Privacy and your rights (GDPR)

What this is for

GDPR is the European law on personal data protection. It gives you several rights.

You have the right to get a copy of your data. You have the right to correct it. You have the right to tell us to delete it.

This page lets you use those rights yourself, without writing to anyone.

Who it is for

For every logged-in customer.

What you see

The page is called "Privacy and data". The subtitle: "Your GDPR rights: access, export, retention and account deletion.".

The cards on the page:

Data export

Description: "Download all your data (profile, bookings, reviews, consents) in JSON format.".

Fields:

Confirm your password — type your account password. Hint: "The file contains decrypted traveller document numbers — we ask for your password at every download.". Errors: "Enter your current password", "The export could not be prepared — check your password.", "The password is incorrect.".

The "Download JSON export" button. While it is being prepared you see "Preparing your file…".

Under it a note: "The download link is one-time and expires after 10 minutes. The file contains only data linked to your account, including decrypted traveller document numbers.".

Saved travellers

Description: "Travellers saved in your traveller vault with automatic retention.". You see a list of people with "with document" or "without document" plus "retention until" and a date.

Processing information

Description: "How personal data is processed at Airsockfly." with a "See the privacy page" link.

Account deletion

Description: "The account will be anonymised: personal data removed, billing data kept with no link to you. The operation cannot be undone.".

Fields:

Confirm with your password — your password. Hint: "Deleting the account cannot be undone, so we ask for your password again.".

I understand that deleting the account cannot be undone and will anonymise my data. — a tick box, obligatory. Error: "Confirm that the operation cannot be undone.".

The "Delete account" button. While it runs you see "Deleting…".

Step by step

Downloading your data

1. Go to "Settings" → "Privacy and data".
2. In the "Data export" card type your password.
3. Click "Download JSON export".
4. You will see "Your export file is ready — the download will start automatically.".
5. The file saves to your device.

Deleting your account

1. Read the description in the "Account deletion" card.
2. Type your password.
3. Tick the confirmation box.
4. Click "Delete account".
5. You will see "The account has been deleted (data anonymised)." and you will be logged out.

What happens next

What is inside the export file

The file is in JSON format (a plain text file that computers read). Inside there are sections:

• profile — your account details,
• tripOrders — orders,
• hotelBookings, flightBookings, tourBookings, carBookings — bookings,
• insurancePolicies — policies,
• reviews — your reviews,
• consentLogs — the history of your consents,
• savedSearches, priceAlerts, wishlists — saved searches, alerts and saved offers,
• notifications — notifications,
• travellers — saved travellers, and here the document numbers are decrypted.

The download link works for 10 minutes and only once. It dies after use. That way a link that accidentally lands in your browser history or in logs is useless.

You can download the export at most 3 times an hour. Beyond that the download is refused.

What account deletion actually does

We do not erase everything without a trace. The law requires us to keep accounting documents.

So we perform anonymisation:

• Your first name, surname, e-mail and phone are replaced with substitute values. The e-mail becomes deleted-…@anonymized.airsockfly.local.
• Your sessions are invalidated — we log you out of every device.
• Traveller details from the vault are anonymised.
• Orders, payments, invoices and accounting records stay, but with no link to you. It is not possible to read from them who placed them.
• Every such operation goes into our audit log.

Deleting your account does not cancel ongoing bookings. If you want to cancel them, do that first.

Frequent questions

Why a password if I am already logged in? Because the file contains decrypted document numbers, and deleting the account cannot be undone. The password proves it really is you, not someone at your unlocked laptop.

The link expired before I clicked it. What now? Type your password again and ask for a new export. The old link does not work.

Can I get my account back after deleting it? No. Anonymisation cannot be undone. The page says so three times, exactly for that reason.

How do I change marketing consent without deleting my account? Go to "Settings" → "Notifications" and flip the "Inspiration and promotions" switch. Every consent change is recorded with us.

I cannot open the JSON file. Open it in a browser or in a plain text editor. It is text. You can also paste its content into a free online JSON viewer — but remember the file holds your personal data.