Privacy Notice (Full version)

here You can find short version

Content:

0) General Data Protection Policy of all Severstal Group companies

1) Who is responsible for the processing of Your Personal Data?

2) Whom can You contact?

3) What Personal Data are we processing?

4) Why do we process Your Personal Data (purpose and legal basis)?

5) Based on what other obligations do we process your data?

6) What are Your rights under data protection legislation?

7) Our Privacy Principles

8) How long are Your data stored?

9) Who receives Your data?

0) General Data Protection Policy of all Severstal Group companies

* Aircompany is the part of the Severstal Group and adheres to high standards in the field of data privacy, complies with the top-level policy of the Group, which is given above. However, JSC Severstal Management is not a co-controller of Aircompany and does not receive any subjects (passengers)` Personal Data from Aircompany.

1) Who is responsible for the processing of Your Personal Data?

LLC Severstal Aircompany, legal address: 162693, Russia, Vologodskaya obl., d. Botovo, Airport (hereinafter-“Aircompany”, “we”, “us”) being a data controller, is responsible for the processing of your Personal Data within the context of offering services via this website.

Aircompany performs services on regular domestic and international flights, charter flights inside of Russia, to CIS countries and Europe. We take all the necessary technical and organizational measures to protect Personal Data of the passengers (clients) of the Aircompany, which meet requirements of the relevant international standards and the legislation of the Russian Federation and the EU.

2) Whom can You contact?

If you have any queries regarding data protection in connection with our website or the services offered by the Aircompany, please contact our data protection specialist:

(1) by e-mail avia@severstal-avia.com

or

(2) legal address of LLL“Aircompany "Severstal": 162693, Russia, Vologodskaya obl., d. Botovo, Airport.

3) What Personal Data are we processing?

We carefully and gently process your Personal Data solely to realize the possibility of providing You with the services. We process the following Personal Data:

  • surname, name, father`s name (if any), date of birth, type and number of identification document, its country of issue, gender, nationality, contact number, e-mail; place of Your departure, destination, route, date of travel;
  • several digits of the bank card number, used for payment (not full number) and cardholder name (if any);
  • in case of travelling with kid(s)- name, surname, nationality, date of birth, gender, number of identification document of Your kid(s)), document`s country of issue; the name of Your fellow traveler if Your book (buy) the tickets together in one order.

If You left an appeal (feedback, question) on the website, by e-mail or at the official address of the Aircompany, then we process those Personal Data that You could additionally voluntarily provide at Your discretion in your appeal (letter).

If You provide to us sensitive Personal Data (information about your health or disability) in order to request special convenient conditions and support during transportation (flight), You give us explicit and free consent for processing such data. Consent will be the legal basis for processing Your sensitive Personal Data.

If You are applying for the job in LLL“Aircompany "Severstal" via website We process Your Personal Data provided in Your CV. It could be surname, name, father`s name (if any), age, education, city of living, previous work places/employers, work experience, skills and hobbies. We kindly ask You to refrain from sending us any extra, unnecessary information or any data on Your health or other sensitive data (racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership or sexual life).

We also use functionally and technically necessary Cookies, so collect information on connection IP address, connection time, duration of connection during Your session on the web-site as well as analytical Cookies. We put the notification about Cookies on the bottom of Your screen during the first visit to the website and the full version of the Cookies Policy is also here under the link.

Sources of obtaining Your Personal Data: personal data is provided both by the passenger himself or his representative by filling out the ticket purchase on the Aircompany's website or through the websites of third-party services (aggregators), as well as offline at the ticket office.

4) Why do we process Your Personal Data (purpose and legal basis)?

We process Your Personal Data under the provisions of the EU General Data Protection Regulation 2016/679 (GDPR) as well as the Russian Federal Law on Personal Data (No. 152-FZ). Full list of relevant legal acts could be found in next paragraph 5.

We process Your Personal Data for the performance of the contract to which You are a party or in order to take steps at Your request prior to entering into the contract under Art. 6(1) (b) of GDPR. In particular, these purposes are:

  • issuing, selling air-tickets and ticket returns and money refund;
  • selling additional services related to Your flight/carriage;
  • sending You Your boarding pass and flight information;
  • process payments for Your booking, fulfil requests for refunds and for accounting or audit purposes;
  • providing passenger services at the airports (e.g. check-in, security check, boarding; baggage handling);
  • collection and transferring of Your data, which is obligatory due to legal regulations of local authorities and necessary for the fulfillment of Your contract;
  • processing of thanks and wishes;
  • registration of a personal account;
  • arrangement of charter flights;
  • organization of group transportation;
  • organization of additional services (insurance and additional baggage);
  • changing of the flight date.

