Facilitating and provision of travel, ancillary and related services

Full name, date of birth, contact details, passport details, nationality, your itinerary, payment information, order history, PNR

Up to 10 years after the end of travel or provision of the relevant services.

Assessment and Verification of identity; regulatory purposes, including sanctions screening; medical clearance

Full name, contact details, travel documents, date of birth, payment and credit information, meal preference, baggage details, health information, correspondence with us

7 years after the date of the activity, unless a longer period is required by law.

Dealing with requests, questions and complaints

Personal information necessary to address the relevant request, question or complaint including full name, PNR, contact details, ticket number, frequent flyer number, country of residence, baggage information, special requests, health information, voice recording, CCTV images   

8 years after the date of the relevant activity. Subject to local regulations, the record may be maintained for a longer duration.

Administration and management of your account, including Privilege Club account

Full name, email address, title, telephone number, gender and date of birth, address, any other information you have added to your account (including related to your nominated family members, guests or travel co-ordinator) login data, display name, role, the details of your purchases and transactions and payment details

Personal information is retained until the account holder requests deletion of the account to which the personal data relates. Some personal data are retained for up to 7 years post deletion, if required by law.

Service development and improvement

Name, date of birth, contact details, payment and credit information and any correspondence with us, IP address, web browsing activity, answers provided to surveys, including age, gender and travel destination preferences

To the extent the information is personal information, that information is retained indefinitely until the individual requests its deletion.

If there is an emergency

Name, address, telephone number, gender, nationality, passport number, and name, address and contact details of nominated emergency contact and next of kin

For a period of 7 years after the event or such period as may be required by law.

With consent, information about special offers, news and marketing communications

Name and email address, your disclosed and inferred preferences and interests, shopping history; web browsing activity

Personal data information is retained indefinitely until the individual requests its deletion.

Campaign data is deleted within 24 hours

Management of the business of the Qatar Airways Group

Contact details; personal details such as name and date of birth, payment and credit information, payment and order history, correspondence with the Qatar Airways Group, data generated during the performance of any agreement between you and the Qatar Airways Group such as a passenger transport contract; the information you provide when responding to our surveys

To the extent the information is personal information, that information is retained indefinitely until the individual requests its deletion

Amadeus IT Group S.A

Flight booking and retention of Privilege Club membership information for the purposes of enrolment and transacting on the account.

PROS Holdings Inc.

Flight forecasting, optimizing, and reporting

Oracle Corporation (Responsys)

Various digital marketing and acquisition activities

Sitecore Ireland Limited

Customer profiling and personalisation

Qualtrics, LLC

Customer surveys

Adobe Systems Software Ireland Limited,

Web and App analytics

Vibe Systems Limited

Provision of a web-based booking engine and content management system and e-commerce platform

J2 Martech Corp (i-contact)

B2B - Electronic newsletter distribution

ETrawler Unlimited Company (Cartrawler)

Referral of individuals and agents to car rental and mobility solutions

Plaza Premium Lounge Management Limited

Airport hospitality experiences and passenger service solutions

Bagpoint BV

Luggage transport service

Accelya Holding World S.L. Unipersonal

Payments processing; billing and Settlement Plan (BSP) services

Salesforce, Inc.

Customer relationship management

Al Jazeera Printing Press Co. L.L.C

Membership card fulfillment

Points.com Inc.

Avios points transactions

AMADEUS IT GROUP, S.A

dataprotection@amadeus.com

·       Flight Booking Information: Privilege Club membership number, name of passenger, date of birth, gender, phone number, email address, payment information, travel document details, travel itinerary

·        

·       Membership Information:  Privilege Club membership number, name, date of birth, gender, telephone number, Avios points balance

·        

·        

·       EEA

Flight Booking Information: Retention of booking records in Qatar Airways booking system

Privilege Club Membership Information: Retention of frequent flyers information for the purposes of enrolment and transacting on the account

·       Flight Booking Information : five years after the booking

·        

·       Membership Information : until cancellation of membership account

Salesforce.com,Inc

privacy@salesforce.com

Privilege Club Number, name, date of birth, contact info, email

EEA

Customer Relationship Management

Personal information is retained until the account holder requests deletion of the account to which the personal data relates. Some personal data are retained for up to 7 years post deletion, if required by law.

Adobe Systems Software Ireland Limited

askprivacy@adobe.com,

Online website tracking (cookies), language, Location using IP address, PNR metric use, attribution and commision payments to partners and PC Number for instances of customer redemption, issue resolution.

Adobe Regional Data Collection Centers (RDCs) hosted in AWS world-wide locations and Adobe Data Processing Centers in (Oregon USA, London, Singapore (Asia Region).

Web Analytics Processing

For period commensurate with the term of the contract with outsourced service provider. In case of contract expiry, the data will be deleted within 30 days from the date of contract expiry or termination.

