Alaska Airlines Privacy Notice

Last updated: May 23, 2018 | Ver el aviso de privacidad en espa??ol

A quick word about privacy

Your privacy is important to us. This information highlights a few of the key points from our full Privacy Notice (updated May 23, 2018), which provides more detail about the global privacy practices of the Alaska Air Group: Alaska and Horizon Air.

What is "personal data" ?

"Personal data" means information about a person that can be linked to that person. For example, an identifiable individual???s email address, travel record and credit card number are personal data.

How we collect personal data

We collect personal data when you interact with us in-person (such as during travel) or through other online or offline channels, such as our websites, apps, in-flight entertainment systems, and call centers. We also receive personal data collected by our affiliates, partners, loyalty program participants, service providers, travel agents, other airlines, and others who are involved in your travel experience, as well as other third parties.

How we use and disclose personal data

We use and disclose personal data to provide and improve travel and other services, to communicate with you (including through respectful marketing), to protect our company and others, to comply with law, and as otherwise described in our more detailed Privacy Notice.

Your rights and choices

You can log into your "My account" or Mileage Plan??? account to access and update certain personal data and to adjust certain privacy preferences. Where appropriate, certain communications (such as marketing emails) also contain unsubscribe links or other tools for adjusting your preferences. Our detailed Privacy Notice has more information about these options. You may also contact us as described below for help or to exercise any other rights that you may have under applicable data protection law. These rights vary depending on where you reside and other factors.

How to contact us

For more information about our privacy practices, you can review our full Privacy Notice or contact us as described below. You can also use this contact info to make requests about your personal data or to provide us with a complaint or question.

Full Privacy Notice


WHO WE ARE

This is the main Privacy Notice for the Alaska Air Group airlines: Alaska Airlines, Inc. and Horizon Air Industries, Inc. Under applicable law, Alaska Airlines, Inc. ("Alaska") is considered the "data controller" of the personal data these companies handle under this Privacy Notice. In other words, Alaska is responsible for deciding how these companies collect, use and disclose this data. Alaska's contact information appears at the end of this Privacy Notice.


WHAT THIS PRIVACY NOTICE COVERS

This Privacy Notice applies to the Alaska websites and apps that link to this Privacy Notice, as well as to Alaska's own privacy practices in connection with our services. For that reason, this Privacy Notice does not cover everything related to our services, even if Alaska logos and other branding are involved. For example:

  • When you arrange travel on our airlines through third parties (such as travel agents, other airlines, search engines and travel websites) those third parties' own privacy policies apply to their own handling of all the personal data they collect, and Alaska will handle the personal data that Alaska receives from them or you under this Privacy Notice. If you start to make a booking on a third-party website and it transfers you to us to complete the booking, the travel website still is responsible for all of the data that it collected from you, and Alaska is responsible for Alaska's handling of the data Alaska receives.
  • Online bookings for cars or hotels managed by our partners or unrelated third parties and, in either case, are subject to their privacy policies.
  • mileageplanshopping.com, mileageplan.rewardsnetwork.com, points.com and similar websites are managed by third parties and are subject to their own privacy policies.
  • Trip insurance is provided by Allianz or other third parties, and their handling of personal data is subject to their own privacy policies.
  • In-flight internet service is subject to the wi-fi provider's privacy policy.
  • Alaska Mileage Plan???-branded credit cards and related financial products are provided by Bank of America (for U.S. residents) and The Toronto-Dominion Bank (MBNA, for Canadian residents). Their handling of personal data (including to assess your application and administer the card) is subject to their own privacy policies. When they share personal data with us (such as to coordinate eligibility for Mileage Plan??? miles based on card usage), we handle that limited data pursuant to this Privacy Notice.
  • This Privacy Notice does not cover our human resources activities, other than our online Careers pages that collect data for recruiting purposes.

WHAT IS PERSONAL DATA

"Personal data" means information about a person that can be linked to that person. For example, an identifiable individual's email address, travel record and credit card number are personal data.

