Privacy Policy

Last updated: September 22, 2026

1. Who we are

AirportMix is an online flight search and booking service operated by
Compliance Specialist S.L. in Spain.
Our website address is
https://airportmix.com
(“AirportMix”, “we”, “us”).

For privacy-related questions or requests, you can contact us at
info@airportmix.com.

2. What this policy covers

This Privacy Policy explains what personal data we collect, why we process it,
how it may be shared, how long we retain it, and the rights available to you.
It applies to airportmix.com and to flight searches and bookings made through AirportMix.

3. Information we collect

Depending on how you use AirportMix, we may process the following categories of personal data:

Passenger information:
name, title, gender, date of birth and other passenger details required to search for or complete a flight booking.
Travel document information:
where required by an airline or for a particular journey, information relating to passports or other travel documents may be required to complete a booking.
Contact information:
email address and telephone number supplied during the booking process.
Booking information:
flight itinerary, departure and arrival airports, travel dates, airline, fare information, AirportMix booking reference, airline booking reference and booking status.
Payment and transaction information:
payment status, amount, currency and identifiers relating to the payment transaction.
Full payment card details are processed by our payment provider and are not stored by AirportMix on its own servers.
Search information:
flight searches, selected airports, dates, passenger composition and selected flight options.
Usage data:
pages viewed, referring URLs, interactions with the website, device/browser information and approximate location such as country or city.
Technical data:
IP address, user agent, cookie identifiers, security information and consent preferences.
Communications:
information you provide when contacting AirportMix about a booking, support request, complaint or other enquiry.

4. Why we process your personal data

We process personal data where necessary to:

provide flight search results;
create and manage flight bookings requested by you;
process and confirm payments;
send booking confirmations and important booking information;
communicate with airlines and booking infrastructure providers where necessary;
provide customer support and handle booking changes, cancellations or refund requests;
detect and prevent fraud, misuse and security incidents;
maintain transaction and booking records;
comply with legal, regulatory, accounting and tax obligations;
operate, analyse and improve AirportMix; and
use analytics or marketing technologies where you have provided consent where required.

5. Legal bases for processing

Where the EU General Data Protection Regulation (GDPR) applies, we rely on one or more of the following legal bases:

Performance of a contract:
where processing is necessary to search for, create, manage or support a flight booking requested by you.
Legal obligation:
where we must retain or process information to comply with applicable legal, accounting, tax or regulatory requirements.
Legitimate interests:
where necessary for purposes such as operating and securing AirportMix, preventing fraud, providing customer support and improving our services, provided those interests are not overridden by your rights and interests.
Consent:
where required for non-essential cookies, analytics, marketing technologies or another activity for which consent is the appropriate legal basis.

6. Flight bookings and airlines

To search for and complete a flight booking, certain passenger and booking information must be provided to the companies involved in providing and fulfilling the booking.

This may include airlines and flight booking infrastructure providers.
The information shared depends on the selected flight and what is required to create and manage the booking.

Airlines may process passenger information in accordance with their own privacy policies and applicable aviation, security and immigration requirements.

7. Duffel

AirportMix uses Duffel as flight booking infrastructure.
Where necessary to search for, create or manage a flight booking, relevant search, passenger, contact and booking information may be transmitted to Duffel and, through Duffel, to the relevant airline or other entities involved in fulfilling the booking.

Duffel processes information in accordance with its applicable privacy and data protection arrangements.

8. Payments and Stripe

AirportMix uses Stripe to process payments.
Payment card information entered into Stripe’s payment interface is processed by Stripe.
AirportMix does not store your full payment card number or card security code on its own servers.

We may receive and retain information relating to the transaction, such as payment status, transaction identifiers, amount, currency and limited payment-related information required for reconciliation, fraud prevention and customer support.

Stripe may process personal data in accordance with its own privacy policy and applicable data protection requirements.

9. Booking emails and Resend

AirportMix uses Resend to send transactional emails such as booking confirmations and other booking-related communications.

For this purpose, relevant information such as your email address, booking reference and information required to generate the message may be processed through Resend.

10. Automated processing and AI-supported features

AirportMix may use automated systems to help compare and explain flight options, including features such as Smart Pick.
These systems assist with presenting flight search results and do not independently create a flight booking without the customer selecting and confirming an itinerary.

Where third-party artificial intelligence services are used, we aim to limit the information provided to what is necessary for the relevant functionality and avoid sending payment card details through such services.

