Privacy Policy
Version dated [PUBLICATION DATE]
This Policy explains what personal data https://fly2baku.com ("Website") collects, why, how it is stored and what rights you have. It has been prepared in accordance with the Law of the Republic of Azerbaijan on Personal Data and other applicable legislation.
1. Who processes your data
Data controller: [LEGAL ENTITY NAME], VÖEN (Tax ID) [VÖEN], registered address: [REGISTERED ADDRESS] ("Fly2Baku", "we").
Contact for personal data questions: incoming@fly2baku.com, +994 10 100 0218.
2. What data we collect
Through booking and contact forms:
- first and last name;
- email address;
- phone number (and preferred messenger, if you provide one);
- booking details: service, date and time, number of travellers, hotel address or meeting point, flight number and arrival time (for transfers);
- special requests you choose to share (for example, child seat, luggage, mobility needs). Please share only the health information needed to provide the service.
For card payments:
- we receive from the bank only the payment result (success / failure), order number, amount, date and possibly a masked card number (for example,
4111 **** **** 1111); - full card details (number, expiry date, CVV/CVC) are entered only on PAŞA Bank's payment page. We do not receive or store them.
Technical data:
- IP address, browser and device type, date and time of requests, in server logs, for security and operation of the Website;
- cookies (see Section 7).
3. Why we use your data
- to process, confirm and deliver your booking (contact you, assign a guide and driver, meet you at the airport);
- to take payments and make refunds;
- to answer questions and complaints;
- to meet legal obligations (accounting and tax records);
- to keep the Website secure and prevent fraud.
We do not sell your data and do not send you marketing without your separate consent.
4. Legal basis
We process data on the basis of your consent (checkbox in the booking form), to conclude and perform the agreement (Public Offer), and to comply with legal obligations.
5. Who we share data with
Only as needed to provide the service:
- our staff, guides and drivers: name, phone, meeting time and place, flight number;
- notification services: Website requests are sent automatically to our staff by email (SprintHost, Russian Federation) and via Telegram (Telegram Messenger). These services may have servers outside Azerbaijan;
- our hosting provider: Sprintbox, servers located in the Russian Federation (St. Petersburg);
- PAŞA Bank and the Visa / Mastercard card schemes, to process payments and refunds;
- government authorities, only when lawfully required.
Where data is transferred outside Azerbaijan (for example, via Telegram or hosting), we do so to perform your booking and with your consent, in line with personal data legislation.
6. How long we keep data
- booking data and correspondence: 3 years after the service, to handle possible claims;
- payment and accounting records: for the period required by tax and accounting law;
- server logs: up to 90 days;
- requests that did not become bookings: up to 3 years.
After that, data is deleted or anonymised.
7. Cookies
The Website uses only strictly necessary cookies, for example to remember your language and to make the booking form work. We do not use advertising cookies. [If analytics such as Google Analytics is added, list it here and show a consent banner.]
You can delete or block cookies in your browser settings. Some Website features may then stop working.
8. Security
The Website uses HTTPS. Only staff who need booking data for their work can access it. Payments are made on the bank's secure page with 3-D Secure.
9. Your rights
You may:
- find out what data we hold about you and get a copy;
- correct inaccurate data;
- ask us to delete data that is no longer needed for the agreement or legal obligations;
- withdraw consent (this does not affect processing before withdrawal; without data we cannot deliver a booking);
- complain to the competent authority of the Republic of Azerbaijan.
To exercise your rights, email incoming@fly2baku.com. We reply within the time limits set by law.
10. Children
Bookings are made by adults. We receive information about children (age, need for a child seat) only from their parents or legal guardians.
11. Changes
We may update this Policy. The new version takes effect when published on the Website. The version date is shown at the top of the page.
Contacts
[LEGAL ENTITY NAME], VÖEN [VÖEN], [REGISTERED ADDRESS]
Email: incoming@fly2baku.com · Phone / WhatsApp: +994 10 100 0218 · Telegram: @Fly2Baku_Travel