Privacy Policy

The data controller is Expatwise LLC, with its business address at 30 N Gould St, Ste R, Sheridan, WY 82801, USA, which operates letkasni.rs and determines the purposes and means of processing personal data.

For questions about data processing and exercising privacy rights, please use the contact email listed above.

Depending on how you use the website, we may process the following categories of data:

• identification and contact details that you provide, such as your name, email address and telephone number;
• flight and incident details, such as flight number, flight date, route, type of problem and a free-text description;
• technical website-use data, such as IP address, basic logs, access time and device or browser information;
• documents and additional information that you later provide if the case is reviewed further.

We do not request special categories of personal data unless they are exceptionally necessary for a particular request and an appropriate legal basis exists.

We process data only where there is an appropriate legal basis and a clear purpose.

• Pre-contractual steps and service delivery: when you submit a request, we process the data to receive the request, organise information and documents, respond to your enquiry and take administrative steps before any separate agreement or power of attorney is concluded.
• Legitimate interest: to protect systems, prevent misuse, keep records, improve processes and defend against legal claims, where the user's interests do not override those interests.
• Legal obligation: where processing is necessary to retain business records, respond to competent authorities or meet another legal obligation.
• Consent: only for processing that genuinely requires consent, such as optional analytics and marketing tools enabled through the privacy settings.

Data is not used for solely automated decision-making that produces legal effects for the user. Letkasni.rs does not process data for legal advice, legal representation or other legal services.

If a user later requests or approves the involvement of an external legal professional, certain data may be shared with that professional only as necessary for the next steps and on an appropriate legal basis.

Providing basic flight and contact details is not a legal obligation, but it is practically necessary if you want us to process a request administratively or contact you about your submission.

If you do not provide the minimum necessary information, we may be unable to process the request or respond to your enquiry.

Data may be available to employees, contractors and processors involved in the technical maintenance of the website and request processing, only to the extent necessary for the relevant purpose.

Typical recipients or processors may include:

• hosting, CDN and infrastructure providers;
• database and cloud-service providers;
• email and communication providers;
• external legal or operational partners, where necessary for a particular case;
• competent authorities where there is a legal obligation or valid legal request.

Appropriate data-processing agreements are or will be concluded with processors where required by law.

Some technical infrastructure may involve providers that process or access data outside the Republic of Serbia. Where such a transfer occurs, appropriate safeguards are applied, including contractual and organisational mechanisms, to the extent required by applicable law.

If additional providers or more complex transfers are introduced, this policy will be updated with more specific information about the services and transfer safeguards.

We keep data for as long as necessary for the purpose for which it was collected and then for as long as required by legitimate interests or legal obligations.

• submissions that do not proceed to further cooperation are kept for a reasonably limited period for record-keeping and any follow-up response;
• data about active cases is kept during case processing and afterwards for as long as necessary for accounting, tax, contractual and other legal obligations;
• technical logs and security records are retained for a limited period consistent with system-protection purposes.

Specific retention periods may be further defined in the controller's internal policies for each data category.

Under the Serbian Personal Data Protection Act, you may request access to, correction or completion of data, erasure, restriction of processing and data portability where the relevant conditions are met, and you may object to processing.

You may also withdraw consent at any time for processing based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Requests may be sent to kontakt@letkasni.rs. If you believe processing is unlawful, you may complain to the Commissioner for Information of Public Importance and Personal Data Protection.

We apply reasonable technical, organisational and personnel measures to protect data from unauthorised access, loss, misuse, alteration or destruction. However, no system is completely secure, so it is not possible to guarantee the absolute security of every transmission or storage process.

The website may use necessary technical cookies and similar technologies required for website operation, session security and basic functionality. When the relevant environment variables are enabled and the user selects the appropriate category, the website may use Google Analytics for analytics and Meta Pixel to measure advertising performance. These tools are not loaded before the user makes a choice.

When the user selects the marketing category, the Conversions API may receive technical request data for server-side measurement of a successfully received request, as well as one-way hashed email and telephone values when provided. The service access token is not exposed to the browser.

Optional analytics and marketing are enabled separately according to the user's choice in the banner. The choice can be changed or withdrawn through “Privacy settings” in the website footer. Blocking new events after withdrawal does not automatically delete all previously set browser cookies.

This policy may be updated from time to time to reflect changes in the business model, technology or regulations. The current version is published on this page with the date of the latest update.