The following statement provides additional information about how ANA's management of personal information fulfills the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the "KVKK").
Data Controller
ALL NIPPON AIRWAYS LTD ("the Company") processes your personal data as the data controller, within the scope of KVKK and other applicable regulations.
Data Controller Representative:
Sistem Global Consulting Co.
kvkk@sistemglobal.com.tr
Purpose of Processing Personal Data
Your collected personal data will be processed for the following purposes:
- To facilitate flight reservations and ticketing procedures,
- To enable your flights and provide airport services,
- To carry out customer satisfaction surveys,
- To implement identity verification and security procedures as required by law,
- To communicate promotional and campaign information (subject to your consent),
- To conduct statistical analysis and performance evaluations,
- To provide transportation services.
Method and Legal Basis of Personal Data Collection
Your personal data is collected through electronic and physical means via our website, mobile application, call center, airport offices, and other channels.
| Purpose | Legal Basis |
|---|---|
| Making flight reservations and managing ticketing processes, Carrying out your flights and providing airport services to provide transportation services | Processing of personal data belonging to the parties of a contract, provided that it is necessary for the establishment or performance of the contract. |
| Implementation of identity verification and security procedures in accordance with the relevant legislation | It is necessary for the data controller to fulfill its legal obligations |
| Communicating promotional and campaign information (with your consent) | Personal data cannot be processed without the explicit consent of the data subject. |
| Storing credit card information in the ANA Mileage Club account for use in subsequent purchase transactions | Personal data cannot be processed without the explicit consent of the data subject. |
To Whom and For What Purpose Personal Data May Be Transferred
Your personal data may not be transferred without your explicit consent, pursuant to Article 8 of the KVKK. However, under Article 8(2)(b), personal data may be transferred without explicit consent if it is necessary to fulfill a legal obligation or for the performance of a contract. Accordingly, your personal data may be transferred without your explicit consent for the purposes listed below under Article 8(2)(a) of the KVKK:
- Airport operators, hotels, and transfer service providers,
- To authorized public institutions and organizations (for security, customs, and border control purposes),
- To our business partners and suppliers.
Transfer of Personal Data Abroad
In order to ensure compliance with international civil aviation regulations, records containing your personal data may be shared with IATA, ICAO, and other relevant international organizations.
Information and communication technology applications and software ("IT Systems") are used in the conduct of our business activities. The infrastructure and databases of these IT Systems are located abroad.
Due to the fact that the infrastructure and databases of the IT Systems used for the execution of business processes and communication activities are located abroad, your personal data may be transferred abroad, provided that the necessary security measures are in place and in compliance with legal regulations.
| Personal Data | Transfer Abroad |
|---|---|
| Passenger name, DOB, Passport | Yes |
| Email address, phone number, address | Yes |
| Passenger credit card details | Yes |
Your Rights as a Data Subject
As a data subject, under Article 11 of the KVKK, you have the following rights:
- To learn whether your personal data is being processed,
- If your personal data has been processed, to request information about it,
- To learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose,
- To know the third parties to whom your personal data is transferred, either domestically or abroad,
- If your personal data is incomplete or inaccurately processed, to request its correction and to request notification of the third parties to whom your personal data has been transferred,
- To request the deletion or destruction of your personal data if the reasons for processing no longer exist, even if it has been processed in accordance with the KVKK or other relevant legislation, and to request notification of the third parties to whom your personal data has been transferred,
- To object to any unfavorable outcome that occurs as a result of analyzing your processed data exclusively through automated systems,
- To claim compensation for any damages you suffer due to the unlawful processing of your personal data.
You may submit your requests regarding your rights listed above under Article 11 of the KVKK:
You may deliver it to the branch of the Company located at Tayakadın mahallesi, Terminal Caddesi, No:1, İç Kapı No: 830165, Adres No: 5296908428, Arnavutköy/ İstanbul