You are obliged to provide Us Your Personal Data necessary for the ticket purchase otherwise issuing of the air ticket and further providing of flight services are impossible. We process Your data for compliance with a legal obligation to which the controller is subject, for example as a carrier for:

  • observing requirements of relevant aviation, transport, immigration, customs and tax legislation.

We also process Your Personal Data for the purposes of our legitimate interests under Art. 6(1)(f) of GDPR, in particular:

  • ensuring aviation/flight security;
  • to safeguard the Aircompany’s IT security and operations;
  • our official website maintenance;
  • for providing you with relevant information about Your booked flight;
  • for auditing purposes;
  • for fraud-monitoring, that means preventing, investigating and prosecuting criminal offences, committed with help of credit cards, etc.;
  • for the purpose of creating international aviation statistics;
  • consideration of applicants' resumes;
  • processing of complaints.

We process Your PD on the base of Your Consent for the purposes:

  • organization of assistance to passengers with disabilities;
  • consideration of applicants' resumes;
  • registration of a personal account;
  • processing of thanks and wishes.

For the purpose of contacting with You and handling Your request we process the Personal Data that You submit to our sites additionally or sent via e-mail or post mail voluntarily. We kindly ask You to refrain from sending us any extra, unnecessary information or any data on Your health or other sensitive data (racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership or sexual life).

We process Your sensitive Personal Data (information about your health or disability) in case You request for special convenient conditions and support during transportation (flight), for example, for providing a wheelchair or other special provisions. We process Your data about disability based on explicit and free consent for processing such data. Consent will be the legal basis for processing Your sensitive Personal Data (Art. 9 of GDPR).

5) Based on what other obligations do we process Your data?

We process passenger data on the basis of the legal obligations under Article 6(1) (c) of GDPR, which is connected with obligations under:

  • Federal Law of Russian Federation "On Personal Data",
  • Aviation Code of RF,
  • Federal Law of RF "On Transport Security",
  • Federal Law of RF "On Information, Information Technologies and Information Protection”,
  • requirements of tax, customs and immigration law,
  • as well as compulsory laws and bilateral agreements between countries.

To ensure aviation security, Aircompany ensures the transfer of Personal Data of aircraft passengers to automated centralized databases of Personal Data on passengers under the legislation of the Russian Federation on transport security and the legislation of the Russian Federation in the field of Personal Data, during international air transportation also to the authorized bodies of foreign states under international treaties of the Russian Federation or the legislation of foreign states of departure, destination or transit in the amount stipulated by the legislation of the Russian Federation, unless otherwise established by international treaties of the Russian Federation.

Such processing is not automated processing of Personal Data. Aircompany as any carrier transfers to the automated centralized databases of Personal Data on passengers and personnel (crew) of vehicles (ACDPDP) information on passenger transportation, including Personal Data on passengers and personnel (crew) of vehicles. This information is obtained by Aircompany:

  • during performing of registration operations in the course of processing of travel documents (for example, when booking a ticket, buying it, registering a passenger, boarding a vehicle);
  • formation of passenger lists when carrying out the carriage of passengers;
  • formation of personnel (crews) of vehicles.

6) What are Your rights under data protection legislation?

LLC "Aircompany "Severstal" notifies You of data protection rights that are guaranteed by GDPR. You have the right to:

(1) information about the processing of Your Personal Data;

(2) access to Your Personal Data - You may request to confirm whether we process Personal Data related to You and, in this case, You may request access to Personal Data about You that we process.

(3) correct Your Personal Data (rectification) - If You believe that information about You is incorrect or incomplete, You may ask us to correct Your data.

(4) withdraw consent - when we process Your Personal Data based on Your consent, You may withdraw Your consent on Your Personal Data processing at any time. Please note that withdrawal of consent shall not affect data processing that has been carried out prior to the withdrawal of consent, as well as data processing might result in a legitimate interest or obligation based on the law to proceed with Your Personal Data processing.

(5) object to processing based on legal interests - You may object to the processing of Personal Data that we process based on our legal interests. However, we shall process Your data if we have convincing reasons to proceed with data processing.

(6) erase (“to be forgotten”) the data - You may request that we delete Your Personal Data, however, not in cases, where the law requires that we store the data.

(7) restrict processing - You may limit Your Personal Data processing.

