Privacy policy
Last updated
Who we are
Flat Flights (flat.flights) is the data controller for the data described here. Contact: [email protected].
Award booking requests
When you send an award search request we collect your email address, the loyalty programmes and balances you enter, route, dates, cabin, number of passengers and any notes. We use them only to answer your request and, if you go ahead, to send you booking instructions. Legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b)) and the consent you give in the form.
- We never ask for, receive or store frequent flyer passwords.
- Requests are kept for up to 12 months, then deleted automatically.
- Analytics events about the form contain no email, route, dates or balances.
- We do not sell your data or use it for advertising.
Price alerts
If you subscribe to a price alert we store your email, the route and your target price to send you the alert.
Processors
- Cloudflare — hosting, security and storage of requests.
- Resend — delivery of request emails to our team.
- Stripe — payment of booking fees, when you choose to pay. We never see your card details.
- Google Analytics (via Google Tag Manager) — aggregated usage statistics.
Links to Aviasales and other partners are affiliate links; when you click them the partner's own privacy policy applies.
Your rights
You can ask to access, correct or delete your data, or object to its use, by writing to [email protected]. You can also complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali).
In breve (italiano)
Per le richieste award raccogliamo email, programmi e saldi, tratta, date, cabina, passeggeri e note, solo per rispondere alla richiesta. Non chiediamo mai password, conserviamo i dati al massimo 12 mesi e non li vendiamo. Per accesso, rettifica o cancellazione scrivi a [email protected]; puoi rivolgerti anche al Garante privacy.