Exporting your Personal Information from
Chinese Mainland

Cathay Pacific as an Overseas Recipient

Company Name:

Cathay Pacific Airways Limited

Contact Details and Way to Exercise Your Rights:

1. Email: dpo@cathaypacific.com
2. Mail: “The Data Protection Officer, Cathay Pacific Airways Limited, 7th Floor Cathay Pacific City, 8 Scenic Road, Hong Kong International Airport, Lantau, Hong Kong SAR, China”

Purpose of Processing:

Method of Processing:

Collection, storage, use, editing, transmission, provision, public disclosure, and deletion.

Types of Personal Information:

• Personal basic information (name, Internet screen name, date of birth, gender, title, nationality, phone number, address, mailing address, email address, age, social platform ID)
• Personal identification information (Chinese ID card number, Chinese name on ID, travel document type, travel document number, travel document issuing state, travel document expiry date, travel document issuing place, travel document issuing organisation, national ID or travel document copy)
• Personal health and physiological information (MEDA Form Information)
• Personal education and work information (company name, job title)
• Personal property information (payment card number, payment card holder name, payment Card Verification Value, payment method, merchandise item, fare value, miles to be credit)
• Personal communication information (email correspondence, call records, chat records, order confirmation, delivery notice)
• Contact information (Full name of the parents, full name of the guardian, emergency contact name, emergency contact phone number, Redemption Group contact name, Redemption Group contact number, Redemption Group visa number)
• Personal online activity records (click records, browsing behavioural data)
• Frequently used personal device information (device type, device operating system)
• Network identity identification information (IP address, IP address location)
• Other Personal Information (point of origin, point of destination, Cathay Pacific membership number, Cathay Pacific membership tier, frequent flyer program number, loyalty program points, meal preference, Passenger Name Record, electronic ticket number, confirmation that the customer is in a flight environment, special service request, hotel selection, car rentals, hotel name, check-in and check-out date); flight information (carrier, flight number, flight date, origin airport name, and destination airport name), baggage information (bag tag number, baggage status [i.e. Delayed Baggage, On-Hand Baggage, Damaged Baggage], and routing history); seat number, flight class.

A representative list of third parties

Given the nature of air transportation, we work with various third parties to deliver services. These third parties may include:

• Service providers and operational partners (e.g., baggage handling companies, airports, etc.);
• Other airlines, the Oneworld Global Airline Alliance, and partner carriers;
• Enterprise customers (e.g., corporate clients managing employee travel, etc.);
• Government regulatory bodies worldwide (e.g., authorities requiring Passenger Name Record (PNR) data etc.);
• Software development kit (SDK) providers and technology partners that support our digital services and operations.

Due to the dynamic nature of these relationships, and because we serve dozens of destinations around the world, it is not practical to exhaustively list all real-time third parties with whom we engage. A representative list of third parties to whom we transfer personal information outside the Chinese Mainland can be found below.