ai-logo

PRIVACY POLICY

AIR INDIA PRIVACY POLICY

Air India values your privacy. Our privacy policy (“Privacy Policy”) applies to all the Personal Data we gather, and you share with us when you visit our website https://ndc.airindia.com.

This Privacy Policy is issued on behalf of the Air India Limited and hereinafter referred to as “Air India”, “we”, “us”, or “our” in this Privacy Policy. Air India Limited is the controller and responsible for this website.

If you have any questions or comments, please contact our Data Protection Team / Data Protection Officer as per the details available in Section XIII of this Privacy Policy.

    1. Personal Data we collect from you

    As per Air India’s business practices, we may collect Personal Data from you. “Personal Information” or “Personal Data” means any information about an individual from which that person can be identified.

    We currently collect and process the following categories of Personal Data:

    • If shared by you:
      • (i) Full Name
      • (ii) E-mail address
      • (iii) Contact Number
      • (iv) Organization Name
    • IP Address
    • Other personal data you may share with us based on specific forms such as feedback forms.

    2. How we collect / receive the Personal Data

    We use different methods to collect Personal Data about you, including through:

    Direct Interactions: You share with us your Personal Data by registering for our API Services on our Website.

    Automated Technologies or Interactions: As you interact with our Website or our services, we will automatically collect technical data about your equipment, browsing actions, and patterns. We collect this Personal Data by using cookies, server logs, and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies. Please see our Cookie Policy for further details.

      3. Purpose of processing and Lawful Basis

      As per regulatory requirements, your Personal Data can only be processed in accordance with one of the lawful basis provided under applicable data privacy laws. Hence, we may rely on different legal basis in order to comply with the regulatory requirements.

        To Manage Access to the API Services:

        We may process your personal data to provide you with access to our APIs under the Terms and Conditions and communicate with you in connection with the service, such as changes to our terms, policies and/or other information, obtain your feedback and manage your requests.

        Legal Basis of processing for EEA/UK: We process your personal data for the fulfillment of contractual obligations, for the above listed purposes.

          For internal business purposes:

          We may process your personal data for internal business purposes including data analytics.

          Legal Basis of processing for EEA/UK: We process your personal data based on Air India’s legitimate interest, for the above purpose.

            To manage any dispute, defend our legal claims and prevent fraud:

            We may process your personal data in order to defend our claims in the court and fighting fraud.

            We may be required to disclose your personal data in case of legal disputes or if queries are raised by authorities in order to prevent, investigate or prosecute crimes including identity fraud, terrorism etc.

            Legal Basis of processing for EEA/UK: We process your personal data on the basis of Air India’s legitimate interest or compliance with legal obligations, for the above purpose.

              4. Who we share your Personal Data with

              We may share your personal data with Air India affiliates and third parties including business partners, service providers, suppliers, and subcontractors, who may process personal data for the purposes described in this Privacy Policy.

              We may also your personal data to official authorities, including law enforcement, governmental and regulatory authorities: (a) if we believe disclosure is required by any applicable law or regulation; (b) to protect and defend our rights, or the rights or safety of third parties; or (c) where it is in our legitimate interest to co-operate and share information with such authorities.

                5. How we store, retain, and erase your Personal Data

                We will retain Personal Data for as long as it is necessary to fulfil the specified purpose for which it was collected, the legal or business purposes of Air India, as described in this Privacy Policy and in line with our data retention policies, or as required by relevant laws. When erasing Personal Data, we will take commercially reasonable and technically possible measures as prescribed under applicable laws to make the Personal Data irrecoverable or irreproducible in accordance with the applicable laws.

                  6. Your Data Protection Rights

                  You have certain rights in relation to your personal data and how we process it, depending upon the jurisdiction you are in.

                    You have the following rights irrespective of the jurisdiction you belong form:

                    • Right to Access: the right to request copies of the Personal Data we hold about you at any time, or that we modify, update or delete such data. This access includes access to information about the processing, such as purpose, categories of data and recipients, duration of the processing, data subjects’ rights and appropriate safeguards in case of third country transfers.
                    • Right to Rectification: the right to have your Personal Data rectified if it is inaccurate or incomplete.
                    • Right to Erase: the right to request that we delete or remove your Personal Data from our systems.
                    • Right to Complain to Supervisory Authorities: If you wish to make a complaint or are unhappy with the way we process your personal data, you have the right to complain to the appropriate supervisory authority. However, we would suggest to first utilize our grievance redressal mechanism before reaching out to the supervisory authorities.

                    If you belong from UK/EEA region you have certain additional rights. The same have been listed below:

                    • Right to Restrict Our Use of Your Personal Data: the right to limit the way in which we can use or process your Personal Data.
                    • Right to Data Portability: the right to request that we move, copy or transfer your Personal Data to another data controller in a machine-readable format.
                    • Right to Object: the right to object to our use or processing of your Personal Data including where we use it for our legitimate interests.

                    If you belong from India, you have certain additional rights. The same has been listed below:

                    • Right to nominate another person: You have the right to nominate any individual to act on your behalf in case of your incapacity to exercise applicable rights.

                    Please contact us at data.privacy@airindia.com if you wish to make a request for exercising the above rights or if you have a grievance related to the processing of your Personal Data.

                    We will not charge you for exercising any rights provided above, unless your request is manifestly unfounded or excessive. Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why within 7 business days.

                    7. Transfer of your Personal Data

                    (a) The Personal Data that we process may be transferred to countries other than where you are based. For example, we transfer your Personal Data, where some of our processors are located. If you are based in the EU, we rely on standard data protection clauses that are approved by the European Commission for the transfer of Personal Data outside the European Economic Area.

                    (b) You can find out more information about these transfer mechanisms by contacting us.

                      8. Security

                      We strive to do our best to protect your personal data and undertake all appropriate technical and organizational measures in order to ensure the same. We constantly review our security practices to mitigate any risk arising out of unauthorized access, accidental data loss, or damage to your personal data.

                      Our security practices are in alignment with the industry best practices, including storing your account details and personal information on secure servers and conducting regular security and privacy trainings for our employees to make them understand their responsibilities in looking after your information.

                        9. Notification of Breach

                        If you suspect any misuse or loss or unauthorized access to your Personal Data, please let us know immediately by contacting us via the contact details given in this Privacy Policy as provided in section XIII of the Privacy Policy.

                          10. Changes to this Privacy Policy

                          We will post changes to this Privacy Policy and update the effective date when this Privacy Policy is updated. We may modify this policy and all modifications will be notified to you in accordance with applicable laws. You are free to decide whether to accept a modified version of this Privacy Policy or not.

                            11. Privacy Contact Information

                            If you have any questions regarding our Privacy Policy or if you need to update, change or remove information, you can do so by contacting us at data.privacy@airindia.com.

                              12. Cookie Usage

                              Air India uses cookies to improve your experience of using our website. Please refer to our Cookie Policy for additional details.

                                05 September 2024