Description of the register according to § 10 or the Personal Data Act (523/1999)
REGISTRAR
Finnair Oyj (hereinafter Finnair)
Corporate ID (Y-tunnus) 0108023-3
Address: Lentäjäntie 3,
01053 FINNAIR
NAME OF THE REGISTER
Finnair Plus customer database
GROUNDS FOR MAINTENANCE OF THE REGISTER
Finnair Plus program membership
Purpose of the data file
| PURPOSE OF THE DATA FILE |
The data file is used for managing customer relations between Finnair and members of the Finnair Plus programme, recording point events, charging for awards granted on the basis of point events, maintaining contact with customers, marketing and advertising. The data recorded in the data file are also used when reserving and paying for flight tickets and in electronic check-in for flights. The data file may additionally be used when invoicing partners.
Data in the data file are also used to build profiles of members. These profiles are used when directing individual advertising and marketing to members via a service on the Finnair website. Direction of advertising and marketing involves member-specific variation in the advertising content of the Finnair website. Direction of individualised advertising at Finnair Plus members is an integral part of the Finnair Plus regular customer programme.
Finnair’s Finnair Plus partners are similarly an integral part of the Finnair Plus programme. Members also have an opportunity to collect points when using the services of these partners. For this reason, details supplied to Finnair by the partners concerning the services of those partners and the benefits that they offer to members of the Finnair Plus programme are sent to the members together with information pertaining to and regarding the Finnair Plus programme. Details of Finnair services are also provided together with information on the Finnair Plus programme. Further details of the partners are available on the Finnair website.
Marketing material may also be sent by e-mail and/or SMS message to members who consent to receive such communications.
Finnair is entitled to discontinue the Finnair Plus membership of a customer by removing his/her personal details and membership number from the Finnair Plus membership register in case no transactions have been registered on member 's account during the last five (5) years and consequently no valid Plus points exist. Customers can rejoin the Finnair Plus program by filling out a Finnair Plus membership application.
| PERSONAL DATA CONTAINED IN THE REGISTER |
Customer details
Date of commencement of membership, member’s title, surname, forename, visiting address, postcode, postal district, country code, gender, date of birth, size of family, dates of birth of children, credit card number, home telephone number, home fax number, cellphone number and e-mail address.
Leisure time interests notified by the member
Museums/art exhibitions, opera/concerts/ballet, theatre/musicals, light music, jazz, golf, tennis, sailing/water sports, riding/horse racing, downhill skiing/snowboarding/telemark, cross-country skiing, hunting/fishing, health and spa visits, ice hockey, soccer, basketball, cars and motorsport, fine food and wines.
Profile data
Passport number, date of issue of passport, validity of passport, nationality, special food preferences, preferred seating (aisle/window), credit card details (card number and validity). A special food preference may constitute sensitive data. Members who provide this information are deemed to have given explicit consent to processing of the said information.
Details of place of work
Profession or occupation, name of employer, address, postcode, postal district, country code, work telephone number, telefax at the workplace.
Membership card details
Membership number, date of issue of last membership card, expiry date of card, membership tier.
Details of membership tier
Tier history, tier points total, number of flights, details of tier dates.
Details of points collected
Total of points collected, total of points used, total of points available and expired points.
Event-specific details
Date of event, flight number, point of departure and destination of flight, travel class, points collected, abbreviated name of service provider, document number (flight ticket number or other documentation number).
Details of use of points
Date of award event, point of departure and destination of flight, travel class, points deleted, abbreviated name of service provider, document number (award ticket number or other documentation number, e.g. award voucher number).
Marketing details
Dates of despatching marketing letters and points account statement, details of campaigns offered to the customer and copies of marketing letters.
Details of Finnair website use
Details of Finnair website pages visited.
