Finnair Cargo privacy policy

Hello. We at Finnair Cargo want to make sure you are onboard with us when it comes to the use of your data.

Finnair Cargo Privacy Policy (“Privacy Policy”) has been put together to inform you of how we process your personal data. This Privacy Policy addresses the informational duties placed on data controllers in article 14 of the European Union General Data Protection Regulation (Regulation (EU) 679/2016) and describes the practices and purposes of personal data processing at Finnair Cargo.

We collect, store and otherwise process personal data in connection with our services related to air cargo transport and other services we provide, as well as in connection with marketing activities. You can find more information about the processing of your personal data in each category below. We may update this Privacy Policy from time to time and we will notify you on our website if we make any significant changes.

Your privacy is our priority.

About us

CONTACT DETAILS OF FINNAIR CARGO

CONTROLLER:
Finnair Cargo Oy
Business ID 0108057-5
Address: Tietotie 9, 01530 Vantaa, Finland

CONTACT US
cargo.comms@finnair.com

Your data, your rights

HOW TO USE YOUR RIGHTS

You can use your rights as data subject by contacting us at cargo.comms@finnair.com. Please note that we may need to request additional information to confirm your identity.

We will provide you a confirmation of the actions we have taken in response to your request (for example, confirmation of deletion). We will also let you know if we cannot fulfil a certain request, as well as the reasons behind such a decision.  Making a personal data request is free of charge once every six (6) months. For additional requests during this time frame we may charge a reasonable fee to cover the administrative costs involved. We reserve the right to reject requests that are unreasonably repetitive, excessive or clearly unfounded.

RIGHT TO ACCESS

You have the right to be informed about your personal data processed by us. You may request a copy of your personal data, unless we have lawful reasons not to share this data with you or in cases when sharing the data with you would result in severe damage to your rights or the rights of others.

RIGHT TO CORRECTION

You have the right to have inaccurate or incomplete personal data about you rectified or updated. You have the right to request correction of your contact details or other personal data.

RIGHT TO ERASURE

You may ask us to delete your personal data if, for example, your personal data are no longer needed for the purposes for which they were collected; you withdraw your consent where our data processing is based only on your consent; you object to processing and there are no overriding legitimate grounds for the processing. We will erase such personal data without undue delay unless we have legal bases to continue processing such data.

RIGHT TO RESTRICT

You may also request us to restrict processing of your personal data for example when a request concerning rectification or removal of your data is pending;or if you have objected to the processing of your personal data, when clarification of the grounds for such processing is pending.

RIGHT TO OBJECT

You have the right, at any time, to prohibit us from using your personal data for direct marketing purposes, which includes profiling related to such direct marketing. You can unsubscribe from marketing communication via the “unsubscribe” link or by other means included in each marketing message.

RIGHT TO WITHDRAW YOUR CONSENT

You have the right to change your mind and withdraw any consent you previously provided to us. 

RIGHT TO DATA PORTABILITY

You have the right to receive the personal data you have given us in a structured and commonly used electronic format and to independently transmit those data to a third party.

LODGING A COMPLAINT

If you feel we have not handled your personal data correctly, you can contact the data protection supervisory authority and lodge a formal complaint.

Safeguarding your data

HOW WE PROTECT YOUR DATA

Finnair Cargo takes appropriate technical and organisational measures to ensure the security of your personal data and protect it against loss or unlawful use.

In practice this means that your personal data is protected in accordance with the sensitivity of the data. The circle of users with access to personal data is restricted on a need-to-know basis and by access controls, and processing of personal data is logged. Our information technology environment is appropriately protected and monitored, with regular updates, testing and assessment to ensure ongoing security. Our personnel are trained to comply with applicable data protection legislation as well as applicable policies and instructions.

INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred and processed outside of your home country and outside of the European Economic Area. We transfer your data responsibly. We take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which it is processed. We provide adequate protection for the transfers of personal data to countries outside of the European Economic Area based on the European Union Commission Standard Contractual Clauses or through other appropriate safeguards, such as the Privacy Shield Framework.

IF SOMETHING SHOULD GO WRONG

We do our best to keep your data safe and secure. If, however, there was a personal data breach that should endanger your privacy, we will inform you in a timely manner and in accordance with data protection legislation.

YOUR ACTIONS MATTER AS WELL

To protect your own privacy, please avoid sharing your personal data, for example login information or transport documents with others or social media. Please avoid sending for example copies of your identification documents or sensitive personal data to us by unsecured e-mails and instead use instructed web forms or other secure transfer methods provided by Finnair Cargo.

What data we process

IDENTIFICATION, CONTACT AND TRANSACTION DATA

We collect and process your personal data to provide you the services you have ordered. This includes your name and company details, location, email address and phone number. We also process your payment data such as credit card information as well as user account or registration details. When you create a personal account, or register for a service with us, we also record the information you fill out in your personal account or registration form such as name, company name, address, email and telephone number, facsimile number, date of birth, user name, and your “secret answers” to verify your account. In case you choose to share additional information, for instance for claims purposes through our customer services channels, this data will be processed by Finnair Cargo, for example customer descriptions of an event in free-text format. We also process personal data by collecting license plate numbers when you deliver cargo to our terminal. We may process information needed for providing specific services in which the customer wants to participate, such as special events, prize draws and other similar specific happenings. For this we may process information such as name and contact details.

