Privacy notice

Controller and contact

HelpDirect sp. z o.o. · Kraśnik, Polska
KRS 0001073415 · NIP 5273088249 · REGON 527118570

autocaretwinks@gmail.com

Scope

Sign your agreement, add travel documents and follow the review. We will email you when your case progresses. We do not require an identity copy by default. If a particular case needs one, we will explain the reason and required details here. HelpDirect sp. z o.o., ul. Szpitalna 11, 23-204 Kraśnik, Polska; KRS 0001073415; NIP 5273088249; REGON 527118570.

Data and legal grounds

At your request we process contact details, flight, booking, address, passengers and the selected legal guardian to prepare and assess a case before a contract (GDPR Article 6(1)(b)). Other submitted passengers’ and guardians’ details and necessary correspondence are processed under legitimate interests in assessing their request (paragraph f). Give them this notice and submit only details you are lawfully entitled to provide. Once you acknowledge the notice and provide valid contact details, incomplete forms and their stage are also saved automatically. Phone is optional. Required details are necessary to prepare documents. IP, time and technical connection data support operation and security (paragraph f); we keep no ordinary access log. Case details are saved in our internal CRM. HelpDirect processes necessary case data to assess and perform the service and shares necessary information with the carrier and authorised advisers. The privacy notice explains recipients, retention and rights. Identity copies are requested only where justified. Customer / legal guardian signature, Signed agreement, Boarding pass, Booking confirmation, Airline correspondence.

Providers and transfers

Authorised HelpDirect staff can access case details. UpCloud hosts the Warsaw server; home.pl provides domain, DNS and the company mailbox. Encrypted backups are also held on a device controlled by the controller. Google handles correspondence to the listed Gmail address and may process data outside the EEA under mechanisms described in its policy. Ask the controller for details and a copy of applicable transfer safeguards. Passenger details are not sent to AI, Google Sheets or the flight-data provider. Flight queries are described below. HelpDirect processes necessary case data to assess and perform the service and shares necessary information with the carrier and authorised advisers. The privacy notice explains recipients, retention and rights. Identity copies are requested only where justified.

Retention and deletion

Unsigned drafts: 7 inactive days. Signed offers not accepted: 90 days. Accepted cases: while handled, with a necessity review at least annually; after closure, only as needed to establish or defend claims, at most until the end of the sixth calendar year after closure. Identity and guardian copies: deleted 30 days after closure. Encrypted backups rotate after 7 days. Downloaded copies are controlled by their recipients. Unsigned drafts expire after 7 days without activity. Signed offers, agreements and evidence remain in the encrypted case record for handling and legally justified retention. Access is limited to authorised people. Do not upload unnecessary identity numbers or bank details.

Your rights

You may request access, correction, erasure, restriction and, where applicable, portability, and object to processing based on legitimate interests. Consent, where used for a separate operation, may be withdrawn for the future. Contact us above; proportionate identity checks may be needed. You may complain to the Polish UODO or the competent authority in your country of residence. We make no automated decisions producing legal effects.

Cookies and automation

We use no advertising or analytics cookies, session replay or AI signature assessment. Intake uses an essential session cookie (1 hour, HttpOnly, Secure, SameSite=Strict) to link saves to a case. The private portal uses an operator session (30 minutes) and access through a secure connection. Form details are not put in browser localStorage. Acknowledging this notice is not marketing consent. We send no marketing and make no automated decision about compensation entitlement; flight-data results are preliminary.

Check your flight online

Flight lookup: at your request we send the flight number, date and optional airports to AeroDataBox via RapidAPI. We do not forward your browser IP, contact details or booking reference. Basis: legitimate interest in providing requested information, GDPR Article 6(1)(f). We do not keep search history; providers handle requests under their policies. Processing outside the EEA may occur; contact the controller for details. Results do not decide passenger rights.