Privacy Policy

This privacy policy explains how we handle personal data on the Amatus VIP websites (amatusvip.com, amatusvip.de, amatusvip.fr, amatusvip.com.cy, amatusvip.ge, amatusvip.gr and amatusvip.ae) and when you send us a request. It follows the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is AmatusCrew e.K., owner Alexander Zagurskiy, Eduard-Stanglmeier-Straße 20, 94447 Plattling, Germany. Registered at Amtsgericht Deggendorf, HRA 3531. Email: [email protected], telephone: +49 1522 8373184.

For any question about your data or to exercise your rights, write to [email protected].

2. What we process, why, and on which legal basis

Visiting the website

When you open a page, our hosting and network providers automatically process technical data needed to deliver the page and protect it against attacks: IP address, date and time, the page requested, browser and device information. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). We do not use analytics, advertising or tracking tools.

Price and availability requests

When you send a request (for example with the “Request price” button), we process the details you enter: name, email address, telephone or WhatsApp number and the request itself (airport, service, travel date, flight number, number of passengers and any message). We also store the website and language you used, the time of the request and your IP address, to document the request and your agreement and to prevent abuse. We use this data to check prices and availability with the airport service providers and to reply to you. Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in preventing misuse (Art. 6(1)(f) GDPR).

Providing these details is voluntary, but without them we cannot answer your request.

Bookings

If you go ahead with a booking, we process the passenger, flight, contact and billing details needed to arrange the service, and we pass the details required for the service to the airport service provider who performs it. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legal obligations under commercial and tax law (Art. 6(1)(c) GDPR).

Email and telephone

If you contact us directly, we process your message and contact details to answer you (Art. 6(1)(b) or (f) GDPR).

Flight information

The arrivals and departures board and the flight-number suggestions use public flight schedule data. To look up flights we send only the airport, date and the first characters of a flight number to our flight data provider — never your name or contact details.

3. Who receives your data

We share personal data only where this is necessary:

• Hosting and database: Render Services, Inc. (web servers in Frankfurt, Germany) and Supabase Pte. Ltd., Singapore (database).
• Network and security: Cloudflare, Inc. (content delivery and protection against attacks).
• Email: Google (email accounts for amatusvip.com).
• Airport service providers: the handling company that performs your confirmed service receives the details it needs (for example name, flight and meeting point).
• Authorities: only where we are legally required to disclose data.

Our technical providers act on our instructions under data processing agreements. Some are based outside the European Economic Area (United States, Singapore). Such transfers are based on an adequacy decision of the European Commission (EU–U.S. Data Privacy Framework) or on the European Commission’s standard contractual clauses included in the providers’ data processing agreements (Art. 45 and 46 GDPR).

4. How long we keep data

• Requests that do not lead to a booking, contact messages and chat conversations: deleted automatically 24 months after our last contact with you.
• IP addresses stored with a request: removed automatically after 12 months.
• Bookings, invoices and related correspondence: kept for the periods required by German commercial and tax law (generally six to ten years, § 257 HGB and § 147 AO) and deleted automatically when the period ends. If you ask us to erase your data during this period, we restrict it to what the law requires us to keep.
• Technical access data: kept by our hosting and network providers only for the short period needed for operation and security.

5. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or its processing restricted (Art. 18), to data portability (Art. 20), and to object to processing based on our legitimate interests (Art. 21). Where processing is based on your consent, you can withdraw it at any time with effect for the future. To exercise any of these rights, email [email protected].

You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany — www.lda.bayern.de.

6. No automated decisions

We do not make decisions about you based solely on automated processing, and we do not create profiles.

7. Cookies

We use only technically necessary cookies. Details are in our Cookie Policy.

8. Changes

We update this policy when our services or the law change. The current version is always published on this page. Version: 3 October 2026.