Privacy Policy

Last updated: [DATE]. This page is a working draft based on how the site actually works technically — have it checked by a Steuerberater/lawyer once your business registration is finalised, before relying on it in production.

1. Who is responsible for your data

The data controller for this website is [FULL LEGAL NAME AND ADDRESS — see Imprint page]. Contact for privacy questions: [PRIVACY EMAIL].

2. What data we collect and why

When you use the compensation checker, we collect: your name, email address, flight number, flight date, departure and arrival airports, and the length of the delay. We use this data to:

• Calculate whether you are likely entitled to compensation under EU Regulation 261/2004, and store the result;
• If you choose to purchase a claim letter, generate that letter and (depending on the airline) either send it on your behalf or show you where to submit it yourself.

The legal basis for this processing is the performance of a contract with you (Art. 6(1)(b) GDPR) — we need this data to provide the service you're requesting.

3. Who we share data with

We use the following processors to run the service. Each only receives the data it needs to do its job:

• Payment provider (Stripe or Paddle) — handles your payment. We never see or store your card details.
• AI provider (Anthropic) — receives your flight details and name to draft the claim letter text. This data may be processed outside the EU/EEA, under Anthropic's standard contractual clauses.
• Email provider (Resend), only for the small number of airlines where we can submit your claim automatically on your behalf.
• Analytics (StatCounter), only after you accept cookies via the banner shown on the site — see section 5.

4. How long we keep your data

We keep case records for as long as needed to provide the service and to allow you to follow up on your claim, and in any case no longer than legally required for accounting purposes. EU261 claims can generally be pursued for several years after the flight, so we may retain your case data for that period unless you ask us to delete it sooner (see section 6).

5. Cookies

This site only uses cookies that are strictly necessary to function (such as remembering your language choice) without asking for consent, since these do not track you. Analytics cookies (StatCounter) are only loaded after you actively click "Accept" on the cookie banner; if you click "Decline" or ignore the banner, no analytics cookies are set.

6. Your rights

Under the GDPR, you have the right to access, correct, delete, or export your data, to object to or restrict its processing, and to lodge a complaint with your national data protection authority. To exercise any of these rights, contact us at [PRIVACY EMAIL].