-
Who is responsible for your Personal Data
For ease, when we talk about “we” or “us” or “our” or “easyJet”
or
“group companies”, we mean any or all of these companies:
- easyJet plc. is the Data Controller for the easyJet investors relation website: easyjet.com
- easyJet Airline Company Limited is the Data Controller for the easyJet flights Media Centre
website: easyjet.com/en/news
- easyJet Holidays Limited is the Data Controller for the easyJet holidays Media Centre
website: easyjet.com/en/holidays/media-centre
-
How do We Process Your Personal Data?
- When you navigate on our website
When you use our website or app, we collect some Personal Data through cookies and similar technologies.
Some cookies are necessary to maintain our services and cannot be switched off, while some are used to
provide you
with more personalised content from easyJet and other third-party companies as you navigate easyJet’s
websites
and across the internet. You will receive this personalised content if you agreed to this when
setting your
cookie preferences.
If you have agreed to personalization and advertising cookies and have also agreed to receive marketing
from easyJet,
We may also contact you based on your browsing of Our website or if you have gotten part way through
booking but
haven’t completed it.
To find out more about easyJet’s use of cookies, please see our Cookie Notice.
- Communications and Invitations
As part of our media or investor relation activities, we may contact you by email, text or phone call to
share with
you any communication, update, newsletters, alert, and/or invitations to events related to easyJet
related to our
financial results, important news about the easyJet group of companies, new partnerships, new products
or services,
new bases and destinations, or other news related to easyJet.
To do so we might collect personal information directly from you when you create an account or sign up to
our alert
service. You can unsubscribe from our alert services at any time, either by contacting us directly, by
clicking on
the unsubscribe link or alternatively by managing your alert preferences on your account.
We may also collect your personal data on press relation media list and journalist database provided by
third-party
suppliers (such as, Vuelio, Cision…). You may object at any-time from receiving such communications from
us
by contacting us directly.
For more information about your data protection rights, please see the section Your data
protection
rights.
Process
|
Personal Data
|
Lawful Basis
|
Retention
|
Creating an account or signing up to our alert service
|
Name,
Surname
Country
email address
phone number
password
occupation
employer
news preference
|
Consent
|
While your account is open, or after a period of inactivity of 3 years
|
Storing your consent for receiving our press alerts, alert messages, communications and
newsletter
|
Your consent
|
Legal obligation
|
While your account is open, or after a period of inactivity of 3 years
|
News updates, communications, updates, newsletters, alerts and invitations to events.
|
Name,
Surname
email address
phone number
password
occupation
employer
news preference
|
Consent – where you created an alert account with us.
Legitimate Interest – where we obtain your personal details from a third-party press
relation
media list and journalists database
|
3 years
|
- Participation to an event
Where you register or attend any of our events, we process your personal information as part of the
organisation and
management of the event. We will use your personal data to manage attendance and provide entry to the
event.
We may also share some of your personal data with our event manager and hospitality and/or catering
provider (if
any), in order to organise the event and provide any special assistance you may require.
Process
|
Personal Data
|
Lawful Basis
|
Retention
|
Managing the event registration and organising the event
|
- Name
- Contact details
- food allergy
- dietarian requirements
- Any special assistance you may require
|
Consent
|
3 years from date of the event
|
Managing entry and participation to the event
|
- Name
- Contact details
- food allergy
- dietarian requirements
- Any special assistance you may require
|
Consent
|
3 years from date of the event
|
- Videos, Pictures and statement we use for our publications
During our events we may have photographers and cameras, to take pictures and recordings of the event for
our media
or investors publications. We will aim to take pictures of the event in general and key speakers. Please
do let us
know if you don’t want to be on any photos, videos or recordings during these events.
Where you give us your express consent for taking pictures, statement, videos or recordings of yourself,
we may use
pictures, videos or recordings of yourself during the event to promote the event on our press relation
and/or
investors websites, social media, local press, newspapers, radios and TV news programmes. We may also
share your
personal data: with other companies of the easyJet group.
Process
|
Personal Data
|
Lawful Basis
|
Retention
|
Taking pictures, videos, statements, comments and recordings of the event
|
Picture
Videos
Recordings
Statement
|
Legitimate Interest
|
1 years from date of the event
|
Managing your consent for the taking pictures, videos or recordings of yourself at the event
|
Name
Surname
Contact details
Your consent
|
Consent
|
1 years from date of the event
|
Promoting the event on our press relation and/or investors websites, social media, local
press,
newspapers, radios and TV news programmes.
|
Picture
Videos
Recordings
Statement
|
Consent
Legitimate Interest
|
1 years from date of the event
|
- Feedback after an event
After an event, we may contact you to participate in feedback in relation to your attendance to our
events which may
include surveys, interviews, and other forms of engagement. These are conducted by us or through our
partners and
are entirely voluntary to participate in. More information about what personal data may be collected as
part of this
engagement will be provided in the invitation to participate.
