Here is a summary of how Icelandair approaches your privacy rights, collection, usage and processing of your personal information:
We will provide you with some specific examples of the processing of your personal information. If you have further inquiries, please contact us via e-mail by writing to email@example.com.
When you provide your information directly to us you may be asked if you don’t want to receive our marketing material. Icelandair sometimes promotes the products and services of third parties and other Icelandair Group subsidiaries.
Icelandair may ask you to consent to receive marketing material from other third parties outside the Icelandair Group.
Whatever your choice on receiving marketing material from us or by which methods they are delivered, we will respect it.
You can change your mind at any time on whether you would like to be sent marketing material or not. To stop receiving marketing material from us, you can use the following methods:
Even if you choose not to receive marketing material, we will still communicate with you in relation to services or products you have purchased. For example, we will still send you messages reminding you that check-in for your flight has been opened, to send you an electronic ticket or to inform you of any changes or disruptions to the services. Additionally, if you are a member of Icelandair Saga Club, we will send you information on your membership or important service information, such as if and when your benefits are due to expire.
Please be aware that if you indicate that you would not like to receive marketing material from us, we will retain your personal information in order to fulfil your wishes not to receive such material.
Your personal information will be kept as long as it is needed for the purpose it is being processed. For example, we will need to retain information related to your travel for as long as it is needed to fulfil your travel arrangements and after that so that we can respond to claims, disputes or questions about the booking. Your information may also be retained so that we can provide you with improved and personalized services, as well as so that you may enjoy any loyalty benefits which you have accrued.
Icelandair actively reviews personal information so that it is not retained longer than there is a legal basis for it being processed. In some cases, it may be anonymized and in other cases, deleted.
Icelandair has appointed a Data Protection Officer, whom you can reach by e-mailing firstname.lastname@example.org or writing to the above address.
Whenever you make a flight booking with Icelandair, but some parts of your journey are to be provided by other airlines, then those airlines are separate “data controllers” under European Union data protection law. In that case, Icelandair and any other airlines will be joint controllers of your personal information.
Any additional service providers, e.g. a travel agent, hotel or car rental company, which provide a part of your services will also be separate “data controllers”. Their privacy policies will be accessible from them directly.
Please be aware that, depending on the services that you have requested, other agreements will form your contractual relationship with Icelandair. Examples of such agreements are Icelandair’s Conditions of Carriage for Passengers and Baggage and Conditions for Saga Club Membership.
If you have requested additional non-flight related services or booked a package including such services, then the providers of such services will be identified in the booking or ordering process. The providers of such services will also separately be “data controllers”.
Where we reference that others are data controllers in the sections ’Controller of Personal Information’ and ’Who do we share your personal information with?’ you should consult their privacy policies for further information.
For further information on the applicability of privacy policies, such as when there are additional “data controllers” as described in the section “Details about the data controller of your personal information” or when we share your personal information, as described in the section “In which cases and with whom do we share your personal information?” we advise that you refer to their privacy policies for additional details.
Additional Terms and Conditions or policies may apply if you request additional services from us, e.g. if you use our on-board Wi-Fi, enter a competition linked to Icelandair and other third parties or if you sign up for Icelandair Saga Club.
Whenever information provides details which identify your person or could be used for the same purpose, it is considered to be personal information. An example might be your name, your contact details, your Icelandair Saga Club member ID, or your purchase history. Details on how you use our websites and mobile applications may also be personal information.
Whenever you use our services, website, mobile applications, make contact with us via e-mail, social media or our service agents, we collect your personal information. The same applies when the services are provided by third parties or agents acting on behalf of Icelandair. Please be aware that if you do not wish to provide us with personal data which is necessary for the performance of a contract or which we are legally required to process, we may not be able to provide you with part or all of the services requested.
Furthermore, we may receive your personal information from third parties, such as:
To see which types of personal information Icelandair processes about you, please see the section “What types of personal information do we process?”
To provide you with our services, or the services of other data controllers which deliver part of the services that you have requested, we will need to process your personal information. Further processing may take place to provide you with relevant marketing materials and enhance your experience with Icelandair.
Icelandair processes the following types of personal information:
In some cases, Icelandair may process your personal information which is considered to be sensitive. Specific categories of personal information, such as on religion, health or ethnicity require additional safeguards under European Union and Icelandic data protection law. These categories are referred to as “sensitive personal data”. Icelandair will only process these categories of data in specific circumstances.
Following are examples where we may process “sensitive personal data”:
The main purposes for which we process your personal information are:
Your personal information will only be processed by Icelandair where there is a legal basis for the processing. The legal basis may differ based on the purpose of the processing of your personal information. In almost all cases, the legal basis will be as follows:
You can see more information on the processing with regard to each legal basis below.
In cases where the processing of your data is subject to other laws, then the legal basis for processing may be different than stated above. In such circumstances, the processing may be based on your consent in all cases.
In order for us to provide you with services, such as fulfil your travel arrangements, it is necessary for us to process some of your personal information. We will need to process information such as your name, contact details and payment information so that you can book our products, board a flight or check in to a hotel in case of a package booking.
Icelandair is a commercial airline and travel provider. As such, we have a legitimate interest to process your personal information in order to provide, improve and market our services.
