1. Operator and domain

FLY GROUP S.R.L., operating under the brand name TravelOne, IDNO 1024600019733, with legal headquarters in MD-2012, Republic of Moldova, mun. Chisinau, str. Vasile Alecsandri 91, of. 10, processes personal data in connection with the administration of the B2B Portal and the provision of TravelOne services, in the legal roles determined by each process. Contact for data protection requests: support@travelone.eu.

This Notice covers two main categories: (i) representatives and users of B2B Agencies; and (ii) passengers/guests whose data is entered by the Agency for reservations.

This Notice applies from the date of publication and is interpreted in accordance with Law no. 195/2024 on the protection of personal data and the other applicable rules.

2. Agency users

    a) Data processed

  • name, position, Agency, email and phone;
  • Usernames, account identifiers, roles, and permissions.
  • IP, device/browser, logins, and security events;
  • the history of actions/bookings associated with the user;
  • communications with the carrier and billing/compliance data when they concern an individual.

    b) Aims and grounds

    The data may be used for account creation and administration, B2B relationship execution, security, fraud prevention, support, accounting/auditing and compliance with legal obligations. Optional commercial communications are made only on a permitted basis and with the applicable unsubscribe mechanism.

3. Passengers and guests

    a) Incoming data

  • identity, date of birth and nationality when required by the service;
  • passport/ID data and validity, where required;
  • operational contact details;
  • itinerary, PNR/RLOC/confirmation number, hotel, flight and ancillary services;
  • special requests/assistance, limited to what is necessary;
  • payment data associated with the booking to the extent necessary; full card data does not need to be stored by TravelOne if the PSP processes it directly.

    b) Data Source and Purposes

    The data is usually received from the Agency making the booking and can be filled in by the suppliers. It is used for search, booking, issuance/voucher, payments/reconciliation, modifications, cancellations, refund, support, complaints, fraud prevention and legal obligations.

    4. Recipients and suppliers

    The necessary data may be transmitted to airlines, hotels, wholesale suppliers/aggregators, transfer/activity providers, IT/hosting and technical support providers, PSPs/banks, consultants and authorities where there is a legal basis. Only the data necessary for the relevant purpose shall be communicated.

    5. International transfers

    Travel services may involve the transmission of data to the country of destination and the suppliers involved. Transfers falling within the scope of data protection legislation are carried out on the basis of the applicable legal mechanism and safeguards.

    6. Retention

    The data is retained only for as long as necessary for the relevant purpose and for the applicable legal/contractual terms, then deleted, anonymized or archived only if required by law.

    7. Rights of the data subject

    Under the law, the individual may request access, rectification, deletion, restriction, portability and opposition and may withdraw consent for the future when the processing is based on it. Some requests may be limited by legal obligations or the need to enforce/defend certain rights.

    8. Informing the passenger/guest

    The agency entering the data must send the customer the link to this Notice at the time provided by law and the contract. TravelOne keeps the Information publicly accessible and may include the link in the booking/confirmation/voucher.

    9. Security and incidents

    TravelOne applies technical and organisational measures proportionate to the risk, including access control, logging, credential protection and infrastructure/supplier measures. Incidents are handled in accordance with internal procedure and legal obligations.

    10. Marketing and automated decisions

    Passenger/guest data is not automatically used for marketing just because it has been entered into a booking. Any meaningful marketing or automation must have a distinct purpose and the necessary transparency.

    11. Contact and complaints

    The individual may contact TravelOne at support@travelone.eu for questions and requests regarding data protection and may use the complaint avenues provided for by applicable data protection legislation.

© 2026 TRAVELONE