11. Cookies & consent

We use cookies and similar technologies for essential site functionality, security, analytics and other purposes described in this policy.
You can manage your consent preferences using the control below:

Name	Description	Duration
comment_author	Used to track the user across multiple sessions.	Session
comment_author_email	Used to track the user across multiple sessions.	Session
comment_author_url	Used to track the user across multiple sessions.	Session

Learn more

Name	Description	Duration
__utmx	Used to determine whether a user is included in an A / B or Multivariate test.	18 months
_ga	ID used to identify users	2 years
_gali	Used by Google Analytics to determine which links on a page are being clicked	30 seconds
_ga_	ID used to identify users	2 years
_gid	ID used to identify users for 24 hours after last activity	24 hours
_gat	Used to monitor number of Google Analytics server requests when using Google Tag Manager	1 minute
_gac_	Contains information related to marketing campaigns of the user. These are shared with Google AdWords / Google Ads when the Google Ads and Google Analytics accounts are linked together.	90 days
__utma	ID used to identify users and sessions	2 years after last activity
__utmt	Used to monitor number of Google Analytics server requests	10 minutes
__utmb	Used to distinguish new sessions and visits. This cookie is set when the GA.js javascript library is loaded and there is no existing __utmb cookie. The cookie is updated every time data is sent to the Google Analytics server.	30 minutes after last activity
__utmc	Used only with old Urchin versions of Google Analytics and not with GA.js. Was used to distinguish between new sessions and visits at the end of a session.	End of session (browser)
__utmz	Contains information about the traffic source or campaign that directed user to the website. The cookie is set when the GA.js javascript is loaded and updated when data is sent to the Google Anaytics server	6 months after last activity
__utmv	Contains custom information set by the web developer via the _setCustomVar method in Google Analytics. This cookie is updated every time new data is sent to the Google Analytics server.	2 years after last activity

Learn more

Essential cookies are required for functions such as security and operation of the website.
Non-essential cookies, including analytics or marketing cookies, are used only with your consent where required by law.

12. Analytics

We may use Google Analytics 4 to understand how AirportMix is used, such as pages visited and interactions with the website.
Google Analytics may process device information, cookie identifiers, IP-related information and usage data.

Where required, analytics technologies are activated only after consent.
You can change your preferences through our cookie consent controls.

13. Comments and WordPress

If comments are enabled and you leave a comment, we may collect the information shown in the comment form together with technical information such as your IP address and browser user agent for spam prevention and security purposes.

WordPress may also use functional cookies for administrative, login or comment-related functionality where applicable.

14. Embedded content

Pages or articles may contain embedded content such as videos or maps.
Third-party embedded content may behave as if you visited the third-party website directly and may process data or set cookies subject to the provider’s own policies and your consent choices where applicable.

15. How we share information

We may share personal data where necessary with:

Airlines providing the selected flight;
Duffel and other infrastructure necessary to search for and fulfil flight bookings;
Stripe for payment processing and fraud prevention;
Resend for transactional booking emails;
hosting, security, analytics and consent-management providers supporting AirportMix;
professional advisers or authorities where required by law or reasonably necessary to establish, exercise or defend legal rights.

We do not sell personal data to third parties.

16. International data transfers

Some service providers or airlines involved in a booking may process personal data outside the European Economic Area.
This may occur, for example, where an airline, technology provider or its infrastructure is located in another country.

Where required by applicable data protection law, appropriate safeguards are used for international transfers, such as adequacy decisions, contractual safeguards or other lawful transfer mechanisms.

17. How long we retain information

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Booking and transaction records:
retained for the period necessary to provide booking support and satisfy applicable legal, accounting and tax obligations.
Customer support communications:
retained for as long as reasonably necessary to resolve the request and maintain an appropriate record of the interaction.
Analytics information:
retained according to the retention settings configured for the relevant analytics service.
Cookie and consent information:
retained according to the applicable cookie or consent-management settings and legal requirements.

18. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or loss.
These measures include HTTPS, access controls and limiting access to systems and credentials.

No internet-based system can guarantee absolute security.

19. Children and young passengers

AirportMix is intended to be used by adults to search for and make flight bookings.
However, a booking may include children or infants as passengers.

Where a child or infant is included in a booking, we process the passenger information necessary to search for and complete the requested flight booking.
The person making the booking is responsible for having the authority to provide the passenger information required for the booking.

20. Your data protection rights

Depending on the law applicable to you, you may have rights including the right to:

request access to personal data we hold about you;
request correction of inaccurate or incomplete information;
request deletion of personal data in certain circumstances;
request restriction of processing;
object to certain processing based on legitimate interests;
receive certain personal data in a portable format;
withdraw consent where processing is based on consent; and
lodge a complaint with a competent data protection authority.

These rights may be subject to exceptions under applicable law.
For example, we may need to retain certain booking or transaction records even after a deletion request where retention is required by law.

21. Exercising your rights

To exercise a data protection right or ask a privacy-related question, contact:
info@airportmix.com.

We may need to verify your identity before responding to certain requests in order to protect personal data from unauthorised disclosure.

22. Data protection authority

If you are located in Spain, you have the right to lodge a complaint with the
Agencia Española de Protección de Datos (AEPD).
If you are located elsewhere in the EEA or another jurisdiction, you may also have the right to contact your local competent data protection authority.

23. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change.
The latest version will be published on this page together with the date it was last updated.

24. Contact

AirportMix
Operated by Compliance Specialist S.L.
Spain
Email: info@airportmix.com
Website: airportmix.com