Finnair Cargo privacy policy

Data controller
 

Contact details of Finnair Cargo:
Finnair Cargo Oy
Business ID 0108057-5
Address: Tietotie 9, 01530 Vantaa, Finland

Contact us
cargo.comms@finnair.com

On data privacy issues you may also be in contact with Finnair Group Data Privacy Officer:
privacy@finnair.com or

Finnair Data Privacy Officer, PL 15,
01053 FINNAIR, FINLAND.

How to use your rights

You can use your rights as data subject by contacting us at cargo.comms@finnair.com. Please note that we may need to request additional information to confirm your identity.

We will provide you a confirmation of the actions we have taken in response to your request (for example, confirmation of deletion). We will also let you know if we cannot fulfill a certain request, as well as the reasons behind such a decision. Making a personal data request is free of charge once every six (6) months. For additional requests during this time frame we may charge a reasonable fee to cover the administrative costs involved. We reserve the right to reject requests that are unreasonably repetitive, excessive or clearly unfounded.

Right to access

You have the right to be informed about your personal data processed by us. You’re entitled to receive a copy of your personal data, unless we have lawful reasons not to share this data with you or in cases when sharing the data with you would result in severe damage to your rights or the rights of others.

Right to correction

You have the right to have inaccurate or incomplete personal data about you rectified or updated.

Right to erasure

You may ask us to delete your personal data, and we will erase such data without undue delay, unless we have a lawful reason to continue processing the data, such as for delivering the requested services or because of a legal obligation.

Right to restrict

You may ask us to restrict the processing of your personal data, for example when your request to correct or remove your data is pending, or if you have objected to the processing of your personal data and the clarification of the grounds for such processing is pending.

Right to object

You have the right, at any time, to object to us from using your personal data for direct marketing purposes, which includes profiling related to such direct marketing. You can unsubscribe from marketing communication via the “unsubscribe” link or by other means included in each marketing message.

Right to withdraw your consent

You have the right to change your mind and withdraw any consent you previously provided to us.

Right to data portability

You have the right to receive the personal data you have given us in a structured and commonly used electronic format and to independently transmit that data to a third party.

Lodging a complaint

If you feel we have not handled your personal data correctly, you can contact the data protection supervisory authority of your country and lodge a formal complaint.

How we protect your data

Finnair Cargo takes appropriate technical and organisational measures to ensure the security of your personal data and protect it against loss or unlawful use. Access to your personal data is restricted on a need-to-know basis and by access controls, and the processing of personal data is logged. Our information technology environment is appropriately protected and monitored, with regular updates, testing and assessment to ensure ongoing security. Our personnel are trained to comply with applicable data protection legislation as well as the applicable policies and instructions.

International data transfers

Your personal data may be transferred and processed outside of your home country and outside of the European Economic Area. The laws of these countries may not afford the same level of protection to your personal data.

In these cases, we have taken steps to ensure that appropriate and suitable safeguards are in place in order to comply with the requirements for international transfers of personal data under applicable law, such as using the European Union Commission Standard Contractual Clauses as a safeguard for the transfer of personal data outside the European Economic Area.

We may also be obliged to transfer your personal data to foreign authorities, for example to customs authorities.

If something should go wrong

We do our best to keep your data safe and secure. If, however, there was a personal data breach that should endanger your privacy, we will inform you in accordance with data protection legislation.

Your actions matter as well

To protect your own privacy, please avoid sharing your personal data, for example login information or transport documents with others or social media. Please avoid sending copies of your identification documents or sensitive personal data to us by unsecured e-mail and instead use web forms or other secure transfer methods provided by Finnair Cargo.

Identification and contact data

We collect and process your personal data to provide you the services you have ordered. As our customer, company representatives will be registered for a personal account with us. We will record the information you fill in your personal account such as company information, representative name, address, phone number, date of birth, username, and information you provide to verify your account.

Visitor information

We process information from Helsinki-Vantaa Cool Terminal visitor who are coming to collect or deliver cargo. When arriving to Finnair Cargo terminal area, we will collect and process vehicle license plate numbers, delivery person’s identification and contact information, information related to shipment such as custom documentation, airway bills, depending on the security classification of the shipper.

