We are committed to protecting privacy and security of your personal data pursuant to our Policy. To ensure that you can make informed decisions, please read this Privacy Protection Statement ("Statement") to understand who we share your Personal Data with and for what purposes, and the choices you have concerning how your personal data is collected and used by us. We expect you to feel comfortable using all related services provided by us. Subject to your consent to this Policy and Statement, we will collect, process and use your personal data in accordance with the purposes and scope agreed upon by you.
We reserve the right to revise the content of this Policy and Statement at any time. Changes will take effect on the date of publication and supersede previous versions. The updated version will be posted on our website www.china-airlines.com and App, and the date will be stamped so that you are aware of when the Statement was last updated.
The types of personal data we process
How we collect your personal data
Purposes for which we process and use your personal data
Whom we share your personal data with
Security and retention
Your rights
Data protection of minors
Updating your personal data
Updates to the privacy policy and statement
Contact us
Link to other websites
The types of personal data that we collect depend on the circumstances of collection and on the nature of the service requested or transaction undertaken. This may include, but is not limited to:
Personal data that can be used to identify an individual
We may record your name, gender, date of birth, your nationality, country of residence, passport number and other personal identification numbers, etc.
Your contact details and personal account or registration details
Your contact details may include your address, telephone number and email address. When you create a personal account, or register for a service, we may also record your log in details and other information you fill out on your personal account or registration form. For cooperate/business members, we also collect information with respect to your company such as company name.
Information about your reservations, bookings and purchases
When you make a reservation or book a flight with us, we process your reservation and booking information. This travel information may include ticket numbers and flight information. If your purchases are made through our website or App, such as Dynasty Package, seat upgrades, excess baggage, duty-free products, we will also process this information in relation to ancillary services.
In addition, we may process your information relating to your use of our flight entertainment system or onboard WiFi service, our lounge service and cargo service, etc.
Information about your travel arrangement
When you travel with us, we will process information in relation to your journey. Such as your travel itinerary, online check-in with our website or App, check-in at the airport counter, check-in baggage, baggage tracking, etc. We may also record your dietary requests, in-flight and airport assistance, service dog application, and any additional assistance you require.
If an incident occurs during your trip, for example with regard to your health or physical condition, in order to maintain flight safety, our cabin crew may process certain information related to this incident in accordance with applicable emergency assistance regulations.
Certain airport security measures or procedures such as immigration control, baggage check-in and boarding may use biometric features (for example through facial or fingerprint recognition) to verify your identity. Your biometric data is collected and processed by external originations that provided control measures or procedures, such as immigration or airport authorities. We do not receive any of your biometric data, but only receive confirmation from these external originations that your identity has been verified.
Your payment details
Payment details you used to purchase our services and products, or subsequent refund processes (if any), such as credit or debit card information, including name of card holder, card number, billing address and expiry date, etc.
Your Dynasty Membership
When you become a member of our Dynasty Flyer Program, we will process your membership number, account name, membership tier, mileage, award and other information in relation to your membership.
Your interests, preferences and opinions
When you use our service, you may choose to share information with us, such as your interests, preferences, services and products you purchased, your opinions, etc.
Our communications and interactions with you
We will collect any interactions and correspondence between us, such as calls made through our call center, contact us via AI Customer Service on our website or App, any interactions you have with our staff or employees, any interactions with us on social media. When you call us, our customer support will register your questions or complaints in our database. We may also record telephone calls for training purposes or to prevent fraud.
Your use of our website, App, social media and messaging platforms
We may collect technical device, connection data (for example, MAC address, IP address, location data, browser type, operating system, etc.) browsing behavior and app use, when you browse our website or App.
In addition, when you use your social media account to interact with our official accounts or fan pages, we may receive your social media profile, including your contact information, interests, and preferences, etc.
Certain categories of personal information we collect and use can be considered "special categories of personal data" under applicable data protection law, such as medical examination or treatment documents, data concerning health, religious or minors' data, we try to limit the circumstance where we collect these personal data in principle. Nevertheless, this can occasionally occur because you have made certain requests in connection with your travel arrangement or if you otherwise choose to provide such data to us through a third party (e.g. travel agents). For example, requesting a wheelchair from us and/or an airport operator, providing medical clearance form and medical certificate, handling customer feedback.
