Crown Airlines (hereinafter referred to as “Company” or “We”), has the utmost sensitivity on the lawful processing of its customers personal data.

The security of our customers’ personal data is at the forefront of our work. Therefore, in order to prevent any unlawful access to personal data or leak and to ensure the secure retention of personal data relating to our customers, such data are only transferred to trusted business partners and on a minimum level, by taking necessary security measures in accordance with the legislation in force. 

Transparency is one of the most important subjects of our personal data protection program. In this respect, we have prepared this Notice in order to provide our customers with all possible information while we are processing personal data for the purposes of compliance with our legal obligations and to ensure a better customer experience. Detailed information regarding the types of personal data and the purposes for processing personal data are detailed under the “For Which Purposes Do We Process Your Personal Data?” heading. 

Another issue that we also pay close attention to is customers’ right to have control over their personal data. We implement measures to ensure that our customers manage their preferences regarding their own personal data and highly respect our customers preferences. In this regard, you may convey your requests to us by communication channels listed under section “The Exercise of Rights by the Data Subjects”, and detailed explanations regarding the matter are provided within the section named “Rights of the Data Subjects”. 

What is personal information?

Personal information is information about an identifiable individual. Your personal information includes:

• Identification number (ID) 
• Email address 
• User ID (UID) 
• Messages on social media 
• Genetic, physiological, or physical information 
• Medical information 
• Location 
• Bank details 
• IP address 
• Cookies 
• Your Name 
• Telephone number

Email address, and any other information that identifies who you are or would allow someone to contact you. Personal information only becomes known to Crown Airlines when you provide it to us, or when a third party, such as a travel agent, family member or other party books a ticket on your behalf and provides personal information to Crown Airlines with your consent.

How do we obtain your personal data? 

This Notice contains our declarations and explanations concerning the processing of personal data relating to our customers and other natural persons establishing contact with us, excluding our employees, in compliance with the provisions of the Law

We reserve the right to make changes to this Notice in order to provide accurate and up-to-date information concerning practices and regulations relating to the protection of personal data. Additionally, data subjects will be informed by appropriate means in the event of a substantial change to the Notice. 

This Notice is prepared in order to provide information concerning which personal data Crown Airlines processes within the scope of its commercial activities, the purposes for processing, the parties to whom personal data are transferred and the purposes for such transfers. This Notice covers the following channels through which personal data are collected: 

• Call center, booking offices, check-in counters, kiosks, inflight entertainment system, requests and complaints, boarding checkpoints, surveys, fairs and events; by verbal, written or electronic environments, by automatic and non-automatic means,  
• Crown Airlines website and mobile applications,  
• Agencies authorized to sell Crown Airlines products and services and sales channels on the web, social media, passenger and customer conversations, SMS channels, business intelligence, contracted merchants, business/program partners and other airlines; by verbal, written or electronic environments, by automatic and non-automatic means.  
• If you request to receive service from these channels; The website located at crownairline.ly (“Website”); software and applications provided through computers or other smart devices (“Application”); social media accounts administered by persons authorized to provide services on behalf of Crown Airlines (“Social Media”), instant messaging applications ("Messaging Platforms") that mediate the service provided by Crown Airlines.

2. Which personal data do we process? 

Personal data processed by our Company differ in accordance with the nature of the legal relationship established with our Company. In this respect, categories of personal data collected by our Company through all channels, including Digital Environments, are as follows: 

