and (“Biman”, “we”, “us”, “our”).Bima n properly manages and protect
customers’ personal data pursuant to the Biman’s basic policies for
Information Security and Personal Data Protection. For the purposes of the
General Data Protection Regulation (“GDPR”) and other applicable data
protection laws, we are data controller. Our data protection officer can be
contacted at [email protected] Our European Union representative is in
ourUK establishment, Biman Bangladesh Airlines Limited a branch registered
at 17 Conduit Street, London WlS 2B, United Kingdom.
The collection, use and disclosure of Customer Data enables us to provide
services and products that are most likely to meet your needs and
relation to the collection, use and disclosure of Customer Data.
Biman Bangladesh Airlines Limited is concerned about your right to
privacy.Biman does not sell/disclosepersonal information about individual
members (such as name, address, Email address, etc.) to third parties. We do
not sell or rent lists of members or use information about individual
members outside thescope of the Biman Bangladesh Airlines umbrella of
services. Biman Bangladesh Airlines reserves the right to disclose
aggregated information regarding its members and usage of the Biman
Bangladesh Airlines umbrella of services (such as member demographicsand
traffic patterns) to advertisers, partners and others for various purposes.
Purpose and Legal Basis for Processing Personal Data
Biman Airlines properly process customers’ personal data within the scope of
the following purposes:
01. To provide air transportation services (Reservations, Ticket sales,
check-in, airport handling, cabin services, Biman Holiday Wings, etc. in
addition to normal transportation services). Legal basis: Contract
02. To provide services relating to Biman Loyalty Club (BLC) members
mileage services. Legal basis: Contract Performance.
03.To provide other products and services. Legal basis: Contract
04. To conduct sales analysis, investigations and research; to develop
new services and products. Legal basis: Legitimate Interests.
05. To conduct operations relating to 1-4 above; to respond to
inquiries, etc.Legal basis: Contract Performance , Legal obligations,
Personal Data Categories
Biman Bangladesh Airlines process customers’ personal data necessary for the
purposes stated in "Purpose and Legal Basis for Processing Personal Data".
Such personal data includes:
Name, address, contact details (Telephone/Mobilenumbers, e-mail address),
gender, date of birth, country /region of residence, passport number,date of
expiry,credit card number, etc.
Data for Making Reservations and Itineraries
Reservation /boarding information (flight name, etc.), itinerary information,
copy of e-ticket,EMD, accompanying passengers, incidental services
(upgrades, additional baggage, etc.), mailing address of items sent to
customers, e.g. ticket, itinerary, etc.
BLC Membership Data
Membership number, member's service qualifications, membership region,
accumulated mileage, data related mileage awards, etc.
Records of communications with the Biman Airlines (records of responses to
questions submitted via e-mail or web inquiry forms, etc. Where necessary,
records of questions/remarksorcomplaints, etc. received at airport counters
or when boarding, may be kept)
Data Collected from Websites
Website access logs (IP address, etc.).Where a customer reserves the Biman
Bangladesh Airlines’ air transportation services via a third party such as
travel agents or other airline companies, some of the above-stated personal
data may be collected from such third party. These third parties may also
have their own privacy policies that apply when they collect information
from or about you.
Collection and Use of Children Personal Data
Due to the nature of our Services, we may collect travel information, which
may include personal information, about children when it is required to
comply with the law or security regulations, or as otherwise required to
provide transportation needs and services. We may retain personal
information when required to provide transportation and related services to
a child. Biman does not knowingly collect personal information directly from
children –persons under the age of 12, or another age if required by
applicable law –other than when required to comply with the law or for
safety and security reasons. If you are a parent or guardian of a child who
has provided personal information without your knowledge and consent, you
may request we remove this child’s information by emailing
Collection and Use of Sensitive Personal Data
Biman may collect and use sensitive personal data on customers when providing
air transportation services. The collection and use of such sensitive
personal data is limited to cases in which customers request Priority Guest
Support when using air transportation services, and such data is not used
for any other purpose.
Examples of Processing Sensitive Personal Data:
-Where requesting escort from check-in counter to departure gates for
passengers that use a wheelchair,
-Where requesting rental medical oxygen bottles or permission to
carry-on a medical oxygen bottle,
-When requesting permission to carry-on syringes or other medical
equipment for a chronic disease,
-When a pregnant passenger requests to board a flight within 26 weeks
expected delivery date,
-Where a customer requests a special in-flight meal, etc., data may be
processedthat is not sensitive personal data but may indicate a
customer’s religious beliefs or state of health.
Customers have the right to withdraw consent for the processing of sensitive
personal data. Customers wishing to withdraw consent should contact where he
or she applied for the service. It may not be possible to provide all or
some services if consent is withdrawn.
We use your IP address to help diagnose problems with our server and to
administer our Web site under the Terms and Conditions of the Service
Agreement. Your IP address is used to help identify you and your shopping
cart, and to gather broad demographic information.
www.biman-airlines.com membership registration requires users to give us
contact information (like name, mailin g address, and email address). Biman
Bangladesh Airlines also uses this information for account maintenance and
will advise registrants of new services and special promotional offers.
Users may opt-out of receiving future mailings.
Any personal information (name, Email address, phone number) you provide
will only be used to help us get back to you on your issue. We'll discard it
unless you ask us to inform you of future enhancements to our Web site or
Credit card information may be collected each time an order is placed for
Biman Bangladesh Airlines travel. The information collected will include,
but not be limited to name, billing address, credit card number, and
expiration date. This information will be retained on the site in the secure
environment covered under "Secure", and processed by a third party.
