Privacy Policy

Last updated: August 2026

  1. Data controller

The controller of personal data collected through Fly2Galicia is:

AVIATION & MOBILITY SERVICES GROUP, S.L.
Trading brand: Fly2Galicia
Tax ID (NIF): B26630483

Identification code: XG-1042


Registered office: Plaza de la Quintana 3, 15704 Santiago de Compostela, A Coruña, Spain
Email: info@fly2galicia.com

  1. Applicable legislation

Personal data will be processed in accordance with Regulation (EU) 2016/679 (“GDPR”), Spanish Organic Law 3/2018 and other applicable data-protection legislation.

  1. Personal data we may collect

Depending on the services used, we may process:

  • first and last name;
  • date of birth;
  • gender where required;
  • postal address;
  • email address;
  • telephone number;
  • nationality;
  • passport, national identity card or other travel-document information;
  • booking and PNR information;
  • itinerary and flight information;
  • ancillary services;
  • baggage and seat information;
  • information required to provide special assistance;
  • loyalty-program information;
  • customer-service communications;
  • claims information;
  • technical information including IP address, device and browser information;
  • payment and transaction information.

Full payment-card information may be processed directly by payment service providers and may not be stored by Fly2Galicia.

  1. Other passengers

Where a customer books for another person, the customer confirms that they are authorised to provide that passenger’s personal information and undertakes to inform them of this Privacy Policy.

  1. Purposes

Personal data may be used to:

Manage bookings and flights, including reservations, confirmations, check-in, seats, baggage and ancillary services.

Perform the contract, including facilitating the air transport purchased.

Provide operational communications, including schedule changes, delays, cancellations and other travel information.

Provide customer service, including enquiries, requests, complaints, incidents and refunds.

Comply with legal obligations, including disclosure to border, immigration, customs, aviation, tax, police or other competent authorities where required.

Prevent fraud and ensure security, including protecting transactions, customers and information systems.

Operate loyalty services, including points, status levels and benefits.

Send marketing communications where consent or another lawful basis exists.

Passengers may withdraw marketing consent at any time.

Operational messages relating to an existing booking are not marketing communications and may continue to be sent.

  1. Legal bases

Processing may be based on:

  • performance of a contract or pre-contractual measures;
  • compliance with a legal obligation;
  • Fly2Galicia’s legitimate interests; or
  • consent.
  1. Recipients

Where necessary to provide a service, personal information may be shared with:

  • the operating air carrier;
  • FLYYO S.R.L. when operating the flight;
  • airports and ground-handling providers;
  • reservation and distribution system providers;
  • technology providers;
  • payment processors and financial institutions;
  • customer-service providers;
  • ancillary travel-service providers;
  • insurers where applicable; and
  • competent public, immigration, customs, police, tax or judicial authorities where required by law.

Only data necessary for the relevant purpose will be shared.

  1. Operating air carrier

Where a flight is operated by another air carrier, passenger information necessary to perform the flight and meet safety and legal requirements will be provided to that carrier.

Where FLYYO S.R.L. operates the flight, information may be provided to FLYYO for passenger manifests, check-in, boarding, baggage, special assistance, safety and compliance purposes.

For certain processing activities performed pursuant to its own legal obligations, the operating carrier may act as an independent data controller.

  1. Special-category data

Certain services, particularly special assistance, may require information concerning a passenger’s health.

Such information will only be processed where a valid legal basis exists and where necessary to provide the requested service or comply with legal requirements.

  1. International transfers

Some service providers or recipients may be located outside the European Economic Area.

Where personal information is transferred internationally, Fly2Galicia will implement the safeguards required under the GDPR, including adequacy decisions or European Commission Standard Contractual Clauses where applicable.

  1. Retention

Information will be retained for as long as necessary to manage the contractual relationship and subsequently for applicable legal, tax, accounting and claims limitation periods.

Information processed solely for marketing purposes will be retained while a lawful basis exists or until consent is withdrawn or the individual objects.

  1. Security

Fly2Galicia implements appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or destruction.

No Internet-connected system can, however, guarantee absolute security.

  1. Your rights

Subject to applicable conditions, individuals may exercise their rights to:

  • access;
  • rectification;
  • erasure;
  • objection;
  • restriction;
  • data portability;
  • withdrawal of consent; and
  • protection regarding solely automated decisions where applicable.

Requests may be sent to:

info@fly2galicia.com

Additional information may be requested where necessary to verify the applicant’s identity.

  1. Complaints

Individuals may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if they believe their personal data has not been processed in accordance with applicable law.

  1. Cookies

The website may use cookies and similar technologies.

Where legally required, non-essential cookies will only be installed after consent has been obtained.

Further information should be provided in Fly2Galicia’s separate Cookie Policy.

  1. Children

Personal information concerning child passengers may be processed where necessary to manage their booking and transportation.

Where consent is required for a specific processing activity, applicable rules concerning minors and parental or legal representation will apply.

  1. Changes

Fly2Galicia may update this Privacy Policy to reflect legal, technological or operational changes.

The current version will be made available on the website.