ANA 개인정보 처리방침

This Chapter 2 provides additional information about the handling of personal data of customers and other individuals in the European Economic Area ("EEA") and/or the United Kingdom ("UK") in accordance with EU General Data Protection Regulation 2016/679 ("GDPR") and the UK Data Protection Act 2018 ("DPA 2018") and other national and international data protection and privacy laws in the EEA and UK (collectively, "Data Protection Laws").

The controller of your personal data is ANA.

ANA protects your personal data by ensuring that it can only be used to the extent necessary for specific purposes (as set out in Part 3 of Chapter 1 of this Privacy Policy) and by requiring that there is a legal basis for each processing activity on the basis of Data Protection Laws.

You can exercise your rights free of charge (except in the case of unreasonable, excessive or repeated requests in which case we may charge a fee or refuse the request). The method for submitting a request and contact information are as follows.

We will respond without undue delay and usually within one month. We may, in some cases, ask for identification or (if you are making the request on behalf of a third party) proof of your authority to submit a request. If your request is particularly complex or you have made a number of requests, it may take longer to provide a detailed response. Please also bear in mind that there are exceptions to the rights above and some situations where they do not apply.

ANA's goods and services are provided with the assistance of other companies and organizations and often ANA will need to share personal data with third parties in order to run its business. These third parties include:

ANA sends out marketing communications from time to time to notify interested persons of news and provide details of goods and services which may be of interest to them. ANA will only do this if the recipient has consented to receive marketing or if they are an existing customer who purchased goods or services from ANA and were given the opportunity to opt-out from marketing at the time but chose not to do so.

ANA is located in Japan and many of the service providers and other organizations with whom we share your personal data will be located in jurisdictions outside the EEA and UK. It should be noted that Japan has been recognized by the European Commission as providing adequate protection for personal data.

ANA retains customers' personal data until the purpose of use is achieved. Particularly, ANA has set the retention period for personal data as follows. For most other personal data, the appropriate retention period will be determined based on the nature of the information and the purpose for having it by reference to legal and accounting requirements and our business needs.

Customers have the right to lodge a complaint on the processing of their personal data with the data protection authority having jurisdiction over their residence.

Besides Chapter 1, Chapter 3 also applies to the handling of personal information of persons residing in the People's Republic of China (hereinafter, "China") based on China's Personal Information Protection Law and related regulations (hereinafter, "PIPL etc."). In the event that any provisions of this chapter contradict those of chapter 1, the provisions of this chapter shall prevail.

A guardian's consent or permission must be obtained in the event that a customer under the age of 18 uses ANA's service. In the event that a person such as a family member applies for ANA's service on behalf of the customer, the consent of the customer (when he/she is under the age of 14, his/her guardian) to this Privacy Policy must be obtained.

For the purpose of use, ANA may handle personal information that can be classified as sensitive personal information under PIPL etc., such as information about one's passport, health condition, payment, or accommodations.
Since sensitive personal information can negatively affect the interests of customers if it is leaked or used unlawfully (for example, it is likely that individual dignity will be damaged or that personal safety and asset security will be put at risk), ANA will carefully manage such information and handle it in a lawful manner.

ANA will retain the customer's personal information until the purpose of use is achieved. In particular, ANA sets the retention period for personal information as follows.

In the event that ANA receives a request regarding the personal information it holds of a customer who is a resident of China, the request will be handled in a reasonable timeframe and scope in accordance with PIPL, etc. and Chapter 1 "Part 12 Request about handling of Personal Information". In responding to the request, ANA may confirm that it was submitted by the customer himself/herself.

China

When ANA provides personal information of customers to third parties (including the cases of provision due to shared use and business entrustment that involves the transfer of such information outside China), it will do so in accordance with PIPL, etc.

In the case of a change to the purposes of use of personal information, ANA will announce the revised Privacy Policy in advance on ANA website (www.ana.co.jp) and ANA will use personal information in accordance with the new purposes of use of personal information after obtaining consent from customers.

ALL NIPPON AIRWAYS CO., LTD.
Address: Shiodome City Center, 1-5-2 Higashi-Shimbashi, Minato-ku, Tokyo, Japan

Last updated on April 1, 2026

Besides Chapter 1, Chapter 4 also shall apply to the handling of personal information of persons residing in California, United States of America based on the California Consumer Privacy Act of 2018 as amended under the California Privacy Rights Act of 2020 (hereinafter "CCPA"). In the event that any provisions of this chapter contradict those of chapter 1, the provisions of this chapter shall prevail.

