Privacy Policy

Defined terms in this Privacy Policy has the same meaning as in the Terms of Service.

We will process your personal data in compliance with the Swedish Personal Data Act (SFS 1998:204) or the General Data Protection Regulation (EU 2016/679) (“GDPR”), whichever is applicable at the time, and this Privacy Policy.

We are the personal data controller for the personal data you provide directly to us when you contact us or when you create or modify your account. We encourage you to regularly visit the Privacy Policy as it may be updated from time to time.​

1. COLLECTION OF PERSONAL DATA
1.1 We may ask you to provide the following categories of personal data through the Platform: name, e-mail address, mobile phone number, billing address, gender, title, date of birth, passport number, information about your reward system(s), login credentials to your reward system(s), promotion code, and voucher.

We may need to ask you for additional personal data in case the airlines, hotels or other entities require that information.

​2. USE OF PERSONAL DATA
2.1 We will process your personal data for the purpose of providing you with the Service, to receive payment from your use of the Service and to communicate with you within the scope of the Service.

In order to improve the Service offered to you we may process some of your personal data. We may also send you information regarding the Service and offers. If you do not wish to receive such information, you may opt-out by sending an e-mail to the address specified below.

2.2 The legal ground for processing your personal data is to perform the Service and to fulfill the agreement between us and you, specifically article 6.1 b GDPR.

For Service development and to improve the Service to you and to provide you with information about the Service the legal ground is article 6.1 f GDPR.

2.3 When you ask us to book a flight or other service we will transfer the personal data required to the airline or other entity and they will become data controller of that personal data. It is therefore important that you read and understand their privacy policy. Any questions that you might have regarding their processing of personal data should be directed to them.

2.4 We may also be required by law to disclose personal data to a third party or a regulatory authority.

2.5 Personal data that you provide to us will be securely stored by us for your convenience as long as you remain a customer. If you want us to delete your personal data or customer account, please contact us using the information below.

3. SUBCONTRACTORS
3.1 We may use third party providers to host and provide the Service. If such third party provider processes personal data, we will enter into necessary agreements with them in order to abide by the applicable data protection law. Any subcontractor will be a data processor for the processing of personal data within the Service. Personal data will only be stored in EU/EEA. We are currently using Google Firebase to host the Service and to store personal data.​

4. SECURITY​
4.1 We are using adequate technical and organizational security measures to ensure that your personal data is not misused, lost or unlawfully accessed. Your personal data will at all times be handled in accordance with the requirements of the, at the time, applicable data protection law.

5. USER RIGHTS
5.1 We take all reasonable steps to ensure that your personal data is correct and up-to-date. If you believe that your personal data stored by us is incorrect, please notify and provide us with the correct data so that it can be rectified and updated. You may also correct and update the personal data provided by you directly by accessing your account, or by chatting with your agent. We kindly ask you to update your personal data if needed.

5.2 You are entitled to, once a year, obtain information about your personal data stored and handled by us at no cost. The request must be made in writing and sent to the address below.

5.3 You always have the right to object to our processing of your personal data. The effect may be that you are no longer able to use the Service. We will in such case stop the processing of your personal data and delete your account.

5.4 Under the GDPR you will have the right to data portability; in case you want to utilize such right please contact us by using the information below.

5.5 If you have any inquiries regarding our processing of your personal data, please contact us. If you are displeased with our processing of personal data, you may file a complaint to the Data Protection Authority.​

Email: ab@chatflights.com