1.To what information does this policy apply?
This policy applies to personal information. Personal information is any information about an identifiable individual, such as your home address, telephone number, email address, and details about your transactions with Air Canada and method of payment.
2.What personal information do we collect and when?
We collect personal information when you interact with us, for example:
We collect personal information when you book travel with us, for example:
The personal information we collect for these purposes includes the following: name, address, telephone number, email address, payment card number and expiry date, passport or other government-issued identification information, date of birth. We also request your gender to assist in estimating the aircraft's total load and as an additional identifier. If a third party is booking your travel, see Third Party Bookings (below).
We collect personal information when you travel with us, for example:
We collect personal information reasonably needed to fulfill our business purposes, like the purposes discussed in part 3 “Why do we use and share your personal information?”.
If you are an Aeroplan Member, we also collect information about your activity in that program – see part 4 “Additional collection, use and disclosure of Aeroplan Member personal information”).
If you are an Aeroplan Member, we also collect information to deliver, promote and develop our Aeroplan Elite Status program
Aeroplan Members who fly with Air Canada and Star Alliance airlines automatically participate in Air Canada’s Aeroplan Elite Status program, which provides status holders with travel-related benefits such as free checked bags, cabin upgrades and lounge access.
Air Canada will collect from Aeroplan your basic account information, such as your email address, mailing address, phone number, gender, date of birth, and the date and method of your enrollment in Aeroplan.
Air Canada will use this information to deliver, promote and develop the Aeroplan Elite Status program and to provide certain services to Aeroplan Elite Status participants. These include:
Third Party Bookings, Changes and Enquiries
If another person, including a family member, friend, or work colleague, seeks to book travel on your behalf, that person will be asked to provide us with the same personal information that we would normally collect from you directly to complete your booking.
We consider that person to have your consent and authorization to provide us with your personal information for relevant purposes described in this policy – unless and until we are advised otherwise.
Also, if the person who booked your travel or who otherwise has your full name and booking reference contacts us and seeks information on your booking or wishes to make changes to it, we will disclose your booking information – including whether you boarded a flight – and allow that person to make changes, as we will conclude that you have given them your consent for this. If you do not want an individual to be able to obtain information on or make changes to your booking, you should not share your booking reference with them.
When you book through a travel agent, we consider that agent to have your consent to disclose to us the same information you would provide yourself. Collection, use and disclosure of your personal information by the agent is subject to the privacy policy of the agent.
3.Why do we use and share your personal information?
We use and share your personal information to respond to your requests or complete your transactions – including to:
We also use and share your personal information to better serve you – including to:
We also use and share your personal information to improve our products and services and to provide you with relevant offers – through:
We also use and share your personal information to address our business and legal needs – including to:
If you are an Aeroplan Member, we also use and share your personal information as part of that program – see part 4 “Additional collection, use and disclosure of Aeroplan Member personal information”).
Air Canada for Business
If you make your booking through the Air Canada for Business loyalty program, your employer, travel arranger, and other parties may be able to access certain information with respect to your bookings and make changes to it. For more information on the Air Canada for Business loyalty program, please consult the Air Canada for Business Frequently Asked Questions.
Transfers to Our Service Providers
We may transfer your personal information to service providers who support us with various functions including reservations and ground handling, information security, data storage, research, customer relations, payment processing, data analysis, email delivery, IT, customer service, and marketing. These service providers process personal information on our behalf for our purposes only, and must agree to certain privacy obligations in their contracts with us. These include complying with privacy laws, safeguarding the personal information, and only processing that information under our direction for permitted purposes.
5.What are your choices when it comes to the handling of your personal information?
Changing Communications Preferences
You can modify your communications preferences by
As permitted by law, some unsubscribe requests may take up to 10 business days to complete (e.g., if a campaign is underway, you may still receive marketing messages shortly after you unsubscribe).
If you withdraw your consent to receive these electronic marketing communications, you will continue to receive service communications, such as those related to your bookings or other purchases and flight information.
Cookies and Tracking Technologies
We use cookies, scripts, pixels, local storage, and other tracking technologies on our website, mobile application and other online platforms to help administer them, to improve your experience, and to improve the program.
For more information on how we use these technologies, including how you may manage certain of these technologies, see the aircanada.com Cookies and Tracking Technologies Policy.
Other Data Handling Choices
If you wish to withdraw from other collections, uses or disclosures of your personal information by Air Canada, please contact us (see part 9 “How can you ask questions or raise concerns about privacy?”).
6.Where do we keep your personal information?
We generally store personal information at our offices in Toronto and Montreal, and at our data centres in Canada and the United States.
Some of our service providers access, use or store your personal information outside of your province or territory, or outside of Canada. The laws of those other places will then apply to that information, including laws that may permit or require disclosing that information to government, courts and law enforcement.
If you would like more information about our policies and practices regarding processing of personal information outside of Canada, please contact our Privacy Office directly (see part 9 “How can you ask questions or raise concerns about privacy?”).
7.How is your personal information protected? How long is it kept?