Personal information collected by ANA in the preceding 12 months or likely to be collected in the future is classified as defined in the following table. ANA uses such information for the purposes set forth in Chapter 1, Part 3 (Purpose of using personal information). It will acquire such personal information directly from customers.

ANA does not use or disclose sensitive personal information of customers for any purpose other than certain purposes permitted under the CCPA. ANA does not collect or process sensitive personal information of customers for the purpose of inferring characteristics about customers.

ANA retains customers' personal information until the purpose of use is achieved. Particularly, ANA has set the retention period for personal information as follows. For most other personal information, the appropriate retention period will be determined based on the nature of the information and the purpose for having it by reference to legal and accounting requirements and our business needs.

Customers residing in California have the following rights concerning their personal information:

Customers have the right to make a request to ANA for the disclosure of the following information regarding their personal information collected/used/disclosed by ANA within the 12 months before the date of request (hereinafter "Right to know"), up to twice in 12 months.

Customers have the right to make a request to ANA for the deletion of their certain personal information collected by ANA (hereinafter "Right to delete").

Customers have the right to request ANA to correct incorrect personal information held by ANA (hereinafter the "Right to correct").

Customers have the right to direct ANA to cease sharing their personal information with a third party (hereinafter the "Right to opt-out of sharing").

When, among the rights set out above, exercising the right to opt-out of sharing, please contact us using any of the following methods or through the link below. Once ANA receives such a request, it will be handled according to the related laws and regulations within a reasonable timeframe and manner.

"Do Not Sell or Share My Personal Information."

ANA responds to an opt-out preference transmitted through the Global Privacy Control and handles it as a valid request based on the right to opt-out of sharing. Please refer to Global Privacy Control for how to set the Global Privacy Control.

As a rule, ANA will not treat customers who have submitted such requests in a discriminatory manner, such as changing their services. Even so, please note that deletion requests may prevent customers from receiving services which they have been provided with, or may impede the provision of services that are in accordance with their wishes.

Website:

This Chapter 5 provides additional information about the collection, use, or disclosure ("processing") of personal data of customers and other individuals in the Kingdom of Thailand ("Thailand") in accordance with the Personal Data Protection Act of Thailand B.E. 2562 (A.D. 2019) ("PDPA").

The controller of your personal data is ANA.
ANA protects personal data which is collected and used by controllers (who make decisions about how and why your personal data is used) and processors (who act on the controller's written instructions) on the basis of the PDPA.

ANA protects your personal data by ensuring that it can only be used to the extent necessary for specific purposes (as set out in Part 3 of Chapter 1 of this Privacy Policy) and by requiring that there is a legal basis for each processing activity on the basis of the PDPA.
ANA may process customer personal data on one or more of the following legal basis:

You can exercise your rights free of charge (except in the case where expenses may be chargeable under the PDPA). The method for submitting a request and contact information are as follows.

(Website)
Please send the required documents via the webform listed on ANA's website.

We will respond without undue delay and usually within thirty (30) days. We may, in some cases, ask for identification or (if you are making the request on behalf of a third party) proof of your authority to submit a request. If your request is particularly complex or you have made a number of requests, it may take longer to provide a detailed response. Please also bear in mind that there are exceptions to the rights above and some situations where they do not apply.

ANA's goods and services are provided with the assistance of other companies and organizations and often ANA will need to share personal data with third parties in order to run its business. These third parties include:

ANA sends out marketing communications from time to time to notify interested persons of news and provide details of goods and services which may be of interest to them. ANA will only do this if the recipient has consented to receive marketing communications.

ANA is located in Japan and many of the service providers and other organizations with whom we share your personal data will be located in jurisdictions outside Thailand.
When transferring personal data to third parties, ANA will ensure that it complies with the requirements of the PDPA and related Japanese laws. However, please note that recipients outside Thailand may be subject to national laws which do not necessarily provide equivalent protection for your personal data. If you would like more information regarding where your personal data is stored and transferred please contact ANA using the details set out in Part 13 of this Chapter 1 ("Submission of a request for disclosure, etc.").

ANA retains customers' personal data until the purpose of use is achieved. Particularly, ANA has set the retention period for personal data as follows. For most other personal data, the appropriate retention period will be determined based on the nature of the information and the purpose for having it by reference to legal and accounting requirements and our business needs.

Customers have the right to lodge a complaint on the processing of their personal data with the Personal Data Protection Committee of Thailand.