HOW WE COLLECT PERSONAL DATA

We collect personal data at the airport (such as at our ticket counters and kiosks) and through other online or offline channels, such as our websites, apps, in-flight entertainment systems, and call centers. We also receive personal data collected by our affiliates, partners, loyalty program participants, service providers, travel agents, other airlines, and others who are involved in your travel experience, as well as other third parties. We may combine the personal data we receive from any of these sources.

CATEGORIES OF PERSONAL DATA WE HANDLE

We handle the following types of personal data:

  • Contact information, such as name, postal address, telephone number, and email address
  • Travel information, such as flight, hotel and vehicle reservation information, as well as confirmation codes and e-ticket numbers
  • Data related to special requests or needs (such as dietary requests, wheelchair use during travel, or other medical needs)
  • Birth date and gender
  • Transportation Security Administration (TSA) Redress Number and Known Traveler Number
  • Payment information, such as credit card number and expiration date
  • Gift card and travel certificate information, such as card code and PIN number
  • Mileage Plan??? number and other awards or loyalty program numbers
  • Transactional and online activity data related to points earned through Mileage Plan??? partners
  • Records of your communications with us (for example, we record all calls to our call center)
  • The location of the device on which you install our app or access our website
  • Fingerprints: At some locations, we may let you use your fingerprint for things like accessing our airport lounge. Participation is completely optional. If you enroll, our system will scan your fingerprint, take certain measurements of it, and convert these measurements into an identifying code. We delete the initial image but retain the identifying code based on the measurements. We can't work backwards from this information to reproduce an image of your fingerprint, but the next time you scan your fingerprint, we'll repeat the measurement process and compare the identifying code to confirm your identity.
  • Job applications: Information about your education, work and military history, citizenship or legal work eligibility status, and other information relevant to specific jobs for which you wish to apply, such as whether you are at least 18 years of age.
  • Data collected through cookies and similar technology: We and third parties use cookies (technology that reads and writes data on your browser) and other technology to collect data through automated means when you visit our websites or if you have installed our apps. This data is used for marketing, analytics and other purposes described in this Privacy Notice. For more details, including certain opt-out options, visit our Cookie Policy .

HOW WE USE YOUR PERSONAL DATA

The specific uses of information we collect will depend on factors including the nature of the information, the purpose and context of the collection, and applicable law. Uses include:

  • Providing our services
  • Processing, evaluating, and responding to your requests, inquiries, and applications
  • Contacting you (such as by text message, email, prerecorded or automated phone calls, live phone calls, mail, push notifications, or messages on third-party platforms):
    • to provide transactional information (such as updates about purchased travel);
    • for marketing purposes; or
    • for any other purpose described in this Privacy Notice
  • Administering contests, sweepstakes and events
  • Determining appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites
  • Measuring and managing the effectiveness of our advertising and marketing
  • Conducting surveys, and performing market research and data analytics
  • Creating aggregated or otherwise anonymized data, which we may use and disclose without restriction
  • Evaluating your job application and contacting you regarding possible employment
  • Verifying your identity, protecting against and preventing fraud, unauthorized activity, claims and other liabilities, and managing risk exposure (for example, monitoring our wi-fi networks for purposes such as security, abuse prevention and network management)
  • Complying with and enforcing applicable legal requirements, industry standards and our policies and terms, such as our terms of use and contract of carriage
  • Operating, evaluating, and improving our business in other ways

HOW WE SHARE YOUR PERSONAL DATA

How we share information collected in a particular situation will depend on factors including the nature of the information, the purpose and context of the collection, and applicable law. Subject to such factors, we may share information for the purposes described above in the "How we use your personal data" section and as described below.