(8) data portability - You may obtain Your Personal Data in a machine-readable format and send it to another Controller (company). We shall provide a copy of the Personal Data undergoing processing. For any further copies requested by You, We may charge a reasonable fee based on administrative costs.

Under GDPR You also have the following rights:

(9) To object to any decision that significantly affects You and that has been taken solely by automated processing. The Aircompany does not process Your data automatically, in the course of decision-making Your data is always processed by a person.

(10) To exercise the above rights, please file us a written request by e-mail avia@severstal-avia.com. Generally, we shall provide an answer to Your question/request within 30 days.

Please provide the following details so that we can identify You:

Name; Postal address or E-mail address; and optionally booking code or ticket number.

If You send us a copy of your ID, please black out all other information apart from Your first and last name and address. In order to be able to process Your request, as well as for identification purposes, please note that we will use Your Personal Data under Article 6 para. 1 (c) of the GDPR.

(11) If You have a valid reason to believe that Your rights as a data subject have been violated or affected, You have the right to file a complaint with the nearest EU national data protection authority.

7) Our Privacy Principles

To comply with Your rights when processing Your Personal Data we adhere:

  • To process Personal Data on a legal, transparent and fair basis to achieve the purposes of its processing.
  • To prevent the processing of Personal Data that doesn’t meet the purposes of processing, is redundant or contained in databases, the processing purposes of which are incompatible.
  • To ensure the accuracy, sufficiency and relevance of Personal Data during its processing in relation to the purposes of its processing.
  • To store Personal Data for no longer than required by the purposes of the processing.
  • To erase or depersonalize Personal Data upon the achievement of the purposes of its processing or in case it is not necessary to achieve these purposes anymore.
  • To take reasonable steps to make sure no unauthorized person accesses Your Personal Data.

We declare the absence of automated decision making or profiling on the base of Your personal data.

8) How long are Your data stored?

Your Personal Data is erased as soon as it is no longer required for the purposes stated, in any way no more than 3 years:

  • for the performance of the contract – during the flight contract and 3 years after (limitation of action period);
  • for hiring – during all steps of communication (job interview) until the final decision to hire or to reject the candidate;
  • for giving feedback (submitting claim) - during the feedback (claim) consideration;
  • for the compliance with a legal obligation (law requirements)- during the period, specified in the legal act;
  • for auditing purposes, fraud-monitoring and of creating international aviation statistics- not more than 3 years;
  • sensitive data about Your disability- only during the period of providing You special equipment (provisions) for smooth and comfortable flight and staying at the airport.

We stop to process Your Personal Data upon Your written request, that You can submit us at any time by e-mail: avia@severstal-avia.com or legal address of LLС “Aircompany "Severstal": 162693, Russia, Vologodskaya obl., d. Botovo, Airport.

However, we must continue to store Your data, if it is required by compulsory applicable law, set by the legislator or supervisory authorities, which may arise from the Criminal Code of RF, Tax Code of RF or Money Laundering Law of RF, Civil Code of RF and Civil Procedure Code of RF (for example, for the purpose of exercising or defending against legal claims), etc.

9) Who receives Your data?

LLC Severstal Aircompany processes Your data accurately and transfers it only to those persons ‘who need to know’ in order to perform services for You and observe compulsory legislation.

We may share Your Personal Data with other controllers (i.e. third parties that process Your Personal Data for their own purposes) if we are required to do so by law or court order Personal Data. Such controllers could be:

  • customs, immigration and border authorities of airports;
  • service providers for ground handling services and other additional related services;
  • state/governmental bodies, law enforcement agencies (for example, courts, police or other investigation authorities);
  • tax authorities;
  • сredit and charge card companies/banks;
  • service providers, mailing services.

We transfer Your Personal Data in a safe way to our service providers to issue tickets. All service providers must observe Your data protection rights and apply the best technical and organizational data security measures.

We notify You, that using our web-site, booking or buying tickets You transfer Your Personal Data to Russian Federation. According to the opinion of the European Commission based on Article 45 of GDPR, it is a country that does not provide an adequate level of data protection.

Anyway, we provide You all rights and guarantees, specified under GDPR and process Your Personal Data gently on the basis of the declared principles mentioned above. We will implement safeguards so that Your personal information continues to be protected to the standards set out in this Privacy Policy.

If You have any further questions, do not hesitate to contact us: by e-mail avia@severstal-avia.com.

Last updated on 24.11.2022.

Наверх
xs
sm
md
lg
xl