Privacy Policy

Privacy Policy

TUS Airways Ltd. CF: HE341761 (hereinafter: the "Company"‚ "we"‚ or "us") respects your right to privacy. Your ability to make informed decisions regarding the use of your information is important to us. The purpose of this Privacy Policy (the "Policy") is to explain how the Company collects‚ uses‚ stores‚ and processes your personal information (as defined below) collected in connection with your use of the services we offer across all media or platforms‚ including when you visit the Company's website at https://www.tusairways.com or any of its subdomains‚ place bookings via the website‚ our telephone service center‚ or various mobile applications‚ or contact us through any communication channel‚ including social media‚ and when using the services and products we offer our customers (collectively: the "Services").

For purposes of this Policy‚ all references to "the Company"‚ "our"‚ "we"‚ or "us" also include other companies within the group to which the Company belongs‚ including but not limited to Holiday Lines Ltd.‚ Blue Bird Airways S.A‚ TUS Airways Ltd.‚ Daka 90 Ltd.‚ and Bilk Tourism and Technology Ltd. (collectively: the “Group”).

The terms "you"‚ "your" or "user" refer to any user of the Services. The Company or the Group is the owner and controller of the data collected in connection with the Services. For any question or issue related to this Privacy Policy‚ you may contact us at: dpo@tusairways.com.

"Personal Information" refers to data relating to an individual‚ such as name‚ phone number‚ email address‚ or as otherwise defined by applicable law. You are not legally obligated to provide Personal Information‚ and any such submission is voluntary and subject to your consent. However‚ if you choose not to provide the necessary information to complete a purchase or booking‚ we will not be able to provide you with the products and services we offer our customers.

1. Information We Collect

We collect information as needed and depending on your use of the Services. The type of Personal Information we collect depends on the nature of the Services you use‚ as follows:

1.1. Information You Provide Directly

We collect information you provide during the booking process or when ordering additional products or services‚ including your full name‚ phone number‚ email address‚ date of birth‚ and gender‚ and in relevant cases‚ additional information you provide (such as passport details‚ medical information relevant to your booking‚ and information about others for whom you make a booking). If you choose to join our customer club‚ we will also collect any preferences or additional data you choose to include in your profile (e.g.‚ preferred destinations‚ etc.).

1.2. Information Provided by Third Parties

We may receive Personal Information about you from third parties such as travel agencies‚ online booking websites‚ business partners‚ or individuals making bookings on your behalf.

1.3. Inquiries and Contact

If you contact us with a question or request‚ we may document our communication‚ including your name‚ phone number‚ email address‚ booking details‚ and the content of your inquiry‚ including any attached documents.

1.4. Payment Services

To complete a payment for products ordered via any channel‚ you may be required to provide payment details such as credit card number‚ expiration date‚ full cardholder name‚ ID number‚ and email address for invoice delivery. This data is used to process the payment via our authorized payment service providers. Transaction data‚ including the last four digits of your credit card‚ will be retained in our systems in accordance with applicable law and for operational and security needs.

1.5. Automatically Collected Information

We may automatically collect information about your device‚ browser‚ operating system‚ IP address‚ device ID‚ and your usage of the Services (e.g.‚ via cookies and similar technologies as described in Section 7 below).

2. How We Use the Information

By booking a service‚ subscribing to our mailing list or customer club‚ or contacting us‚ you agree and consent to the Company storing the Personal Information you provide‚ along with any additional data collected about you. If you provide information or make a booking on behalf of another person‚ you confirm that you are authorized to do so.

Accordingly‚ the Company may use the data as follows:

2.1. Service Delivery and Personalization

We and/or our service providers may use your Personal Information to: (1) provide you with the products and services you requested‚ including via third-party suppliers; (2) offer customer support and troubleshoot issues; (3) contact you regarding your booking or additional services purchased; (4) respond to inquiries; (5) identify returning customers; and (6) prevent fraud and secure the Services.