Service-related data

We process information related to your reservation with us, in order to deliver cargo to its desired destination. This requires us to handle identification and reservations data pertaining to our customers. This information contains customer information, AWB numbers, contract information, route and flight details, and shipment content related details such as actual content, size, volume and weight information.

Communication data

We may collect and process your communication with us. This can include customer service phone call recordings, chat history, emails, SMS messages and social media posts (controllership of social media data may rest jointly with the social media platform provider). We may also process your information in connection with satisfaction surveys and feedback forms. We also process your direct marketing-related consents and opt-outs (unsubscriptions).

Based on our contract with you or your organization

Our primary goal is to get your cargo to its destination as requested. This requires us to handle identification and reservations data pertaining to our customers. For example, we need your name and other contact details for the reservation, which we may also use to inform you of any potential changes concerning the transport of your shipment.

We use your personal data in order to help you with any questions, collect your feedback, handle your complaints, claims and refunds as necessary. We may also use your identification data to provide you with better service in disruption situations.

We may collect and update your information in relation to your service requests. Data can also be used for identification purposes when you are in contact with us.

Based on our legal obligations

We may process your personal data when we are under a legal obligation to do so, for instance when we are legally obligated to provide information to authorities such as customs, police or tax authorities. We may share information with authorities to prevent crime, fraudulent activity or unethical cargo transport, such as wildlife or trophies. We collect and report information for safety officials about incidents, for example concerning transportation of dangerous goods.

Based on accounting legislation, we are required to store our transactions and other accounting material for the period defined by law.

Based on our legitimate interest

Communication and engagement
We may process your personal data to send you service-related informational communications related to services you have purchased or registered for. When processing personal data, we rely on our legitimate interest in maintaining business relationships and communicating with you about our operations and our events.

We may engage with you to voluntarily participate in developing our services. If you have participated in a survey, the results are used for analytics and can also be combined with other data in our database, for customer experience improvement purposes. You may be contacted after the survey for providing additional information. We may also contact a selected or limited group of persons to participate in testing our new products and services.

Digital touchpoints
Personal data, such as login details and site usage logs, are processed in connection with providing you services in our digital touchpoints, to ensure your identity, to identify you across the different touchpoints and to record usage. Functional cookies are employed to collect data from sessions to ensure the functioning of our online services. For more information on how we use cookies, please see our cookie policy.

Background processes
As part of running our business, we may process personal data when carrying out certain background processes. We need to make sure our operations are processed in compliance with law and industry policies. These processes cover, for example, monitoring of fraudulent activities, such as credit card theft, false bookings, fraudulent claims, and auditing of fares and taxes.

For developing and improving our services further and to analyse our business performance, we follow traffic flows, commercial and operational performance. We process customer behaviour related information to improve our processes and customer experience.

Based on your consent

Direct marketing
Persons without customer registration may also sign up for Finnair Cargo email communication or direct marketing material. Receiving direct marketing can be cancelled by unsubscribing, using the opt-out functionality in the marketing messages.

Digital touchpoints
Functional cookies collect data from sessions in our digital services to analyse or personalize our content and services, and for marketing purposes. For more information on how we use cookies, please see our cookie policy.

Storage period
We keep your personal data for as long as necessary in order for us to fulfill the purpose for which it was collected for, unless we have lawful grounds to store it for a longer period of time. Customer information in service agreements and information provided for a reservation will be retained for 6 years, based on the period during which customer is able to file a service claim.

Sources of data

We get your data directly from you when you make a cargo booking, purchase one of our services, send an enquiry to us or enroll in one of our services, for example a training. We may also get some information from authorities, such as customs or other third parties, such as general sales agents. We might get your information from other service providers, such as airlines that are involved in performing a part of the transport of your shipment.

Sharing your data

We may share your personal data with Finnair group companies and other third parties such as our service partners for the following purposes:

For cargo shipping and other service process
We share your personal data with, for example, other airlines, airport operators and other service providers directly involved in your cargo shipping process. If you have booked a shipment or other services provided by us through a third party, such as general sales agent, we may also share any necessary personal data with them.

For security purposes, fraud prevention and due to legal obligations
We share your personal data with local authorities for customs clearance or for other similar mandatory obligations. We may also share your personal data with relevant third parties if it is necessary to detect and prevent crime, fraudulent activities or security issues, or due to legal obligations.