Process
|
Personal Data
|
Lawful Basis
|
Retention
|
Invitation to surveys
|
- name
- email address
- event history
|
Legitimate interests - Improving easyJet’s events
|
3 years
|
Participation in surveys
|
- Your comments
- feedback rating
|
Consent
|
3 years
|
-
Sharing Personal Data
We will never sell your data and we will disclose it only as described below:
Where we don’t own the website domain, we share users' personal data with companies that host and manage
websites on our behalf. For example, our easyJet Plc. investor relations website is hosted and managed on our
behalf
by Q4 Inc.
In addition, we may share users' information with other companies within our group of companies. If another
company
acquires all or substantially all of easyJet’s business and/or assets, we may disclose your data to this
company to the extent this is necessary for such acquisition and for business continuity purposes. Finally, we
may
disclose your personal data where we are required by law to do so.
Through our website we also provide links to other websites (for example easyJet's career
portal) or Social Media
platforms which are subject to separate privacy notices and are not controlled by easyJet. Please be aware that
this
Privacy Notice does not apply to such websites and easyJet is not responsible for your information collected
through
these websites.
-
How do we protect your personal data?
We are committed to protecting the personal data we hold and we have implemented appropriate technical and
organisational measures against unauthorised, accidental or unlawful access, loss, destruction or damage of such
data.
In addition, we only allow access to your data to our employees, agents, contractors or
other parties who have a
business need to know. When we trust third parties to process your data on our behalf, we require that they
protect
your personal data the same way we do and that they comply with appropriate security standards.
-
International Data Transfer
Most of your personal data are collected and processed by in the United Kingdom (“UK”).
However, some of our suppliers or their sub-processors may be located outside the UK or European Economic Area
(the
European Union and Iceland, Liechtenstein and Norway, also referred as “EEA”) and your Personal Data may
be accessed by and processed outside the UK or the EEA in order to support easyJet Engineering’s business
operations.
Where your personal data are transferred outside of the UK/EEA, we require that one of the following appropriate
safeguards is in place, in accordance with data protection laws:
- there is a decision by the UK Secretary of State for Digital, Culture, Media and Sport and/or the European
Commission that the country to which our customers’ data is transferred provides an adequate level of data
protection; or
- in the absence of such decision, the contracts that we have in place with these suppliers include the
European
Commission’s Standard Contractual Clauses and the UK International Data Transfer Agreement (IDTA);
- If data is transferred to a US company, in absence of the European Commission’s Standard Contractual
Clauses, we aim to ensure that such company participates in the EU-US Data Privacy framework.
- Your data protection rights
Data protection laws give you specific rights in relation to your personal data and we want to make it easy for
you
to exercise these rights.
The Right to be Informed and have Access. You are entitled to know whether we hold your personal
data and if so, receive a copy of your personal data.
The Right to Data Portability. You have the right to receive some of your personal data in a
portable and reusable format.
The Right to Rectification. If you believe that we hold incorrect or incomplete information
about
you, please let us know and we will aim to correct it.
The Right to Erasure. Where we rely on legitimate interests to process your personal data you
can
make a request to delete your personal data and we will review this.
The Right to Restrict Processing. In certain circumstances, you may ask that we continue to
store
your personal data but not use it.
The Right to Object. Where you believe you have reasons to object to the use of your personal
data,
you can make an objection request and provide us with the details of why you believe we should stop using your
personal data.
The Right to Revoke Consent. Where we process your personal data based on your consent, you can
withdraw your consent at any time:
- For the easyJet investors relation website to unsubscribe from the Alert service by
accessing
your account or by clicking on the unsubscribe
- For the easyJet flights Media Centre website by contacting us at: office@easyjet.com with ‘UNSUBSCRIBE’ in the subject
line
- For the easyJet holidays Media Centre website by contacting us at: pressoffice@easyjet.com
The Right not to be subject to a decision based solely on automated
processing.
- How to contact easyJet Data Protection team?
Please reach out to data.protection@easyjet.com for any further
information regarding your data protection rights.
We may ask you to verify your identity before we can process your query.
If you are still not satisfied with the way we use your personal data and you believe this is not in accordance
with
data protection laws, you have the right to lodge a complaint with your local data protection authority.
In the UK, the relevant supervisory authority is the Information Commissioner’s Office (ICO). You can contact
the ICO via their web-form at https://ico.org.uk/concerns/ or call
the
ICO helpline on +44 (0)303 123 1113.
If you are a resident of an EU country and would like to contact your relevant
supervisory authority, you can find a
list of authorities via: www.edpb.europa.eu/about-edpb/about-edpb/members_en
- Privacy Notice Updates
We may update this Privacy Notice at any time to ensure that the information we provide to you is up to date with
any
change of legislation and/or new business developments and in accordance with the relevant data protection laws.
Any
new version of this Privacy Notice will be published on our website.
Our Privacy Notice was last updated: 7th October 2024.
Author: easyJet Data Protection Team.