What we do with your data

Who is responsible

Eurosava, Marks i Engels 6330, Struga 6330, 6330 Struga, North Macedonia is the controller of the personal data described here. Contact us about privacy using the details at the end of this page.

We process personal data in line with the Law on Personal Data Protection of the Republic of North Macedonia, which is aligned with the European General Data Protection Regulation.

What we collect

• Traveller details: title, first and last name, date of birth, nationality, passport or ID number with issue and expiry dates. Airlines and border authorities require these.
• Contact person: name, surname, phone number and email address, so we can reach you about the flight and send your documents.
• Booking details: flights, fare package, seats, extras, insurance, prices, check-in status and booking reference.
• Payment: the result of your payment and a transaction reference. Your card number is entered on your bank's page; we never receive or store it.
• Messages: what you send through the contact form, including your email address.
• Technical data: IP address, browser type and the pages you use, kept in server logs for security.

We do not ask for sensitive data. If you tell us about a health condition or a need for assistance, we use it only to arrange that help, on the basis of your explicit consent, which you can withdraw at any time.

Why we use it

• To carry out your booking — issuing tickets, passenger lists for the airline, check-in and boarding passes (contract).
• To meet legal duties — passenger information required by border and aviation authorities, accounting and tax records (legal obligation).
• To contact you about schedule changes, cancellations and your booking (contract).
• To keep the service secure — fraud prevention, abuse limits and logs (legitimate interest).
• To answer your questions sent through the contact form (legitimate interest).

We don't sell your data and we don't send marketing unless you ask us to.

Who we share it with

• Airlines operating your flights, including partner airlines and their booking systems, to issue tickets and passenger lists.
• Airports, ground handlers and authorities where the law or the flight requires it.
• Your bank and our payment provider to process the payment.
• our insurance partner, only if you buy travel insurance.
• Service providers that host and run this website and send our emails, under contracts that protect your data.

Some recipients, such as airlines, airports and authorities at your destination, are outside North Macedonia. We transfer only the data needed to carry out your trip, because the transfer is necessary to perform the contract with you or is required by law; where other transfers take place we use the safeguards the law requires, such as standard contractual clauses.

We do not make decisions about you by automated means alone, and we do not build profiles of travellers.

How long we keep it

• Booking and traveller data: for the trip and then as long as accounting, tax and aviation rules require, usually up to 10 years for invoices and up to 3 years for booking records.
• Passport details: deleted or anonymised within 12 months after the last flight on the booking, unless a legal claim needs them.
• Contact form messages: up to 2 years.
• Server logs: up to 90 days.

Cookies and storage

We use only what the website needs to work: a session cookie, a security token for forms, a cookie that remembers your language, and your browser's local storage to remember your last search and the booking you are completing. We don't use advertising or tracking cookies. Clearing your browser data removes them.

Your rights

You can ask us to confirm whether we hold data about you and to give you a copy, to correct or delete it, to restrict or object to its use, and to give it to you in a portable format. Where we rely on your consent, you can withdraw it at any time. Some data we must keep by law, and we tell you when that applies.

To use your rights, contact us with your booking reference and the last name on the booking so that we can confirm it is you. We answer within one month; if a request is complex we may need up to two more months and will tell you why.

If you believe we handle your data unlawfully, you can submit a request to the Agency for Personal Data Protection of the Republic of North Macedonia (azlp.mk), or to the data protection authority of the country where you live.

Security

The website uses encrypted connections, bookings are only shown to someone who knows the booking reference and a last name on it, and staff access is limited to the people who need it, protected by passwords with two-step verification available. No system is perfectly secure; if a breach is likely to put your rights at risk, we notify the Agency for Personal Data Protection within 72 hours and tell you without delay, as the law requires.

Children

We process children's and infants' details only as travellers on a booking made by an adult.

Changes

We may update this policy. The date at the top shows the latest version.