• Identification Information (personal data provided in the course of creating an account on our Website or Application, reserving a seat on a plane or benefiting from privileged services offered by Crown Airlines and its business partners such as name, surname, identification and passport number etc.)  
• Contact Information (personal data provided in the course of creating an account on our Website or Application, reserving a seat on a plane or benefiting from privileged services offered by Crown Airlines and its business partners such as e-mail address, phone number, mobile phone number, social media contact information, address etc.) 
• Location Data (location data collected by way of location-based tools such as airport directions, map view, nearest car parking space) 
• Advance Passenger Information (“API”) (personal data relating to name, nationality, date of birth, gender, the type and number of travel documents, date of issue and expiry as well as the issuing authority) 
• Information Relating to Family and Relatives (identification information, contact information, relating to data subject’s children spouse etc.) 
• Customer Process Information (personal data recorded in channels such as call centers, credit card statements, box office receipts, customer instructions including reservation, purchase, cancellation, postponement and other changes relating to an instruction or request attributable to a person) 
• Process Security Information (information relating to website password etc. provided in the course of benefiting from products and services offered in digital environments) 
• Risk Management Information (results and records of various query provided by public institutions relating to the data subject, records of security checks concerning whether you prohibited from boarding on a plane, records of address recording system, IP tracking records etc.) 
• Financial Information (credit/debit card information, bank account information, IBAN information, balance information, credit balance information and other financial information) 
• Physical Environment Security Information (entry/exit logs in Company’s physical environments, visit information, camera and voice records etc.) 
• Legal Procedure and Compliance Information (information provided within information requests and decisions of judicial and administrative authorities etc.) 
• Audit and Inspection Information (information relating to all kinds of records and processes concerning the exercise of our legal claims and rights associated with the data subject) 
• Special Categories of Personal Data(special categories of personal data processed limited to the circumstances expressly envisaged under the laws and where required for the Company’s operations and upon your explicit consent such as data relating to medical condition, allergy information, meal choice, disability information)
• Marketing Information (reports and evaluations containing information indicating preferences, taste, usage and travel habits attributable to the data subject and used for the purposes of marketing, targeting information, cookie records, data generated within data enrichment operations, records of surveys, satisfaction surveys, information and evaluations obtained as a result of campaigns and direct marketing activities etc.) 
• Request/Complaint Management Information (information and records collected in relation with requests and complaints concerning our products or services and information contained within reports regarding the conclusion of such requests by our business units etc.) 
• Audio Visual Information (photographs, camera and voice records etc.) 

Collection and use of personal information

If you would like to fly with us, book a accommodation or car, join a mailing list, apply for a job, participate in a program or enter a contest that may be offered by Crown Airlines from time to time, you will be asked for personal information as described in this policy and as stated to you at the time of collection. Personal information may be collected by us through our call centre, or by interaction with our Website, or from you in person, or about you by us from a travel agent or other party obtaining travel services for you on your behalf.

It is our policy to collect personal information about you directly from you where possible or reasonable to do so. However, there are circumstances where personal information about you will be collected from a third party obtaining travel services for you on your behalf with your consent.

Personal information provided by you or on your behalf to book flights or other travel services will generally not be provided to anyone, including a spouse, family member, friend or coworker, without your consent, or as required by law, or as otherwise provided in this privacy policy. To protect your privacy rights and personal information, and for security and legal purposes, we therefore generally cannot disclose your personal information to any individual contacting us and claiming either to be a spouse, family member, friend, co-worker or otherwise entitled to your personal information, or claiming to have your consent for us to do so, unless and until we have verified with you that you do in fact consent to our disclosure of your personal information to such specified individual. The exceptions to this are:

*We will disclose your personal information on a reasonable basis to an individual who has booked your current flight or other travel service where that individual has adequately identified themselves. We will consider that, since they previously had your consent, express or implied, to deal with us, your consent continues. Please Agent or Account Manager in Terms Of Use.

*Where an individual contacts us and provides us with your full name and booking confirmation number giving us reasonable grounds to conclude they are contacting us with your consent, express or implied, we will disclose flight information to that individual for the purposes of permitting that individual to meet your flight or be aware of delays, and other similar information. Flight information is limited to flight number, flight timing information, confirmation that you have or have not boarded a flight, and the departure and arrival locations of your journey with us. Flight information is provided as a service and convenience to you to permit meeting your flight and being aware of any delays or flights that are early. We will not provide other personal information such as home address or contact information to other individuals in these circumstances without your express consent. If you do not wish individuals to be able to obtain flight information from us, you should not share your PNR number with them.

Otherwise, we will conclude that, where an individual has your full name and booking confirmation number you have given your consent to their contacting us for your flight information. Booking confirmation number refers to the confirmation number assigned by Crown Airlines to you for a specific flight.