Legal

Privacy Policy

Last updated: June 2025

CompenAir Limited ("CompenAir", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and claims service.

We are subject to the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Irish Data Protection Act 2018. We are the data controller in respect of personal data you provide to us.

1. Who we are

CompenAir Limited is a claims management company registered in Ireland. Our contact for all data protection matters is hello@compenair.com.

2. What personal data we collect

We collect and process the following categories of personal data:

Data	Why we collect it
Full name	To identify you as the claimant and correspond with the airline on your behalf
Email address	To communicate with you about your claim
Phone number	To contact you where email is not sufficient
Flight details (route, date, airline)	To assess eligibility and submit your claim
Booking reference	To verify your status as a passenger and submit your claim
Bank account details	To transfer your compensation once recovered — collected only at payout stage
Correspondence with the airline	To support and evidence your claim

We do not collect any special category data (such as health information) unless you voluntarily provide it as evidence relevant to your claim.

3. Legal basis for processing

We process your personal data on the following legal bases under GDPR Article 6:

• Performance of a contract (Article 6(1)(b)) — the primary basis. You have engaged CompenAir to pursue a claim on your behalf. Processing your personal data is necessary to perform this service. This covers all core claim processing activities.
• Legal obligation (Article 6(1)(c)) — where we are required to process or retain data to comply with Irish law, tax obligations, or regulatory requirements.
• Legitimate interests (Article 6(1)(f)) — limited to purposes such as maintaining records of completed claims for the prevention of fraud and duplicate claims. We have assessed that these interests are not overridden by your rights and freedoms.

We do not rely on consent as our primary legal basis for processing claim data, as the processing is necessary to perform the service you have requested.

4. How we use your data

Your personal data is used exclusively to:

• Assess your eligibility for compensation under EU Regulation 261/2004
• Submit and manage your claim with the relevant airline
• Communicate with you about the progress of your claim
• Process and transfer compensation upon recovery
• Comply with legal and regulatory obligations

We will never use your data for marketing, profiling, or any purpose unrelated to your claim without your explicit consent.

5. Data processors and third parties

We use the following third-party services to operate our business. Each is bound by a Data Processing Agreement (DPA) with CompenAir:

Processor	Purpose	Location
Tally.so	Claim intake form — collects your initial claim details	EU (Belgium)
Email provider	Communications regarding your claim	EU/EEA

We share your personal data with airlines and aviation authorities solely for the purpose of pursuing your claim. We do not sell, rent, or trade your personal data to any third party.

6. International transfers

Where your claim involves a non-EU airline, we may need to share limited claim data with that airline outside the EEA. We do so only to the extent necessary to pursue your claim, and we take appropriate steps to ensure your data is protected in accordance with GDPR requirements.

7. How long we keep your data

We retain your personal data for 6 years from the date your claim is closed. This retention period reflects Irish statutory limitation periods and our obligations under company and tax law. After this period your data is securely and permanently deleted.

Bank account details are deleted within 30 days of a successful payout.

8. Your rights under GDPR

You have the following rights in relation to your personal data:

• Right of access — to receive a copy of the personal data we hold about you
• Right to rectification — to have inaccurate data corrected
• Right to erasure — to request deletion of your data where we are not legally required to retain it
• Right to restriction — to restrict our processing of your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to lodge a complaint — with the Data Protection Commission (Ireland) at dataprotection.ie

To exercise any of these rights, email us at hello@compenair.com. We will respond within 30 days. We may need to verify your identity before processing your request.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted HTTPS transmission, access controls, and secure storage. We will notify you and the Data Protection Commission without undue delay in the event of a personal data breach that is likely to result in a risk to your rights and freedoms.

10. Cookies

Please see our Cookie Policy for full details of how we use cookies on this website.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any material changes will be communicated to active clients by email. The current version is always available at this URL.

12. Contact

For any data protection queries: hello@compenair.com
CompenAir Limited, Ireland.
Data Protection Commission: dataprotection.ie · 01 765 0100