Air Canada maintains appropriate administrative, technical, and physical safeguards to protect your personal information. These safeguards are intended to prevent the loss, theft or unauthorized access, use, disclosure, modification or destruction of your personal information. For example:
As many of our interactions with you are online or via email, we rely on you to take reasonable steps to safeguard your personal information. For example:
Also, when you book travel, you receive a confirmation number or passenger name record (PNR) for the reservation. The PNR number or information should not be shared as it may give others access to your travel itinerary and other personal information.
Like most companies, we cannot guarantee that security safeguards are always effective or that online communications are always secure. A breach of security safeguards can result in the risk of identity theft, for example. In these cases, we act promptly to mitigate the risks and to inform you where there is a real risk of significant harm, or as otherwise required by law.
We keep your personal information for as long as it is needed to fulfill the purposes for which it was collected, or a longer period if permitted or required by law. When no longer needed, personal information is destroyed, anonymized or disposed of using secure methods.
Please note that if your personal information is collected by a third party, such as a hotel or car rental company, it will be kept in accordance with the privacy policies and records retention requirements of that third party.
8.How can you access or correct your personal information?
You have the right to access and correct your personal information.
You can make a formal access or correction request by contacting our Privacy Office (see part 9 “How can you ask questions or raise concerns about privacy?”). In that case, we will respond to your access or correction request within a reasonable timeframe (but no later than 30 days from your request) pursuant to applicable laws.
If you demonstrate to us that your personal information in our records is inaccurate or incomplete, we will amend the personal information as required. Where appropriate, we will transmit the amended information to third parties having access to your personal information.
It is your responsibility to provide and maintain accurate and complete information.
9.How can you ask questions or raise concerns about privacy?
Our Principal Privacy Officer is responsible for overseeing what we do with your information and for monitoring compliance with this policy and data protection laws. If you have concerns or further questions about how we handle your personal information, or wish to make a formal access or correction request, please contact the Principal Privacy Officer using the contact information below.
Email:
privacy_vieprivee@aircanada.ca
Address:
Air Canada Principal Privacy Officer
Air Canada Centre
ZIP YUL 1276
7373 Côte-Vertu West
St. Laurent, Quebec H4Y 1H4
Telephone: (514) 422-6020
Facsimile:
(514) 422-2641
Please note that we will need to take reasonable steps to validate your identity prior to disclosing any personal information via the above communications channels.
10.Additional information for the European Economic Area (EEA), United Kingdom (UK) and Switzerland
If the laws of the EEA, UK or Switzerland apply to our collection, use and sharing of your personal data, this part 10 also applies. (“Personal information” elsewhere in this policy means the same as “personal data” under those laws.)
Purposes for which your personal data is used
In part 3, we have provided details of the purposes for which Air Canada uses your personal data.
Lawful collection, use and sharing of your personal data
We only collect, use or share your personal data if we are allowed to by law or with your permission. Where our collection, sharing or use of your personal data is based on your consent, you have the right to withdraw that consent at any time by contacting us, or by using the means provided on our website or in our mobile applications. If you do withdraw your consent, this does not affect our collection, use or sharing of your personal data before consent was withdrawn.
Responding to your requests or completing your transactions
Our collection, use or sharing of your personal data is necessary so we can enter into a contract with you and then meet our obligations to you under that contract. If you do not provide us with your personal data for this purpose, we will not be able to communicate with you, complete your booking or provide our travel services to you.
Sharing your personal data with third party business partners may also be necessary to enter into a contract with you and meet our obligations to you under that contract.
Better serve you
Address our business and legal needs
We collect, use and share your personal data for these purposes (i) to fulfill our legal obligations; or (ii) in Air Canada’s legitimate interest for this purpose.
In some circumstances, we collect, use and share personal data that relates to your health (for example, when you let us know of special travel requirements) or which is biometric data (for example, to board our flights and access our Maple Leaf lounges in certain locations). In these cases, your personal data is collected, used and shared with your explicit consent.
Who do we share your personal data with?
Part 3 provides details of who we share your personal data with, and why. This includes:
When we share your personal data with third parties who will use that personal data for their own purposes, our lawful basis for doing so is:
Transfers of personal data
In part 6, we describe where we keep your personal data. This means we transfer your personal data to countries outside of the EEA, UK or Switzerland. Where required, all such transfers are subject to appropriate safeguards required by law. If you want further details on the safeguards we have adopted, please contact us (see part 9).
Your rights
You have personal data rights, described below. If you have any concerns about your personal data, contact us at the address given in part 9.
Legitimate interests
When we collect, use and share your personal data in ways we consider to be in our legitimate interest, it means that it is fair we use the personal data in that way. You have the right to object to our use of your personal data in this way at any time by contacting us at the address given in part 9.
Accessing, deleting, rectifying, and moving your personal data
In certain circumstances, you have the right to:
If you want to exercise these rights, let us know by contacting us at the address given in part 9. We will deal with your request within thirty days.
Complaints
You can complain about our collection and use of your personal data with your local data protection authority.
Who is the Data Controller?
The Data Controller is Air Canada. We can be contacted at the address provided in part 9.
Air Canada has designated a Data Protection Officer. If you wish to contact the Data Protection Officer, you can use the contact information provided in part 9. Correspondence should be marked “For the attention of the Data Protection Officer”.