2.2. Internal Use

We may use your data for internal purposes such as diagnosing operational issues‚ developing new content‚ products‚ or services‚ improving and customizing our offerings‚ conducting financial assessments and forecasts‚ evaluating business potential‚ or adjusting server capacity.

2.3. Analytics and Statistics

We and/or our service providers use analytics tools (e.g.‚ Google Analytics) to collect and analyze usage patterns‚ such as visit frequency and page views‚ to improve our Services. Learn more about Google’s data practices at: Google's data practices.

2.4. Marketing

Subject to your consent‚ we may use your Personal Information to send marketing materials‚ offers‚ and promotions in accordance with your preferences. You may opt out at any time by clicking the unsubscribe link in the message or contacting us at dpo@tusairways.com.

3. Sharing Information with Third Parties

We may share your Personal Information‚ in whole or in part‚ with the following third parties and for the purposes described in this Policy‚ including airlines‚ service providers‚ ground handlers‚ IT suppliers‚ business partners‚ and other entities assisting in delivering our Services:

3.1. Group Companies

We may share your information with other companies in our Group‚ including affiliated companies not listed in this Policy‚ for operational‚ marketing‚ or internal purposes‚ subject to the terms of this Policy. Any company within the Group that uses the information shall do so solely in accordance with this Privacy Policy and for the purposes for which the information was provided.

3.2. Service Providers and Third Parties

We may share your information with third-party service providers to (1) provide the Services and/or products (e.g.‚ airlines‚ ground service providers); (2) assist us in analyzing service usage; or (3) personalize marketing content.

These providers may be located in jurisdictions with different levels of data protection‚ and you consent to such transfers.

3.3. Public Authorities

The Company will cooperate with law enforcement authorities or any court order that requires or instructs us to disclose the identity‚ behavior‚ digital content‚ or any other personal information of any user suspected of engaging in activities that are allegedly unlawful or in violation of any applicable law. In accordance with applicable laws‚ including EU Directive 2016/681 (Passenger Name Record - PNR Directive)‚ certain passenger data may be transmitted to Passenger Information Units (PIUs) in the destination country. This information is used exclusively for the prevention‚ detection‚ investigation‚ and prosecution of terrorist offenses and serious crime.

The categories of PNR data transmitted include reservation details and travel itinerary information. Sensitive data - such as race‚ ethnicity‚ political opinions‚ religious beliefs‚ or health information - is not shared.

The processing of PNR data by competent authorities is carried out in accordance with applicable data protection laws and security requirements.

Additionally‚ we may share your personal information with third parties if we believe in good faith that such disclosure is appropriate to protect our rights‚ property‚ or safety (including the enforcement of our agreements with you) or to protect the rights‚ property‚ or safety of third parties.

3.4. Other Disclosures

We will disclose your personal information to relevant third parties in the following cases: (1) if the Company discovers that your use of the Services violates any applicable law or has been carried out in order to commit any type of fraud; or (2) if the Company faces legal proceedings (criminal or civil) as a result of actions you have taken through the Services.

3.5. Business Transfers

In the event of a merger‚ acquisition‚ or sale of assets‚ your data may be transferred. In such cases‚ your data will remain subject to this Policy.

4. How We Protect Information

We adhere to industry-standard practices to protect your information‚ both during transmission and once it is received. However‚ data transmission over the internet or electronic storage is not completely secure. Therefore‚ we cannot guarantee the absolute security of your personal information. To help ensure the best possible protection of your data‚ please safeguard your passwords and control access to your computer using appropriate measures.

5. Right of Access and Rectification of Information

Pursuant to the applicable law‚ you have the right to access the information held about you‚ either personally‚ through your authorized legal representative‚ or by a guardian‚ as applicable. If you request to review the information‚ we will allow it subject to the conditions set forth in the applicable law and in accordance with any applicable legal provisions. In some cases‚ the information may be held by a third party (the “Holder”)‚ in which case we will refer you to the Holder and instruct them to allow you to review the information.

