Your data

Data protection.

What we collect when you book, where it goes, how long we keep it, and how you take back control.

The French version of this page is the legally binding text. This English translation is provided for convenience.

Last updated:

In short

  • We collect only what we need to pick you up: name, phone, e-mail, trip, date and time.
  • No cookies of our own, no advertising trackers, no audience measurement. Only the Google map on the home page may set its own, and you can turn it off for good (see “Cookies and local storage”). Nothing is sold, nothing is rented.
  • Your details are used to run the ride, then to answer a possible complaint. Not to market to you.
  • You can ask at any time what we hold about you, have it corrected or have it erased: gatienmanarii@gmail.com.

Who is responsible

The data controller is the operator of Taxi Manarii Tahiti, to be completed: first and last name, Faa'a, Tahiti — 98704, French Polynesia.

Contact for any question about your data: gatienmanarii@gmail.com — +689 87 28 04 83. No data protection officer has been appointed: the business is not required to have one.

The legal framework that applies here

French Polynesia is an overseas country: the European GDPR does not apply directly. It is law no. 78-17 of 6 January 1978 on information technology, files and freedoms, rewritten by ordinance no. 2018-1125 of 12 December 2018 to take up the GDPR’s requirements, that was extended there (articles 125 and 126 of the law) and has been in force since 1 June 2019. References to the European regulation are read as references to the rules in force in metropolitan France under that regulation.

In practice, the level of protection is the same as in metropolitan France: the same principles, the same rights, and the CNIL remains the competent supervisory authority. Prior declaration formalities have been dropped in favour of ongoing compliance.

What we collect, and why

WhyWhat we collectOn what basisHow long
Handle a booking request Name, phone, e-mail, pickup and drop-off, date and time, number of passengers and bags, vehicle type, flight number and free comment if you provide them and, for a booking made by a partner hotel’s front desk, the hotel name, your room number and the first name of the desk staff member Pre-contractual steps taken at your request 13 months after the ride (the operating year, like the calendar)
Enter the request in the driver’s calendar The same information, copied into a provisional calendar event as soon as you click “Send via WhatsApp”, whether or not the message is then sent, including the message text (GPS position included where applicable) Legitimate interest: not forgetting a ride that has been started 13 months (current operating year)
Answer a complaint, prove a ride History of the request and of the exchanges Legitimate interest: defence of our rights Up to 5 years if a dispute is open
Pre-fill your pickup point The browser’s GPS position, only if you click “my location” Your consent, withdrawable at any time Used in your browser for the estimate, not kept by the site; if you send the request, like the other ride data
Run and secure the website IP address, date and time, page requested, browser type (host logs) Legitimate interest: security and availability Logs viewable by the operator for 3 days (Cloudflare plan used); Cloudflare keeps its own security logs under its policy
Remember your display preferences Language, light/dark theme, map background, Google Maps / classic map choice, last exchange rate, first-visit marker — stored in your browser, never transmitted Functioning requested by you, exempt from consent Until you clear your browser storage

The fields marked required in the form are those without which we cannot call you back. Everything else is optional.

Who sees your data

First: the driver who takes the ride. The website lists several drivers; your request goes to the one you chose.

Then, technical providers, each for a specific function:

Web3Forms (Web3Creative, India)
E-mail relay for the booking form, only when e-mail sending is offered on the site — today, the form sends the request via WhatsApp. It then receives the form fields and keeps a copy under its own policy (30-day history, permanent deletion within three years at most). Web3Forms policy.
WhatsApp / Meta
If you choose WhatsApp, the conversation takes place in WhatsApp: your number and messages then fall under Meta’s terms. WhatsApp policy.
Google LLC (Calendar, Gmail, Places)
Each request is entered in the driver’s professional calendar, provisionally and before any confirmation, as soon as you click “Send via WhatsApp”, whether or not the message is then sent (including the message text); their professional mailbox is hosted by Gmail. The estimator’s place search may also query Google (Places): Google then receives your IP address and the text you type (hotel or residence name, address), with no name or contact details — and nothing at all if you have turned Google Maps off (see “Cookies and local storage”). Google policy.
Cloudflare, Inc.
Hosts and delivers the site. Sees the connection IP address in its technical logs. Derives the country you connect from, used only to pre-select the phone country code in the booking form (nothing is stored). Also keeps, for each ride request, your name, phone number, pickup, drop-off and scheduled time, so that the driver can write you his confirmation without delay; this information is deleted automatically 7 days after the ride. Cloudflare policy.
OpenFreeMap, Esri / ArcGIS
Provide the map backgrounds. Receive your IP address when the map loads. The display library is served by this site.
Photon (komoot GmbH, Potsdam, Germany)
Free-text place search in the estimator. Receives your IP address and the text you type (hotel name, address), with no name or contact details. OpenStreetMap data.
OSRM (project-osrm.org)
Calculates the road route shown on the map. Receives your IP address and the coordinates of pickup and drop-off — including your actual GPS position if you used “my location”.

