Fight4Flight

Privacy Policy

Last updated: October 7, 2026

1. General Information

The privacy of your personal data is an absolute priority for FIGHT FOR FLIGHT SRL (hereinafter referred to as "Fight4Flight"). This document is intended to inform you in detail about the processing of your personal data in the context of your use of our website and services.

We process data in full compliance with Regulation (EU) 2016/679 ("GDPR") and the applicable Romanian legislation (Law no. 190/2018).

2. Categories of Data Processed

In order to evaluate and process your claim for compensation, we collect and process the following categories of personal data:

  • Identification data: Full name, first name, series and number of the identity card or passport (only in the phase of signing the power of attorney).
  • Contact details: Email address, phone number, residential address.
  • Travel details: Airline, flight number, booking code (PNR), departure and arrival airport, flight date, boarding pass, and other supporting documents.
  • Financial data: Bank account (IBAN) and account holder's name (for transferring the recovered compensation).

3. Purposes and Grounds for Processing

We process your data on the following legal bases:

  • Performance of a contract/mandate (Art. 6 para. 1 let. b of GDPR): To evaluate the case eligibility, draft formal requests for payment, and represent you before the airline or court.
  • Legal obligation (Art. 6 para. 1 let. c of GDPR): To fulfill financial-accounting and tax obligations (invoicing the success fee, tax reporting).
  • Your consent (Art. 6 para. 1 let. a of GDPR): For sending informative or marketing messages (if you have explicitly opted for this).

Emails that are essential to handling your claim are sent on the basis of our mandate contract with you (GDPR art. 6(1)(b)), whether or not you opted in to updates. They include requests for documents or a signature, claim status notifications such as dispatch to the airline, and notices about your compensation payout. If you check "Keep me updated on my claim", Fight4Flight will additionally send optional claim status updates by WhatsApp and, where applicable, SMS on the basis of your consent (GDPR art. 6(1)(a)). Messages are strictly limited to your claim and are never advertising. Consent is recorded with the date and consent text version; it can be withdrawn at any time by writing to contact@fight4flight.ro or via an unsubscribe link, where we have sent you one. Withdrawing consent stops the optional WhatsApp and SMS updates but not the emails that are essential to your claim.

4. Data Retention Period

As a rule, your personal data will be stored for the entire duration of the mandate contract, as well as subsequently for a period of 5 years (corresponding to the general limitation period and accounting archiving obligations provided by national legislation).

If the verification request is not finalized with a mandate contract (the case is declared ineligible), your data will be deleted or anonymized within a maximum of 6 months after the evaluation.

5. Recipients of Personal Data

To achieve the purposes described above, Fight4Flight may transmit or provide access to certain personal data to the following categories of recipients:

  • The air carrier targeted by the compensation claim.
  • National civil aviation regulatory authorities (e.g., AACR in Romania) and courts of law (if legal action is required).
  • Technical and IT service providers (web hosting, email and SMS communication services like Resend and Twilio, digital signature platforms).
  • Legal consultants, collaborating lawyers, or partner notary offices.
  • Google Ireland Ltd / Google LLC (advertising measurement): after you sign the assignment, and only if you chose "Accept all" in the cookie banner, we transmit server-to-server your email address and phone number as SHA-256 hashes, the Google click ID and the conversion value. Google acts as processor or controller under Google's terms. If you refuse, click IDs and hashed identifiers are not stored or sent; UTM parameters, the landing page and the referrer origin may still be stored on your claim for first-party reporting. Queue rows are purged about 120 days after processing, and erasure requests cascade to them.

6. Your Rights Under GDPR

As a data subject, you benefit from the following specific rights:

  • Right of access: To obtain confirmation of whether or not we process your data and details about the processing.
  • Right to rectification: To request the correction of inaccurate or incomplete data.
  • Right to erasure ("the right to be forgotten"): Under the terms of the law, when the data is no longer necessary or you withdraw your consent.
  • Right to data portability: To receive your data in a structured, commonly used, and machine-readable format.
  • Right to lodge a complaint: With the National Supervisory Authority for Personal Data Processing (ANSPDCP) based in B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest.

To exercise these rights, you can send us a written request to the email address: contact@fight4flight.ro.