Aeroisk personal data protection policy

Privacy Policy

The terms "Aeroisk," "We," or "Us" used in the text below refer to and mean the Bulgarian legal entity Aeroisk EOOD, registered in the Bulgarian Commercial Register under UIC 203788586, whose contact details can be found here.

Personal Data Protection

In accordance with our obligations under Regulation 2016/679, we inform you that Aeroisk collects and processes personal data on the legal basis of preparing to conclude, or having already concluded, a contract of mandate, in accordance with our General Terms and Conditions. The purpose of the processing is to enable us to identify you as our contracting party, as well as to identify ourselves as your authorized representative and mandatary before the air carrier against whom we are claiming compensation under Regulation (EC) 261/2004, the Montreal Convention, Regulation (EC) 261/2004, the Montreal Convention, the Air Passenger Rights and Air Travel Organisers' Licensing (Amendment) (EU Exit) Regulations 2019, the Regulation on the Rights of Air Transport Passengers of the Republic of Turkey, the Air Transport Law of the Republic of Serbia, and any other applicable local legislation, on your behalf.

We retain your personal data for the entire duration of our contractual relationship, i.e., until the compensation owed to you has been paid and/or the remuneration owed to us has been settled, and after its termination — for an additional period of up to 5 years, on the grounds of our legitimate interest in having evidence available in the event of possible future claims or disputes, in accordance with the general limitation period under Art. 110 of the Obligations and Contracts Act. Data contained in financial and accounting documents (e.g., invoices) is stored separately for a period of up to 10 years, in accordance with the requirements of the Accountancy Act. Upon expiry of the respective periods, the data is deleted.

You have the right to request from Us information about the personal data collected about you, to have your personal data corrected or deleted, to restrict its processing, to object to its processing, and you also have the right to data portability. These rights may be exercised depending on whether our contractual relationship is active or terminated. Should you wish to exercise any of the above rights, you may send a message with your precise request to office@aeroisk.com.

Providing your personal data is a contractual requirement, and without it we cannot perform the service of collecting the compensation owed to you under Regulation 261/2004. Should you refuse to provide your personal data, the contract of mandate cannot be concluded, or would be void due to the lack of identification of the principal. The personal data we collect and process at various stages of our contractual relationship are: full name, national identification number (EGN), address, phone number, email, and, where necessary, a copy of an identity card or passport.

Data Recipients

In performance of the contract of mandate, we share your necessary personal data solely with the following categories of recipients:

• the relevant air carrier against whom we are claiming compensation on your behalf;
• competent regulatory and alternative dispute resolution bodies (e.g., national aviation supervisory and arbitration authorities), where the case so requires.

Where the liable carrier is established outside the European Union or the European Economic Area, providing your personal data to that carrier is a necessary condition for asserting and collecting the compensation owed to you, and is carried out on the basis of the performance of the contract of mandate between us.

Google Analytics
Google Analytics 4 is installed on our website, which we use to collect statistics on visitors to our website. Google Analytics is a service provided by Google Ireland Limited. More information: policies.google.com/privacy.

Facebook Pixel
Facebook Pixel is installed on our website — a service provided by Meta Platforms Ireland Limited. Facebook Pixel collects information about the actions of website users, necessary for measuring the effectiveness of our advertisements. More information: facebook.com/privacy/policy.

Microsoft Clarity
Microsoft Clarity is used to analyze the behavior of our website visitors, in order to improve the site's usability and functionality. More information: clarity.microsoft.com/privacy.

Google Analytics 4 processes data in accordance with your choice in the cookie banner, pursuant to Google's consent rules and policy (Google Consent Mode) — with consent given, we receive full visitor statistics; without consent, only anonymous, aggregated information is received, which does not allow the identification of a specific visitor. Microsoft Clarity and Facebook Pixel are loaded only after your consent has been obtained via the cookie banner on our website, on the basis of Art. 4a of the Electronic Commerce Act and Art. 6(1)(a) of Regulation 2016/679. Google Analytics 4, Microsoft Clarity, and Facebook Pixel may transfer the processed data to servers outside the European Economic Area. More information can be found in their respective privacy policies (links above). You may withdraw your consent at any time via your cookie banner settings or your browser settings.

Technical Security

Aeroisk uses technical security measures to ensure that our users' personal data is protected against loss, unauthorized alteration, or unauthorized access by third parties.

Complaints

Any correspondence related to this privacy policy, as well as to the exercise of your rights, should be addressed to: office@aeroisk.com.
The state authority you may contact is the Commission for Personal Data Protection (address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, website: cpdp.bg), if you believe that the processing of your personal data violates applicable legislation.