Privacy Policy

Personal data means any information relating to an identified or identifiable natural person, directly or indirectly, based on such data alone or in combination with other information, including but not limited to: first and last name, residential address, telephone number, e-mail address, bank/credit card number, location data, online identifier.

We need your personal data to perform the contract of carriage, to fulfill the general conditions of carriage and obligations prescribed by applicable laws; otherwise, we will not be able to provide you with the requested service.

We collect your personal data on our official website, via call center, e-mail, or mobile application.

We will ask for your personal data to process your reservation and provide you with the requested service, communicate with you (in case of reservation issues, delays, flight delays, conducting service quality surveys, etc.), send reminders, newsletters, and promotional offers, for market research, and to fulfill administrative and legal obligations.

We will ask you to provide your first and last name, contact details (phone number, e-mail address, residential address), bank/credit card details, as well as other data required for the performance of the contract of carriage and fulfillment of legal obligations.

In certain cases, if you request special medical or other requirements, we will also need data about your health condition. To process this data, we need your explicit consent, i.e., agreement to process such data; otherwise, we will not be able to provide you with such services.

In certain countries, we have a legal obligation to provide competent customs and border authorities with access to reservation and travel information. For the purpose of fulfilling these legal obligations, we may disclose your personal and travel data to competent customs and immigration authorities in the place/country of departure or the place/country of destination. Also, based on applicable laws in certain countries, we are obliged to collect information about your passports and related information about all passengers before flying to or from those countries. Therefore, when required by applicable law, we will submit this data to competent customs and immigration authorities.

We collect your personal data in the following ways:

• When booking and purchasing an air ticket. Data required for booking or purchasing an air ticket depends on the destination, and for this purpose, we may request the following personal data:
  • Minimum (usually): First name, Last name, Phone number and/or E-mail address
  • Maximum (API data), when prescribed by applicable laws:
    • Full name (First name, Last name, Middle name if available)
    • Gender
    • Date of birth
    • Nationality
    • Country of residence
    • Type of travel document (usually passport)
    • Travel document number (expiration date and name of the issuing authority)
• Via account. To offer you a certain type of service through our website, we may require prior account registration for:
  • Newsletters to send promotional offers, campaigns, or interesting facts related to the company. When creating an account, you enter your personal data: First name, Last name, E-mail address, Residential address, and Phone number.
• Via the "Contact Us" link. If you sent an inquiry via our "Contact Us" link, your personal data will be used exclusively for the purpose of responding to your request. A copy will not be used for any purposes other than storing the e-mail for the indicated period.
• Log files. The website stores information about your IP address in log files for a certain period. Information in log files includes internet protocol (IP) address, browser type, Internet Service Provider (ISP), date/time, referring website, and other information that the browser may record. We use this information exclusively for troubleshooting system issues or administering the website.
• Cookies and tracking technologies. Some pages of our website may use "cookies" and other tracking technologies. A "cookie" is a small text file that may contain cached data (IP address, e-mail address, or password) so the user does not have to repeat repetitive actions. Also, user geolocation data may be stored to facilitate user navigation when purchasing a ticket. Most browsers allow you to control cookies, and if you do not want this data to be available to us, you can disable cookies. In that case, our website may not function correctly on your browser.

With your consent, we may perform "profiling" to provide offers that match your interests and needs (e.g., ticket price discount, voucher, etc.). With your consent, we may deliver these to you via e-mail or phone.

With your consent, we may use your e-mail address to send you promotional offers, campaigns, or information about the company and its services. If you deem that you do not need this information and do not want your e-mail address to be used for these purposes, please click the "unsubscribe" link located at the bottom of our webpage. You can also contact us with a request to delete your e-mail address electronically at: [email protected]. In this case, it is mandatory that the message be sent from the e-mail address you wish to remove.

Please pay attention to the messages you send via the "Contact Us" link, as the information will be used as indicated in paragraph 7, item 3 of this section. For account deactivation/deletion, send a request to the e-mail address: [email protected]. We will send you feedback on the deactivation/deletion.

Based on applicable laws and business rules, we may forward your personal data to:

• Airlines with which we have codeshare or other partnership agreements when you travel to destinations covered by those agreements,
• Our trusted partners with whom we have concluded service agreements (ground handling companies, airport companies, insurance service providers, etc.),
• Banks and other financial institutions for processing your payments,
• Third parties to whom we transfer or will transfer our rights and obligations under the contract of carriage concluded with you;
• Customs and immigration services, police and regulatory authorities, when required by applicable law or for the protection of our rights or security reasons, and
• In other cases where there is a legal obligation.

