Privacy policy

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Bitte ergänzen: Name bzw. Firmenname

Bitte ergänzen: Rechtsform

Bitte ergänzen: Straße und Hausnummer

Bitte ergänzen: Postleitzahl Bitte ergänzen: Ort Bitte ergänzen: Land

E-Mail: Bitte ergänzen: E-Mail-Adresse

2. Data protection officer

A data protection officer only has to be appointed under certain conditions, for example when at least 20 people are permanently engaged in the automated processing of personal data. If appointed, add name and contact details here – otherwise this section may be omitted.

3. Principles

We process personal data as sparingly as possible. Using this website requires no registration, and we ask for neither your name nor your email address in order to show flight offers.

Fares are retrieved and cached server-side. Your browser does not contact the data sources, and no personal data about you is transmitted to them.

Without your explicit consent this website loads no third-party scripts and sets no cookies for analytics or advertising purposes.

4. Hosting

This website is hosted by an external service provider acting as a processor. Personal data collected on this website is stored on their servers.

Vercel Inc., Covina, CA, USA

The use of the hosting provider is based on our legitimate interest in a secure, fast and reliable provision of our online offering (Art. 6 (1) (f) GDPR).

To be completed: confirmation that a data processing agreement under Art. 28 GDPR has been concluded with the hosting provider, and – for servers outside the EU – the legal basis for the transfer, such as EU standard contractual clauses or certification under the EU-US Data Privacy Framework.

5. Server log files

When you access this website, the hosting provider automatically collects information transmitted by your browser. This typically includes: the address requested, date and time of access, volume of data transferred, notification of successful retrieval, browser type and version, operating system, the previously visited page (referrer) and the IP address.

This data is technically necessary to deliver the website, ensure its stability and security and to defend against attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest).

This data is not merged with other data sources and is deleted automatically after a short period. Bitte ergänzen: Speicherdauer der Server-Logs

6. Encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar starting with “https://”. While encryption is active, the data you transmit to us cannot be read by third parties.

7. Cookies and local storage

This website sets no cookies for analytics or advertising purposes unless you have consented.

Technically necessary are: a cookie storing your language choice (NEXT_LOCALE) so you always arrive in your language, and – only if enabled by the operator – a cookie for bypassing maintenance mode. The legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

Your decision about partner tracking is stored in your browser's local storage under the key “syriaroutes.consent.v1”. This information never leaves your device and serves only to avoid asking you again on every visit. You can delete it at any time via your browser settings.

Your colour scheme preference (light/dark) is likewise stored locally in your browser.

8. Consent and withdrawal

Before loading services that are not technically necessary, we ask for your consent. As long as you have not agreed, the service in question is not loaded — it is not merely blocked, it is never requested.

You may withdraw your consent at any time with effect for the future using the “Change tracking settings” button at the bottom of every page. The lawfulness of processing carried out before withdrawal remains unaffected.

The legal basis for services requiring consent is Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

9. Travelpayouts (partner tracking and flight data)

The provider is Travelpayouts (TP Global LP). To be completed or verified: the provider's full address according to its current details.

Flight data: the prices, airlines, travel times and routes shown on this website are retrieved via the Travelpayouts Flight Data API. This retrieval happens exclusively from our server, at fixed intervals and independently of individual page views. No personal data about you — in particular not your IP address — is transmitted to Travelpayouts in the process.

Tracking script: only if you have consented do we additionally load a script from Travelpayouts (emrldco.com) that attributes bookings to our website. This may process your IP address, information about your browser and an identifier for recognition. The legal basis is Art. 6 (1) (a) GDPR (consent).

Further information is available in the provider's privacy policy: https://www.travelpayouts.com/en/privacy-policy/

10. Affiliate links to booking portals

The booking buttons lead to partner portals, currently Kiwi.com and Aviasales, connected through the Travelpayouts partner programme. These links contain a partner identifier so that a booking can be attributed to our website.

Only when you click such a link does your browser connect to the portal concerned. From that moment the privacy policy of that provider applies; we have no influence over their processing. Typically your IP address, browser information and the address called up including the partner identifier are transmitted.

The legal basis for providing the links is our legitimate interest in financing this service (Art. 6 (1) (f) GDPR). Any contract is concluded exclusively between you and the respective portal.

Partner privacy policies: Kiwi.com – https://www.kiwi.com/en/pages/content/privacy , Aviasales – https://www.aviasales.com/privacy

11. Weather data (Open-Meteo)

To display the weather at Syrian destinations we use the Open-Meteo interface (Open-Meteo, Zurich, Switzerland).

This request is also made exclusively server-side and for fixed locations. Your browser does not connect to Open-Meteo, and no personal data about you is transmitted.

Provider's terms: https://open-meteo.com/en/terms

12. Airline images

Airline logos come from a Travelpayouts image service (pics.avs.io). These images are not requested directly by your browser but are delivered and cached through our own server.

As a result, your IP address is not transmitted to the image service.

13. Fonts

This website uses the Inter and IBM Plex Sans Arabic typefaces. Both are served locally from our own server. There is no connection to Google Fonts or any other external font service, and no data is transferred to third parties.

14. Advertising (currently inactive)

This website reserves space for advertising. No adverts are currently delivered; those positions show designed placeholders only. No data processing for advertising purposes takes place.

Once advertising is activated, the use of Google AdSense is planned (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google AdSense uses cookies and comparable technologies to serve adverts and measure their performance; personal data — in particular your IP address — may also be transferred to Google servers in the USA. Google is certified under the EU-US Data Privacy Framework.

Delivery will only take place after your explicit consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). This privacy policy and the consent dialogue will be updated accordingly before activation.

Further information: https://policies.google.com/privacy

15. Contacting us

If you contact us by email, we process your details solely to handle your enquiry and for any follow-up questions.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries) or Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding a contract.

We delete this data as soon as it is no longer required, and at the latest once statutory retention periods have expired.

16. Recipients and transfers to third countries

Your data is passed on to third parties only as described in this policy, where legally required, or where you have consented.

Where data is transferred to countries outside the European Union — for instance to the hosting provider or, after consent, to advertising and tracking services — this takes place on the basis of an adequacy decision, a certification under the EU-US Data Privacy Framework, or EU standard contractual clauses.

17. Retention period

Unless an explicit retention period is stated in this policy, we process personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations.

18. Your rights

You have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of processing (Art. 15 GDPR).

You also have the right to rectification of inaccurate data (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

You have the right to withdraw consent at any time (Art. 7 (3) GDPR).

Right to object: you have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).

An informal message to the address above is sufficient to exercise these rights.

19. Right to lodge a complaint

Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

Bitte ergänzen: Zuständige Aufsichtsbehörde

20. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. Offers are sorted by price or travel time alone and are identical for every visitor.

21. Changes to this privacy policy

We update this privacy policy whenever the legal situation, our services or the nature of the data processing changes — for example when advertising is activated. The version current at the time applies to your next visit.

22. Language

This is a courtesy translation. The site is operated from Germany and subject to German law; in case of doubt the German version of this privacy policy prevails.