GDPR Privacy Notice

1. Controller Information

For personal data handled through Evoflydeals.com and related travel assistance services, Evoflydeals may act as a controller for the information it determines how and why to process. Airlines, payment processors, and travel suppliers may act as separate controllers for their own services.

2. Personal Data We May Process

The personal data processed depends on your request and interaction with Evoflydeals.

• Name and contact details
• Travel request and itinerary information
• Passenger information required for booking assistance
• Payment and transaction records where applicable
• Customer service communications
• Website, device, browser, and analytics information
• Preference and marketing choice information

3. Purposes of Processing

We may process personal data for purposes connected with travel assistance, customer support, website operation, and business administration.

• Responding to inquiries
• Reviewing requested travel options
• Supporting bookings, changes, cancellations, and refunds
• Sending transactional communications
• Processing payments or payment verification
• Maintaining records and resolving disputes
• Preventing fraud and protecting services
• Complying with legal obligations
• Measuring website and advertising performance

4. Legal Bases

Depending on the activity, our legal basis may include steps requested before entering a contract, performance of a contract, compliance with a legal obligation, consent, legitimate interests, or the establishment, exercise, or defense of legal claims.

5. Legitimate Interests

Where we rely on legitimate interests, those interests may include responding to customer requests, operating and improving the website, protecting against fraud, maintaining business records, handling disputes, and understanding service performance.

You may have the right to object to processing based on legitimate interests in certain circumstances.

6. Consent

Where processing is based on consent, you may withdraw consent for future processing at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

7. Recipients of Personal Data

We may share personal data with recipients where necessary for the purposes described in this notice.

• Airlines and travel suppliers
• Booking systems and ticketing providers
• Payment processors and financial institutions
• Technology, hosting, analytics, and communications providers
• Professional advisers
• Regulators, courts, or authorities where legally required

8. International Transfers

Travel services can require personal data to be transferred to countries outside the EEA or United Kingdom. Where applicable law requires a transfer safeguard, the transfer will rely on an appropriate mechanism, such as adequacy decisions, standard contractual clauses, or another lawful basis.

9. Retention

Personal data is retained for as long as reasonably necessary for the relevant purpose, including travel assistance, customer service, legal compliance, accounting, dispute resolution, fraud prevention, and business recordkeeping.

10. Your GDPR Rights

Where applicable, you may have the following rights under data protection law:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to complain to a supervisory authority

11. Exercising Your Rights

To exercise a right, contact Evoflydeals using the information below and describe your request. We may need information to confirm your identity and locate the relevant records.

Where applicable, requests will be handled without undue delay and within the period required by law, subject to lawful extensions and exceptions.

12. Automated Decision-Making

Evoflydeals does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects for travelers through this website.

13. Third-Party Controllers

Airlines, payment processors, booking systems, and other travel suppliers may process personal data as independent controllers. Their processing is governed by their own privacy notices and legal responsibilities.

14. Changes to This GDPR Notice

Evoflydeals may update this GDPR Privacy Notice to reflect changes in our services, legal requirements, or data practices. Updates will be posted on Evoflydeals.com with a revised Last Updated date.