Privacy Protection

We are committed to protecting privacy and security of your personal data pursuant to our Policy. To ensure that you can make informed decisions, please read this Privacy Protection Statement ("Statement") to understand who we share your Personal Data with and for what purposes, and the choices you have concerning how your personal data is collected and used by us. We expect you to feel comfortable to use all related services provided by us. 

By continuing to use our services, you signify that you have read and understood this Statement. We may amend this Policy from time to time, the changes will be effective from the date of posting and replaces earlier versions. The updated version will be posted on our website www.china-airlines.com and App, and the date will be stamped so that you are aware of when the Statement was last updated.

The main content of this Statement includes: 

1. The types of personal data we process 
2. How we collect your personal data 
3. Why we collect and use your personal data 
4. Disclosing or sharing personal data with third parties 
5. Security and retention 
6. Your rights 
7. Data protection of minors 
8. Collection of IP address
9. Data analysis and automated decision-making 
10. Update your personal data 
11. Updates to the privacy policy and statement 
12. Contact us 
13. Link to other websites

The types of personal data that we collect depend on the circumstances of collection and on the nature of the service requested or transaction undertaken.

1. Personal data that can be used to identify an individual
   We may record your name, gender, date of birth, your nationality, country of residence, passport number and other personal identification numbers, etc.  
   
   
2. Your contact details and personal account or registration details
   Your contact details may include your address, telephone number and email address. When you create a personal account, or register for a service, we may also record your log in details and other information you fill out on your personal account or registration form. For cooperate/business members, we also collect information with respect to your company such as company name.
   
   
3. Information about your reservations, bookings and purchases
   When you make a reservation or book a flight with us, we process your reservation and booking information. These travel information may include ticket numbers, flight information. If your purchases made through our website or App, such as Dynasty Package, seat upgrades, excess baggage, duty-free products, we will also process these information in relation to ancillary services.
   In addition, we may process your information relating to your use of our flight entertainment system or onboard WiFi service, our lounge service and cargo service, etc.
   
   
4. Information about your travel arrangement
   When you travel with us, we process information in relation to your journey. Such as your travel itinerary, online check-in with our website or App, check-in at the airport counter, check-in baggage, baggage tracking, etc. We may also record any specified medical needs or dietary requests you have and any additional assistance you require.
   
   
5. Your payment details
   Payment details you used to purchase our services and products, such as credit or debit card information, including name of card holder, card number, billing address and expiry date, etc.
   
   
6. Your Dynasty Membership
   When you become a member of our Dynasty Flyer Program, we will process your membership number, account name, membership tier, mileage, award and other information in relation to your membership.
   
   
7. Your interests, preferences and options
   When you use our service, you may choose to share information with us, such as your interests, preferences, services and products you purchased, your opinions, etc.
   
   
8. Our communications and interactions with you
   We will collect any interactions and correspondence between us, such as calls made through our call center, any interactions you have with our staff or employee, any interactions with us on social media. When you call us, our customer support will register your questions or complaints in our database. We may also record telephone calls for training purposes or to prevent fraud. 
   
   
9. Your use of our website, App and social media platforms
   When you visit our website or use one of our Apps, we may register your IP address, browser type, operating system and others. We may collect the way you use our website via cookies and similar technologies, including your browsing history. For more information please refer to our "Cookie Policy".
   In addition, when you sign in for our services using a social media network account, we may receive your social network profile including your contact details, interests and hobbies.

For the performance of the contract of carriage with you, we may collect the aforementioned categories of personal data from you directly or through third parties. Please note that third parties may have their own privacy policies to explain how they collect and use your personal data. Such privacy policies do not constitute a part of this Policy. You need to carefully read and decide whether agree with their privacy policies or not.

1. The travel agent who handle your reservations and bookings, and if you use a third party platform to search and book a flight, we may receive your personal data from that provider. For example, your organization's corporate co-worker book a flight for you, we will verify whether he/she is validly identified as acting on your behalf or has been authorized by you pursuant to our security procedures. 
2. Our service providers and members of China Airlines group. Examples of such third parties include our ground handling agents who assist you with check-in and booking, or our catering provider to accommodate your special meal requests. 
3. Our airlines partners or third party partners for marketing purpose. For example, when you purchase our services from a participating airline of SkyTeam Airlines Alliance or other third party partners for marketing purpose, they share your earned mileage with us. And if you use a third party platform to search and book a flight, we may receive your identifying information and booking details from that provider. 
   
4. Our cooperating vendors for marketing activities, such as co-branded credit card issuers, the partner hotels, restaurants, retailers, etc.

For processing your services, in certain circumstances, we will disclose or share your personal data to third parties as set out below. Some of these third parties may locate in the country or area other than your residence.

