Skip to content

Legal

Privacy policy

This policy explains how we process personal data when you use JetHopper, in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian data protection code.

Data controller

[Ragione sociale], VAT number [P.IVA], registered office [Indirizzo]. You can reach us for any privacy request through the contact page.

For the passenger data needed to perform a flight, the operator named on the booking acts as an independent controller.

What data we process and why

  • Bookings — contact details and passenger details (name, date of birth, nationality, document type and number) to book the flight and send it to the operator. Legal basis: performance of a contract.
  • Payments — payment status and amounts; card details are collected directly by Stripe and never stored by us. Legal basis: performance of a contract and legal obligations.
  • Accounts — email address and login data, if you create an account. Legal basis: performance of a contract.
  • Route alerts — email address and alert preferences, only after you confirm the subscription. Legal basis: consent, which you can withdraw at any time with the link in every email.
  • Contact requests — the data you write in the contact form, to answer you. Legal basis: pre-contractual measures and legitimate interest.
  • Security — IP addresses and technical logs, to protect the service from abuse and fraud. Legal basis: legitimate interest.

How long we keep it

  • Booking and accounting records: for the period required by tax and civil law (generally 10 years).
  • Passenger document numbers: encrypted, and only as long as needed to perform the flight and handle any claims.
  • Route alerts: until you unsubscribe; unconfirmed subscriptions are deleted after 7 days.
  • Accounts: until you delete your account.
  • Technical logs: a few weeks, unless needed to investigate an incident.

Who receives it

The operator of your flight, and service providers acting as processors on our behalf:

  • Stripe (payments)
  • Resend (transactional email)
  • [Hosting provider] (hosting and storage)

Where data is transferred outside the European Economic Area, the transfer is covered by an adequacy decision or by the European Commission's standard contractual clauses.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or the authority of your country.

Cookies

We only use strictly necessary cookies.

Read the cookie policy.