Privacy Protection

We are committed to protecting privacy and security of your personal data pursuant to our Policy. To ensure that you can make informed decisions, please read this Privacy Protection Statement ("Statement") to understand who we share your Personal Data with and for what purposes, and the choices you have concerning how your personal data is collected and used by us. We expect you to feel comfortable to use all related services provided by us. 

By continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and Statement. We reserve the right to revise the content of this privacy policy and statement at any time. Changes will take effect on the date of publication and supersede previous versions. The updated version will be posted on our website www.china-airlines.com and App, and the date will be stamped so that you are aware of when the Statement was last updated.

The main content of this Statement includes: 

1. The types of personal data we process 
2. How we collect your personal data 
3. Purposes for which we process and use your personal data
4. Whom we share your personal data with
5. Security and retention 
6. Your rights 
7. Data protection of minors 
8. Collection of IP address
9. Data analysis and automated decision-making 
10. Update your personal data 
11. Updates to the privacy policy and statement 
12. Contact us 
13. Link to other websites

The types of personal data that we collect depend on the circumstances of collection and on the nature of the service requested or transaction undertaken. This may include, but is not limited to:

1. Personal data that can be used to identify an individual
   We may record your name, gender, date of birth, your nationality, country of residence, passport number and other personal identification numbers, etc.  
   
   
2. Your contact details and personal account or registration details
   Your contact details may include your address, telephone number and email address. When you create a personal account, or register for a service, we may also record your log in details and other information you fill out on your personal account or registration form. For cooperate/business members, we also collect information with respect to your company such as company name.
   
   
3. Information about your reservations, bookings and purchases
   When you make a reservation or book a flight with us, we process your reservation and booking information. These travel information may include ticket numbers, flight information. If your purchases made through our website or App, such as Dynasty Package, seat upgrades, excess baggage, duty-free products, we will also process these information in relation to ancillary services.
   In addition, we may process your information relating to your use of our flight entertainment system or onboard WiFi service, our lounge service and cargo service, etc.
   
   
4. Information about your travel arrangement
   When you travel with us, we process information in relation to your journey. Such as your travel itinerary, online check-in with our website or App, check-in at the airport counter, check-in baggage, baggage tracking, etc. We may also record any specified medical needs or dietary requests you have and any additional assistance you require.
   
   
5. Your payment details
   Payment details you used to purchase our services and products, or subsequent refund processes (if any), such as credit or debit card information, including name of card holder, card number, billing address and expiry date, etc.
   
   
6. Your Dynasty Membership
   When you become a member of our Dynasty Flyer Program, we will process your membership number, account name, membership tier, mileage, award and other information in relation to your membership.
   
   
7. Your interests, preferences and options
   When you use our service, you may choose to share information with us, such as your interests, preferences, services and products you purchased, your opinions, etc.
   
   
8. Our communications and interactions with you
   We will collect any interactions and correspondence between us, such as calls made through our call center, any interactions you have with our staff or employee, any interactions with us on social media. When you call us, our customer support will register your questions or complaints in our database. We may also record telephone calls for training purposes or to prevent fraud. 
   
   
9. Your use of our website, App, social media and messaging platforms
   We may record your IP address, browser type, operating system, and browsing history when you browse our website or App.
   In addition, we may receive your social media profile, including your contact information, interests, and preferences, etc.

For the performance of the contract of carriage with you, we may collect the aforementioned categories of personal data from you directly or through third parties. Please note that third parties may have their own privacy policies to explain how they collect and use your personal data. Such privacy policies do not constitute a part of this Policy. You need to carefully read and decide whether agree with their privacy policies or not.

1. The travel agent who handle your reservations and bookings, and if you use a third party platform to search and book a flight, we may receive your personal data from that provider. For example, your organization's corporate co-worker book a flight for you, we will verify whether he/she is validly identified as acting on your behalf or has been authorized by you pursuant to our security procedures. 
2. Our service providers and members of China Airlines group. Examples of such third parties include our ground handling agents who assist you with check-in and booking, or our catering provider to accommodate your special meal requests. 
3. Our airlines partners or third party partners for marketing purpose. For example, when you purchase our services from a participating airline of SkyTeam Airlines Alliance or other third party partners for marketing purpose, they share your earned mileage with us. And if you use a third party platform to search and book a flight, we may receive your identifying information and booking details from that provider. 
   
4. Our cooperating vendors for marketing activities, such as co-branded credit card issuers, the partner hotels, restaurants, retailers, etc.

We will not sell your name or other personal data to third parties, and we have no plans to do so in the future. 

In order to process your service, in some cases, we will provide or share your personal data collected or received with specific third parties, some of which may be located in other countries or regions outside of your location:

5.1. Data storage and security 

All personal data we collect from you is stored on our secure servers or other safe locations, and we apply appropriate technical and organizational measures that meet the current industrial standards (in particular article 32 of the GDPR) to protect your personal data so as to ensure an appropriate level of security and prevent personal data from theft, tampering, loss or other infringement. We also comply with our security policies and regulations when accessing or using personal data, and restrict access to your personal data to those persons who need to use it for the purposes for which it was collected, and hold regular personnel security training to enhance the protection. 

We will retain your personal data for as long as it is necessary to fulfill the purpose for which it was collected, our legal or business purposes, or as required by relevant laws.

