Version of 23 July 2026 · draft pending legal review
Important: this document is a draft and must be reviewed by a lawyer or data-protection specialist before publication. Placeholders (address, registration details, DPO contact) must be replaced with the actual details.
This policy explains what personal data we collect, why, on what legal basis, who we share it with, and how long we keep it. It's drawn up in line with the EU General Data Protection Regulation (GDPR, Regulation 2016/679).
The data controller is:
Vasily Melnikov, self-employed (autónomo) (trading as «ClaimJam»)
NIE: Y8234892D
Email: help@claimjam.com
For any data-protection questions, you can contact our data-protection lead at help@claimjam.com marked «GDPR».
We follow the principle of data minimization: at each step we only ask for what's necessary for that step.
Only the flight number and departure date are collected. This isn't personal data — it doesn't identify a specific passenger. No sign-up is required and no contact details are requested at this stage.
If you decide to file a claim, we ask for the data needed to prepare it and confirm your right to compensation:
| Category | Data | Why |
|---|---|---|
| Identifying | First and last name | Preparing the claim and power of attorney on your behalf |
| Contact | Email, phone number | Case-status notifications, requests for documents |
| Flight data | Booking reference, boarding pass, itinerary, data of other passengers on the booking (if the claim is also filed on their behalf) | Confirming the flight and the circumstances of the incident |
| ID documents | Passport or ID details — only if required by the power-of-attorney form or requested by the carrier | Legal validity of the power of attorney |
| Financial | Bank details to receive the compensation from the airline | Shared with the airline so it can transfer the compensation directly to you |
| Expense proof | Receipts for tickets, hotel, meals, transfers | Recovering additional expenses on top of the compensation |
When you visit the site, your IP address, browser and device type, pages viewed and referral source are automatically processed. This data is used to run and secure the site and, with your consent, for analytics. See the Cookie policy for details.
| Purpose | Basis (Art. 6 GDPR) |
|---|---|
| Handling your case, corresponding with the carrier, payment | Performance of a contract — Art. 6(1)(b) |
| Processing passport data for the power of attorney | Explicit consent — Art. 6(1)(a), withdrawable at any time |
| Storing documents for closed cases | Legal obligation (accounting and tax records) — Art. 6(1)(c) |
| Defending legal claims, fraud prevention | Legitimate interest — Art. 6(1)(f) |
| Analytics and marketing cookies | Consent — Art. 6(1)(a) |
| Case-status communications | Performance of a contract — Art. 6(1)(b) |
Consent to process your personal data and to grant the power of attorney is requested separately. Withdrawing consent doesn't affect the lawfulness of processing carried out before the withdrawal.
We don't make decisions with legal effects on you based solely on automated processing, and we don't use your data for profiling for advertising purposes.
We don't sell personal data and don't share it with advertisers or data brokers. Data is shared only with the categories of recipients essential to providing the service:
We have data processing agreements (DPAs) in place with all data processors under Art. 28 GDPR, requiring them to process data solely on our instructions and to ensure an adequate level of protection.
Data is generally processed on servers within the European Economic Area. If a transfer outside the EEA is necessary for a particular service, it's only carried out with adequate safeguards in place: European Commission adequacy decisions or Standard Contractual Clauses (SCCs). You can request information about specific recipients at help@claimjam.com.
| Data | Retention period |
|---|---|
| Flight number and date from the free check | Up to 30 days, then deleted or anonymized |
| Active case materials | For the duration of the case |
| Documents from closed cases | The period required by law for accounting and tax records, and the statute of limitations |
| Copies of ID documents | Deleted as soon as they're no longer needed (usually once the power of attorney is confirmed) |
| Bank details | Deleted right after being shared with the airline, unless needed to issue the fee invoice |
| Cookie-consent records | 6 months |
Once these periods expire, the data is deleted or anonymized so that it can no longer be linked to a specific person.
Under the GDPR, you have the following rights over your data:
To exercise any of these rights, email us at help@claimjam.com. We respond within one month; in complex cases this may be extended by a further two months, with you notified of the reasons. Exercising these rights is free, except for manifestly unfounded or excessive repeat requests.
Please note that deleting data related to an active case may make it impossible to continue handling it.
The public part of the site doesn't set cookies for visitors. Traffic statistics are collected via Cloudflare Web Analytics — without cookies and without data that could identify a specific visitor. See the Cookie policy for full details.
The service isn't intended for independent use by anyone under 16. A claim on behalf of a minor passenger is filed by their parent or legal guardian, who provides the relevant data.
We may update this policy if our processes or the law change. The date of the current version is shown at the top of the page. We'll notify you by email of any material changes affecting your rights, if we have your address.
For any questions about data processing: help@claimjam.com.
If you're not satisfied with our response, you have the right to lodge a complaint with a data-protection supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD), or the supervisory authority of your country of residence or of the place where the alleged infringement occurred.