Privacy notice

Who is the controller

NovaDrive Service Centre Ltd, 89, Triq Il-Mastrudaxxa, Ħal Qormi, QRM 0001, Malta. Contact us at info@novadrivemalta.com.

What we collect

• Enquiry data — name, email, phone, the area you are in and anything you write in the message.
• Usage data — only if you allow measurement: the pages you visit, how you reached the site, and your device type and approximate location, counted by Google Analytics.
• Ad click data — only if you allow measurement: which of our ads and search terms brought you to the site (the click ID and campaign tags in the link), sent to us with an enquiry.
• Rental data — driving licence, identification document, proof of address, and the rental agreement itself.
• Vehicle data — condition reports, servicing records, mileage, and any contravention notices received for the vehicle.
• Technical data — standard server logs.

Why we use it, and on what basis

• To answer your enquiry — your consent, given when you submit the form.
• To see how the site is used and which of our ads bring enquiries — your consent, given in the cookie banner or below. You can withdraw it at any time.
• To provide the rental — performance of the contract between us.
• To insure and license the vehicle — legal obligation, and our legitimate interest in operating a lawful fleet.
• To keep accounting records — legal obligation under Maltese tax law.

Who we share it with

Our insurer and their appointed assessors; Transport Malta and the licensing authorities; our accountant; and the workshops that service the vehicles. Where a contravention is issued to a vehicle, we are required to identify the driver to the issuing authority.

Enquiries sent through the website form go from our own web server, hosted by Hetzner Online in Finland, to our inbox. The email is sent through Resend, Inc., an email delivery service acting as our processor, from its EU region; our inbox is hosted by Google. If you allow measurement, Google Ireland Limited counts your visit for us in Google Analytics and is told when a visit or an enquiry follows a click on one of our ads; your name, email, phone and message are not sent to Google. We do not sell personal data, and we do not use it for remarketing.

How long we keep it

Enquiries that do not become rentals: 12 months. Rental agreements and the identity documents supporting them: the contract term plus six years, to meet accounting and limitation requirements. Copies of licences and identity documents taken for verification are destroyed once the rental ends, except where retention is required for an open claim. Google Analytics keeps the detail of individual visits for two months; after that only totals remain.

Your rights

Under the GDPR you may request access to your data, correction of it, erasure where we no longer need it, restriction or objection to processing, and portability. Where processing rests on consent you may withdraw that consent at any time. Write to info@novadrivemalta.com and we will respond within one month.

You may also complain to the Information and Data Protection Commissioner (IDPC) in Malta.

Cookies and browser storage

Nothing is set until you choose. If you allow measurement, Google's tag sets its own cookies on this site: _ga and _ga_…, which Google Analytics uses to count visits (kept for up to two years), and _gcl_au and similar, which record which of our ads brought you here (kept for up to 90 days). Choose "Essential only", or do not answer at all, and the site sets no cookies.

The site also uses your browser's storage for a few conveniences, listed below. That data stays on your device and is never sent to us — except the ad click details, which travel with an enquiry only if you send one. You can change your choice, and inspect or clear what is stored, here at any time.