AirClaim

Privacy Policy

This Privacy Policy explains what personal data AirClaim collects, why, and how we protect it. We comply with the EU General Data Protection Regulation (GDPR).

1. Data controller

AirClaim is the data controller for personal data processed on this platform. Contact: privacy@air.qbe.ru.

2. What data we collect

Category	Examples	Purpose
Account data	Name, email, username	Account creation and identification
Flight data	Flight number, booking reference, dates, airports	Eligibility assessment and letter drafting
Documents	Boarding pass, e-ticket, receipts (PDFs / images)	Supporting evidence in complaints
Communication data	Correspondence with airlines, notification preferences	Claim management and follow-up
Technical data	IP address, browser type, access logs	Security, fraud prevention, diagnostics

3. Legal basis for processing

• Contract performance — processing necessary to deliver the service you signed up for;
• Legitimate interests — security, fraud prevention, product improvement;
• Legal obligation — compliance with applicable laws;
• Consent — marketing emails (you may withdraw consent at any time).

4. How we share your data

We share data only as necessary:

• Airlines — we submit your claim details and documents on your behalf;
• National enforcement bodies (NEBs) — for escalated claims only;
• Service providers — email delivery (Resend), infrastructure hosting; all bound by GDPR-compliant data processing agreements;
• Legal authorities — if required by law.

We do not sell your data to third parties.

5. Data retention

We retain your data for as long as your account is active or as needed to provide services. Claim records are kept for 6 years after resolution (statute of limitations). You may request deletion at any time (subject to legal retention obligations).

6. Your rights (GDPR)

• Access — request a copy of your personal data;
• Rectification — ask us to correct inaccurate data;
• Erasure — request deletion ("right to be forgotten");
• Portability — receive your data in a machine-readable format;
• Restriction — limit how we process your data in certain circumstances;
• Objection — object to processing based on legitimate interests.

To exercise any right, email privacy@air.qbe.ru. We will respond within 30 days.

7. Cookies

We use only essential session cookies required for authentication. We do not use advertising or tracking cookies.

8. Security

We protect your data using industry-standard measures: HTTPS/TLS encryption in transit, hashed passwords, access controls, and regular backups. No method of transmission or storage is 100 % secure; we will notify you of any breach as required by GDPR.

9. International transfers

Your data is stored within the European Economic Area. Where third-party processors transfer data outside the EEA, we ensure adequate safeguards (Standard Contractual Clauses or equivalent) are in place.

10. Children

Our service is not directed to individuals under the age of 18. We do not knowingly collect data from children.

11. Changes to this Policy

We may update this Policy from time to time. Significant changes will be communicated by email. The "Last updated" date above reflects the most recent revision.

12. Contact & complaints

For privacy queries: privacy@air.qbe.ru.

You also have the right to lodge a complaint with your national data protection authority.

---