Your data is neither sold, nor rented, nor passed to advertisers. It may be disclosed to an administrative or judicial authority if the law requires it. No decision producing legal effects concerning you is taken in an automated way.

Transfers outside French Polynesia

These providers are established outside the territory, mainly in the United States and Europe (Web3Forms in India). A transfer of your data outside French Polynesia is therefore unavoidable as soon as you use the site.

Safeguards: Cloudflare, Google and Meta are certified under the EU–US Data Privacy Framework, recognised as adequate by the European Commission — rules in force in metropolitan France, which apply here under article 126 of law no. 78-17. Web3Forms commits to the European Commission’s standard contractual clauses. Esri (United States): only your IP address is sent to load the map backgrounds. OpenFreeMap and Photon (komoot) are established in Germany (European Union). These map services and OSRM receive only technical data (IP address, point coordinates, search text), with no name or contact details.

If that is a problem for you, there is a channel that goes through none of these intermediaries: call +689 87 28 04 83 directly.

Cookies and local storage

This site itself does not place any cookie on visitors’ devices — neither technical, nor advertising, nor audience measurement: no analytics script is loaded. The only third-party service is the Google map on the home page, described below, which you can turn off for good. Only the administration area, reserved for the operator and password-protected, uses a 30-day session cookie; it does not concern visitors.

Your browser’s local storage only holds display and convenience settings: the chosen language, the light or dark theme, the preferred map background, your Google Maps / classic map choice, the last euro–dollar rate used for the indicative equivalents and a first-visit marker. No booking data and no location is kept there. This information never leaves your device and does not identify you. You delete it by clearing this site’s data in your browser.

Google Maps on the home page. The route map on the home page is displayed by Google Maps as soon as you reach it: the browser then loads Google Maps, which may set its own cookies and send your IP address to Google LLC (United States), under Google’s privacy policy. You can turn it off for good: open the site without Google Maps replaces that map with a map without Google (Esri and OpenStreetMap backgrounds, no cookie) and also turns off the estimator’s Google place search (Places), which falls back to Photon (OpenStreetMap). This choice is remembered in your browser’s local storage (manarii-gmaps) and is undone by opening the site with Google Maps or by clearing this site’s data.

The site also installs a service worker that caches its own files (pages, styles, images, fonts) to speed up later loads. This cache contains no personal data: exchanges with the booking server are excluded from it.

Geolocation

The “locate me” button is used to set your GPS position on pickup (by default) or drop-off, depending on the A or B chip chosen. Your browser first asks for permission: without it, nothing happens, and the site remains usable by picking your place from the list.

Two honest details: your coordinates are used in your browser to find the nearest place, but they are sent to OSRM to draw the route on the map, and they are included in the booking message sent to the driver — and therefore in their calendar — which is precisely what lets them find you. You can withdraw permission at any time in your browser settings.

Your rights

You have, over the data that concerns you, the following rights: access, rectification, erasure, restriction, objection and portability. You may also set instructions on what happens to your data after your death.

To exercise them, write to gatienmanarii@gmail.com giving the approximate date of your ride request, so we can find it. Reply within one month. If there is serious doubt about your identity, proof may be requested.

If the reply does not satisfy you, you may contact the CNIL, the competent authority for French Polynesia: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr/fr/plaintes.

Security

The site is delivered exclusively over HTTPS, with a browser security policy (CSP) that only allows the services the site needs, and headers protecting against inclusion in a third-party frame. Access to the driver’s mailboxes and calendar is password-protected.

No measure is infallible. In the event of a data breach likely to result in a high risk to your rights, you would be informed without undue delay.

Minors

The service is aimed at adults. A booking for a minor travelling alone must be made by a parent or legal guardian, who remains the driver’s contact.

Changes to this page

This policy may change if the service changes — for example if an online payment method or audience measurement were added. The last-updated date at the top of the page is authoritative. A substantial change would be flagged on the home page.