5.1. Data storage and security 

All personal data we collect from you is stored on our secure servers or other safe locations, and we apply appropriate technical and organizational measures that meet the current industrial standards (in particular article 32 of the GDPR) to protect your personal data so as to ensure an appropriate level of security and prevent personal data from theft, tampering, loss or other infringement. We also comply with our security policies and regulations when accessing or using personal data, and restrict access to your personal data to those persons who need to use it for the purposes for which it was collected, and hold regular personnel security training to enhance the protection. 

We will retain your personal data for as long as it is necessary to fulfill the purpose for which it was collected, our legal or business purposes, or as required by relevant laws.

5.2. International data transmission

Our Head Office is based in Taiwan and your personal data will be transmitted to data storage facilities where we keep our central records. Your personal data will be transferred to our worldwide branch offices and other third parties service providers (please refer to "Disclosing or sharing personal data with third parties" above) in Taiwan and around the world in connection with our performance of the contract of carriage with you. We will process your personal data in the aforementioned countries or area. Under this premise, your personal data may be transferred to countries or area other than your residence, including those countries or area with a lower level of data protection than your residence. We will use adequate safeguards to comply with requirements for the international transmission under applicable privacy and data protection laws. 

If you are an EU resident, where we transfer your personal data outside the European Economic Area ("EEA"), this is done either on the basis that it is necessary for the performance of our contract of carriage with you, or that the transfer is subject to the European Commission's Standard Contractual Clauses ("SCC") for the transfer of personal data to third countries.

If you are a Chinese resident, where we transfer your personal data outside the territory of China, this is done on the basis that the security assessment is conducted in accordance with the Personal Information Protection Law of People's Republic of China and relevant laws/regulations, or that the model contract terms issued by the China Administration of Cyberspace are concluded for the transfer, or that transfer is necessary for the performance of our contract of carriage with you.

5.3. Data destroy 

When the specific purpose of collecting your personal data is no longer exists or upon expiration of the relevant time period, we will adopt commercial reasonable and technical practicable measures either to secure destroy or irreversibly anonymize your personal data in accordance with applicable laws.

5.4. How to protect yourself

The Internet is a worldwide open global communication tool. We do not make any guarantee to the security of data transmissions or storage, even though we have used our best efforts to protect your personal data. The customers shall take their own risks on transmission of any data. 

It is advisable to keep your account ID, password of membership and other personal data properly, and do not disclose such information to any other third parties. Please log out your Dynasty account and social media account (if you use social media account to log in Dynasty account) after use. If you use public computer or share computer with other persons, please log out your Dynasty account and close the browser window after use in order to prevent others from abusing your personal data. In addition, we cannot be held responsible for theft of your personal data on a platform that is not managed by us.

Subject to applicable privacy and data protection laws, you may exercise your rights by providing the necessary information to help us to confirm your identity and submit the online form, or contact our branch offices or Data Protection Office/Personal Information Protection Officer (please see "Contact Us") to exercise any rights you are granted.

In some circumstances, we may require specific information form you to help us verify your identity and process your request. If you provide incorrect or incomplete information and prevents us from verifying your real identity, or we are not required by law to comply with your request, we may deny your right requests. 

If the data subject is a Dynasty member and wish to update his or her personal data or withdraw their consent, you may click "Account Profile" > "Update Personal Profile" or "Membership Account Deletion" to exercise your rights after logging in to "Dynasty Flyer Service".

1. Investigation agencies or governmental agencies object to our compliance with your requirements. 
2. According to our reasonable judgments and assessments, it is believed that providing such information would interfere with another's rights or affect a person's life or safety. 
3. The information collected is in relation to breach of contract, suspected fraudulent activities or illegal activities. 

1. You believe that it is no longer necessary for us to hold your personal data. 
2. We are processing your personal data on the basis of your consent and you wish to withdraw your consent and there is no other ground under which we can process such data. 
3. We are processing your personal data on the basis of our legitimate interest and you object to such processing. 
4. You no longer wish us to use your personal data for marketing and promotional purposes. 
5. You believe that your personal data is being unlawfully processed by us. 
   

An Internet Protocol address (IP address) is a numerical label assigned to each device participating in internet that uses the Internet Protocol for communication from service provider. We collect your IP address when you access our website, mobile services and App. 

We store this information to help us manage security, analyze how our website, mobile services and App interact with you.

We and our affiliates or other business cooperation agencies will use the aforementioned data to include but not limited to transaction amount and travel itinerary to obtain specific information to observe customer behavior and may send this information to our service providers to provide better and more personalized transactions and services.

We need your assistance to ensure that your personal data is current, complete and accurate. Please kindly inform us of changes to your personal data. If you are a registered Dynasty Member, you may update your personal data at any time by logging on to your account. 

Your booking information or flight itinerary will be disclosed to the appropriate customs and immigration authorities as required by law. As such, your personal data is very important to ensure that personal data contained in your booking information or flight itinerary is current, completed and accurate. Therefore, we will request personal data updates from you from time to time.

