Privacy Notice

Policy For Personal Data Processing

This Data Protection Policy explains how Star East processes personal data when you use our website, online offers, or communicate with us through any available channel.

Policy Overview

Updated at: 19.06.2026

Star East processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable national legislation. This Policy explains the nature of the personal data processed, the purposes of processing, and the legal basis for processing.

1. Generalities

This Policy explains the confidentiality rules applicable to our partner’s online Offers, available through their website, agents, and within our website, www.stareast.net.

By “Offer” we mean our partner’s business, which may include air transportation services, booking, intermediation and sale of flight tickets, additional services, or the association of such services for the general public and/or commercial customers. Our Offers are not intended for persons under 18 years of age.

This Policy explains how we process personal data when you use our website, our online Offers, or interact with us through any communication channel.

2. Presentation

We, Star East Airline SRL or Star East Ltd., namely the group of companies Star East, with the main headquarters in Balotesti, 23/8 Rozelor St., Ilfov County, Romania, registration number J2017002010401, fiscal code RO37088193, EU Identifier (EUID) ROONRC.J2017002010401, act as a personal data processor for users of our Offers within the meaning of data protection regulations.

Contact details:
Balotesti, Ilfov County
23/8 Rozelor St.
Phone: +40-31-069-9250
E-mail: office@stareast.net

3. Data Protection Officer

You may contact the Data Protection Officer at attorney@stareast.net. This address is monitored by our DPO and only data protection related requests will be replied to.

4. Personal Data

Personal data is any information related to an identified or identifiable natural person. A person is identifiable if identification can be made directly or indirectly, particularly by reference to elements such as name, identification number, location data, online identifier, or specific physical, physiological, genetic, mental, economic, cultural or social identity.

Information that cannot be associated with your identity, such as statistical access data, is not personal data.

In principle, you may examine our Offers without disclosing personal data. However, using the online contact form implies disclosure of personal data.

5. Storage Of Personal Data

Your data are stored on protected servers and secured through technical and organizational measures designed to prevent loss, destruction, unauthorized access, alteration and dissemination.

Access is allowed only to a limited number of authorized persons responsible for the technical, commercial or operational management of the servers and business. Data transmitted through the Internet are encrypted using SSL.

Legal Basis For Processing

We process personal data under the following GDPR legal bases:

• Consent: Article 6 para. (1) let. a) GDPR;
• Contractual necessity: Article 6 para. (1) let. b) GDPR;
• Legal obligation: Article 6 para. (1) let. c) GDPR;
• Legitimate interest: Article 6 para. (1) let. f) GDPR.

We erase, restrict or otherwise limit access to personal data when the processing purpose has been reached or when the applicable legal storage period expires.

Data Processing When Accessing Offers

Each time our Offers are accessed, we may collect device type, IP address, web browser, access date and time, viewed Offer, browser version, operating system, Internet service provider, and the websites from which you were redirected.

This processing supports our legitimate interest in displaying pages correctly, identifying errors, measuring interest in Offers, and improving our services. The IP address is kept only during the session and erased or encrypted at the end of the session.

Cookies

We use cookies to personalize content and ads, provide social network functions, and analyze traffic. Please read our Cookies Policy to express your options.

Placing Orders

To initiate a contractual relation with us or with our partner, you may be redirected to the partner’s website, where the partner’s policies will apply. We encourage you to read them carefully before disclosing personal data.

Depending on the characteristics of the Offer, personal data may be sent to entities outside the European Union. We are responsible only for transmitting data necessary for fulfilling contractual obligations.

Communication

When you contact us by phone, e-mail, mail or courier, we process only the personal data related to the communication channel you choose, such as phone number, correspondence address, e-mail address or fax number, associated with your name. You may unsubscribe from commercial communications at any time.

Connections To Other Websites

Our website may contain links to partner websites. Accessing these links leads you outside our website, and this Data Processing Policy does not apply to those websites.

Some partners may be located outside the European Economic Area (EEA). Transfers are made only when one of the following safeguards applies:

• European Commission adequacy decision;
• Standard Contractual Clauses (SCCs);
• Appropriate technical and organizational measures;
• Explicit consent, only when no other safeguard is available.

We do not rely on implicit consent for international transfers.

Your Rights Under GDPR

The main rights of the persons concerned are:

• Right to be informed about the purpose, means and duration of processing;
• Right of access to the personal data processed by us;
• Right to data rectification for incorrect or incomplete data;
• Right to restriction of processing under Article 18 GDPR;
• Right to object to processing where applicable;
• Right to data portability for automated processing;
• Right to data erasure under Article 17 GDPR.

Response time: We are obliged to reply to requests related to the exercise of a right within 30 days from receiving the complete request.

Supervisory Authority

If you do not receive a reply from us by the legal deadline, you have the right to contact the National Supervisory Authority for Personal Data Processing:

www.dataprotection.ro
28-30, G-ral. Gheorghe Magheru Bvd., District 1, postal code 010336, Bucharest, Romania
E-mail: anspdcp@dataprotection.ro
Fax: +40318.059.602