In addition, under certain circumstances, we may collect and use your special categories personal data in accordance with the law to protect your life, health and property rights due to public health emergencies, such as requiring you to check your previous travel, taking your body temperature or requesting you to provide a specific health certificate.
For specific services or events, we may collect other types of data and use such data for different purposes, such as market surveys and activities conducted by us or on our behalf.
CAL acts as the data controller of the processing activities relating to the personal data referred to this Policy. This means that CAL determines the purposes and means of the processing referred to in this Policy. For the performance of the contract of carriage with you, we may collect the aforementioned categories of personal data from you directly or through third parties. Please note that third parties may have their own privacy policies to explain how they collect and use your personal data. Such privacy policies do not constitute a part of this Policy. You need to carefully read and decide whether to agree with their privacy policies or not.
We will collect your personal data when you use our related services or participate in our various activities, including booking our flights, purchasing our duty-free products online, registering for our Dynasty Member, subscribing to our email or App notifications, contacting customer service, participating in activities, filling out surveys or forms, etc. We receive your personal data from your travel agent, our airlines partners and other parties involved in your travel arrangements.
Travel agents or reservation system providers (Global Distribution System, GDS) who handle your reservations and bookings, and if you use a third-party platform to search and book a flight, we may receive your personal data from that provider. For example, your organization's corporate co-worker books a flight for you, we will verify whether he/she is validly identified as acting on your behalf or has been authorized by you pursuant to our security procedures.
Our service providers and members of CAL group. Examples of such third parties include our ground handling agents who assist you with check-in and booking, or our catering provider to accommodate your special meal requests.
Our airlines partners or third-party partners for marketing purposes. For example, when you purchase our services from a participating airline of SkyTeam Airlines Alliance or other third-party partners for marketing purposes, they share your earned mileage with us. And if you use a third-party platform to search and book a flight, we may receive your identifying information and booking details from that provider.
Our cooperating vendors for marketing activities, such as co-branded credit card issuers, the partner hotels, restaurants, retailers, etc.
For more information, please refer to our "Cookie Policy".
When you use a social network account to interact with our official accounts or fan pages.
Such as civil aviation authorities of departure and arrival, immigration, customs, courts, airport authorities, other administrative and judicial authorities, etc.
We will not process your personal data without any lawful basis. When you agree to provide with us your personal data, here are the lists of lawful basis for which we use your personal data in our worldwide branch offices:
To handle your bookings and travel arrangements, we need to process most of the information mentioned above in accordance with our General Conditions of Carriage. For example, we need your name and other identifying information to handle your bookings, informing you to do the online check-in, transferring your information to worldwide branch offices in order to fulfill transportation services, or to confirm your booking and to inform you about the latest flight status, we need your contact details.
In addition, to ensure you receive the required care, we need to understand your specified medical requirements in order to provide you with any necessary assistance.
To provide our website and App services. For example, we use your name and flight details when you check-in your flight with our website or App, or some of our online services and Apps use your location. You have the option of storing personal data locally on your mobile device using our App. This ensures that the necessary information is pre-filled during the check-in process, making check-in faster and more convenient. Please be aware of the risk of losing your mobile device. We recommend you use a passcode or take other protective measures accordingly.
In order to provide you with high-quality services and products, we will use your membership data. For example, we may provide your data to our flight attendants, or we may use it to provide you with customized products and services during your flight, based on your preferences and interests.
For customer support purposes, we use your contact information to respond to your enquiries and requests. Such as issues in relation to baggage claims and delay flights.
For providing you with marketing information, we may use your personal data for marketing and promotional purposes:
To send you updates on our latest news, offers and promotions in connection with our services and products.
To send you our travel services, co-branded credit card offers, duty-free sales, sweepstakes, hotel reservation and car rentals, etc.
