This Appendix applies if you are based in the following countries/regions during your interactions with us
1.1 Overseas recipients of Personal Data
(a) In the course of providing our products and services to you, we may disclose your Personal Data to the following overseas recipients:
i. companies within Cathay Pacific, our affiliates and their subsidiaries, and third party service providers that are located overseas who assist us in providing our travel (including transit) and associated services; and
ii. law enforcement agencies, regulatory authorities and governments for security, customs and immigration purposes.
(b) These recipients may be located in any country to which you travel, or which you travel through, either with us or our partner airlines.
(c) We may disclose your Personal Data to recipients in countries that you are travelling to or you are sending cargo to or from in order to provide travel, freight and reservation services. The overseas recipients includes recipients in countries through which you are transiting, or when you travel on flights operated by other airlines, or countries in which our service providers operate or have their headquarters.
(d) We may also disclose your Personal Data to data processors (including operators of global travel distribution systems), customer service providers and third party marketing service providers. The regions in which these third parties are located include the European Union countries, Asia, North America, Australia, South America and Middle East.
1.2 Accessing and correcting your personal information
(b) We will deal with any complaint by investigating it, and providing a response to you within a reasonable time, provided that we have all necessary information and have completed any investigation required. In some cases, we may need to ask you to put your complaint in writing so that we are sure that we understand it, and may also need to ask you for further information or to verify your identity. In cases where further information, assessment or investigation is required, we will seek to agree an alternative timeframe with you.
(c) If you are dissatisfied with the outcome, please contact us. Alternatively, you may take your complaint to the Privacy Commissioner at the Office of the Australian Information Commissioner (OAIC). The contact details for the OAIC are available from the OAIC’s website at www.oaic.gov.au.
2.1 Consent and withdrawal of consent:
We may continue to use and disclose your Personal Data where it is required to provide you with the services you have requested or that we have agreed to provide you, or in accordance with the law.
2.2 Marketing and profile information:
In connection with our marketing activities, we analyse some of the information that we collect about our customers (together with information about customers that we collect from our loyalty and other partners) to determine what offers are most likely to be of interest to different categories of customers in different circumstances and at different times. We call this the creation of “segments”. To do this, we combine Personal Data that we have collected from customers directly together with Personal Data that we have collected from our affiliates and other partners, including Asia Miles, about our customers’ purchase history and interactions with us. From time to time, we will assess the Personal Data that we hold about you in order to assign you to a particular segment. We will use the segment that you have been assigned to in order to tailor our marketing communications to include offers and content that are relevant to you.
2.3 Consent for electronic marketing communications:
We will only send you electronic communications in relation to marketing activities if you have provided express opt-in consent to do so. This does not include transactional communications which facilitate or confirm purchases or services, or responses to inquiries from you.
2.4 Opting out of direct marketing:
2.5 Using your Personal Data to make decisions:
In connection with our business, we will use your Personal Data to make various decisions about you and your eligibility to access our services, to prevent abusive use of our services, to ensure security of our systems, or to detect fraud. Some of these decisions may be taken on an automated basis including, by matching your Personal Data against information in certain risk models that we have created based on the behaviour of other individuals and using your Personal Data to further enhance such models.
2.6 Storage and access outside of Canada:
Your Personal Data may be accessed and stored outside of Canada by staff or suppliers, transferred, and/or stored outside Canada. Your Personal Data may be subject to access and disclosure to governmental and law enforcement authorities in those countries and in accordance with the laws of those countries.
2.7 Rights of access and correction:
“In certain circumstances, to the extent permitted by the Act on Protection of Personal Information of Japan (Act No.57 of 2003) and based on your consent if required by the law, we will disclose your Personal Data to third parties as described below:”
3.3 Processing of special categories of Personal Data
(a) We will collect and handle sensitive Personal Data, for example, when we handle requests for special medical or access assistance or your specific dietary requirements that may indicate your religious or other beliefs.
(b) We will typically ask you for your consent when collecting, handling or share with a third party this type of Personal Data, unless we are otherwise permitted to process such Personal Data under the Act on Protection of Personal Information of Japan (Act No.57 of 2003) (APPI).