PROS Holdings Inc.

privacy@pros.com

PNR, contact number, email address, name, ender; date of birth travel details such as date of travel, origin and destination, travel document details, credit card information, ticket number

United States and EEA

Flight forecasting, optimizing, and reporting

Up to 10 years from creation of the data.

Oracle Corporation

Oracle Corporation

Global Data Protection Officer

Willis Tower

233 South Wacker Drive

45th Floor

Chicago, IL 60606

U.S.A.

Name, date of birth, email address, travel itinerary, online website tracking information,  language, customer type, loyalty  details, nationality, profession

In accordance with Data Processing Agreement for Oracle Services (“Data Processing Agreement”)

Digital marketing and acquisition activities

Record is maintained for as long as the individual does not request to delete the account to which the personal information relates.

Sitecore Ireland Limited

privacy@sitecore.com

Names, date of birth, nationality, contact information, login data, IP address, online website tracking information, travel itinerary, language, job details, booking details

EEA

Digital marketing and acquisition activities

For period commensurate with the term of the contract with outsourced service provider. In case of contract expiry, the data will be deleted within 30 days from the date of contract expiry or termination.

Qualtrics, LLC

privacy@qualtrics.com

Name, date of birth, email address, contact number, travel document details, travel itinerary and other details, ticket number, customer ID, PNR, Privilege Club number  

EEA

Voice of Customer Survey using Qualtrics Platform

For period commensurate with the term of the contract with outsourced service provider. In case of contract expiry, the data will be deleted within 30 days from the date of contract expiry or termination.

Vibe Systems Limited

data.protection@ppgroup.travel

Name, date of birth, drivers licence, passport details, address, telephone number email address, Privilege Club Number, employer details

EEA

Provision of a web-based booking engine and content management system and e-commerce platform

Up to 4 years from the date of the booking.

J2 Martech Corp

privacy@icontact.com

Name, email address

US, EEA

B2B - Electronic newsletter distribution

Manual deletion based on end-customer request.

ETrawler Unlimited Company

dpo@cartrawler.com

Name, date of birth, email address, contact number, credit card information, travel details, online website tracking information

EEA

Referral of individuals and agents to car rental and mobility solutions

7 years after date of transaction.

Plaza Premium Lounge Management Limited

Privacy Data Officer – Plaza Premium Lounge Management Limited, 8/F Commercial Building, Airport Freight Forwarding Centre, 2 Chun Wan Road, Lantau Hong Kong.

Name, email address, contact number, travel document details, credit card information, travel details, online website tracking information, certain personal data about family members (name, contact details)

Hong Kong and location of relevant lounge/facility

Airport hospitality experiences and passenger service solutions

In accordance with Plaza Premium Lounge Management Limited Privacy & Security Policy

Accelya Holding World S.L. Unipersonal

privacy@accelya.com

Name, email id, card number (credit/debit), card expiry date, flight details and DOB (in case of CHD/INF) and contact number

India and Spain

Payment processing; to perform transaction level reconciliation between sales and collections.

10 years after the date of transaction

Al Jazeera Printing Press Co. L.L.C

Manager – Digital Accounts and IT

P.O. Box 55347

Doha Qatar

Full name, language preference, contact data, Privilege Club membership information (Privilege Club number, member tier and expiry)

Qatar

Printing and fulfilment of membership cards

Within 1 month after fulfilment of membership card

Points.com Inc.

dpo@points.com

Full name, contact details, billing address, payment information, program member ID(s), other program identifiers, transaction history, transaction particulars

Canada, United States

Buy, Gift and Transfer Avios points

Retained until deletion of member account

The computer communications or Internet log records, and the data on tracing a location of connectors

Protection of Communications Secrets Act (Korea)

3 months

Records on processing of consumer complaint or dispute resolution

Consumer Protection in Electronic Commerce (Korea)

3 years

Records regarding contract or withdrawal from contract, Records regarding payments and provisions of goods

Consumer Protection in Electronic Commerce (Korea)

5 years

Accounting books, registers and documents relating to commercial activities conducted in the State of Qatar

Law No. 21 of 2009 The Income Tax Law (Qatar)

10 years

4.3: Where you disclose Personal Data on behalf of another person, you will ensure that the individual whose Personal Data is supplied to Qatar Airways has authorized the disclosure, is informed of and, where appropriate, consents to our processing of their Personal Data in accordance with this Privacy Notice.

4.3: Where you disclose Personal Data on behalf of another person, you are responsible for ensuring that the individual whose Personal Data is supplied to Qatar Airways has authorized the disclosure, is informed of and, where appropriate, consents to our processing of their Personal Data in accordance with this Privacy Notice.

5.1(i): Qatar Airways may also use and disclose your Personal Data to your authorised representative(s) for the purpose of the relevant transaction or enquiry.

5.1(i): Qatar Airways may also disclose your Personal Data to your authorised representative(s) for the purpose of the relevant transaction or enquiry.

