Privacy Notice – Libyair.com / LibyaAir
Effective Date: [Insert Date]
Libyair.com / LibyaAir (“we”, “us”, “our”) processes personal data in accordance with the Law of Georgia “On Personal Data Protection” (No. 3144-XIᵐᵖ, 14 June 2023), which became mainly effective on 1 March 2024.
Data protection compliance is supervised by the Personal Data Protection Service of Georgia (PDPS).
1. Data Controller Information
Data Controller: [Legal Company Name]
Registered Address: [Address]
Email: [email protected]
2. Categories of Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Contact Information
- Full name
- Email address
- Phone number
2.2 Booking and Travel Information
- Travel itinerary
- Destinations
- Booking and ticketing details
2.3 Identification Information (Where Required)
- Passport or ID details (name, number, nationality, date of birth, expiry date)
2.4 Uploaded Documents
- Passport or national ID
- Visa documents (where applicable)
3. Purposes of Processing
We process personal data for the following purposes:
- Providing travel-related services, including quotes, bookings, and ticket issuance
- Arranging VIP services, transfers, and ground handling
- Organizing hotel reservations and corporate travel packages
- Passenger verification and compliance with legal or airline requirements
- Fraud prevention and protection of our operations and customers
4. Legal Bases for Processing
We rely on the following legal grounds under Georgian data protection law:
- Performance of a contract or pre-contractual steps (quotes, reservations, bookings)
- Compliance with legal obligations, where applicable
- Legitimate interests, including fraud prevention, security, and customer support
- Consent, strictly for marketing communications
5. Data Recipients
Personal data may be shared only when necessary with:
- Airlines, ticketing systems, and reservation providers
- Hotels and accommodation partners
- Transport, transfer, and VIP service providers
- Security or verification partners (when required)
- IT hosting providers and technical service partners
6. International Data Transfers
Personal data may be processed or transferred outside Georgia when required to deliver travel services (e.g., international airlines or hotel partners).
Where feasible, appropriate safeguards are applied to protect personal data during such transfers.
7. Data Retention
We retain personal data only for as long as necessary to:
- Provide requested services
- Fulfill legal, regulatory, or compliance obligations
Passport and identification documents are retained only for the required period and are then securely deleted or anonymized.
8. Your Data Protection Rights
Under Georgian data protection law, you may have the right to:
- Access your personal data
- Request correction or updating of inaccurate data
- Request deletion or restriction of processing
- Object to processing, where applicable
To exercise your rights, please contact:
📧 [email protected]
9. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:
Personal Data Protection Service of Georgia (PDPS)