1. Controller
LIBERTY GLOBAL SOLUTIONS LTD · Efesou 9, Paralimni 5280, Cyprus · TIN 60174017M.
2. Data we process
Depending on how you use the service, we may process:
- Identity and contact data: first and last name, email and telephone number.
- Account and authentication data for your personal area.
- Booking data: airport, service date and direction, flight, time, passengers, reference, amount and currency.
- Payment and subscription data. Full card details are entered in the payment provider’s environment; we receive transaction identifiers, status, amounts and metadata.
- Messages sent to support, contact forms and chat.
- Technical and attribution data: IP, browser, device, source URL, performance metrics and, when present in the URL, UTM and advertising click identifiers.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Manage bookings, payments, accounts and subscriptions | Contract performance or pre-contractual steps |
| Provide support and operational communications | Contract performance and legitimate interest in responding |
| Prevent fraud, secure the service and resolve incidents | Legitimate interest and, where applicable, legal obligation |
| Meet accounting, tax and regulatory duties | Legal obligation |
| Measure website technical performance | Legitimate interest, using data not tied to an identifiable visitor |
| Measure campaign attribution | Consent where required by applicable law |
4. Recipients and providers
We share only the necessary data with airport providers that fulfil the service; Primer and payment providers connected to its platform; Supabase for database, authentication and sessions; Vercel for hosting and performance metrics; support and chat providers; and authorities where legally required. If you choose Google sign-in, Google will also process the information required to authenticate you under its own terms.
5. International transfers
Some providers may process data outside the European Economic Area. Where an international transfer occurs, we will use the required mechanism—such as an adequacy decision or Standard Contractual Clauses—and you may request information about the safeguards used.
6. Retention
We keep data for as long as needed to provide the service and manage our relationship with you. We then block or delete it according to applicable accounting, tax, claims and fraud-prevention periods. Enquiries are kept as long as needed to resolve them; account data while the account is active and for applicable liability periods afterwards; and the UTM attribution cookie for up to 90 days. We do not store the full card number in our systems.
7. Your rights
You may request access, rectification, erasure, restriction, objection and portability, and withdraw consent without affecting earlier processing. You may also complain to the data protection authority where you live or to the Cyprus Office of the Commissioner for Personal Data Protection.
8. Security and changes
We apply technical and organisational measures to reduce the risk of unauthorised access, loss, alteration or disclosure. No system is infallible. We may update this policy when the service, providers or law changes; the latest revision date will be published here.