5.1(ii): We will process your Personal Data based on contracts that you have with the Qatar Airways group of companies, including the passenger transport contract.

5.1(ii): We will process your Personal Data to the extent that it is necessary for the performance of any contracts that you have with the Qatar Airways group of companies, including the passenger transport contract.

5.2(ii): We will process your Personal Data based on our legitimate business interest of assisting with your booking and your request to enter into a passenger transport contract with us.

5.2(ii): We will process your Personal Data based on our legitimate business interest of assisting with your booking and providing ancillary services to you. Where we are required to process your personal data to assess your fitness to fly, we do so as the processing is necessary for the performance of your passenger transport contract with us and our compliance with our legal obligations.

5.2(iv): Special categories of personal data such as medical information, are subject to stricter rules and a higher level of protection under the applicable data protection and privacy laws.

5.2(iv): Special categories of personal data such as medical information, are subject to stricter rules and a higher level of protection under the applicable data protection and privacy laws. We rely on your explicit consent to process this special category information where it is provided to us in your Medical Information Form.

5.2(v): We may use automated decision-making to prevent fraudulent transactions.

5.2(v): We may use automated decision-making to prevent fraudulent transactions. Please call our Contact Centre if you wish to discuss any declined transactions.

5.3(b)(i): In order to manage your accounts and administer the Privilege Club programme, Qatar Airways will:

(a)         determine tier status, make offers and to provide personalised services on this basis;

5.3(b)(i): In order to manage your accounts and administer the Privilege Club programme, Qatar Airways will:

(a)           determine tier status and to provide personalised services on this basis;

5.3(c)(iii): Depending on the social media platform you chosen to login/create your Qatar Airways account, we will use Personal Data which is supplied by social media platforms including your name, email address, language preference, profile picture, gender and the other Personal Data based on your social media account or privacy settings.

5.3(c)(iii): Depending on the social media platform you chosen to login/create your Qatar Airways account and the information that you have provided to that platform, we will use Personal Data which is supplied by social media platforms including your name, email address, language preference, profile picture, gender and the other Personal Data based on your social media account or privacy settings.

5.3(d)(i): It is important for us to continue to provide you with our award winning services and uphold the Qatar Airways brand. We use your Personal Data so that we can assess, analyse and improve our services. For this purpose, we keep track of how often you read our newsletters, visit our Website and/or Mobile Apps and what services you purchase through our Website or Mobile Apps. We use analytics tools to optimizing the efficiency, design and quality of our Website. These tools allow us to, for example, identify and repair technical errors such as broken links that impair the Website’s functionality.

5.3(d)(i): It is important for us to continue to provide you with our services and uphold the Qatar Airways brand. We use your Personal Data so that we can assess, analyse and improve our services. For this purpose, we keep track of how often you read our newsletters, visit our Website and/or Mobile Apps and what services you purchase through our Website or Mobile Apps. We use analytics tools (including cookies, web beacons and other tracking technologies) to optimize the efficiency, design and quality of our Website. These tools allow us to, for example, identify and repair technical errors such as broken links that impair the Website’s functionality. Further information regarding tracking technologies is set out in section 6 (below).

5.3(d)(ii): We will process your Personal Data based on your consent or our legitimate business interests in assessing and improving our services.

5.3(d)(ii): We will process your Personal Data based on your consent, where you have provided this consent at the time of responding to a survey, or our legitimate business interests in assessing and improving our services.

5.5(a)(ii): We will process your Personal Data based on the terms and conditions of the Contest.

5.5(a)(ii): We will process your Personal Data for our legitimate interest in carrying out and administering the Contests.

5.5(b)(ii): We process your Personal Data based on your consent.

5.5(b)(ii): We process your Personal Data based on your consent or, in some cases, our legitimate interest in providing you with regular updates relating to our services, routes and fares.

7.1: We may send the Personal Data to Qatar Airways Group entities located in countries whose data protection laws may not be as extensive as those in the European Economic Area (“EEA”). If necessary, Qatar Airways ensure that adequate safeguards are in place to comply with the requirements for the international transfer of personal data under applicable data protection and privacy laws. Qatar Airways employees are authorised to access Personal Data only if needed to serve the applicable purpose and to perform their jobs.

7.1: We may send the Personal Data to Qatar Airways Group entities located in countries whose data protection laws may not be as extensive as those in the European Economic Area (“EEA”). If necessary, Qatar Airways will review the laws and practices of each recipient country and ensure that adequate safeguards are in place to comply with the requirements for the international transfer of personal data under applicable data protection and privacy laws. Qatar Airways employees are authorised to access Personal Data only if needed to serve the applicable purpose and to perform their jobs.

9: If you feel that we do not comply with applicable privacy rules you have the right to lodge a complaint with a competent data protection authority.

9: If you feel that we do not comply with applicable privacy rules you have the right to lodge a complaint with a competent data protection authority in your country of residence.