PRIVACY STATEMENT

SkyTeam Airline Alliance Management Coöperatie U.A., a company registered in Amsterdam, the Netherlands (Chamber of Commerce registration number 34345101), whose address for visitors is at (1180 AJ) Amstelveen at Amsterdamseweg 55 (“SkyTeam”, “us”, “we”), is a global airline alliance that coordinates and provides commercial activities on behalf of and – to some extent – together with the SkyTeam Member airlines (Members) in the aviation industry. When you use our The Aviation Challenge website (the “TAC Website”), do business with us as our business partner or supplier and/or make use of our services as indicated in this Privacy Statement, it is important to us to process your personal data carefully and securely in a transparent manner. The processing of your personal data is subject to the rules of the General Data Protection Regulation (EU) 2016/679 (GDPR), and potentially to one or more EU member states’ national implementation acts of the GDPR, as well as the data protection laws and regulations of other countries (if applicable). This Privacy Statement serves to comply with our transparency obligations under the GDPR, namely to explain to you when we collect your personal data in the capacity of a controller under the GDPR, what personal data we collect, how we use such personal data, and how long we keep your personal data.

The TAC Website is provided solely to assist Users in connection with The Aviation Challenge and for no other purposes. The Aviation Challenge is an initiative of SkyTeam and its alliance members to highlight the importance of environmentally sustainable operations by SkyTeam alliance members and partner airlines and to identify potential improvements to such operations to enhance the competitiveness of such airlines individually and collectively vis-à-vis non-member airlines, including members of other alliances.

This Privacy Statement was last updated in December 2024. This Privacy Statement supersedes any previous versions of our Privacy Statement. When there are any updates, we will inform you there of in this Privacy Statement. Please check this Privacy Statement regularly for the most current version. If we make any changes that may significantly affect you as a data subject, we will endeavor to actively inform you about those changes before the changes come into effect All changes will take effect as soon as the Privacy Statement has been published on the website.

1. Who is responsible for the processing of your personal data?

SkyTeam is the controller, within the meaning of the GDPR, of the processing of your personal data indicated in this Privacy Statement.


2. what, when, why, how and for how long?





When do we collect personal data?
What personal data do we collect of you? Why do we collect this personal data?Legal ground for using your personal data?
How did we obtain your personal data?
How long do we retain your information?
If you visit our website

- If you visit our website, various cookies and similar technologies (hereinafter: “cookies”) are used. We use functional, analytical, social media and advertising cookies. When we place and read cookies, your personal data will be processed.

- Please read our Cookie Policy for more detailed information about the use of cookies. In the Cookie Table we have listed per cookie all the categories of (personal) data that will be processed subsequently, as well as the associated processing purposes and applicable cookie lifespan.

- For the functioning and optimization of the website

- To generate user statistics and to further analyze your website usage

- To integrate social media plug-ins and marketing activities, such as showing (personalized) advertisements.

- Please refer to the Cookie Table for an extensive overview

- The legal ground for processing your personal data through the functional and privacy-friendly analytical cookies is our legitimate interest to make our website and app work properly.

- For all other types of cookies, we will ask your consent via the “cookie banner”, which will be displayed when you visit our website.

- Via cookies
- Please refer to the Cookie Policy or the specific retention periods.


If you enroll and participate in the Aviation Challenge


- Personal details, such as first and last name, email address

Other (optional) information provided by you such as company name, mobile phone, job title, role, department, personal introduction, profile picture, country, province/state, city

- To get into and maintain in contact with you during the Aviation Challenge

- To know where the expertise exists within the organisation participating in the Aviation Challenge, their location and time zone etc.


- Legitimate interests. We may process your information as necessary for achieving our legitimate interests of organising the Aviation Challenge
- From yourself

We will not retain your personal data longer than is necessary for the purposes for which they are used, as mentioned under "Why do we collect this personal data?". In principle, this means that:

- In some cases, we may retain your data longer than is necessary for the purposes for which they are used, for example when we are legally obligated to retain personal data longer or when it is necessary regarding legal claims.

The data is only used for the duration of The Aviation Flight Challenge. You can delete your profile at any time by sending a request to tac@skyteam.com.

You can change or delete your personal details at any time by logging into your account.


3. Who will have access to your data?

Your information may be collected by, shared with and processed by persons working for or on behalf of SkyTeam and other users and participants of The Aviation Challenge. The profile and contact details will be visible to all Users of The Aviation Challenge.

We also use third party service providers such as IT suppliers to provide our services. Therefore, your personal data will be processed by these third party service providers. When we use services of a party who processes your personal data on our behalf, acting as a processor, we have concluded appropriate data processing agreements in line with applicable data protection laws.


4. How do we transfer your personal data outside the EEA?

The processing of your personal data may entail the transfer of your personal data to a third country that does not provide the same level of protection as within the European Economic Area (EEA). This may be the case if we share your personal data with selected third parties, with whom we have partnership agreements, e.g., our IT service provider. Where applicable, we have taken appropriate safeguards to transfer your personal data to a country located outside the EEA, if that country does not provide an adequate level of protection according to the applicable data protection laws, by relying on adequacy decisions issued by the European Commission or by entering including standard contractual clauses approved by the European Commission (with supplementary measures to the extent required).

5. How do we protect your personal data?

We are committed to ensuring that your personal data is kept secure. In order to prevent unauthorized access or disclosure, we have put in place appropriate physical, technical and organizational measures to safeguard the information we collect and process.

6. What are your rights?

As a data subject, you have certain rights concerning our processing of your personal data. You may: 


  • Request access to your personal data.
    You have the right to ask us if we are processing your personal data, and, if so, provide you with a copy of that personal data.

  • Request correction of your personal data.
    You have the right to rectify your personal data, if you believe that the personal data we have about you is incomplete or inaccurate. If we have shared your personal data with others, we will also inform them of the correction where possible.

  • Request erasure of your personal data.
    You have the right to ask us to delete or remove your personal data in some circumstances. If we have shared your personal data with others, we will inform them of the erasure where possible. Due to the way we maintain certain services, it may take some time before backup copies are erased. 

  • Request to restrict our processing of your personal data.
    You have the right to ask us to block or suppress the processing of your personal data in certain circumstances, which means that we suspend the processing of your data for a certain period of time. Circumstances which may give rise to this right include situations where the accuracy of your personal data was contested but some time is needed for us to verify their (in)accuracy. This right does not prevent us from continuing to store your personal data. We will inform you before the restriction is lifted. If we have shared your personal data with others, we will inform them of the restriction where possible.

  • Request to exercise your right to data portability.
    You have the right to obtain personal data you have provided to us in a structured, commonly used and machine-readable format in certain circumstances. This way you can use your personal data elsewhere or you can also ask us to transfer your personal data to a third party. Upon request and where this is technically feasible, we will transmit your personal data directly to the other controller. 

  • Object to the processing of your personal data.
    You have the right to ask us to stop processing your personal data, if we are relying on legitimate interests to process your personal data, except if we can demonstrate compelling legal.

7. Our contact details

Please contact us if you have any questions:

SkyTeam Airline Alliance Management Coöperatie U.A.
Postbus 350
1180 AJ AMSTELVEEN
THE NETHERLANDS

tac@skyteam.com


Version: December 2024