Privacy Policy
Draft — Requires Legal Review
This document must be reviewed and approved by a qualified lawyer before use in production.
1. Data Controller
Tomo Flight Claim is the data controller for personal data processed through this service.
2. Data We Collect
We collect the following personal data:
- Full name and email address (account registration)
- Flight details and booking references (claim assessment)
- Correspondence with airlines (claim management)
- Payment details (settlement processing)
3. Purpose of Processing
We process your data to assess and pursue your EU261/2004 compensation claim, communicate with airlines on your behalf, and transfer compensation payments to you.
4. Legal Basis
We process your data based on the contractual necessity of fulfilling our service agreement (GDPR Article 6(1)(b)).
5. Data Retention
We retain claim data for 3 years after claim resolution, in line with the limitation period for EU261/2004 claims. Account data is retained until you request deletion.
6. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict processing
- Data portability
- Object to processing
7. Third Parties
We share your data with airlines (to pursue your claim) and payment processors (to transfer compensation). We use Resend for email delivery. We do not sell your data to third parties.
8. Contact
For privacy inquiries, contact us at privacy@claim261.eu.