Privacy policy
Effective date: 21 September 2026 · Last updated: 21 September 2026
This policy explains what data we collect on dadycar.com, why, how long we keep it, and what you can require of us. It does not cover the Dadycar platform itself: our clients’ fleet data is governed by the contract between us, under which Dadycar acts as processor.
Who processes your data
The controller of the data collected on dadycar.com is DADYCAR, a simplified joint-stock company with share capital of 1,000.00 euros, whose registered office is at 36 rue Raspail, 92300 Levallois-Perret, France, registered with the Nanterre Trade and Companies Register under number 920 955 366 (SIRET 920 955 366 00017, VAT FR75920955366).
Telephone: +33 2 21 85 30 75. Email: contact@dadycar.fr.
For any question relating to the processing of your personal data, write to dpo@dadycar.fr or to the registered office.
What we collect
When you request a demonstration or write to us, the form collects your first name, last name, work email address, telephone number, company, role, country, the size of your fleet, the need you describe and your message. Only the name, email address and company are required; the rest helps us prepare the conversation.
Where it exists, the origin of your visit is attached: the campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and the Google advertising identifier (gclid) of the page you arrived on. Those values are held in your browser’s session storage, not in a cookie: they disappear when you close the tab, and they are only sent with the form, if you send it.
Your IP address is read when you submit, to limit the number of requests per minute. It is not retained.
When you sign up to the newsletter, we collect your email address and record the evidence of your consent: the date, the page you signed up from, the language, and the exact wording you read. That record exists for you, not against you: it lets us tell you what you consented to, and when.
When you read an article or a glossary entry, we count the page view. The counter sends the content type, its identifier and the language — nothing else: no cookie, no visitor identifier, no third-party service. Your IP address is used only to discard repeat counts, and is not retained.
Why, on what basis, and for how long
| What we do | Legal basis | Retention |
|---|---|---|
| Answer your demonstration or contact request | Pre-contractual steps taken at your request (art. 6.1.b) | Three years from the last contact |
| Send you the newsletter | Your consent (art. 6.1.a) | Until you unsubscribe; the consent record, three years after |
| Attribute a request to the campaign that brought it | Our legitimate interest in knowing what works (art. 6.1.f) | With the request |
| Count article readings | Our legitimate interest in knowing what is read (art. 6.1.f) | Aggregate counter, no personal data |
| Measure site audience | Your consent (art. 6.1.a) | 13 months for cookies, 25 months for statistics |
| Show you relevant advertising | Your consent (art. 6.1.a) | 13 months |
| Meet our accounting obligations | Legal obligation (art. 6.1.c) | 10 years |
We take no automated decisions producing legal effects concerning you, and we do not profile you from your browsing on this site.
Who else has access
We neither sell nor rent your data. It is accessible to our sales and marketing teams, within the limits of what their work requires, and to the following providers:
OVH SAS — hosting of the website, in data centres located in France.
Google Ireland Limited — audience measurement (Analytics), tag management (Tag Manager) and advertising measurement (Ads), with possible transfers to the United States.
Google Ireland Limited (YouTube) — playback of the product video, on the single page that embeds it.
Meta Platforms Ireland Limited — advertising and conversion measurement, through the Meta pixel, with possible transfers to the United States.
Requests sent from the form and newsletter sign-ups are processed on our own infrastructure, hosted in France.
Apart from the services of Google and Meta, none of our providers processes your data outside the European Union. Transfers relating to those two services rely on the EU–US Data Privacy Framework, to which both Google and Meta adhere, and on the European Commission’s standard contractual clauses.
Advertising cookies, Meta’s as well as Google’s, are only placed after you have consented, and stop being placed as soon as you withdraw that consent.
Cookies and trackers
The first time the site loads, a banner lets you accept everything, refuse everything, or choose by category. Refusing is as easy as accepting: one button, in the same place, the same size.
Essential — always on. Needed for the site to work, in particular to remember your choice on this banner. They require no consent.
Functional — optional. They remember your preferences, such as the language.
Audience measurement — optional. Google Analytics, to understand which pages are read and by which route.
Marketing — optional. Google Ads, to measure how effective our campaigns are.
Until you accept, no measurement or advertising tracker is loaded. You can change your mind at any time from the “Cookie preferences” link in the footer. The detail — each cookie’s name, issuer and lifetime — is in our cookie policy.
Your rights
You have the following rights over the data concerning you:
Access — to know whether we process data concerning you, and to obtain a copy.
Rectification — to have inaccurate or incomplete data corrected.
Erasure — to have your data deleted, where the law does not require us to keep it.
Restriction — to ask us to stop using it without deleting it, while something is checked.
Portability — to receive, in a machine-readable format, the data you provided to us.
Objection — to object to processing based on our legitimate interest, and at any time, without having to give reasons, to direct marketing.
Withdrawal of consent — at any time, for whatever rests on your consent. Withdrawal does not affect what was done before.
Post-mortem directives — to decide what happens to your data after your death.
To exercise them, write to dpo@dadycar.fr, or to Dadycar, 36 rue Raspail, 92300 Levallois-Perret, France. We answer within one month, which may be extended to three months if the request is complex — in which case we tell you within the first month. We may ask for proof of identity if we have reasonable doubt about who is writing; we do not ask as a matter of course.
To unsubscribe from the newsletter, the link is at the foot of every message, and it works in one click.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.
Security, minors and changes
Exchanges with the site are encrypted. Data from the form passes through our own server, which alone holds the key to our systems: that key is never exposed in a page. Access to the data is limited to the people who need it.
This site is aimed at professionals. We do not knowingly collect data concerning people under sixteen.
We may update this policy, in particular if we change host or provider. The date of the last update appears at the top. A change that concerns you directly — a new purpose, a new recipient — will be signalled on the site.