Privacy Policy
Your privacy matters to us. This Privacy Policy sets out what personal data WebCheckin.info ("Webcheckin", "we", "us") collects, why we collect it, who we share it with and how we keep it safe when you use our services.
1. Identity and Role of Webcheckin
1.1 Webcheckin is an online travel agency (OTA). Through international reservation and distribution systems, it lets travellers search, compare and book airline tickets worldwide.
1.2 For all personal data processed as part of its services, Webcheckin is the data controller as defined in the General Data Protection Regulation (GDPR).
1.3 Webcheckin's services consist of arranging agreements between travellers and airlines and supporting the booking process. Personal data is essential for this.
Use of external systems and data processing
1.4 To deliver its services, Webcheckin relies on external systems, platforms and technical service providers. These are used for, among other things, hosting, development, processing, storage and security of data.
1.5 These parties may act as processors or sub-processors under applicable data protection legislation. They process personal data only on behalf of Webcheckin and in line with its instructions.
1.6 Webcheckin selects these parties carefully and puts appropriate contractual and technical measures in place. Even so, the customer acknowledges that the actual processing, storage and availability of data depend in part on external systems and infrastructure outside Webcheckin's direct control.
1.7 Webcheckin is liable only for damage that results directly from an attributable failure in its own services.
1.8 Webcheckin is not liable for damage caused by:
- failures, errors or interruptions in external systems or infrastructure;
- security incidents or data breaches at external processors, unless they result from demonstrable negligence by Webcheckin in selecting or contracting those parties;
- incorrect, incomplete or delayed data processing by external parties;
- technical limitations or system dependencies that are inherent to international reservation, distribution and processing systems.
1.9 In all cases, Webcheckin's liability is limited to what the liability clause of our terms and conditions provides.
2. Scope and Applicability
2.1 This privacy policy covers all personal data that Webcheckin processes, including in connection with:
- use of the website and mobile applications
- search queries and other interaction with the platform
- bookings and reservations
- payments and financial processing
- customer service and communication
- marketing and personalisation
- technical and operational processes
2.2 This policy applies to direct users and also to travellers on whose behalf a booking is made.
3. Categories of Personal Data
3.1 Webcheckin processes the following categories of personal data:
Identity data
- full name (as stated in the travel document)
- date of birth
- gender
- nationality
Contact data
- email address
- telephone number
Booking and travel data
- flight information
- departure and arrival locations
- travel dates
- baggage preferences
- seat preferences
- frequent flyer data
Payment data
3.2 Payments are processed via external payment providers.
3.3 Webcheckin does not process or store full payment card details.
Technical data
- IP address
- device and browser information
- cookies and tracking data
- session data
Customer interaction data
- emails
- chat conversations
- telephone calls (including recordings)
- complaints and support tickets
Special categories of personal data (where necessary)
- passport data
- medical data (in case of assistance)
3.4 These data are processed only where necessary for the performance of the services.
4. OTA Dataflows (End-to-End Processing)
4.1 Within an OTA, personal data is processed through a chain of systems and parties.
4.2 Search phase: User input is processed and shared with external systems for pricing and availability information.
4.3 Selection and pricing: Real-time data is retrieved and processed to compile flight options.
4.4 Booking: Personal data is transmitted to reservation systems and airlines.
4.5 Payment: Data is processed via payment providers and fraud prevention systems.
4.6 Ticketing: Tickets are issued via external systems.
4.7 Support: Data is used for:
- changes
- cancellations
- refunds
- customer service
- communication
4.8 This chain requires the exchange of data with multiple parties, whereby Webcheckin acts as the central data controller.
5. Purpose of Processing
5.1 Personal data are processed for:
- execution of bookings
- communication with travellers
- processing of payments
- customer service and aftersales
- fraud prevention and risk management
- compliance with legal obligations
- analysis and improvement of services
- marketing and personalization
6. Legal Bases
6.1 Webcheckin processes personal data based on:
- performance of a contract
- legal obligation
- legitimate interest
- consent
6.2 Where processing is based on legitimate interest, a balancing test is performed.
7. Sharing of Personal Data
7.1 Personal data are shared with:
- airlines
- reservation and distribution systems
- payment providers
- technical and operational service providers
- marketing and analytics tools
7.2 All parties are contractually obliged to confidentiality and data protection.
8. International Data Transfers
8.1 Personal data may be processed outside the European Economic Area.
8.2 Webcheckin safeguards such transfers by:
- Standard Contractual Clauses (SCCs)
- appropriate technical and organisational measures
9. Use of External Systems and Liability
9.1 Webcheckin uses external systems and infrastructure for the processing and storage of data.
9.2 Although Webcheckin carefully selects and contracts such parties, the user acknowledges that data processing partly takes place outside the direct control of Webcheckin.
9.3 Webcheckin shall only be liable for damage that is the direct result of an attributable failure in its own services.
9.4 Webcheckin shall not be liable for damage resulting from:
- failures in external systems
- technical errors beyond its control
- data breaches at external processors unless due to proven negligence
- delays or errors in data processing by third parties
9.5 Liability is limited as set out in the general terms and conditions.
10. Profiling and Marketing
10.1 Webcheckin uses data for:
- personalised offers
- marketing campaigns
- user analysis
10.2 This is done via:
- cookies
- tracking technologies
- behavioural analysis
10.3 No fully automated decisions with legal consequences are made without human intervention.
11. Security
11.1 Webcheckin takes appropriate measures, including:
- encryption
- access control
- monitoring
- incident management
- secure infrastructure
12. Retention Periods
- booking data: up to 7 years
- customer data: as long as necessary
- marketing data: until withdrawal of consent
- technical logs: limited
13. Data Breaches
13.1 In the event of a data breach:
- it is investigated
- notification is made where legally required
- data subjects are informed where necessary
14. Data Subject Rights
14.1 Users have the right to:
- access
- rectification
- erasure
- restriction
- objection
- data portability
14.2 Requests can be submitted via contact@webcheckin.info.
15. Cookies and Tracking
15.1 Webcheckin uses:
- functional cookies
- analytical cookies
- marketing cookies
- tracking pixels
15.2 Users can manage their preferences via the cookie banner.
16. Customer Service and Communication
16.1 Interactions may be recorded for:
- quality purposes
- training
- fraud prevention
17. Governance and Compliance
17.1 Webcheckin maintains internal processes for:
- privacy management
- compliance
- audits
- risk management
18. Changes
18.1 Webcheckin may amend this privacy policy.
18.2 The most recent version is always available on the website.
