1. Introduction
SkyAid values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or services.
2. Controller & Contact
The data controller is Søren P Nielsen, CPA, operating the SkyAid platform (skyaid.eu). For any privacy requests, email [email protected].
3. Data We Collect
- Identity & contact details (name, email, phone—when you create an account or submit a claim).
- Flight details & booking references (to assess eligibility and process claims).
- Uploaded documents (e.g., boarding passes, tickets, receipts).
- Technical data (IP address, browser, device, security logs).
- Support/chat content you provide via our website widget.
- Payment/payout details as required to remit compensation.
4. How We Use Your Data
- To check and process flight compensation eligibility and manage your claim.
- To extract information from documents (e.g., using Google Cloud Vision API) that you upload.
- To communicate with you about status, evidence requests, and payouts.
- To operate, secure, and improve our site and services (including fraud prevention and diagnostics).
- To comply with legal, accounting, and regulatory obligations.
5. Lawful Bases
We process your data on the following legal bases under GDPR/UK GDPR:
- Contract: to provide our services and manage your claim.
- Legitimate interests: service quality, security, fraud prevention, and defending legal claims.
- Legal obligation: record-keeping and compliance requirements.
- Consent: where required (e.g., certain cookies or optional communications). You can withdraw consent at any time.
7. International Transfers
Some providers may process data outside your country. Where applicable, we use safeguards such as the EU Standard Contractual Clauses, UK addendum, or equivalent mechanisms.
8. Data Retention
- Case files & invoices: up to 7 years (legal/accounting).
- Support/chat logs: up to 24 months.
- Security & access logs: up to 12 months.
- We may retain limited data longer if needed to establish, exercise, or defend legal claims.
9. Your Rights
- Access, rectification, deletion, and restriction.
- Objection to processing based on legitimate interests.
- Data portability (where applicable).
- Right to withdraw consent (where processing is based on consent).
- Right to lodge a complaint with your data protection authority.
To exercise your rights, email [email protected]. We will respond within statutory timelines.
11. Data Security
We use HTTPS/TLS, access controls, encryption at rest where applicable, and other safeguards. Document uploads are processed securely and are not visible to other users.
12. Children’s Data
Our services are not directed to children under 16. If you believe a child has provided data to us, contact [email protected] so we can address it.
13. Changes to this Policy
We may update this Policy from time to time. We will post the latest version here with a new effective date.
14. Contact
For questions or privacy requests, contact: [email protected]