This Privacy Policy applies to Biman Bangladesh Airlines Limited (“Biman”) and (“Biman”, “we”, “us”, “our”). Biman properly manages and protect customers’ personal data pursuant to the Biman’s basic policies for Information Security and Personal Data Protection. For the purposes of the General Data Protection Regulation (“GDPR”) and other applicable data protection laws, we are data controller. Our data protection officer can be contacted at [email protected]. Our European Union representative is in our UK establishment, Biman Bangladesh Airlines Limited a branch registered at 17 Conduit Street, London WlS 2B, United Kingdom.

The collection, use and disclosure of Customer Data enables us to provide services and products that are most likely to meet your needs and requirements. This Privacy Policy outlines our policy and responsibility in relation to the collection, use and disclosure of Customer Data.

Biman Bangladesh Airlines Limited is concerned about your right to privacy. Biman does not sell/disclose personal information about individual members (such as name, address, Email address, etc.) to third parties. We do not sell or rent lists of members or use information about individual members outside the scope of the Biman Bangladesh Airlines umbrella of services. Biman Bangladesh Airlines reserves the right to disclose aggregated information regarding its members and usage of the Biman Bangladesh Airlines umbrella of services (such as member demographics and traffic patterns) to advertisers, partners and others for various purposes.

Biman Airlines properly process customers’ personal data within the scope of the following purposes:

• To provide air transportation services (Reservations, Ticket sales, check-in, airport handling, cabin services, Biman Holiday Wings, etc. in addition to normal transportation services). Legal basis: Contract Performance.
• To provide services relating to Biman Loyalty Club (BLC) members mileage services. Legal basis: Contract Performance.
• To provide other products and services. Legal basis: Contract Performance.
• To conduct sales analysis, investigations and research; to develop new services and products. Legal basis: Legitimate Interests.
• To conduct operations relating to 1-4 above; to respond to inquiries, etc. Legal basis: Contract Performance , Legal obligations, Legitimate Interests.

Biman Bangladesh Airlines process customers’ personal data necessary for the purposes stated in "Purpose and Legal Basis for Processing Personal Data". Such personal data includes:

Basic Data

Name, address, contact details (Telephone/Mobile numbers, e-mail address), gender, date of birth, country /region of residence, passport number, date of expiry, payment card details, preference (meals, seat) etc.

Data For Making Reservations And Itineraries

Reservation /boarding information (flight name, etc.), itinerary information, copy of e-ticket, EMD, accompanying passengers, incidental services (upgrades, additional baggage, etc.), mailing address of items sent to customers, e.g. ticket, itinerary, etc.

BLC Membership Data

Membership number, member's service qualifications, membership region, accumulated mileage, data related mileage awards, etc.

Communications Data

Records of communications with the Biman Airlines (records of responses to questions submitted via e-mail or web inquiry forms, etc. Where necessary, records of questions/remarks or complaints, etc. received at airport counters or when boarding, may be kept)

Data Collected From Websites

Website access logs (IP address, etc.). Where a customer reserves the Biman Bangladesh Airlines’ air transportation services via a third party such as travel agents or other airline companies, some of the above-stated personal data may be collected from such third party. These third parties may also have their own privacy policies that apply when they collect information from or about you.

Collection And Use Of Children Personal Data

Due to the nature of our Services, we may collect travel information, which may include personal information, about children when it is required to comply with the law or security regulations, or as otherwise required to provide transportation needs and services. We may retain personal information when required to provide transportation and related services to a child. Biman does not knowingly collect personal information directly from children –persons under the age of 12, or another age if required by applicable law –other than when required to comply with the law or for safety and security reasons. If you are a parent or guardian of a child who has provided personal information without your knowledge and consent, you may request we remove this child’s information by emailing [email protected].

Collection And Use Of Sensitive Personal Data

Biman may collect and use sensitive personal data on customers when providing air transportation services. The collection and use of such sensitive personal data is limited to cases in which customers request Priority Guest Support when using air transportation services, and such data is not used for any other purpose.

Examples Of Processing Sensitive Personal Data:

• Where requesting escort from check-in counter to departure gates for passengers that use a wheelchair.
• Where requesting rental medical oxygen bottles or permission to carry-on a medical oxygen bottle.
• When requesting permission to carry-on syringes or other medical equipment for a chronic disease.
• When a pregnant passenger requests to board a flight within 26 weeks expected delivery date.
• Where a customer requests a special in-flight meal, etc., data may be processed that is not sensitive personal data but may indicate a customer’s religious beliefs or state of health.

Customers have the right to withdraw consent for the processing of sensitive personal data. Customers wishing to withdraw consent should contact where he or she applied for the service. It may not be possible to provide all or some services if consent is withdrawn.

We use your IP address to help diagnose problems with our server and to administer our Web site under the Terms and Conditions of the Service Agreement. Your IP address is used to help identify you and your shopping cart, and to gather broad demographic information.

A “cookie” is a small computer file which is downloaded to your device. It collects information as to how you navigate our websites and the internet, and helps us provide better website services to you and tailor certain content. Cookies may collect personal information about you. Cookies help us remember information about your visit to our Platforms, like your country, language and other settings and searches. Cookies enable us to understand who has seen webpages and how frequently, and to determine which are the most popular areas of our Platforms. They can also help us to operate our website more efficiently, and make your next visit easier and customise your view of the Platforms to reflect your preferences and activities. They also help us tailor our marketing and advertisements to you on our Platforms, other websites you visit, social media platforms and your other devices.

www.biman-airlines.com membership registration requires users to give us contact information (like name, mailing address, and email address). Biman Bangladesh Airlines also uses this information for account maintenance and will advise registrants of new services and special promotional offers. Users may opt-out of receiving future mailings.