COMMUNICATION AND MARKETING

We may collect and process your communication with us. To communicate and improve our services or to address any shipment related issues we process chat conversations, phone call recordings or any customer feedback we have received. We may collect and further process the customer’s name, address, phone number, email address and direct marketing consents and opt-outs for marketing.

Based on our contract with you

Providing the service
Our primary goal is to get your cargo to its destination as requested. This requires us to handle your identification and reservations data. For example, we need your name and other contact details for the reservation, which we may also use to inform you of any potential changes concerning the transport of your shipment.

If you have enrolled in our other services, for example trainings, we will process the data provided during that registration.

Based on our legal obligations

Complying with the legal obligations
We may process your personal data when we are under a legal obligation to do so, for instance when we are legally obliged to provide information to authorities such as customs, police or tax authorities. We may share information with authorities to prevent any crime, fraudulent activity or unethical cargo transport, such as wildlife or trophies. Based on accounting legislation we are required to store our transactions and other accounting material for the period defined by law.

Based on legitimate interest

Communication and engagement, background and analytics processes
In order to help you with any questions, collect your feedback, handle your complaints, claims and refunds we use your contact details provided to us. As part of our services we may also use your personal, contact and reservation data to provide you better customer service in disruption situations. When processing personal data, we rely on our legitimate interest in maintaining business relationships and communicating with you about our operations and our events. We may send you communication, for example emails related to services which you may be interested in and details of these communications will be processed. We may contact customers to collect feedback or for surveys. Customer feedback or survey results are used for analytics and can also be combined with other data in our database for customer experience improvement purposes. Customers may be contacted after the survey for additional information. We may also contact a select or limited group of customers to participate in testing our new products and services. Finnair Cargo processes cargo transportation related information when processing customer feedback and claims. This is done to ensure that we handle all cases fairly and we understand what has happened.

As part of running the business we may process personal data when carrying out certain background processes. For all shipments we need to make sure bookings are created in compliance with law, instructions of applicable authorities and Finnair Cargo policies. These processes cover, for example, monitoring of fraudulent activities. We keep safety records based on our legitimate interest, for example concerning potential and actual incidents related to dangerous goods. To analyse business performance, we need to analyse our traffic flows, commercial and operational performance and the related customer behaviours. To improve our processes and improve the customer experience, transactional or behavioural data may be analysed for example to evaluate needs of different customer groups to identify how we can make the journey of their shipments smoother and add value to their customer experience. We may process personal data in order to develop the quality of our services, for instance by analysing our aggregated reservations data and customer feedback.

When choosing to use your data on the basis of our legitimate interests, we carefully weigh our own interests against your right to privacy.

Based on your consent

Direct marketing
If you have given us your consent we will send you marketing material. For instance, if you have subscribed to our Finnair Cargo newsletter or other direct marketing material, your contact details will be processed to send you the requested messages. Records of these customers and the received communication will be processed and customers have the right to unsubscribe or opt out of receiving marketing messages at any point.

Digital touchpoints and cookies
Personal data such as IP address, Cookie ID and device ID are processed in connection with our digital services. We use cookies for collecting personal data for the purposes of providing service functionalities, analytics, personalisation and advertising. For more information on how we use cookies please see our cookie policy.
 

STORAGE PERIOD

We keep your personal data for as long as necessary in order for us to fulfil the purpose for which it was collected for or unless we have lawful grounds to store it for a longer period of time. The criteria we use to determine our data storage periods are the following:

  • The period of time we have an ongoing relationship with you, for example the period of time you have an active booking, you have an account with our online services or you have enrolled in one of our services.
  • Whether there is a legal obligation to which we are subject, for example certain laws, such as accounting laws, require us to keep records of your transactions for a certain period of time before we can delete them.
  • Whether the processing is necessary for the purposes of for example claims handling, litigation and regulatory investigations.

How we collect and share your data

SOURCES OF DATA

We get your data directly from you when you make a cargo booking, purchase one of our services, send an enquiry to us or enrol in one of our services, for example a training. We automatically collect personal data by collecting certain information (such as license plate numbers) when you deliver cargo to our terminal.
We may also get some information from authorities, such as customs or other third parties, such as general sales agents. We might get your information from other service providers, such as airlines if involved in realising a part of the transporting of your shipment.

SHARING YOUR DATA

We may share your personal data with Finnair group companies and other third parties such as our service partners for the following purposes:

For cargo shipping and other service process
We share your personal data with, for example, other airlines, airport operators and other service providers directly involved in your cargo shipping process. We share personal data with service providers involved in handling your cargo shipments or reservations, purchases, background or support processes and bookings. If you have booked a shipment or other our services through a third party, such as general sales agent, we may also share your personal data with them.

For legal reasons, security and fraud prevention
We share your personal data with local authorities for customs clearance or for other similar mandatory obligations. We may also share your personal data with relevant third parties if it is necessary to detect and prevent crime, fraudulent activities or security issues, or for other legal reasons.