Privacy Policy (Privacy Notice)

Effective from: 10.01.2026 Last updated: 10.01.2026

1. General

This privacy policy ("Policy") explains how Claimzi OÜ ("we") processes personal data when you:

• visit our website claimzi.com ("Website"),
• use our services ("Service"),
• submit a query or communicate with us via email, contact form, or social media.

We process personal data in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR).

2. Data Controller and Contact

Data Controller: Claimzi OÜ Registration Code: 17408644 Address: Harju maakond, Tallinn, Põhja-Tallinna linnaosa, Kalaranna tn 8/1-4, 10415 Email: legal@claimzi.com Phone: +372 5202200

For questions regarding personal data processing, please write to: legal@claimzi.com.

3. What Personal Data We Process

We primarily process the following categories of data (depending on how you use the Service).

3.1 Basic Data

• First and last name
• Email address, phone number
• Personal identification code and/or date of birth (if necessary)
• Residential address (if necessary)
• Signature and service-related contracts/documents, including claim assignment and/or power of attorney

3.2 Flight and Claim Data

• Flight dates, route, flight number
• Booking and ticket information (including PNR), boarding pass
• Evidence and documents, including expense documents and flight information
• Previous correspondence with airline, travel agency, or booking platform

3.3 Communication Data

• Content of your messages (email, contact form, social media)
• Communication history and support service notes (if necessary)

3.4 Payment and Billing Data

• Bank account number
• Payment information and data required for payouts
• Accounting records (if they are the basis for taxation or accounting)

3.5 Technical Data

• IP address, log files (time/date of visit)
• Browser version, device operating system
• Technical data necessary for security and service operation

3.6 Cookie Data

• Data collected through cookies, depending on your cookie choices

4. Why and on What Legal Basis We Process Personal Data

We process personal data for the following purposes and legal bases.

4.1 Performance of Contract (GDPR Art 6(1)(b))

• Provision of Service (claim assessment, document preparation, claim submission, communication)
• Arranging receipt of compensation or refund and making payouts
• Customer support and responding to queries

4.2 Compliance with Legal Obligation (GDPR Art 6(1)(c))

• Accounting and tax accounting
• Fulfilling requests arising from law and responding to competent authorities

4.3 Legitimate Interest (GDPR Art 6(1)(f))

• Website and Service security, fraud prevention, quality control
• Service and Website improvement, statistics, and error analysis
• Preparation, submission, or defense of legal claims

4.4 Consent (GDPR Art 6(1)(a))

• Non-essential cookies, including analytics and marketing cookies, if you give consent
• Marketing communication, if you explicitly subscribe (you can unsubscribe at any time)

5. To Whom We Disclose Data

We may disclose personal data only to the extent necessary to the following categories of recipients:

• Airlines (and their representatives), travel agencies, and booking platforms, if necessary for claim processing
• Competent public sector authorities and law enforcement agencies, if required by law
• Professional advisors who are bound by confidentiality obligations
• Service providers (IT hosting, email, cloud services, accounting, analytics), who process data according to our instructions

6. Data Transfer Outside EU/EEA

If we use service providers whose infrastructure or support services are located outside the European Union/European Economic Area, we ensure appropriate safeguards as required by law. For more information, contact: legal@claimzi.com.

7. Retention

We retain personal data only as long as necessary to achieve the purposes or as required by law. Typical periods depend on the category of data and the relationship with you, in summary:

• Basic and flight data related to claims and service provision: for the duration of the claim and thereafter as required by law
• Communication data: for as long as needed to handle your request and maintain records of our correspondence
• Accounting records: for the period required by law
• Technical logs: for a limited period for security and operational purposes

Data may persist in backups until the end of the backup cycle. Backups are not used for other purposes.

8. Your Rights

You have the right to:

• Access your data and obtain a copy
• Request rectification
• Request erasure (if the legal basis permits)
• Restrict processing
• Object to processing (including processing based on legitimate interest)
• Data portability (in certain cases)
• Withdraw consent (if processing is based on consent)
• Lodge a complaint with a supervisory authority (in Estonia: Data Protection Inspectorate)

Please send requests to: legal@claimzi.com.

9. Cookies

We use cookies:

• Essential cookies for Website operation
• Analytics cookies (if you allow)
• Marketing cookies (if you allow)

You can change your cookie choices in the cookie banner or Website settings.

10. Security

We implement reasonable technical and organizational measures to protect personal data from unauthorized access, modification, disclosure, or destruction.

11. Changes

We may update the Policy from time to time. The new version will be published on the Website with the "Last updated" date.

12. Contact

If you have questions about this Policy, write to: legal@claimzi.com.