Privacy Policy & Data Protection

1. Overview and Data Controller

Letishte.info is an independent flight and airport travel information portal dedicated to Sofia Airport (SOF). We are committed to protecting the privacy of our visitors and uphold strict data minimization principles (Privacy by Design and by Default) in full compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR).

2. Information We Process and Legal Basis

Letishte.info does not require user registration or personal accounts, nor do we collect names, telephone numbers, payment details, or personal tracking profiles. We only process minimal technical data necessary for delivery:

• Server Technical Logs: When accessing our pages, web servers automatically log basic technical connection details — your IP address, timestamp, requested resource (URL), HTTP response status code, referrer URL, and browser user-agent string. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) strictly to ensure server security, mitigate malicious attacks/abuse, and diagnose operational performance. Server logs are kept for a limited retention period and are never shared with unauthorized third parties.
• Browser Geolocation: If you use airport map or distance-finding utilities, browser location coordinates are accessed only with your explicit permission. All coordinates are calculated purely client-side within your browser and are never transmitted to or recorded on our servers.
• Client-side Preferences (LocalStorage): User interface preferences, such as Dark Mode selection, are saved strictly on your local device via HTML5 LocalStorage and do not transfer to our servers.

3. Cookies and Tracking

Letishte.info does not employ behavioural tracking, cross-site profiling, or intrusive advertising cookies. We use Cloudflare as a content delivery network (CDN) and security shield, which may deploy strictly necessary security cookies to identify authentic visitors and protect against automated bot assaults.

4. Data Security

All traffic between your browser and our servers is secured with TLS/SSL encryption (HTTPS) enforced with HTTP Strict Transport Security (HSTS) preloading. We apply state-of-the-art server security configurations to safeguard platform integrity.

5. Your Rights Under GDPR

Under the GDPR, European Union residents possess rights including access, rectification, erasure, restriction of processing, and objection. Because we do not maintain identifiable user accounts, locating log records requires providing a specific public IP address and exact timestamp.

For any privacy inquiries or to exercise your rights, please reach out via the technical contact email address provided in the site footer.