Privacy policy and cookie management

Follow us

1. Introduction

The processing of personal data is carried out under the responsibility of Air France-KLM (hereinafter referred to as “we”, “us” or “Air France – KLM”), ensuring compliance with the fundamental principles of data protection.

We are committed to ensuring the security and confidentiality of the information entrusted to us, in strict compliance with the General Data Protection Regulation (GDPR) and applicable laws.

This policy aims to inform you clearly and transparently about the collection, use, and protection of your personal data when browsing our website https://www.airfranceklm.com.

It may be updated in accordance with legal or organizational developments. Any substantial modification will be communicated on our website.

Publication Date : March 24th , 2025

 

2. Processing of Personal Data

Air France-KLM does not collect any personal data through its website, except for information strictly necessary for managing memberships to the Shareholders' Club, as described in the following sections.

 

3. Shareholders' Club Personal Data Management

 

3.1. Categories of Data Collected

The data collected in this context includes:

  • Identification data: Full name, date of birth, email address, country of residence.

  • Shareholder status data: Number of shares held, shareholder identifier.

  • Login credentials: Username and password.

  • Data Storage Location: All collected data is stored exclusively within the European Union.

     

3.2. Purposes of Processing

The data is used exclusively for managing the Shareholders' Club for the following purposes:

  • Club management: Verification of shareholder status, administration of memberships, management of user accounts.

  • Communication: Sending information about Club activities, invitations to events, and satisfaction surveys.

  • Legal compliance: Compliance with regulatory obligations regarding shareholder management.

  • Security: Fraud prevention and protection of website access.

     

3.3. Legal Bases for Processing

In accordance with Article 6 of the GDPR, data processing is based on:

  • Performance of a contract: Management of Shareholders' Club membership.

  • Legal obligation: Compliance with regulatory requirements.

  • Legitimate interest: Securing the website and continuously improving services.

  • Consent: Required for certain marketing communications and the use of non-essential cookies.

     

3.4. Data Sharing with Third Parties

Your data may be shared with internal and external partners solely for the purpose of managing the Club. These partners are subject to strict confidentiality obligations and may only use your data for the agreed purposes. No data transfers outside the European Union takes place.

 

3.5. Data Retention Period

The data is retained strictly for the period necessary for the defined purposes, namely three (3) years from the last connection to your account. 

 

3.6. User Rights

In accordance with the GDPR, each user has the following rights regarding their data:

  • Right of access: Obtain confirmation that data is being processed and receive a copy.

  • Right to rectification: Correct or update inaccurate data.

  • Right to erasure: Request the deletion of data under certain conditions.

  • Right to restriction of processing: Temporarily restrict the use of data.

  • Right to data portability: Retrieve data in a structured format.

  • Right to object: Object to the processing of data for certain uses.

Exercise of Rights: For any request regarding the exercise of your rights within the shareholder club, please contact us at the following email address: [email protected].

 

3.7. Data Security

Air France-KLM implements stringent security measures to safeguard your personal data against unauthorized access, loss, alteration, or disclosure.

These measures include:

  • Encryption of sensitive data.

  • Restricted access to stored information, controlled through authentication mechanisms.

  • Continuous monitoring and proactive updates of security infrastructures.

     

4. Cookie Management

Air France-KLM uses cookies to enhance the user experience. Non-essential cookies are subject to your consent, which can be managed via our preference settings.

 

4.1. Categories of Cookies Used
  • Essential cookies: necessary for the proper functioning of the website (e.g., session management, security, accessibility). Disabling these may impact core functionalities.
  • Analytical cookies: our website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies (text files placed on your computer) to help website operators analyze how users interact with the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website activity and Internet usage. Google may also transfer this information to third parties when required by law or when these third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You can refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that if you do so, you may not be able to use all the features of our website. For more information, please visit: https://www.google.com/settings/ads.
  • Third-party cookies (YouTube): some pages include embedded YouTube videos, which may install third-party cookies. For details: https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/

Retention Period: Browsing data is retained for a maximum period of 13 months.

You may withdraw your consent at any time, particularly regarding marketing communications and non-essential cookies, without affecting the lawfulness of prior processing.

 

5. Contact

By email: 

  • Exercise of Rights: For any request regarding the exercise of your rights within the shareholder club, please contact us at the following email address: [email protected].

  • For any other inquiries or requests related to the management of your data, you may contact us at: [email protected].

By post:

Air France-KLM / SG CO
7 rue du Cirque
75008 Paris, France