  • We share personal data within the Alaska Air Group companies.
  • We share personal data with other travel and hospitality companies. For example, when you purchase travel from us that will be provided by another airline with whom we have a code-sharing agreement, we share personal data with the airline.
  • We may disclose personal data about you (i) if we are required to do so by other laws or legal process, (ii) to law enforcement authorities under appropriate circumstances, or (iii) when we believe disclosure is necessary or appropriate to prevent harm or loss or in connection with an investigation of suspected or actual illegal activity. For example, for flights to, from, within or over the U.S., the TSA Secure Flight program requires Alaska to collect and provide the TSA with each passenger's name, birth date, gender and, if available, Redress Number and Known Traveler Number.
  • We share personal data with companies that assist us with the uses and disclosures of personal data described in this policy. Examples include data backup companies, email service providers, companies that provide urgent medical assistance to travelers, travel agents, and companies that target advertisements.
  • We share personal data with joint marketing partners.
  • We share personal data with Mileage Plan partners, such as companies with whom you may earn or use miles.
  • We may transfer personal data in connection with a business sale, merger, consolidation, change in control, transfer of substantial assets, bankruptcy, liquidation or reorganization, or as part of pre-transaction review in relation to these transactions. Whether the recipient of data in these cases will handle the data pursuant to this Privacy Notice depends on applicable law and other factors.
  • We may allow you to connect your Alaska account with a third-party system, or to authorize a particular third-party website, application or service to access certain data we hold about you. For example, if you log in through an authorized third-party app that allows you to view your Mileage Plan??? account, we may share personal data with the operator of the app. Such operators' use of the information may be subject to their own privacy policies.
  • Some third parties' embedded content or plugins on Sites, such as Facebook "Like" buttons on our websites or apps, may allow their operators to learn that you have visited or interacted with us, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

Alaska is based in the United States and has locations in other countries. The recipients of the personal data disclosures described in the "How we share your personal data" section above may be located in the United States or elsewhere in the world. Privacy laws in these countries may not provide protections equivalent to those of your country of residence, and your government may or may not deem such protections adequate.

OUR LEGAL BASES FOR HANDLING YOUR PERSONAL DATA

The laws in some jurisdictions require companies to tell you about the legal ground they rely on to use or disclose your personal data. To the extent those laws apply, our legal grounds are as follows:

  • To honor our contractual commitments to you: Much of our processing of personal data is to meet our contractual obligations to our customers, or to take steps at customers' request in anticipation of entering into a contract with them. For example, we handle personal data on this basis for some of our reservation, ticketing and boarding processes, and for some aspects of our management of the Mileage Plan??? program.
  • Consent: Where required by law, and in some other cases, we handle personal data on the basis of your implied or express consent. For details about when and how we use consent under Mexican law (which are different from our practices outside Mexico), please see the Additional Information for Residents of Mexico section below
  • Legitimate interests: In many cases, we handle personal data on the ground that it furthers our legitimate interests in commercial activities such as the following in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals:
    • Providing a safe and enjoyable travel experience
    • Customer service
    • Marketing
    • Protecting our customers, personnel and property
    • Analyzing and improving our business
    • Processing job applications
    • Managing legal issues
  • We may also process personal data for the legitimate interests of our business partners, such as to coordinate loyalty programs, facilitate code-sharing relationships with other airlines or assist with marketing.
  • Legal compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations (such as our obligation to share data with the TSA through the Secure Flight program described above).
  • To protect the vital interests of the individual or others: For example, we may collect or share personal data to help resolve an urgent medical situation.

HOW LONG WE KEEP PERSONAL DATA

We generally retain personal data for so long as it may be relevant to the purposes above. To dispose of personal data, we may anonymize it, delete it or take other appropriate steps. Data may persist in copies made for backup and business continuity purposes for additional time.

CHILDREN'S PRIVACY

Our websites and apps are not directed to individuals under 16 years old. As appropriate under applicable law, parents or legal guardians with questions or requests regarding their children's personal data may contact us as described below.

YOUR RIGHTS AND CHOICES

You can update certain information and make certain privacy choices by logging in to the relevant portions of Alaska or third-party websites and apps. For example:

  • If you have an online account at alaskair.com, you can login and visit the "My info and subscriptions" and "Preferences and notifications" sections of the My Account screen.
  • To view and manage notifications and preferences relating to our apps, visit the settings menu of both the app and of your operating system. For example, you can follow those steps to disable or adjust precise geolocation, biometric (such as Apple Touch ID??? in our iOS app) or other features in our mobile apps.
  • To remove or delete our Facebook apps from your account, follow the instructions at https://www.facebook.com/help/170585223002660 "This indicates a link to an external site that may not meet accessibility guidelines.".

