on consent; you may exercise these rights by sending an email to gassytour@gassytour.com or by postal mail to the address shown on the site, and we will endeavor to respond within the deadlines imposed by applicable regulations.

11. Data Protection Officer (DPO)

Where designation of a Data Protection Officer is required or where we have appointed one, his or her contact details will be published on this page so that you may contact the DPO directly for any matters relating to data protection; otherwise, you may direct any request to gassytour@gassytour.com.

12. Complaints to a supervisory authority

If, despite our efforts to process your requests, you believe that your rights have not been respected, you have the right to lodge a complaint with the supervisory authority competent for your place of residence or, if you are in the European Union, with the CNIL or the relevant data protection authority; we undertake to cooperate with any such authorities in the context of procedures that may be initiated.

13. Changes to this policy

We reserve the right to update this policy periodically to reflect changes in our activities, legal obligations, or technical aspects of the site, and we will indicate the date of the latest revision at the top of this page; where changes are significant and likely to materially affect your rights, we will implement additional measures to inform you (for example by posting a notice on the site or by email if you are registered) prior to the changes taking effect.

Detailed section – Cookies and other trackers

A. Definitions and general purpose

A cookie is a small text file that can be placed on your device (computer, smartphone, tablet) when you visit a website and which stores information about your browsing, preferences or a session identifier; these files facilitate the technical operation of the website, enable the storage of your choices, optimize and personalize your user experience, and, subject to your consent, allow analytics and advertising systems to display content or offers that may be more closely aligned with your interests.

B. Categories of cookies used and detailed purposes

1. Strictly necessary cookies for site operation: these cookies are indispensable to enable navigation on the site and to use its core features, for example to maintain the continuity of a booking session, secure forms and authenticate logins, and disabling them will prevent the use of certain parts of the service.
2. Performance and analytics cookies: these cookies, which may be provided by third-party services, collect information about how visitors use our site (pages visited, length of visits, errors encountered, typical navigation paths) and help us identify areas for technical and ergonomic improvement; to the extent possible the data collected for analytics is aggregated and anonymized to minimize privacy risks, and such processing is based on our legitimate interest in understanding and improving the quality of our services.
3. Functionality cookies: these cookies remember your choices and preferences (such as displayed language, display preferences, or elements of a reservation basket) to personalize your experience during future visits and to spare you from re-entering recurring information.
4. Advertising and targeting cookies: these cookies are used to present advertisements considered more relevant based on your interests, to measure advertising campaign performance and to enable ad retargeting; such cookies can involve profiling and are placed by advertising networks and third-party platforms, and they are used only with your explicit consent when required.
5. Social media cookies: when you interact with sharing buttons or social plugins on the site, cookies specific to the social platforms (for example Facebook, Instagram, Twitter) may be placed by those third parties to recognize your browser and associate your actions with your account on the relevant platform; these cookies are governed by the privacy policies of those social networks and their placement may require your consent depending on the circumstances.

C. Indicative list of cookies (examples, names and durations)

The exact nomenclature and presence of cookies may vary depending on technical updates and the providers we use; the list below is indicative and intended to give you a concrete overview of cookies that may be placed:

• Session and necessary cookies: PHPSESSID or sessionid (session cookie allowing session continuity during booking) – duration: session (deleted when the browser is closed). cookieconsent_status (stores the choice made via the cookie banner) – duration: typically several months (6–13 months depending on configuration).
• Analytical cookies (examples): _ga, _gid, _gat (Google Analytics) – purpose: measure audience and distinguish unique visitors; indicative durations: _ga = 2 years, _gid = 24 hours, _gat = short.
• Functionality cookies: language, wp-settings-# (or equivalents depending on the CMS) – purpose: store selected language and other preferences – duration: variable (for example a few months to one year).
• Payment and security cookies (examples): __stripe_mid, __stripe_sid (or equivalents depending on the payment provider) – purpose: security, fraud prevention and management of the payment session – duration: variable depending on the provider.
• Advertising and targeting cookies (examples): _fbp, fr (Facebook/Meta Pixel), cookies set by advertising networks – purpose: retargeting and advertising performance measurement -duration: variable (often 90 days or more depending on the platform).
• Social media cookies: cookies set by Facebook, Instagram, Twitter and other social networks -purpose: enabling authentication and sharing via the social network – duration: as specified in the third party’s policy.

D. Consent, management and withdrawal of cookies

On your first visit a clearly visible cookie banner will inform you of the categories of cookies that may be placed and will allow you to accept or refuse non-essential cookies; cookies other than those strictly necessary are only placed after obtaining your explicit consent, and you may at any time modify or withdraw that consent via the “Cookie management” link available on the site or via your browser settings, noting that refusal of certain cookies may impact functionality (notably personalization, statistical tracking and certain third-party integrations).

E. How to manage or delete cookies using your browser

You can configure your browser to refuse the storage of cookies or to delete cookies that are already present, and the exact procedure depends on your browser: for Google Chrome go to Menu > Settings > Privacy and security > Cookies and other site data; for Firefox go to Menu > Options > Privacy & Security > Cookies and Site Data; for Safari go to Preferences > Privacy; for Edge go to Settings > Cookies and site permissions; detailed instructions and help tools are available from each browser vendor, and note that deleting or blocking cookies may affect certain features of the site.

F. Opting out of targeted advertising

To opt out of targeted advertising cookies you may use the advertising preferences pages of the major actors (for example Google and Facebook), use centralized opt-out tools where available, or install browser extensions specialized in blocking trackers; please note that aggressive blocking may prevent certain services from functioning and may reduce the quality of personalized offers that could otherwise be presented to you.

G. Updates and request for a full inventory

This indicative list of cookies may be updated as the site evolves technically or as new providers are integrated; if you would like to obtain a complete and up-to-date inventory of the cookies actually placed during a visit to our site, including the precise cookie names, purposes and exact retention periods for each cookie, you may request such an inventory by emailing gassytour@gassytour.com, and we will provide, where feasible, a dated and detailed statement.

Contact for exercising rights and requests

For any question relating to the protection of your personal data, to exercise your rights or to request additional information (including the full and up-to-date list of cookies), please write to gassytour@gassytour.com or send a postal letter to the address provided on our site, clearly indicating your name, contact details and the nature of your request so that we can respond as promptly as possible and in accordance with applicable legal obligations.

Contact details:

Email: gassytour@gassytour.com

Phone: +261 34 15 022 51 / +261 32 45 703 62

Postal address: II A 81 Rue Andriamady, Ampandrana, Antananarivo