Tomo

Privacy Policy

Draft — Requires Legal Review

This document must be reviewed and approved by a qualified lawyer before use in production.

1. Data Controller

Tomo Flight Claim is the data controller for personal data processed through this service.

2. Data We Collect

We collect the following personal data:

  • Full name and email address (account registration)
  • Flight details and booking references (claim assessment)
  • Correspondence with airlines (claim management)
  • Payment details (settlement processing)

3. Purpose of Processing

We process your data to assess and pursue your EU261/2004 compensation claim, communicate with airlines on your behalf, and transfer compensation payments to you.

4. Legal Basis

We process your data based on the contractual necessity of fulfilling our service agreement (GDPR Article 6(1)(b)).

5. Data Retention

We retain claim data for 3 years after claim resolution, in line with the limitation period for EU261/2004 claims. Account data is retained until you request deletion.

6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict processing
  • Data portability
  • Object to processing

7. Third Parties

We share your data with airlines (to pursue your claim) and payment processors (to transfer compensation). We use Resend for email delivery. We do not sell your data to third parties.

8. Contact

For privacy inquiries, contact us at privacy@claim261.eu.