Additional options are available:

  • You also can unsubscribe from certain emails by clicking the "unsubscribe" link they contain.
  • You can cancel your participation in the fingerprint identity verification service at an enrollment station or by contacting us as described below.
  • You can opt out from certain cookie-related processing by following the instructions in our Cookie Policy below.
  • Under U.S. law, we must deny boarding or take other steps when a ticketholder on a flight to, from, within or over the United States appears in certain databases maintained by the U.S. government. For inquiries or to resolve problems relating to your possible inclusion in such a database, you may contact the Department of Homeland Security Traveler Redress Inquiry Program (DHS TRIP) "This indicates a link to an external site that may not meet accessibility guidelines.". You may also contact us for confirmation that the boarding denial or other step is not the result of an error in our records or processes.
  • You can request to opt out of receiving prescreened offers of credit and insurance from Bank of America (a provider of Mileage Plan???-branded cards) and certain other companies by calling toll free 1-888-5-OPT-OUT (1-888-567-8688).
  • In addition, individuals in the European Economic Area, Canada, Mexico, Costa Rica and some other jurisdictions outside the United States have certain legal rights to obtain confirmation of whether we hold personal data about them, to access personal data we hold about them (including, in some cases, in portable form), and to obtain its correction, update, amendment or deletion in appropriate circumstances. They may also object to our uses or disclosures of personal data, request a restriction on its processing, or withdraw any consent, though such actions typically will not have retroactive effect. They also will not affect our ability to continue processing data in lawful ways (for example, if you opt out of the use of your telephone number for direct marketing, we might still decide to contact you by phone regarding an urgent travel situation).
  • For example, individuals in the European Economic Area have the right to opt out of all of our processing of their personal data for direct marketing purposes. To exercise this right, they may contact us as described at the end of this Privacy Notice.
  • Notice to California Residents: Subject to certain limits under California Civil Code ?? 1798.83, if you are a California resident, you may ask us to provide you with (i) a list of certain categories of personal data that we have disclosed to certain types of third parties for their direct marketing purposes during the immediately preceding calendar year and (ii) the identity of the third parties that received certain personal data from us for their direct marketing purposes during that calendar year.

To exercise any of the above rights or choices (or any other rights under applicable law), please contact us as described at the end of this Privacy Notice. Residents of Mexico can find more detail on this and other topics in the Additional Information for Residents of Mexico section below.

The rights and options described above are subject to limitations and exceptions under applicable law. In addition to those rights, you have the right to lodge a complaint with the relevant supervisory authority. However, we encourage you to contact us first, and we will do our very best to resolve your concern.

UPDATES TO OUR PRIVACY NOTICE

We may change this Privacy Notice to reflect changes in the law, our data handling practices or the features of our services, websites and apps. The new version will be posted at alaskaair.com. We will indicate at the top of the notice when it was updated. Where required by applicable law, we will apply changes only with your consent.

COOKIE POLICY

On our websites and apps, we and third parties may collect certain information by automated means such as cookies, Web beacons, JavaScript and mobile device functionality. This information may include unique browser identifiers, IP address, browser and operating system information, device identifiers (such as the Apple IDFA or Android Advertising ID), geolocation, other device information, Internet connection information, as well as details about individuals' interactions with websites and apps.

We and third parties may use automated means to read or write information on users' devices, such as in various types of cookies and other browser-based or plugin-based local storage (such as HTML5 storage or Flash-based storage).

Cookies and local storage are files that contain data, such as unique identifiers, that we or a third party may transfer to or read from a user's device for the purposes described in this Privacy Notice, such as recognizing the device, service provision, record-keeping, analytics and marketing.

You may be able to set your web browser to refuse certain types of cookies, or to alert you when certain types of cookies are being sent. Some browsers offer similar settings for HTML5 local storage, and Flash storage can be managed here. However, if you block or otherwise reject our cookies, local storage, JavaScript or other technologies, certain websites (including our own websites) may not function properly.

