Privacy Notice for EU Users (GDPR)
This notice explains how CashMyFlight processes personal data of users in the European Union, and supplements the Hebrew-language privacy policy.
Controller
CashMyFlight is the controller of the personal data described here. Contact: [email protected].
Purposes and legal bases
- Performing the eligibility check and handling your claim — performance of a contract, Art. 6(1)(b) GDPR.
- Service security and integrity — our legitimate interests, Art. 6(1)(f) GDPR.
- Marketing — only with your consent, Art. 6(1)(a) GDPR, which you may withdraw at any time.
Data we process
Flight details, contact details, passenger details, documents you upload, and signature-evidence data (IP address, timestamps).
Recipients
- The airline and its agents — as part of the claim itself.
- The legal advisors handling the case.
- Infrastructure providers (hosting; case documents are stored within the EU).
- Authorities — where required by law.
Personal data is never sold.
Retention
Case files are kept for 7 years from the closure of the case; inquiries that did not become a case are kept for up to 24 months.
Your rights
Under Articles 15–21 GDPR you may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing. Where processing is based on consent, you may withdraw it at any time. You may also lodge a complaint with your local supervisory authority.