We will amend this Policy and Statement from time to time, and the changes will be effective from the date of posting; and the updated version will replace the earlier versions. We will publish the updated Policy on www.china-airlines.com or App, and the date will be stamped so that you are aware of when the Policy was last updated.

If you have any questions, complaints or comments with respect to this Policy or Statement, please submit the online form or write to us at the address below referencing "Privacy Policy":

China Airlines Limited
Data Protection Officer/Personal Information Protection Officer
No.1 Hangzhan S. Rd. Dayuan Dist.
Taoyuan City, 33758 Taiwan
DPO@china-airlines.com

For any requirements or questions of your bookings, tickets or other services, you may Contact Us either online or by phone, our customer support will get you back soon. If the data subject is a Dynasty member and wish to update his or her personal data or withdraw their consent, you may click "Account Profile" > "Update Personal Profile" or "Membership Account Deletion" to exercise your rights after logging in to "Dynasty Flyer Service".

Our website contains links to other websites that are operated by third parties and under different privacy terms. When you leave our website and access other websites, please remain alert and read the privacy policy terms of other websites. We have no control over and provide no guarantee on the information submitted to these websites.

This Policy and Statement is translated from Chinese and may be translated into other languages. In the event of any inconsistency between the Chinese version and the translated version of this Policy and Statement, the Chinese version shall prevail.

The California Consumer Privacy Act ("CCPA") provides some California residents with the following rights. If you are a California resident, you can make certain requests with respect to your personal information. To the extent CCPA apply, we will comply with such applicable law.

California residents have the right to know what personal information we have collected, corresponding to the following categories of personal information: 

• Identifiers: such as name, address, email address, IP address, account name, passport numbers, your Dynasty Member ID number, cookie information or other similar identifiers. 
• Customer records: such as phone number, billing address, credit or debit card information or employment. 
• Demographic information: such as age, gender, medical condition, marital status or disability. This category of information will also be protected under classification characteristics under applicable laws/regulations. 
• Commercial information: such as services and products purchased or opinions you shared with us. 
• Internet activity: such as browsing type, browsing history, search history and other information collected automatically. 
• Inferences: such as interests, preferences, favorites, psychological trends and behaviors.

For more information on what we collect, including the sources form which we receive information and the business or commercial purposes we use these categories of information, please refer to "How we collect your personal data" section and "For which purpose we use your personal data" section.

To the extent required by applicable law, you may have the right to request to know what personal information we have about you in the preceding 12 months, including a list of categories of your personal information that we shared with another company for business purposes. In particular, a "right to know" may entail providing you with the following based on the details of your request: 

• The categories of personal information we have collected about you. 
• The categories of sources from which the personal information we collected. 
• The business or commercial purpose for collecting or selling your personal information. 
• The categories of third parties with whom we shared your personal information for business purposes. 
• The specific pieces of personal information we have collected about you.

Once we receive your request, we will verify and confirm accordingly, and will endeavor to disclose to you the information you requested.

If the applicable law grants you a right to request the deletion of any of your personal information that we hold about you. Once we receive your request, verify and confirm your request, we will delete your personal information from our records and direct our outsourcing service providers to do the same, unless an exception applies.

We may not able to erase your personal data to the extent processing is necessary to service requirements and the right to erasure shall not be applied in accordance with applicable data protection laws/regulations, such as travel information has its statutory retention period; or the necessary information for handling compensation, litigation or non-litigation cases.

We do not generally sell or share your personal information for monetary consideration. However, to the extent "sell" or "sale" under CCPA is interpreted to include the transfer or communication of personal information by a business to another business or a third party in such a way that conveys value to the recipient, even if that value is not monetary. This means some advertising technology activities and sharing information for common business activities may be considered a "sale" under the CCPA, such as the participation in certain ad networks and advertising on social media platforms can constitute sharing/using your personal information for digital advertising and a "sale" of personal information under CCPA, even there is no exchange of money.

To the extent CCPA applies and we sell your personal information as the term "sell" is defined under the CCPA, you have the right to request us to stop "selling" your personal information by completing the online form. You may also refer to "Contact Us" section for further details.

We assure you will not to receive any discriminatory treatment by us for the exercise of your rights. To be specifically, it means we will not deny you services, charge different rates or fees, or provide different level of service or quality of goods.

Please complete the online form the necessary information to help us to confirm your identity, or you may refer to "Contact Us" section to exercise your above rights. When you contacting us, please specify what kind of request you are seeking to make and the scope of the request. In some circumstances, we may require specific information from you to help us verify your identity and process your request. If you provide incorrect or incomplete information and prevents us from verifying your real identity, or we are not required by law to comply with such your request, we may deny your right requests. 

If the data subject is a Dynasty member and wish to update his or her personal data or withdraw their consent, you may click "Account Profile" > "Update Personal Profile" or "Membership Account Deletion" to exercise your rights after logging in to "Dynasty Flyer Service".