If‚ after reviewing the information‚ you find that it is incorrect‚ incomplete‚ unclear‚ or not up to date‚ you may contact us to request that the information be corrected or deleted. We will consider your request‚ notify you of our decision‚ and act in accordance with applicable law.

In certain cases‚ you will also have the right to request the deletion of your Information. Please note that this right is not absolute‚ and in some cases‚ we may not be able to comply with your request to delete the Information.

In accordance with the General Data Protection Regulation (EU Regulation 2016/679 – GDPR)‚ you have the following rights with respect to your personal data:

Right of Access

To request confirmation as to whether we process your personal data and receive a copy of it.

Right to Rectification

To request correction of inaccurate or incomplete information.

Right to Erasure ("Right to Be Forgotten")

To request deletion of your data under the conditions set by law. Individuals under 18 at the time of data collection may request deletion of their data.

Right to Restrict Processing

To request that we limit the processing of your personal data where applicable.

Right to Object

To object to the processing of personal data carried out on the basis of the Company’s legitimate interests‚ including for direct marketing.

Right to Data Portability

To request transfer of your personal data to another controller‚ where technically feasible.

Posthumous Data Rights

You may provide instructions regarding the handling of your personal data after your death.

To exercise your rights‚ please contact our Data Protection Officer (DPO) using the details below.

6. Data Retention

We will retain your personal information for as long as necessary in order to: (1) fulfill the purposes for which the information was collected as outlined above; (2) comply with our legal obligations; (3) resolve disputes; (4) enforce our agreements; or (5) for a longer period as required by applicable law. For example‚ if we are required to retain information regarding your use of the services (or products) to meet legal‚ regulatory‚ accounting‚ and/or tax obligations‚ or to maintain a record of your activities for the purpose of handling various complaints‚ or if we have reasonable grounds to believe that legal proceedings related to your data and/or activities on the services may take place. We may delete your information without prior notice if we determine that it is no longer necessary for the purposes listed above.

7. Cookies

Cookies are small text files sent to your device via your browser. We use cookies and similar technologies (such as beacons or pixels - which are small graphic files generally used to identify users and/or track their activity) (collectively: “Cookies”) to personalize your user experience and present you with advertisements tailored to your information and activity.

A “session cookie” is stored on your device only for the duration of your visit to the website and is deleted once you leave. We may also use “persistent cookies” to retain your settings and preferences. For example‚ if you log in to the website‚ a persistent cookie may be used to recognize you as a current user.

When you visit the website‚ a notice will be displayed informing you of the use of cookies on your device‚ as described in this Policy. We use both first-party cookies and third-party cookies.

Most web browsers are preset to allow the acceptance of cookies‚ but you can change your browser settings to block specific cookies or to notify you each time a cookie is sent. You can also delete any existing cookies at any time. Please note that some features of the Services may not function properly if you disable or remove cookies.

We use cookies for several purposes‚ and the specific cookies we use may change from time to time. The types of cookies we typically use fall into the following categories:

8. Minors

The Company does not knowingly collect personal information about minors under the age of sixteen (16)‚ except with the consent of the minor’s parent or legal guardian. If you become aware of a case in which an individual under the age of sixteen (16) is using the Services without parental or guardian consent‚ we ask that you notify us as soon as possible.

9. Communications

We reserve the right to send you service-related or administrative messages (e.g.‚ booking confirmations or account notifications) via email‚ SMS‚ WhatsApp‚ or phone without offering an opt-out option.

10. Contact Information

The Company has appointed a Data Protection Officer responsible for oversight of data protection compliance and for serving as the liaison to relevant data protection authorities.

Email: dpo@tusairways.com

Postal Address: 3-5 Artemidos‚ Artemidos Tower‚ 6020 Larnaca‚ Cyprus

Telephone: (+35) 724 200310

11. Changes to This Policy

This Policy may be updated from time to time. If material changes are made‚ we will post a notice on this page. If required by law‚ we will seek your consent to such changes.