As an airline and a business, Icelandair needs to comply with legal and regulatory requirements and may need to process your personal information in order to comply with these requirements.
In rare cases, there may be an urgent need that we process your personal information to protect your vital interests or the interests of another person.
In some cases, we may process your personal information when you have provided your consent for us to do so.
Whenever we process personal information based on your consent, you may withdraw your consent at any time. To do so, please contact Icelandair by sending an e-mail to email@example.com, call our service center at +1-800-223-5500 or write to us at:
Please be aware that if you withdraw your consent, we may not be able to provide you with some or all of the services that you have requested from us. Additionally, it may not be possible to cancel your booking or for us to provide you with a refund of payments you have made to us.
Icelandair may share your personal information with its sister companies within the Icelandair Group, which include Air Iceland Connect, Icelandair Hotels, Iceland Travel, Fjárvakur-Shared Services, Feria and Icelandair Cargo. Icelandair shares details within the Icelandair Group so that our sister companies can help us provide, improve and market our services. As an example, if you have used the services of our sister companies, we may use this information to learn more about the sorts of services or products you may be interested in. For more information about the companies within the Icelandair Group, please see our parent company's website of our parent company.
Icelandair may share your personal information with other airlines which participate in the fulfilment of your travel arrangements. Icelandair will only share your information as part of its business operations as a commercial airline and travel provider, or if we have a legal og regulatory obligation to do so.
Your personal information may also be shared with the following third parties:
If the services you have requested include other Icelandair Group companies, such as if they provide you with stay at a hotel or day tours, your personal information will be provided to Icelandair as well as other Icelandair Group companies involved.
Icelandair will not sell your personal information to third parties. We will not allow third parties outside the Icelandair Group to send you marketing material unless you have provided your consent.
As a commercial airline, Icelandair has business partners located in countries around the world. Icelandair may therefore transfer and store your personal information in countries outside the European Economic Area. Icelandair may share your information with third parties in countries located outside the European Economic Area in order to provide you with services you have requested or for other legitimate reasons. For example, Icelandair is required by the laws of some countries to share your personal information with customs and immigrations authorities. To read more about who your personal information may be shared with, please refer to the section “+ In which cases and with whom do we share your personal information?”.
Please be aware that this means that your personal information may be transferred to third parties which are located in countries where may have fewer legal rights than provided by your local laws.
According to European Union and Icelandic data protection laws, certain requirements need to be fulfilled when your personal information is transferred to a country outside the European Economic Area. The purpose of these requirements is to make sure your personal information is adequately protected, even when being transferred outside the European Economic Area.
When Icelandair transfers your personal information to a third country, one of the following will apply:
Icelandair makes every effort to protect your personal information. We encourage you to take steps to secure your personal information. Here are some measures that you can take to keep your information safe:
Whenever you book a flight, you will be provided with a booking reference, known as a PNR (Passenger Name Record). A booking reference will appear on the ticket or e-mail confirmation of each passenger in a booking. You should never share your booking reference with others, as it may allow other people to access the details of the booking.
If you are booking a flight for yourself as well as others and would not like them to see your booking details, we recommend that each passenger make separate bookings.
If you are a member of Icelandair Saga Club, you will be issued unique user credentials in order to be able to access your online profile on our websites or mobile applications. To make sure those credentials stay secure, you should never share them with anyone else. Icelandair recommends that whenever you finish using our online services, you should log out to make sure others cannot gain access to your online profile.
Dishonest individuals may try to gather your personal information by trying to deceive you online. This illegal activity is called “phishing”. Phishing is often performed by sending you an e-mail which has been designed to make you think that it has been sent a legitimate business. However, such e-mails may often form part of a scam to trick you into disclosing details, such as your personal information, login credentials or bank information. Phishing e-mails will often contain links to fraudulent websites which imitate the look and feel of legitimate websites.
As our customer, you have a right to request access, rectification, restriction and deletion of your personal information held by us. Furthermore, you may receive a copy of your personal information. For more information on such requests, please refer to the Section “How can I make a request for a copy or deletion of my personal information and how do I lodge a complaint?” below.
As our customer, you also have rights to object to some of the processing. In cases where processing is based on your consent, you may withdraw it at any time. For more information on withdrawal of your consent, please refer to the Section “Processing based on consent” above. Please be aware that your rights as stated above may be limited. As an example, where we can demonstrate that there is a legal requirement to process your data, we may not be able to delete it.
Please be aware that if you request for your personal information to be deleted, such requests may affect your relationship with us as a customer. For example, deletion of your personal information might result in your accrued Icelandair Saga Club benefits being forfeited.
Under European Union and Icelandic privacy law, you may request a copy of your personal information if it is processed by Icelandair. You do not need to pay a fee for this request, unless it is manifestly unfounded or excessive. Icelandair will make every effort to respond to your request within 30 days of it being received.
Your request must be in writing and must contain the following information:
Additionally, we require you to provide:
Please send your request to:
Data Protection Officer
You also have a right to lodge a complaint with The Icelandic Data Protection Authority in. A complaint can be made by writing to:
The Icelandic Data Protection Authority