Privacy notice

Template. Replace the bracketed parts with your details and have it checked before launch.

Controller

[Name], [Address], [Email]. See the imprint.

What we process

Flight check. Your inputs (airports, airline, date, optional flight number, disruption details, claim status and the reason the airline gave) are processed in your browser to compute the result. An anonymous event with these inputs and the result is sent to our server and stored, together with a random session identifier, the page path, referrer, UTM campaign parameters and the country derived from your IP address. We do not store your IP address, name or email in this record. Legal basis: legitimate interest in measuring and improving the service (Art. 6(1)(f) GDPR).

Free kit by email. During the launch phase the kit is free. With your consent we store your email address together with your case details and send you the kit and occasional updates about this service. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link or by email; the kit itself is provided under Art. 6(1)(b) GDPR.

Marketing pixel. Only if you click “Yes” in the banner, we load [Reddit Pixel / Google Analytics], which set cookies and transmit usage data to [Reddit Inc. / Google Ireland Ltd.]. Legal basis: consent (Art. 6(1)(a) GDPR), revocable by clearing your browser storage for this site.

Kit orders. When you order a kit we store the details you enter for the letter (name, address, email, phone, booking reference, flight details, optional bank details for the payout, optional text of the airline’s rejection) together with the generated assessment and the retrieved evidence data, in order to produce and keep your documents available. Payment is processed by Stripe Payments Europe Ltd.; we receive only the payment status and a session reference, never card numbers. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Orders are kept for 3 years (limitation and accounting obligations) unless you ask for earlier deletion of personal data not required for accounting.

Hosting

The site and database are hosted on Cloudflare (Cloudflare, Inc., with EU data processing per its Data Processing Addendum). Cloudflare processes connection data (IP address, request headers) for delivery and security.

Retention

Anonymous event data is kept for 24 months. Waitlist entries are deleted on request or 12 months after launch.

Your rights

You have the right to access, rectify, erase and restrict processing of your data, to object, and to lodge a complaint with a supervisory authority. Contact: [Email].