List of recipients of personal information
When requested by the Data Subject, Qantas may provide personal information to its business partners for the following purposes:
| Information provided | Partner category | Name of partners (country/region of destination) | Purpose of use | Retention period |
|---|---|---|---|---|
| Name, contact number, email address | Credit Card schemes | VISA | PI data (name, email ID and contact number) is shared with the card schemes/UATP for Payment Transaction processing purposes | |
| Mastercard | ||||
| American Express | American Express: Korean privacy law only says that organisations shall destroy personal information without delay when the personal information becomes unnecessary owing to the expiry of the retention period or attainment of the purpose for which personal data was collected | |||
| Diners International | Diners International: all the card transactions and account data shall be retained for 5 years and will be deleted after 5 years unless there is any legal issue | |||
| UATP | UATP: Fraud - 5 Years passenger name, email and/or IP address (if provided) Authorisation - up to eight (8) months after transaction completes Settlement - up to 13 months after transaction completes Backup - up to 30 days QC data for merchant and issuer products and online chargeback system - 3 Years Compliance - may retain transaction data for up to 7 years offline (not in active database) for compliance and regulatory requirments |
|||
| Reservation Systems | Amadeus
|
PI data (name, email ID and contact number) is shared with Amadeus for flight booking purposes to provide Fraud prevention screening services. | Accertify, Cybersource, Adyen, WorldPay: two years across the board and is not dependent on market or region |
|
| Fraud Prevention Services | • Accertify • Cybersource |
(Note that Cybersource will be enabled in the future as part of 3DS 2.0) | ||
| Payment Gateway | Adyen | To process Payment Transactions | ||
| Acquiring services | WorldPay | To process Payment Transactions | ||
| Name, Frequent Flyer number, accured points, usage details of partner service | Car rentals | Hertz Rent-A-Car (Global) Avis Rent-A-Car (Global) Budget Rent-A-Car (Global) SIXT (Global) |
To verify data for points accrual calculation | Until the contract expires |
| Name, Frequent Flyer number, usage details of partner service, accrued points | Hotels | Qantas Hotels | To verify data for points accrual calculation | Until the contract expires |
| Name, Frequent Flyer number, date of birth, accrued points, usage details of partner service | Points/Shopping | Qantas Shopping | To verify data for points accrual calculation | Until the contract expires |
| Name, Frequent Flyer number, date of birth, accrued points, usage details of partner service | Bank/Insurance | Qantas Insurance | To verify data for points accrual calculation | Until the contract expires |
| Name, Frequent Flyer number, elite status, Details about accrued requested segment (flight number, on board date, booking class, destination), details about redeem request segment (flight number, on board date, booking class, destination) | Airline company | Air France (FR) Air New Zealand (NZ) Air Tahiti Nui (TN) Air Vanuatu 9VN) Aircalin (NC) Alaska Airlines (US) American Airlines (US) Asiana Airlines (KR) Bangkok Airways (TH) British Airways (GB) Cathay Pacific (CN) China Southern Airlines (CN) China Eastern Airlines (CN) China Airlines (TW) El Al (IL) Fiji Airways (FJ) Finnair (FI) Iberia (ES) Indigo (IN) Japan Airlines (JP) Jetstar (AU) KLM Royal Dutch Airlines (NL) Latam (CL) Malaysia Airlines (MY) Qatar Airways (QR) Royal Air Maroc (MA) Royal Jordanian (RJ) Solomon Airlines (SB) Sri Lankan Airlines (LK) Westjet (CA)
|
Points accrual, to provide benefits to outstanding members | Until the contract expires |
| Boarding pass (name, flight number, boarding date, itinerary, boarding time, terminal, seat number, boarding gate, zone, member information, check-in sequence, cabin class, ticket number, confirmation number, lounge, free baggage allowance | Mobile wallet | Samsung Wallet (KR) | Boarding pass information | Until the contract expires |
| Regulatory passport information | Government | Government (Immigration) of the following nations/regions: Canada United States Sri Lanka |
Advance passenger information | Until the regulation defines |
| Required items for domestic flight reservations (name, gender, date of birth) and nationality | Airport | Korea Airports Corporation (KR) | Domestic passenger identification | Service provision and retention period are in accordance with the related laws (personal information provided during check-in is discarded immediately after flight departure) |
| Flight booking information: Airline Frequent Flyer membership number, name of passenger, date of birth, phone number, email address, any SSR details | Communications and receipts | 15Below | Create and send e-tickets, receipts and travel related communications | Until the regulation defines |
| Name, Frequent Flyer number, email, PNR, offer ID and payment card data | External web service | Plusgrade Salesforce |
PI data is used to identify booking or customer, validate eligibility for Bid Now Upgrades and Neighbour Free seating, contact customer with offer and update the booking if successful. |
Where a customer has not transacted, their data is stored in encrypted format for 6 months. Where a customer has transacted, the following data is stored in encrypted format for 7 years: Name, Frequent Flyer number, email, offer ID and payment information related to cost of upgrade, taxes and currency. |