In connection with the Cathay Membership Programme ("CMP"), Cathay Pacific Airways Limited, through its wholly owned subsidiary, Asia Miles Limited (together or independently, referred in this section as "Cathay"), does not transfer your personal information overseas without your express consent unless required by law. However, personal information collected to provide services is transferred to subsidiaries or associated companies located in Hong Kong through the Cathay Membership Programme system immediately.
| Recipient name and contact information thereof | Items of personal information to be transferred | Destination country | Date and Time and method of transfer | Purpose of use | Retention period |
|---|---|---|---|---|---|
AMADEUS IT GROUP, S.A (dataprotection@amadeus.com) |
All information collected in booking |
Germany |
Online transmission upon creation of booking |
For managing passenger flight bookings |
7 years |
oneworld Alliance partners (Contacts please refer to link) |
|
Locations of airlines |
Online transmission upon creation of booking |
Points accrual |
Until termination of the contract |
Asia Miles Limited (dpo@cathaypacific.com) |
|
Hong Kong |
Online transmission upon creation of member account and booking |
Asia Miles accrual |
Until termination of membership |
TravelSky Technology Limited (helpdesk@travelsky.com) |
All information collected in APP booking |
China |
Online transmission upon creation of booking |
For APP booking management in the reservation system |
7 years |
Adyen (dpo@adyen.com) |
Stored credit card information |
Netherlands |
Online transmission upon creation of payment |
For cash (non-miles) payment |
7 years |
OpenJaw (dpo@openjawtech.com) |
|
Ireland, Data Centre: Singapore |
Online transmission upon creation of Cathay Holidays booking |
For Cathay Holidays Booking, Redemption & Amendments |
7 years |
Salesforce (Marketing Cloud) (privacy@salesforce.com) |
Member information such as name, contact mobile, email, miles balance, miles transaction, booking, consent |
US |
Online transmission upon creation of member account and communication |
For member communication management |
1-7 years (E.g., 1 ears for booking information; 3 years for mileage transaction information; 7 years for member profile |
Acoustic (Silverpop) (privacy@acoustic.com) |
|
US |
Online transmission upon creation of communication |
For passenger communication |
450 days |
Novatti (privacy.officer@novatti.com) |
|
Hong Kong |
Online transmission upon change/update of member benefit |
For retrieving member benefit entitlement |
7 years |
Go Logistics and Storage Company Limited (info@gols.com.hk) |
|
Hong Kong |
Online transmission upon purchase |
For product delivery |
7 years |
AWS (aws-korea-privacy@amazon.com) |
|
Singapore |
Online transmission upon member registration and update |
For storage on cloud |
7 years |
CHAMP (dpo@champ.aero) |
Cargo Airway Bill |
Luxembourg |
Online transmission upon cargo shipment order creation and update |
For managing cargo shipment |
7 years |
IBM (https://www.ibm.com/privacy/portal/contact/us-en) |
Passenger information |
Australia |
Online transmission upon miles accrual/retro activities |
For miles accrual/retro activities |
7 years |
You are entitled to refuse to consent to the overseas transfer of personal information. If you do not consent to the overseas transfer, please contact dpo@cathaypacific.com. However, if you refuse to provide your consent, you may be restricted from using our services.