To provide you with the requested service, it may be necessary to transfer data to countries outside the European Economic Area that do not provide the same level of data protection. In that case, we will take all necessary measures regarding the recipient of your personal data to ensure an appropriate level of protection for your data. We conclude data processing agreements with data recipients obliging them to ensure an appropriate level of protection of personal data subject to processing, in accordance with applicable data protection laws and the General Data Protection Regulation (GDPR). If an appropriate level of protection for your personal data cannot be ensured, we will ask for your explicit consent regarding any such data transfer.

We warn you that such data transfers may carry certain risks, as the recipient of your data may have unreasonable access to the data, and you may not be able to exercise rights regarding the protection of your personal data and privacy rights.

Please note that our website may include destinations outside the European Economic Area among departures and arrivals, which do not provide the same level of data protection, and to which, in case of booking and purchasing an air ticket, your personal data may be transferred, or accessed by someone based on the travel destination.

We fulfill legal obligations and protect your personal data by:

• Regularly updating personal data,
• Securely storing and destroying it,
• Not collecting or retaining excessive amounts of data,
• Protecting personal data from loss, misuse, unauthorized access, and disclosure, and by ensuring the application of appropriate technical and organizational measures for the protection and secure transfer of personal data.

When booking a ticket via the website, your data is entered via encrypted channels using a secure server (Secure Socket Layer - SSL), thus preventing unauthorized access to your data.

To protect your personal data, we implement appropriate technical, physical, and organizational security measures, taking into account the nature, scope, and purpose of data processing, as well as risks of varying likelihood.

We update and test our security technologies and take measures to improve them. We use advanced tools for protection and prevention of data leaks, encrypt certain data, and protect data from unauthorized access, alteration, loss, theft, and any other breach and misuse of data.

Access to data is limited only to data necessary for the above-mentioned purposes and exclusively to authorized persons in the company who work directly on processing personal data. Employees with access to personal data are bound by confidentiality clauses, and we contract appropriate security measures with partners.

As stated above, we strive to take all reasonable measures to protect your personal data. However, we cannot guarantee the security of data you have provided via the Internet. By providing data on the Internet, you accept the possible risk that any provision of personal data and Internet activity carries, and you accept that you will not hold us responsible for omissions unless they are due to our negligence or intentional misuse.

To minimize these risks, i.e., increase security, you need to protect your device from various malicious programs (viruses, etc.).

Our website may contain links to other websites, and other websites may contain links to our website. We are not responsible for the protection of your data when it comes to linked websites.

We process and store personal data in the manner and within the deadlines prescribed by applicable laws and general acts of the company.

Regarding your data that we process, you have the right to:

• Request confirmation as to whether your data is being processed,
• Access your processed data and obtain a copy of your processed data,
• Request rectification of personal data,
• Request erasure of personal data,
• Request restriction of processing of personal data,
• Request data portability,
• Withdraw consent when processing is based on your consent,
• Object to the processing of your personal data, i.e., lodge a complaint with the competent authority.

At any time, you can submit a request for access to data, issuance of a copy of your processed data, rectification or erasure of data, restriction of data processing, withdrawal of consent, or objection to the e-mail address: [email protected].

We reserve the right to change this Privacy Policy at any time. The revised version of the Privacy Policy will be published on our website www.airmontenegro.com and will come into effect on the day of publication.

In order to improve user experience and more efficiently provide information about the services we offer to passengers, our website uses a chatbot assistant. The chatbot is a digital tool designed to provide user support regarding: frequently asked questions, available capacities and flights, travel conditions, and other commercial information.

The chatbot does not collect users' personal data except to the extent that the user voluntarily enters it during the conversation and with their explicit consent. In such a case, the collected data will be processed exclusively for the purpose of providing the requested information or support, in accordance with applicable regulations on personal data protection.

We reserve the right to access anonymous conversation logs for analysis, statistical processing, and improvement of service quality, taking into account the principles of legality, purpose limitation, and data minimization. Anonymization is carried out so that individual users cannot be identified, nor is such data used for any marketing or profiling activities.

The intention of using the chatbot assistant is solely commercial in nature, aiming to facilitate access to information and improve user experience. No collected data is used for unauthorized or illegal purposes, nor is it transferred to third parties without a legal basis and user consent.

To preserve the confidentiality and security of user information, Air Montenegro applies technical and organizational protection measures regarding the use of the chatbot assistant. All communications taking place via the chatbot platform are protected by appropriate security protocols, including data encryption in transit, as well as strict access control by authorized personnel. These measures are taken to prevent unauthorized access, disclosure, or misuse of any data that might potentially be processed during the user's interaction with the chatbot assistant.