Any personal information (name, Email address, phone number) you provide will only be used to help us get back to you on your issue. We'll discard it unless you ask us to inform you of future enhancements to our Web site or services.

Credit card information may be collected each time an order is placed for Biman Bangladesh Airlines travel. The information collected will include, but not be limited to name, billing address, credit card number, and expiration date. This information will be retained on the site in the secure environment covered under "Secure", and processed by a third party.

Your information is only accessible to you through use of your PNR number and secret password. We do not store your credit card information, except only your name, address, travel history, telephone number and email.

Biman Bangladesh Airlines retain customers’ personal data for the period necessary to achieve the purposes stated in "Purpose and Legal Basis for Processing Personal Data". Records concerning boarding by customers, such as reservations records and ticket information, are normally retained after boarding for a period of maximum fiveyears.

Where a BLC member, data is retained as membership data for a period of maximum 10 years after withdrawing membership, in addition to the period as a member. Furthermore, records concerning contracts and invoices are retained for the period necessary to meet legal obligations. If it is necessary for the establishment, exercise or defense of legal claims, Biman may keep personal data for a longer period.

Data collected during communication with customers (customer service records, records of e-mails received, etc.) is retained for the period necessary to provide even better services to customers.

Access logs, etc. recorded when the Biman website is accessed are retained for the period necessary for analysis by Biman.

You do not have to provide your personal information to us, but if you do not provide certain essential information we will not be able to provide products and services to you. For example, where your refusal to provide mandatory travel information, we will not be able to transport you.

When a data subject or his or her representative makes a request concerning personal data retained by Biman, the Company shall respond as follows in accordance with GDPR:

Rectification

Where requested to rectify or make additions (hereinafter referred to as "Rectification, etc.") to retained personal data due to the retained personal data that identifies the data subject being incorrect, unless special procedures are prescribed in the provisions of laws and regulations regarding the Rectification, etc. of such details, the Company shall conduct necessary investigations without delay within the scope necessary to achieve purpose of processing. The Company shall notify of details without delay when all or a part of the retained personal data is Rectified, etc. as a result. The data subject shall be notified of such effect, outlining the grounds, if a decision is made not to carry out Rectification, etc.

Erasure

Where requested to erase retained personal data that identifies the data subject, the Company shall conduct necessary checks without delay such as where personal data is necessary in light of the purpose of processing. The Company shall notify of details without delay when all or a part of the retained personal data is erased as a result. The data subject shall be notified of such effect, outlining the grounds, if a decision is made not to carry out erasure.

Suspension Of Use, Etc.

Where requested to suspend use, erase, or suspend provision to a third party (hereinafter referred to as "Suspension of Use, etc.") of retained personal data, and when there is discovered to be grounds for such a request, the Company shall Suspend Use, etc. of such retained personal data without delay, to the extent necessary; provided, however, that where Suspension of Use, etc. of such retained personal data requires a considerable expense, or where Suspension of Use, etc. is otherwise difficult, the Company may substitute Suspension of Use, etc. with alternative measures necessary to protect the rights and interest of the data subject. The Company shall notify the data subject of such effect without delay when it has Suspended Use, etc. of all or a part of the retained personal data. The data subject shall be notified of such effect, outlining the grounds, if a decision is made not to carry out Suspension of Use, etc.

Right To Lodge A Complaint With Your Local Supervisory Authority

You have a right to lodge a complaint with your local supervisory authority (i.e. your place of habitual residence, place of work of place of alleged infringement) if you have concerns about how we are processing your personal information.

We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.

Data Portability

Where legal requirements are fulfilled, the Company shall provide personal data provided by data subjects that has been structured, generally used, and is in a machine readable format. Furthermore, where technically possible, personal data provided by data subjects shall be transmitted to other data controllers. The data subject shall be notified of such effect, outlining the grounds, if a decision is made not to provide or transmit personal data.

Biman does not sell, trade, or rent your personal information to others.

• Customers’ data may be disclosed or provided to partner airlines or companies entrusted with ground handling and check-in operations to provide air transportation services such as when using code share flights or connecting flights, and to achieve purposes such as mileage accumulation.
• Where customers have made reservations via a travel agent, customer data is disclosed and provided to such travel agent in relation to the reservation.
• Customers’ data is transmitted to a server operated by Sabre GLBL Inc.(Sabre), a company in Switzerland that manages the passenger service system used by Biman Airlines.
• Where required by law, customer data relating to reservations and itineraries (including passport, visa, and API data) may be submitted to the customs authorities or immigration bureaus in the customers’ countries to be flown from, into or over, or in countries of transit and transfer.
• Customers’ personal data may be disclosed or provided to authorities or recipients prescribed in laws and regulations where necessary to comply with EU law or the laws and regulations of members of the EU/EEA.

This site may contain links to other sites. Biman Bangladesh Airlines is not responsible for the privacy practices or the content of such Web sites.

This site gives users the following options for changing and modifying information previously provided by visiting www.biman-airlines.com. You may update your personal information, opt in/out of email updates and manage your BLC account.

By using the Biman, you consent to the collection and use of this information by Biman Bangladesh Airlines. If we decide to change our privacy policy, we will post the changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it. Biman reserves the right, at any time, to modify, alter or update these policies, and you agree to be bound by such modifications, alterations, or updates.

If you have any questions about this privacy statement, the practices of this site, or your dealings with this Web site, you can contact with [email protected]..