Privacy Policy

1. Who We Are (Data Controller)

The data controller responsible for your personal data is MITRANI CONSULT EOOD, trading as "Jet2Pay". Our registered details are set out in the Imprint; items still being finalised are shown as placeholders such as [Registered address].

For any question about how we handle your personal data, contact us at [Privacy contact email].

2. Personal Data We Collect

To assess and pursue your compensation claim, we collect:

• Identity and contact details: your full name (as shown on your booking), email address and telephone number
• Flight information: flight number, date, and departure and arrival airports
• Disruption details: the type of disruption and any description you provide
• Booking reference / PNR
• Documents you upload to support your claim (for example, boarding pass, booking confirmation, or proof of identity)
• Payment details where needed to pay compensation to you (for example, bank account information)

3. Purpose & Legal Basis

We process your personal data for the following purposes:

• Contract performance: to assess, prepare and pursue your compensation claim, including communicating with the airline
• Legitimate interest: to keep you updated on your claim and to improve our services
• Legal obligation: to comply with applicable tax, accounting and consumer-protection requirements

4. Who We Share Data With

We share your data only as necessary to pursue your claim, with categories of recipients including:

• The airline your claim is directed against, and relevant aviation authorities
• Our legal partners and courts, where legal action is required, and trusted service providers (for example, email delivery) acting on our instructions

5. Data Retention

We keep your personal data only as long as necessary for the purposes above and to meet legal obligations. Placeholder: our standard retention period is [Retention period] (expected to be 6 years from the conclusion of your claim, pending final confirmation) to comply with tax and accounting rules and to handle any disputes.

6. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: obtain a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your data (subject to legal retention requirements)
• Data portability: receive your data in a structured, machine-readable format
• Restriction: ask us to limit how we use your data
• Object: object to processing based on our legitimate interests

7. Contact & Complaints

To exercise any right or for a privacy enquiry, contact us at [Privacy contact email]. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or your local data protection supervisory authority.