Mexico

  1. mx
  2. detail

The following statement provides additional information about how ANA's management of personal data fulfills the Data Protection Laws of Mexico.

Purpose of using personal information

Among the purposes set out in Part 3 and Part 8 of Chapter 1 of the ANA Privacy Policy, ANA will use the customer's personal information for the following primary purposes:

  • Reservations, ticket sales, check-in, airport services, and in-flight services with regard to air transport services.
  • Reservations, ticket sales, check-in, and airport services for interline transportation, joint acceptance of carriage, codeshare, successive carriage and consigned carriage.
  • Service provisions for ANA Mileage Club members.
  • Research and analysis of usage of ANA's service/products.
  • All operations incidental or related to purposes to the four items listed above.
  • Notification of services and products offered by ANA.
  • Response to inquiries and requests.
  • Joint use for provision of air transportation services, travel services including tours and hotels, and other products/services handled by ANA or companies that share data.
  • Joint use for delivery and transfer of data when we receive inquiries, application for use or other offers from customer's regarding products/services provided by ANA or companies that share data.

Among the purposes set out in Part 3 and Part 8 of Chapter 1 of the ANA Privacy Policy, ANA will use the customer's personal information for the following secondary purposes:

  • Development of new products and services.
  • Implementation of questionnaires concerning service and products, etc., offered by ANA.
  • Operation and management relating to the events and campaigns implemented by ANA, ANA Group companies, partner companies, etc.
  • Provision of information about the services, products, events and campaigns of ANA, ANA Group companies, partner companies, etc. as well as provision of various pieces of information through methods including direct mail, e-mail magazines, notices, and advertisements.
  • Joint use for sending of direct mail and information on products/services, and distribution of questionnaire(s) to customers, etc. by the Company or companies that share data.
  • Joint use for sales analysis, other research/studies, and development of new products/services, etc. by ANA or companies that share data.
  • Joint use for appropriate and smooth fulfillment of other transactions with customers by ANA or companies that share data.
  • Joint use for business management/internal management by the ANA Group.

Our legal basis for processing personal data

ANA protects your personal data by ensuring that it can only be used to the extent necessary for specific purposes set out in Part 3 of Chapter 1 of the ANA Privacy Policy, and will obtain your consent, where required, before processing your personal data for such purposes. Notwithstanding the foregoing, in accordance with the Data Protection Laws of Mexico, consent will not be required where:

  1. A legal provision so provides;
  2. The personal data is contained in publicly available sources;
  3. The personal data is subject to prior dissociation procedure (i.e., technical measures to dissociate individuals from data);
  4. The personal data is required to exercise a right or fulfill obligations arising from a legal relationship between the data subject and the data controller;
  5. An emergency situation exists that could potentially harm an individual's person or property;
  6. The personal data is indispensable to carry out a treatment for medical care, prevention, diagnosis, provision of health care, or management of health service, as long as the data subject is not in a position to grant consent, in the terms established by the General Health Law and other applicable legal provisions, and that such data processing is carried out by a person subject to professional secrecy or equivalent obligation, or
  7. There is a court order, resolution or mandate founded and motivated by a competent authority.

Acquisition of personal data

With regard to sensitive personal data, ANA only obtains such data if you provide it to us in relation to your air travel on ANA. The types of sensitive personal data ANA may collect includes medical and other information relating to:

  1. persons with disabilities or reduced mobility impacted by air travel.
  2. persons with medical conditions that may be impacted by air travel.
  3. persons with a serious contagious disease.
  4. pregnant women within 28 days of their due date (including the due date itself).

Disclosure and provision of information to a third party

ANA may share your personal data with third parties set out in Part 7(2) of Chapter 1 of the ANA Privacy Policy, for specific purposes set out in Part 3 of Chapter 1 of the ANA Privacy Policy, as well as for specific circumstances set out in Part 7(1) of Chapter 1 of the ANA Privacy Policy. ANA will obtain your consent, where required, before carrying out personal data transfers for such purposes.

By providing us with your personal data, and carrying out a relationship with us, you consent to the data transfers for which your consent is required. Notwithstanding this, at any time you can exercise your rights, in accordance with the following section.

Request about handling of personal data (Data Subjects Rights)

According to Mexican Data Protection Laws you, as the data subject, may exercise the rights of access, cancellation, rectification and/or opposition (ARCO), and/or rights that assist you with respect to your data, (limitation of use and/or disclosure, non-transfer or revocation of consent).

  • Access: the right to know whether your Personal data is being processed, which data is being processed, and the conditions and generalities of the processing.
    When using an automated processing system or processing of personal data without human judgment the data subject may exercise their right of access in order to know the personal data that was used as part of the corresponding decision-making process and, if applicable, the right of rectification.
  • Rectification: the right to request the correction of your personal data when, for any reason, it is inaccurate or incomplete, or when it needs to be updated.
  • Cancelation: the right to request that your personal data no longer be processed or used and that it be deleted once the applicable retention period has expired, so that it is no longer in the possession of ANA. Deletion refers to any personal data contained in ANA's files, records, and/or systems.
  • Opposition: the right to request that your data no longer be used for a specific purpose, when there is a legitimate reason to justify it, or when it is subject to automated processing without human intervention, with a significant impact.
  • Limitation of use and/or disclosure: the right to request that the use of your personal data be limited for certain purposes, or to request that it not to be disclosed to certain third parties or through certain means.
  • Revocation of consent: the right to withdraw the consent they have given to authorize the processing of their personal data. data subjects may revoke their consent for specific purposes or, in general, for all processing.
  • Right to reconsideration: the right to request reconsideration of the decision made after the rectification is complete. This right only applies when using an automated processing system or processing of personal data without human judgment.

Submission of a request to exercise a right

ANA has established the following means to receive your ARCO and other personal data rights:
https://ana-support.my.site.com/enjp/s/atmint-en?cc=jp
As soon as ANA receives your request we will respond with receipt of acknowledgement.

Copyright © ANA | ANA X