To send you special offers tailored to your preferences or interests, including posting commercials on our website or tracking your interactions with links from third party websites to our website. We and our partners will use your booking data through our services to obtained specific information to observe customer behavior, including but not limited to PNR, flight itineraries, and IP addresses, and may send this information to our service providers to provide better and more personalized transactions and services.
We may provide you with marketing and promotional information through various channels, including mail, SMS, phone, email, push notifications, our website or app, third-party websites or apps, and social media. Under appropriate and required situation, we will ask your consent or otherwise provide you with the opportunity to choose not to receive these marketing, at the time we collect your personal data.
For the administration of the lucky draw, sweepstake, market research, statistical analysis and other special activities conducted by us, including disclosing the winners of any such events, inviting you to join the service experience survey after flying with us, using your purchase record of ancillaries or feedback from questionnaires (e.g. upgrades and extra baggage) to improve our service arrangement.
To ensure the safety and security of all persons (including all passengers and all our staff) and to undertake any necessary activities during emergency events.
To comply with applicable laws and regulations of domestic and international jurisdictions and for legal compliance purposes, such as civil aviation, immigration, customs, diplomatic, public health, judicial and police investigation, verifying and processing payment, screening against abusive booking, etc.
When you provide personal data of your travel companions or other individuals to us, you confirm that you have obtained their authorization to provide us with their personal data and their consent to your use of their personal data in accordance with this Policy and Statement. If you cannot make these confirmations, you must not provide us with any personal data about these persons.
Necessary for the purposes of public interest.
To prevent harm to your life, body, freedom, or property.
To prevent material harm to the rights and interests of others.
With your consent or when it is in your best interests.
In accordance with the proviso to paragraphs 1 of Article 6 of Taiwan's Personal Data Protection Act, Article 9(2) of the GDPR, and other applicable data protection laws and regulations.
We will not sell your name or other personal data to third parties, and we have no plans to do so in the future. In order to process your service, we will provide or share your personal data collected or received with specific third parties when there is lawful basis (such as consent from the data subject), some of which may be located in other countries or regions outside of your location:
Our travel and freight service providers or travel-related businesses and service providers may process your personal data on our behalf. For example, ground handling agents who assist you with check-in and boarding, our airport lounge operators, airport wheelchair service.
When you book flights or purchase services or products through CAL that are to be provided by another party, we will share your personal data with these parties. For example, a travel segment on another carrier, hotel accommodations or car rental. We refer to the privacy protection policies of these third parties for more information regarding their processing of your personal data.
To process your booking and fulfill the contract of carriage for the flights you booked, we need to share your personal data with our interline, code share and strategic alliance partners. As a member of SkyTeam alliance, for the purpose of servicing your travel and flight reservation, recognizing your Dynasty Flyer Program, rebooking your flight in the event of an unexpected disruption in your travel, we will disclose your personal data to other member airlines.
For fulfilling of our statutory obligations, we may also be required by law to provide your personal data to governmental authorities, regulatory organizations, law enforcement officials, law courts for the purpose of immigration, customs, border security and legal process. For example, we are required by laws in the United States, France and other countries to disclose your travel documents, flight itinerary, passenger name record (PNR), advance passenger information (API) to relevant customs and immigration authorities; or the disclosure is required pursuant to a subpoena or judicial order.
To process payments and refunds for your trips and purchases, we may work with third parties such as banks or financial firms that offer payment services. Those third-party financial institutions in many cases also conduct fraud checks. They may have their own privacy policies in terms of the way in which they use your personal data.
Where your Dynasty member account is associated with your employer's corporate account, or when you book a flight using your employer's corporate account, your employer will have access to certain booking details such as the ticket price, travel dates, and the destination of your trip. Your employer is independently responsible for how it collects and uses your personal data as required for the purpose of corporate account management and informs you about its privacy policy.
For specific services or activities conducted by us, we may share your personal data with relevant collaborating institutions. For example, when you choose to participate in a mileage charity donation activity, we will provide your personal data to the charity organization to issue and send a donation receipt.
When you choose to contact or interact with us on social media and messaging platforms provided by third parties, you will need to allow account login and publishing permissions. You acknowledge that you are responsible for reviewing and understanding the privacy policy and relevant terms and conditions applicable to such third-party platform. We shall not be held responsible for the activities on a third-party platform that is not managed by us.