In some cases, we facilitate the collection of information by advertising services administered by third parties. The ad services may track users' online activities over time by collecting information through automated means such as cookies, and they may use this information to show users ads that are tailored to their individual interests or characteristics and/or based on prior visits to certain sites or apps, or other information we or they know, infer or have collected from the users. For example, we and these providers may use different types of cookies, other automated technology, and data (i) to recognize users and their devices, (ii) to inform, optimize, and serve ads and (iii) to report on our ad impressions, other uses of ad services, and interactions with these ad impressions and ad services (including how they are related to visits to specific sites or apps).

Alaska complies with the DAA Self-Regulatory Principles for Online Behavioral Advertising: to learn more about interest-based advertising generally, including how to opt out from the targeting of interest-based ads by some of our current ad service partners, visit aboutads.info/choices  "This indicates a link to an external site that may not meet accessibility guidelines." from each of your browsers. For controls specific to advertising and analytics services offered by Google, click here "This indicates a link to an external site that may not meet accessibility guidelines." and here "This indicates a link to an external site that may not meet accessibility guidelines." from each of your browsers. If you replace, change or upgrade your browser, or delete your cookies, you may need to use these opt-out tools again. We do not respond to browser-based do-not-track signals. Please visit your mobile device manufacturer's website (or the website for its operating system) for instructions on any additional privacy controls in your mobile operating system, such as privacy settings for device identifiers and geolocation.

ADDITIONAL INFORMATION FOR RESIDENTS OF MEXICO

For residents of Mexico, in the case of a conflict between the following provisions and the rest of the Privacy Notice, the following provisions will apply.

These provisions apply only to our operations in Mexico. References below to consent, rights, and legal relationship refer to those concepts under Mexican law.

We do not use or share personal payment or financial information except in connection with the processing of payments or where there is another legal basis.

All of our uses and disclosures of personal data create or are necessary for the legal relationship between you and us, except for the following:

  • Contacting you (such as by text message, email, prerecorded or automated phone calls, live phone calls, mail, push notifications, or messages on third-party platforms) for marketing purposes
  • Determining appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites
  • Measuring and managing the effectiveness of our advertising and marketing
  • Conducting surveys, and performing market research and data analytics

Transfers of personal data that we make for those purposes will depend on your consent. We may assume that you consent to these uses and transfers of personal data (for purposes of the Ley Federal de Protecci??n de Datos Personales en Posesi??n de los Particulares) if you do not object after we have made this Privacy Notice available to you. (If we have made the Privacy Notice available to you only indirectly, we will wait five working days before making this assumption.)

To object or withdraw consent to our uses and transfers of personal data at any time, or to exercise your rights of access, correction, deletion and objection regarding our handling of your personal data, you can contact us as described in the "How to contact us" section above or (where applicable) use the opt-out options described in the "Your rights and choices" section above. However, if you withdraw your consent for us to process your personal data for anything other than the purposes mentioned above, then in some situations we may not be able to provide the service, though we may still engage in certain processing authorized by law. When you contact us to exercise these rights, we may require you to confirm your identity (such as by providing your address and a copy of government-issued identification) before processing your request. If you make the request through a legal representative, you must also present the power of attorney and a copy of the representative's government-issued identification.

We will inform you of the decision regarding your request within 20 business days from the date of your request. If your request is granted, it will be made effective within 15 business days of our response. With respect to a request for access to your personal data, we will send you a response by email, postal mail or other means of communication.

HOW TO CONTACT US

To update your personal data or your preferences, to exercise your rights under privacy law, or to raise a privacy concern, or to make a data-related request, please contact our Data Privacy Office at aagprivacy@alaskaair.com or at the mailing address below:

Data Privacy Office
Alaska Airlines, Inc.
P.O. Box 68900 - SEAES
Seattle, WA 98168

For basic requests (like a change of address), you can also reach our customer care representatives at the international contact number in your country.