we’ll ever collect, use and share your information in ways that are described in this policy.
we’re committed to the confidentiality and security of the personal data you give us.
update your profile and communication preferences at any time.
At ASA Sky Travel AB, we are committed to protecting the privacy of our customers and ensuring that your personal data is processed in accordance with Swedish law and the European Union’s General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).
We may need to collect and process the following types of personal data:
• Contact details: full name, address, email address, phone number.
We use your personal data for the following purposes:
• To process bookings and fulfill contracts.
• Your personal data is securely stored on servers both inside and outside the European Union, including Sweden, Germany, Ireland, and Singapore.
• Our services are not directed at children under the age of 18.
• We do not knowingly collect personal data from children.
Under GDPR (Articles 12–23), you have the following rights:
• The right to access your data and request a copy.
• We retain your personal data only for as long as necessary to fulfill the purposes it was collected for or to comply with legal requirements.
We apply technical and organizational security measures, including:
• TLS/SSL encryption for data transmission.
We may share your personal data with:
• Airlines and hotels.
• We communicate with our customers primarily through WhatsApp, which is an official and recognized communication channel for ASA Sky Travel AB.
• In the event of a data breach that exposes your personal information, we will notify you promptly via email or phone.
• We may use certain data (e.g., destinations searched or booked) to personalize marketing communications
For inquiries or to exercise your data rights, you can reach us at:
• 📧 Email: contact@asasky.com
• ☎️ Phone: 0700 125 657
• 📍 Address: ASA Sky Travel AB, Eskilstuna, Sweden
We are committed to responding to privacy-related requests within 30 days, as required by GDPR.