Your information is only accessible to you through use of your PNR numberand
secret password. We do not store your credit card information, except only
your name, address, travel history, telephone number and email.
Management of Personal Data
Biman Bangladesh Airlines retain customers’ personal data for the period
necessary to achieve the purposes stated in "Purpose and Legal Basis for
Processing Personal Data". Records concerning boarding by customers, such as
reservations records and ticket information, are normally retained after
boarding for a period of maximu m fiveyears.
Where a BLC member, data is retained as membership data for a period of
maximu m 10 years after withdrawing membership , in addition to the period
as a member. Furthermore, records concerning contracts and invoices are
retained for the period necessary to meet legal obligations. If it is
necessary for the establishment, exercise or defense of legal claims, Biman
may keep personal data for a longer period.
Data collected during communication with customers (customer service
records, records of e-mails received, etc.) is retained for the period
necessary to provide even better services to customers.
Access logs, etc. recorded when the Biman website is accessed are retained
for the period necessary for analysis by Biman.
You do not have to provide your personal information to us, but if you do
not provide certainessentialinformation we will not be able to provide
products and services to you. For example, where yourrefusalto provide
mandatory travel information, we will not be able to transport you.
When a data subject or his or her representative makes a request concerning
personal data retained by Biman, the Company shall respond as follows in
accordance with GDPR:
Where requested to rectify or make additions (hereinafter referred to as
"Rectification, etc.") to retained personal data due to the retained
personal data that identifies the data subject being incorrect, unless
special procedures are prescribed in the provisions of laws and regulations
regarding the Rectification, etc. of such details, the Company shall conduct
necessary investigations without delay within the scope necessary to achieve
purpose of processing. The Company shall notify of details without delay
when all or a part of the retained personal data is Rectified, etc. as a
result. The data subject shall be notified of such effect, outlining the
grounds, if a decision is made not to carry out Rectification, etc.
Where requested to erase retained personal data that identifies the data
subject, the Company shall conduct necessary checks without delay such as
where personal data is necessary in light of the purpose of processing. The
shall notify of details without delay when all or a part of the retained
personal data is erased as a result. The data subject shall be notified of
such effect, outlining the grounds, if a decision is made not to carry out
Suspension of Use, etc.
Where requested to suspend use, erase, or suspend provision to a third party
(hereinafter referred to as "Suspension of Use, etc.") of retained personal
data, and when there is discovered to be grounds for such a request, the
Company shall Suspend Use, etc. of such retained personal data without
delay, to the extent necessary; provided, however, that where Suspension of
Use, etc. of such retained personal data requires a considerable expense, or
where Suspension of Use, etc. is otherwise difficult, the Company may
substitute Suspension of Use, etc. with alternative measures necessary to
protect the rights and interest of the data subject. The Company shall
notify the data subject of such effect without delay when it has Suspended
Use, etc. of all or a part of the retained personal data. The data subject
shall be notified of such effect, outlining the grounds, if a decision is
made not to carry out Suspension of Use, etc
Right to lodge a complaint with your local supervisory
You have a right to lodge a complaint with your local supervisory authority
(i.e. your place of habitual residence, place of work of place of alleged
infringement) if you have concerns about how we are processing your personal
We ask that you please attempt to resolve any issues with us first, although
you have a right to contact your supervisory authority at any time.
Where legal requirements are fulfilled, the Company shall provide personal
data provided by data subjects that has been structured, generally used, and
is in a machine readable format. Furthermore, where technically possible,
personal data provided by data subjects shall be transmitted to other data
controllers. The data subject shall be notified of such effect, outlining
the grounds, if a decision is made not to provide or transmit personal data.
Bimandoes not sell, trade, or rent your personal information to others.
- a) Customers’ data may be disclosed or provided to partner airlines or
companies entrusted with ground handling and check-in operations to
provide air transportation services such as when using code share
flights or connecting flights, and to achieve purposes such as mileage
- b) Where customers have made reservations via a travel agent, customer
data is disclosed and provided to such travel agent in relation to the
- c) Customers’ data is transmittedtoa server operatedby SITA, a company
in Switzerland that manages the passenger service system used by Biman
- d) Where required by law, customer data relating to reservations and
itineraries (including passport, visa, and API data) may be submitted to
the customs authorities or immigration bureaus in the customers’
countries to be flown from, into or over, or in countries of transit and
- e) Customers’ personal data may be disclosed or provided to authorities
or recipients prescribed in laws and regulations where necessary to
comply with EU law or the laws and regulations of members of the EU/EEA.
Links to other Sites
This site may contain links to other sites. Biman Bangladesh Airlines is not
responsible for the privacy practices or the content of such Web sites.
Updating Account Information
This site gives users the following options for changing and modifying
information previously provided by visiting www.biman-airlines.com. You may
update your personal information, opt in/out of email updates and manage
By using the Biman, you consent to the collection and use of this
information by Biman Bangladesh Airlines. If we decide to change our privacy
policy, we will post the changes on this page so that you are always aware
of what information we collect, how we use it, and underwhat circumstances
we disclose it. Bimanreserves the right, at any time, to modify, alter or
update these policies, and you agree to be bound by such modifications,
alterations, or updates.
Contacting Bangladesh Airlines.com about this site
If you have any questions about this privacy statement, the practices of
this site, or your dealings with this Web site, you can contact Biman Bangladesh Airlines.