When you make a booking, you will be provided with a booking reference such as a record locator number or confirmation number (it is commonly known as a passenger name record "PNR"). Please make sure to keep your PNR, ticket number and boarding pass confidential all the time, and do not disclose it to any other third parties or publish it on social networks. Disclosing your booking reference to other third parties may allow them to access your booking details through our system, such as other customers who are traveling with you under the same booking. If you would not like your individual booking details to be disclosed to others, please make your booking and payment separately.
We will retain your personal data based on the following reasons, and your personal data will be erased as soon as it is no longer required for the purposes of collection or when the retention period expires:
Specific collection purposes.
Relevant laws and regulations.
Necessary retention period required for the performance of the business duty (which is longer than the period specified in the relevant laws and regulations aforementioned).
Retention period is as agreed in the individual contract between you and CAL.
Required by government and judicial investigation, or handling compensation, litigation or non-litigation cases.
All personal data we collect from you is stored on our secure servers or other safe locations, and we apply appropriate technical and organizational measures that meet the current industrial standards (in particular Article 32 of the GDPR) to protect your personal data so as to ensure an appropriate level of security and prevent personal data from theft, tampering, loss or other infringement. We also comply with our security policies and regulations when accessing or using personal data, and restrict access to your personal data to those persons who need to use it for the purposes for which it was collected, and hold regular personnel security training to enhance the protection.
We will retain your personal data for as long as it is necessary to fulfill the purpose for which it was collected, our legal or business purposes, or as required by relevant laws.
Our credit card transaction environment complies with the Payment Card Industry Data Security Standard (PCI DSS) to protect the security of cardholder transaction information and card authentication information.
We also implement information security and privacy information management systems in accordance with ISO 27001 and ISO 27701 respectively. Core information systems and data networks associated with passenger airline reservations, ticketing, and marketing operations have been audited and obtained ISO certifications. We use industry-standard encryption technology to protect online transaction and personal data. Data is encrypted before being transmitted over the Internet to prevent interception and theft.
Our Head Office is based in Taiwan, and your personal data will be transmitted to data storage facilities where we keep our central records. Your personal data will be transferred to our worldwide branch offices and other third parties service providers (please refer to "Disclosing or sharing personal data with third parties" above) in Taiwan and around the world in connection with our performance of the contract of carriage with you. We will process your personal data in the aforementioned countries or areas. Under this premise, your personal data may be transferred to countries or areas other than your residence, including those countries or areas with a lower level of data protection than your residence. We will use adequate safeguards to comply with requirements for the international transmission under applicable privacy and data protection laws.
In particular, we may require parties to whom we transfer your personal data to agree to abide by suitable contractual obligations. In the case of transfers from the EU or UK, this is done either on the basis that it is necessary for the performance of our contract of carriage with you, or that the transfer is subject to the standard model clauses approved by the European Commission and permitted under Article 46 of GDPR or the UK secretary of state or under other relevant body.
When the specific purpose of collecting your personal data is no longer exists or upon expiration of the relevant time period, we will adopt commercial reasonable and technical practicable measures either to secure destroy or irreversibly anonymize your personal data in accordance with applicable laws.
The Internet is a worldwide open global communication tool. We do not make any guarantee to the security of data transmissions or storage, even though we have used our best efforts to protect your personal data. The customers shall take their own risks on transmission of any data.
It is advisable to keep your account ID, password of membership and other personal data properly, and do not disclose such information to any other third parties. Please log out your Dynasty account after use. If you use public computer or share computer with other persons, please log out your Dynasty account and close the browser window after use in order to prevent others from abusing your personal data. In addition, we cannot be held responsible for theft of your personal data on a platform that is not managed by us or you disclose it on social networks voluntarily.
You can contact our branches or Data Protection Officer/Personal Information Protection Officer (please see “Contact US”) worldwide to exercise any of your rights granted under the applicable privacy and personal data protection laws, and refer to "Enquiry and Request for Personal Data" for more information.