Member’s right of refusal
Refusals notified by the member (see exercise of rights) are recorded from a separate notice submitted by the member to the data file controller. Consent to sending of marketing material by e-mail and/or SMS message is recorded from a separate notification submitted by the member.
| REGULAR DATA SOURCES |
Customer data and workplace data are received from the member concerned on completing the membership application or subsequently updating the said details. Details of use of the Finnair Plus membership card are received from the Finnair check-in and accounting systems, and from files provided by partners. Details of Finnair Plus points, tiers and tracking periods are extracted from the Finnair data system using Finnair’s computer programmes. Details of Finnair website use are extracted through website technical maintenance programmes.
| RELEASE OF DATA |
Personal data used in reserving flight tickets (name, e-mail address, cellphone number, Finnair Plus membership number, Finnair Plus tier, seating preference, special food preference and details of whether the Finnair Plus membership card is used actively) are submitted in electronic form to an Amadeus reservation data system maintained in Germany.Thesepersonal dataare automatically read from the data system for a Finnair flight reservation when the member provides a membership number to the Finnish or foreign office or agent that prints out the ticket.The said data are also released for the said purpose outside of the European Union or European Economic Area.
In addition to the foregoing, personal data used in reserving flight tickets (name, e-mail address, cellphone number, Finnair Plus membership number, Finnair Plus tier, seating preference, special food preference and details of whether the Finnair Plus membership card is used actively) are submitted in electronic form to airlines belonging to the oneworld™ alliance.The personal dataare used when reserving flights with airlines belonging to the oneworld™ alliance.Further details of airlines belonging to the oneworld™ alliance are available from the Finnair website.The said data are also released for the said purpose outside of the European Union or European Economic Area.With the customer’s consent, personal datain the Finnair Plus customer database may also be released to Finnair Plus partners for the purpose of direct marketing.Further details of the partners are available on the Finnair website (www.finnair.fi).The partners do not release personal datato third parties.
| EXERCISE OF RIGHTS |
A member is entitled to know the information concerning the said member that is stored in the Finnair Plus database or to know that there is no such information in the said database. The data may be inspected free of charge once in each calendar year. The inspection request must be submitted in writing to the data file controller specified at the end of this data file description and must be signed in person by the requesting party. The information released in response to an inspection request is provided in writing and sent by post to the address notified by the person in question.
A member of the Finnair Plus programme is also entitled to obtain correction of any error in the information that concerns the said member. A request for correction of an error must be submitted in writing or by telephone to the Finnair Plus Service Centre (tel. +358 9 818 888, postal address: Finnair Plus, SXD/8, FI-01053 Finnair, Finland).
Should a member of the Finnair Plus programme prohibit the despatch of (i) Finnair’s direct marketing material and/or (ii) direct marketing material of Finnair’s partners to the said member, then Finnair may decide to stop sending all written Finnair Plus material to the said member. A member of the Finnair Plus programme is entitled to prohibit the release of personal data to the Finnair Plus partners for the purpose of direct marketing.
Any member who chooses to exercise the foregoing rights of prohibition must notify the Finnair Plus Service Centre thereof in writing or by telephone.
| PROTECTION OF THE DATA FILE |
Manual materials
Membership applications and other manually processed documents containing personal data are destroyed in an appropriate manner after processing.
Data stored for ADP
Only specified employees of Finnair and of enterprises that are assigned by Finnair and act on its behalf are authorised to use the Finnair Plus computer application. The database includes various user access levels authorising the user to maintain or browse the database only with respect to information that is necessary for use. Each user has a personal user name and password that are required to log into the system. The system is protected using both a database system (DB2) and a computer operating system protection system (RACF) so that only the user names specified for RACF are allowed to access the system by providing the correct password. Each user with a user name defined for DB2 is authorised to read or update information in the database only to the extent that is permitted for the said user.
| CONTROLLER IN CHARGE OF DATA FILE AFFAIRS AND CONTACT DETAILS |
Jussi Lundahl
Finnair Oyj
Lentäjäntie 3,
01053 FINNAIR
Finland
Tel. +358 9 81881
