Airhelp privacy & data

AirHelp Germany GmbH is considered to be the data controller as it determines the purposes and means of the processing of personal data.

We primarily collect personal data such as names, dates of birth, addresses, email addresses, telephone numbers, passports/IDs, and national identification numbers.

Biometric data: facial features;

general geographic location (e.g., city, country) of the individual's device;

software and hardware attributes (camera name and type);

we may also process information about how you interact with AirHelp, including your use of our website, account, Mobile App, e-mail communications and Services

including payment and bank account information against sanction lists

We collect this personal data for the purpose of delivering our Eligibility Service, Information Service, AirHelp Plus Membership, Compensation Service, and any other Services in accordance with the agreement.

We may use your personal data to send you marketing communications which we believe may be of interest to you.

Unless expressly stated in this Privacy Statement, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and no legal obligations to retain data conflict with the deletion.

We may retain your information for as long as your account is active or as needed to provide services, comply with our legal obligations, or any of the purposes listed above.

For transfers to countries for which the EU Commission has issued an adequacy decision (e.g., Great Britain, Canada, and Israel), the security of the data during transfer is guaranteed (Art. 45 para. 3 GDPR).

EU-US Data Privacy Framework: If data is transferred to service providers in the USA, the legal basis is an adequacy decision of the EU Commission, provided the service provider has certified itself under the EU-US Data Privacy Framework.

Standard Contractual Clauses (SCCs): In other cases, where no adequacy decision exists, the legal basis for data transfer typically relies on Standard Contractual Clauses.

If you wish to access, rectify, or erase personal data, restriction of processing, or to object to processing as well as use the right of data portability, please contact the DPO email: [email protected] .

You have the right to request access to and rectification or erasure of personal data, or restriction of processing, or to object to processing as well as the right to revoke a given consent and the right of data portability, at any time.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data.

We will not disclose personal data to third parties for the purpose of allowing them to market their products or services to you.