Data Protection Notice for the Austrian Airlines Facebook page

This Privacy Policy informs you about the way your personal data is processed on the Austrian Airlines Facebook page. The Facebook page can be accessed via the following link:
​www.facebook.com/AustrianAirlines

Protecting your personal data is of utmost importance to Austrian Airlines. We use your personal data in accordance with the applicable data protection law, in particular the provisions of the General Data Protection Regulation (EU Regulation 2016/679; GDPR). This Privacy Policy should be read in conjunction with the Facebook Privacy Policy, in particular the Data Policy; further information on the purpose and scope of data processing, your rights, and settings to protect your privacy can be found in the Facebook Data Policy. The Data Policy can be found at:
www.facebook.com/about/privacy

Austrian Airlines is responsible for processing in accordance with Art. 24 GDPR. Insofar as Austrian Airlines and Facebook together are responsible according to Art. 26. (1) GDPR, then the corresponding agreement is valid: ​www.facebook.com/legal/terms

For more information about this agreement, please visit the following link (section “Responsibility for your information used to create Page Insights”): www.facebook.com/legal/terms

“Austrian Airlines”
Austrian Airlines
Office Park 2, Box 100
1300 Vienna
Austria
Contact: ​impressum@austrian.com

“Facebook”
Facebook Ireland Ltd.
4 Grand Canal Square
Dublin 2
Ireland
Contact: ​www.facebook.com/help

jointly “we”, “us”

Data Protection Officer for Austrian Airlines
Email: ​datenschutz@austrian.com

Data Protection Officer for Facebook, Ireland Ltd.
Website: ​www.facebook.com/help/contact/144059062408922

Austrian Airlines processes your personal data on the Austrian Airlines Facebook page in the following ways:

• When you interact with the Austrian Airlines Facebook page, your public profile information (for example display name)
• When you interact with the Austrian Airlines Facebook page by
  • uploading a post and entering your personal information there
  • entering your personal data via the comment function
  • contacting Austrian Airlines via Messenger and providing your personal data
• When you interact with the Austrian Airlines Facebook page, Facebook Insights uses your data to gather statistics on page usage. For more information on the processing of Insights Data when interacting with the Austrian Airlines Facebook page, please visit: ​www.facebook.com/legal/terms

In order to process messages from Facebook users efficiently, these, as well as the master data of the corresponding profile, are also processed outside the Austrian Airlines Facebook page in systems for which Austrian Airlines is responsible. The data will be deleted after six months; for data on the Austrian Airlines Facebook page, Facebook’s deletion rules apply (see Chapter 6).

If you contact us by email or via Facebook Messenger, the communication is unencrypted.

Your personal data is processed based on the following legal basis:

Art. 6 (1) b) GDPR (performance of contract, implementation of pre-contractual measures)

Austrian Airlines processes your personal data in order to fulfil contracts that you have entered into with Austrian Airlines or to carry out pre-contractual measures. You may provide Austrian Airlines with your personal data if

• you have questions about Austrian Airlines services and offers
  
• you want to complain about an Austrian Airlines service
• you want to receive information about your application to Austrian Airlines or your application status

Your data may be shared internally to process your request.

The amount and category of data processed depends on what you provide to Austrian Airlines. In order to process your request, it may be necessary for Austrian Airlines to request further data from you. In this event, Austrian Airlines will ask you for the additional data and information required to process your request. The following data is generally processed:

• First name
• Last name
• Title / Gender
• Personal information that you send us as part of your request / message

Art. 6 (1) (f) GDPR (safeguarding legitimate interests)

Austrian Airlines also uses your personal data in order to safeguard your legitimate interests.

The purpose of this usage is as follows:

• To optimise the Facebook page in terms of its user-friendliness and attractiveness
• Other communication and interactions initiated by Facebook users

You can find information on the legal basis for the use of your personal data by Facebook at:

• ​Facebook Data Policy (section “What is our legal basis for using data?”)
• ​Detailed information on the legal bases

Your personal data is deleted from Austrian Airlines’s internal systems as soon as it is no longer required for the purposes stated. However, Austrian Airlines must sometimes continue to store your data until the end of the retention periods and deadlines set by the legislator, which may be derived from the Austrian Commercial Code, the Federal Fiscal Code or the Trade Commerce and Industry Regulations Act. These are generally five to seven years. Austrian Airlines may also retain your data until the statutory limitation periods have expired, if this is necessary for the establishment, exercise or defence of legal claims. After that, the relevant data is routinely erased.

For information about Facebook’s data deletion and retention periods, please see: ​www.facebook.com/about/privacy 
Facebook Section “Data storage, deactivation and deletion of accounts”

You can assert the following rights under Chapter 3 of the GDPR:

• Right of access, Art. 15 GDPR
• Right of rectification, Art. 16 GDPR
• Right of erasure (“Right to be forgotten”), Art. 17 GDPR
• Right of restriction of processing, Art. 18 GDPR
• Right of data portability, Art. 20 GDPR
• Right to object, Art. 21 GDPR

To assert your rights in relation to Austrian Airlines, contact us via the Data Protection Contact Form; in relation to Facebook, use the following link: ​www.facebook.com/help

You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authorities are:

For Austrian Airlines:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna

Telephone: ​+43 1 52 152-0
Email: ​dsb@dsb.gv.at

For Facebook:

Data Protection Commission
Canal House
Station Road
Portarlington, Co. Laois, R32 AP23
Ireland

Telephone: +353 (0761) 104 800
LoCall: 1890 25 22 31
Fax: +353 57 868 4757
Email: ​info@dataprotection.ie