Privacy Policy

Last updated: 2026-08-03

We value your privacy and are committed to protecting personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use The Flight Thing | Deals, in compliance with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (revDSG).

1. Data Controller

The controller responsible for your personal data is Monswyk AG.

2. Data We Collect

The current version of the Service does not require user accounts. We may process the following limited data:

• Technical / server logs: IP address, browser type, request path, timestamps, and similar connection metadata necessary to operate and secure the website
• Usage signals: Aggregated, non-identifying information about how the site is used (for example, approximate traffic volume), if analytics are enabled

Deal listings shown on the Service are flight-offer metadata aggregated from public sources and are not intended to identify individual visitors.

We do not collect sensitive personal data such as health information, biometric data, or political opinions.

3. Purpose and Legal Basis

We process data for the following purposes:

• Service Provision: To deliver the website and deal search functionality
• Security: To protect the Service against abuse and attacks
• Service Improvement: To understand aggregate usage and improve reliability
• Legal Compliance: To comply with applicable laws

Legal Basis: Processing is based primarily on legitimate interest (Art. 6(1)(f) GDPR) in operating a secure public website, and where required on legal obligations (Art. 6(1)(c) GDPR).

4. Data Storage and Location

Infrastructure / Hosting: We operate the Service on server infrastructure located in the European Union. Hosting providers act as processors for infrastructure only and do not independently use your data for their own purposes.

Deal database: Aggregated deal records are stored in our database for display on the Service. These records relate to public flight offers, not to visitor accounts.

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data only in these limited circumstances:

• Service Providers: With trusted processors who help us host and operate the Service under data-protection agreements
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In case of merger or acquisition (with notice where required)

6. Data Security

We implement appropriate technical and organizational measures:

• Encryption: Data encrypted in transit (TLS)
• Access Controls: Restricted administrative access
• Monitoring: Basic security and availability monitoring

7. Data Retention

• Server logs: Retained only as long as needed for security and operations (typically a limited rolling period)
• Deal records: Retained while relevant for the Service; inactive deals may be deactivated or removed

8. Your Rights

Under GDPR and Swiss privacy law, you may have the following rights:

• Access: Request information about personal data we hold
• Rectification: Correct inaccurate data
• Erasure: Request deletion where applicable
• Restriction / Objection: Limit or object to certain processing

To exercise these rights, use the contact options in the Legal Notice. We will respond within 30 days where required.

9. Cookies and Tracking

The Service may use strictly necessary technical cookies or similar storage required for basic operation. Optional analytics cookies, if introduced, will only be used with consent where required by law.

10. Third-Party Services

When you open a deal source link, you leave our Service and the third-party site's privacy policy applies. We are not responsible for third-party processing.

See also our Legal Notice and Terms of Service.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Changes take effect when published on this page.