To process your personal data rights exercise case, we need your assistance to provide necessary information so that we can identify your identity. In some circumstances, we may require specific information from you to help us verify your identity and process your request. If you provide incorrect or incomplete information and prevent us from verifying your real identity, or we are not required by law to comply with your request, we may deny your right requests.
If the data subject is a Dynasty member and wish to update his or her personal data or withdraw their consent, you may click "Account Profile" > "Update Personal Profile" or "Membership Account Deletion" to exercise your rights after logging in to "Dynasty Flyer Service".
You have the rights to know whether we process your personal data. If we do, you may access that data in the form of a copy. Meanwhile, we may also provide you certain information, such as how we process your personal data and who we share this data with. We may charge reasonable service fee for the processing of any data access request in accordance with applicable laws.
In exceptional circumstances, we reserve the rights to refuse your access to your personal data and reply to you in accordance with applicable laws. Special circumstances (subject to applicable laws) include:
Investigation agencies or governmental agencies object to our compliance with your requirements.
According to our reasonable judgments and assessments, it is believed that providing such information would interfere with another's rights or affect a person's life or safety.
The information collected is in relation to breach of contract, suspected fraudulent activities or illegal activities.
You have the rights to correct your personal data in case of inaccuracy or incompleteness. We will correct inaccurate personal data upon your request.
You have the rights to request us to discontinue to collect, process or use your personal data when the specific purpose of data collection is no longer exists or upon expiration of the relevant time period, unless the process or use is either necessary for the performance of our official or business duty, or has been agreed by you in writing.
In addition, you have the rights to object to our processing of your personal data at any time for marketing and promotional purposes. You can exercise your right to prevent such processing by indicating that you do not consent to marketing and promotion at the point at which we collect your personal data. At any time you can also object to directly marketing and promotional purposes in case your personal data is processed for such purposes. In case you exercise this right, we will no longer process your personal data for such purposes.
You have the rights to require us to stop processing your personal data in certain circumstances. We will suspend the processing of your personal data for a certain period of time upon your request. This right does not prevent us from continuing to store your personal data; we will inform you prior to the restriction is lifted.
We may evaluate certain personal aspects to analyze and predict activities by automated means. You have the rights not to be subject to a decision based solely on automated means (including profiling).
You have the rights to request us to erase your personal data in the following circumstances:
You believe that it is no longer necessary for us to hold your personal data.
We are processing your personal data on the basis of your consent, you wish to withdraw your consent and there is no other ground under which we can process such data.
We are processing your personal data on the basis of our legitimate interest and you object to such processing.
You no longer wish us to use your personal data for marketing and promotional purposes.
You believe that your personal data is being unlawfully processed by us.
We may not be able to erasure your personal data to the extent processing is necessary to service requirements and the right to erasure shall not be applied in accordance with applicable data protection laws/regulations, such as travel information has its statutory retention period; or the necessary information for handling compensation, litigation or non-litigation cases.
You have the rights to request us to provide you with your personal data in a structured, commonly used and machine-readable format, and a right to have such data transmitted directly to another party where technically feasible.
Subject to the scope of your consent, we will use your personal data to provide promotion and personalized service information. If you do not want to receive our marketing messages, you may withdraw your consent at any time pursuant to this clause, and change the relevant features in your Dynasty Flyer Service by clicking "Account Profile" > "eDM Subscribe/Unsubscribe", or use the "Unsubscribe" feature in the email we sends, or Contact Us either online or by phone.
In addition, please be advised that if you choose to unsubscribe or opt out of marketing, we will still send you communications about your travel with us and any other services that we provide to you related to your travel arrangement.
In the event of the death of a natural person, if you are a Chinese resident and as a close relatives of the deceased of our passenger, for their own lawful and legitimate interests, you may exercise the rights to access, copy, correct and delete the relevant personal data of the deceased, unless the deceased had otherwise arranged prior to his/her death. If you wish to exercise the said rights on behalf of the deceased, please provide proof of your identity and the deceased's identity, as well as proof of the relationship, such as death (presumption) certificate of the deceased.
Infants (under 2 years old): tickets for infants will not occupy a set are available for purchase. To book a seat for an infant who will occupy a seat, please contact our customer service center.