3.4 Your rights
(i) correct, add or delete Personal Data if the Personal Data held by us is not accurate;
(ii) stop the use or sharing with a third party of, or delete, Personal Data if the use or sharing is against the rules of the APPI;
(b) These rights are subject to certain exemptions to safeguard the life, body or assets of you or a third party (e.g. the prevention or detection of crime) and our interests, due to requirements of other laws or availability of less onerous options.
“2.3 We will process sensitive Personal Data, for example, when we handle requests for special medical or access assistance or your specific dietary requirements that may indicate your health issues. We will ask you for your written consent when processing this type of Personal Data, unless we are otherwise permitted to process such sensitive Personal Data under the Malaysian Personal Data Protection Act 2010.“
“2.3 We will collect and handle sensitive Personal Data, for example, when we handle requests for special medical or access assistance or your specific dietary requirements that may indicate your health issues. We will ask you for your written consent when collecting and handling this type of Personal Data, unless we are otherwise permitted to collect, process or use such Personal Data under Taiwan Personal Data Protection Law. “
“4.2 Your Personal Data may be used in electronic form and/or hard copy form or in any appropriate manner.”
6.3 The following sentence shall be added to section 8.1:
7.1 California Privacy Rights
7.1.1 Privacy Rights
Under California Civil Code TITLE 1.81.5. California Consumer Privacy Act of 2018 (CCPA) sections 1798.100 - 1798.199 , California residents are entitled to:
- Access to Specific Information: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
- Deletion of Specific Information: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
We will not discriminate against you for exercising any of your CCPA rights.
7.1.2 Do We Sell Your Personal Data?
We do not sell information that directly identifies you, like your name, address, or banking information. However, the CCPA’s broad definitions of “sale” and “personal information” may deem the common flow of information in the digital analytics and advertising ecosystem to be a sale. Like most companies we use online analytics to measure the ways users engage with our websites and apps. These analytics, in turn, inform how we perform online advertising. In order to provide these analytics and facilitate online advertising, we use third-parties that collect device identifiers and place tags, cookies, beacons, and similar tracking mechanisms on our websites/apps and on third-party websites/apps. You can find more information on how we use such cookies in our Cookies Policy.
Other than information required to complete a booking, we do not knowingly collect personal identifiable information from children under the age of 13. If we learn that we have collected Personal Data from a child under the age of 13, we will take reasonable steps to delete that information. Where required by applicable law, we may ask a parent or guardian for consent before we provide a product or service to a minor.
7.3 Your Rights And Choices
You may have additional rights and choices regarding how we process your personal information. Those additional rights and choices are listed below.
We reserve the right to verify your identity in connection with any requests regarding personal information to help ensure that we provide the information to the individuals to whom it pertains, and allow only those individuals or their authorized representatives to exercise rights with respect to that information. We will try to comply with your request as soon as reasonably practicable.
Please note that your exercise of these rights is subject to limitations and we may reject your request.
Access and correction: You may access the information we maintain about you. You may request access to correct any errors in your personal information.
Deletion: You may request that we delete your personal information. Please note, we may be required by legal or other reasons to retain your personal information.
Do Not Sell My Personal Information: To the extent that we sell customer data, you may have the right to direct us to stop selling your personal information if we are doing so.
7.4 The following sentence shall be added to section 9:
“In relation to web browser-based do-not-track (“DNT”) signals, because there is not yet a consensus on how companies should respond to web browser-based DNT mechanisms in Europe, the US and California, we do not explain how we respond to web browser-based DNT signals at this time.”
More about Legal and privacy
Cathay Pacific Conditions of Carriage (PDF), Link opens in a new window operated by external parties and may not conform to the same accessibility policies as Cathay Pacific .
Notification to Passenger Charter of Rights for travel to/ from India (PDF), Link opens in a new window operated by external parties and may not conform to the same accessibility policies as Cathay Pacific .
Notification of Rights to Benefits under the Israel Aviation Services Law (PDF), Link opens in a new window operated by external parties and may not conform to the same accessibility policies as Cathay Pacific .
ET Conditions of Contracts/ Notices & EC 889 Air Carrier Liability for Passengers/ their Baggage (PDF), Link opens in a new window operated by external parties and may not conform to the same accessibility policies as Cathay Pacific .
All downloadable files on this page are in PDF (Portable Document Format) and can be viewed with Adobe Acrobat Reader. You can download the Reader at no cost from the Adobe website, Link opens in a new window operated by external parties and may not conform to the same accessibility policies as Cathay Pacific .