5.2. International data transmission

Our Head Office is based in Taiwan and your personal data will be transmitted to data storage facilities where we keep our central records. Your personal data will be transferred to our worldwide branch offices and other third parties service providers (please refer to "Disclosing or sharing personal data with third parties" above) in Taiwan and around the world in connection with our performance of the contract of carriage with you. We will process your personal data in the aforementioned countries or area. Under this premise, your personal data may be transferred to countries or area other than your residence, including those countries or area with a lower level of data protection than your residence. We will use adequate safeguards to comply with requirements for the international transmission under applicable privacy and data protection laws. 

If you are an EU resident, where we transfer your personal data outside the European Economic Area ("EEA"), this is done either on the basis that it is necessary for the performance of our contract of carriage with you, or that the transfer is subject to the European Commission's Standard Contractual Clauses ("SCC") for the transfer of personal data to third countries.

If you are a Chinese resident, where we transfer your personal data outside the territory of China, this is done on the basis that the security assessment is conducted in accordance with the Personal Information Protection Law of People's Republic of China and relevant laws/regulations, or that the model contract terms issued by the China Administration of Cyberspace are concluded for the transfer, or that transfer is necessary for the performance of our contract of carriage with you.

5.3. Data destroy 

When the specific purpose of collecting your personal data is no longer exists or upon expiration of the relevant time period, we will adopt commercial reasonable and technical practicable measures either to secure destroy or irreversibly anonymize your personal data in accordance with applicable laws.

5.4. How to protect yourself

The Internet is a worldwide open global communication tool. We do not make any guarantee to the security of data transmissions or storage, even though we have used our best efforts to protect your personal data. The customers shall take their own risks on transmission of any data. 

It is advisable to keep your account ID, password of membership and other personal data properly, and do not disclose such information to any other third parties. Please log out your Dynasty account and social media account (if you use social media account to log in Dynasty account) after use. If you use public computer or share computer with other persons, please log out your Dynasty account and close the browser window after use in order to prevent others from abusing your personal data. In addition, we cannot be held responsible for theft of your personal data on a platform that is not managed by us.

You can contact our branches or Data Protection Officer/Personal Information Protection Officer (please see “Contact US”) worldwide to exercise any of your rights granted under the applicable privacy and personal data protection laws, and refer to "Enquiry and Request for Personal Data" for more information.

To process your personal data rights exercise case, we need your assistance to provide necessary information so that we can identify your identity. In some circumstances, we may require specific information form you to help us verify your identity and process your request. If you provide incorrect or incomplete information and prevents us from verifying your real identity, or we are not required by law to comply with your request, we may deny your right requests.

If the data subject is a Dynasty member and wish to update his or her personal data or withdraw their consent, you may click "Account Profile" > "Update Personal Profile" or "Membership Account Deletion" to exercise your rights after logging in to "Dynasty Flyer Service".

1. Investigation agencies or governmental agencies object to our compliance with your requirements. 
2. According to our reasonable judgments and assessments, it is believed that providing such information would interfere with another's rights or affect a person's life or safety. 
3. The information collected is in relation to breach of contract, suspected fraudulent activities or illegal activities. 

1. You believe that it is no longer necessary for us to hold your personal data. 
2. We are processing your personal data on the basis of your consent and you wish to withdraw your consent and there is no other ground under which we can process such data. 
3. We are processing your personal data on the basis of our legitimate interest and you object to such processing. 
4. You no longer wish us to use your personal data for marketing and promotional purposes. 
5. You believe that your personal data is being unlawfully processed by us. 
   

An Internet Protocol address (IP address) is a numerical label assigned to each device participating in internet that uses the Internet Protocol for communication from service provider. We collect your IP address when you access our website, mobile services and App. 

We store this information to help us manage security, analyze how our website, mobile services and App interact with you.

We and our affiliates or other business cooperation agencies will use the aforementioned data to include but not limited to transaction amount and travel itinerary to obtain specific information to observe customer behavior and may send this information to our service providers to provide better and more personalized transactions and services.

We need your assistance to ensure that your personal data is current, complete and accurate. Please kindly inform us of changes to your personal data. If you are a registered Dynasty Member, you may update your personal data at any time by logging on to your account. 

Your booking information or flight itinerary will be disclosed to the appropriate customs and immigration authorities as required by law. As such, your personal data is very important to ensure that personal data contained in your booking information or flight itinerary is current, completed and accurate. Therefore, we will request personal data updates from you from time to time.

We will amend this Policy and Statement from time to time, and the changes will be effective from the date of posting; and the updated version will replace the earlier versions. We will publish the updated Policy on www.china-airlines.com and App, and the date will be stamped so that you are aware of when the Policy was last updated.

The contact information for the Personal Data Protection Officer of our company is as follows:

China Airlines Limited
Data Protection Officer/Personal Information Protection Officer
No.1 Hangzhan S. Rd. Dayuan Dist.
Taoyuan City, 33758 Taiwan
DPO@china-airlines.com

For any requirements or questions of your bookings, tickets or other services, you may Contact Us either online or by phone, our customer support will get you back soon. If the data subject is a Dynasty member and wish to update his or her personal data or withdraw their consent, you may click "Account Profile" > "Update Personal Profile" or "Membership Account Deletion" to exercise your rights after logging in to "Dynasty Flyer Service".

Our website contains links to other websites that are operated by third parties and under different privacy terms. When you leave our website and access other websites, please remain alert and read the privacy policy terms of other websites. We have no control over and provide no guarantee on the information submitted to these websites.

China Airlines is a member of SkyTeam Alliance, a global network of airlines that process personal data to provide passengers with a more seamless travel experience. For more information, please read the SkyTeam Alliance Joint Privacy Notice.