Children between 2 and 11 years old: these children cannot travel alone without the company of over 18 years old passenger. If special service needed, please contact the nearby branch office of your residence for assistance. For detailed information of our worldwide branch offices, please find here. An unaccompanied minor we accept is any young passenger aged between 5 to 11 years old and not travelling with parents or guardians who are at least 18 years old on the same flight and class of travel. To apply for this service, parents or legal guardians must sign the "Consent & Release for Carriage of Unaccompanied Minors" and attached copies of their identity and proof of the relationship with the unaccompanied minors, such as household register or its copy.
Teenagers between 12 and 17 years old: these teenage passengers can travel alone but need visa and other travel documents and notify the relevant branch offices. The other passengers who travel together shall not be less than 12 years old.
Passengers over 18 years old: can travel alone and are eligible to travel with children under 12 years old.
Based on the nature of our business as an airline, we may collect personal information of minors from their parents or guardians when required by law (including but not limited to aviation, immigration or security regulations of various countries) or when necessary to provide transportation and other services. We will retain the personal information of minors as required by our business needs.
We protect minors' personal data in accordance with applicable laws/regulations. Please be advised that we cannot distinguish the age of persons who access and use our website. If you are regarded as a minor (according to your local domestic law or other applicable laws), please be sure to read this Policy and Statement under the guidance of your parents or other guardians and obtain their consent before using our services or products.
For collecting minors' personal data with parental or guardian consent, we will only process or use this data when permitted by law, express consent of parents or other guardians, or necessary to protect the rights and interests of minors, and make sure to take appropriate security measures. If a minor (according to applicable laws) has provided us with his/her personal data without parental or guardian consent, the parent or guardian should contact us to remove the relevant personal data and unsubscribe the minor.
If we become aware that personal data has been collected from a person under a minor without parental or guardian consent, we will delete this personal data and terminate the minor's account, if that minor has an account.
We need your assistance to ensure that your personal data is current, complete and accurate. Please kindly inform us of changes to your personal data. If you are a registered Dynasty Member, you may update your personal data at any time by logging on to your account.
Your booking information or flight itinerary will be disclosed to the appropriate customs and immigration authorities as required by law. As such, your personal data is very important to ensure that personal data contained in your booking information or flight itinerary is current, completed and accurate. Therefore, we will request personal data updates from you from time to time.
We will amend this Policy and Statement from time to time, and the changes will be effective from the date of posting; and the updated version will replace the earlier versions. We will publish the updated Policy on www.china-airlines.com and App, and the date will be stamped so that you are aware of when the Policy was last updated.
China Airlines Limited
Data Protection Officer/Personal Information Protection Officer
No.1 Hangzhan S. Rd. Dayuan Dist. Taoyuan City, 33758 Taiwan
DPO@china-airlines.com
SkyTeam Airline Alliance Management Coöperatie U.A.
Amsterdamseweg 55
Wing 3.3
1182 GP Amstelveen
The Netherlands
customercontact@skyteam.com
10.3. For any requirements or questions of your bookings, tickets or other services, you may Contact Us either online or by phone, our customer support will get you back soon. If the data subject is a Dynasty member and wish to update his or her personal data or withdraw their consent, you may click "Account Profile" > "Update Personal Profile" or "Membership Account Deletion" to exercise your rights after logging in to "Dynasty Flyer Service".
Our website contains links to other websites that are operated by third parties and under different privacy terms. This Policy and Statement does not apply to the website of third parties. When you leave our website and access other websites, please remain alert and read the privacy policy terms of other websites. We have no control over and provide no guarantee on the information submitted to these websites.
China Airlines Limited is a member of SkyTeam Alliance, a global network of airlines that process personal data to provide passengers with a more seamless travel experience. For more information, please read the SkyTeam Alliance Joint Privacy Notice.
This Policy and Statement is translated from Chinese and may be translated into other languages. In the event of any inconsistency between the Chinese version and the translated version of this Policy and Statement, the Chinese version shall prevail.
These terms and conditions were last updated on 31 May 2026
