Privacy Policy

Effective from 24 September 2026.

This notice explains how personal data is handled when you visit passenger.care or contact us about our airline claims software.

Who is responsible

The controller is Marianna Ukrainets, LL.M., registered business name Marianna Ukrainets, IČO 56496907, Bociania ulica 434/3, 931 01 Šamorín, Slovakia. Contact: sales@passenger.care.

Website visits and local tools

SiteGround hosts this website. Technical access logs can contain your IP address, request time, requested URL, browser information, response status and referring page. We use this information to operate the website, investigate errors and protect it against misuse.

The website has no account registration, payment processing, enquiry submission backend or AI chat. Its examples contain synthetic case data. The email preparation tool processes what you type in your browser; it does not store it on our server or send it to us. Opening your email application or copying the message is a separate step, and you choose whether to send it.

Google Tag Manager loads CookieYes to present and record cookie choices. Loading those scripts makes technical requests to Google and CookieYes, which can receive your IP address and browser information even before you decide about analytics. CookieYes can count banner displays and page loads for its consent dashboard independently of Google Analytics. When you allow optional analytics, Google Analytics 4 measures page views and defined interaction steps, such as opening the evaluation guide or preparing an email, without sending the contents of the contact form or prepared email. The analytics page URL excludes query parameters. Analytics cookies and the consent preference are described in our Cookie Policy. If you reject analytics, GA4 is blocked; SiteGround's technical logs continue to operate.

Business enquiries

If you email us, we receive your email address, any name, role, organisation, signature or attachments you include, and the content of your correspondence. Providing this information is voluntary, but we need enough information to reply and understand your request. Please do not send passenger records, booking documents, identification documents or sensitive personal information through this business-enquiry channel.

Correspondence is held in Microsoft 365 and handled by Marianna and authorised team members. We use it to answer questions, discuss a relevant workflow, arrange an evaluation and manage the resulting business relationship. There is no automated forwarding of enquiries to AI platforms and no automated newsletter subscription.

Human use of AI assistance

An authorised team member may manually use an AI tool, such as OpenAI ChatGPT or Google Gemini, to help understand, summarise, translate or prepare a response to a business enquiry. Relevant content entered into that tool is then processed by its provider. This is separate from the website and is not an automatic connection to the mailbox.

Our handling rule is to remove names, contact details and confidential material where they are not needed for the task. Identifiable or confidential content requires an appropriate service configuration and processing arrangement before it is shared. The provider, account type and settings affect retention, human review and use for service improvement; no blanket promise that every AI service has identical protections is made. A team member remains responsible for the response. You may tell us that you do not want your enquiry used with external AI tools.

This notice concerns business enquiries to Passenger.care. Passenger data processed in an airline's on-premises Passenger.care deployment is governed by that airline's deployment and data-processing arrangements.

Purposes and legal bases

We rely on legitimate interests under Article 6(1)(f) GDPR to operate and secure this website, respond to business representatives and manage relevant professional correspondence, including proportionate human-assisted preparation of replies. Those interests are running a secure service and communicating effectively with organisations considering our software. We consider the necessity of the processing and the impact on the people concerned. Optional Google Analytics is used only with your consent under Article 6(1)(a) GDPR, which you may withdraw using “Cookie settings”.

Where an individual asks us to take steps towards a contract with them, Article 6(1)(b) applies to those steps. Where a specific legal obligation requires us to retain or disclose information, Article 6(1)(c) applies. This website does not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Recipients and international processing

Access is limited to Marianna and authorised team members, with service providers involved in hosting, consent management, email, consented analytics and any manually selected AI assistance. The relevant providers are SiteGround, CookieYes, Microsoft and, where used, Google, OpenAI or another disclosed AI provider. Information may also be disclosed where required by law or necessary to establish, exercise or defend a legal claim.

These providers operate internationally, and processing may take place outside the European Economic Area. International processing must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, together with any necessary additional measures. Contact us for information about the provider and safeguards relevant to your enquiry. We do not treat the choice of an AI product alone as proof of a particular processing location or transfer arrangement.

Provider information: SiteGround privacy information, Microsoft Privacy Statement, OpenAI Privacy Policy and Gemini privacy information. Opening these links takes you to the provider's website.

How long information is kept

Closed business enquiries are retained for no more than 12 months after the last substantive communication and then deleted through regular review. Ongoing negotiations, contractual records and material needed for legal obligations or claims are retained separately for as long as that purpose requires. This is a records-management policy, not an automated deletion feature of the website.

The hosting account provides a rolling set of approximately 30 days of raw access-log archives. A relevant extract may be retained longer where needed to investigate a specific security incident or meet a legal obligation. Provider backups, security records and any content entered into a separate AI service are subject to that service's applicable retention arrangements; deleting a mailbox message does not itself delete a separate provider copy.

The CookieYes consent choice is retained for the period configured in the banner. The GA4 property is configured to retain user and event data for 14 months without resetting that period when a user returns. Most standard aggregated reports are not governed by this event-data setting. Google's and CookieYes's applicable service terms also apply.

Your rights

Subject to the applicable conditions, you can request access, correction, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests, including the use of your enquiry with external AI assistance. Send your request to sales@passenger.care. We may ask for information necessary to verify the request and will respond within the applicable statutory time limits.

You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic or another competent supervisory authority, including in the EU country where you live or work. The Slovak authority's website is dataprotection.gov.sk.

Changes

We update this notice when our processing changes. The effective date above identifies this version.