BASRA AIRLINE PRIVACY POLICY
1.1. Your privacy is very important for us. We are also aware of the importance of your privacy for you. With this aim, the “Basra” Privacy Policy aims to inform you of how and for which purposes your personal data may be processed and shared with third parties. This Policy covers information on our entire operations. You can submit specific inquiries through communication channels described in Paragraph 2.7.
1.2. We will use the personal data you submit to “Basra” through the “Basra” Communication Channels or other communication and sales channels in accordance with the “Basra” Privacy Policy. We will make available to you the “Basra” Privacy Policy, or specific privacy notices where appropriate, before you use these channels.
1.3. All changes to the “Basra” Privacy Policy are announced and updated on the “Basra” Website and the “Basra” Mobile Applications. You will be deemed to have read and accepted the latest version of the “Basra” Privacy Policy each time you use our Website or our Mobile Applications, including any amendments to date. Therefore, we recommend that you review the “Basra” Privacy Policy and update announcements each time you visit our Website or use our Mobile Applications.
1.4. You will also be deemed to have reviewed the content of the “Basra” Privacy Policy in effect as of the date of transaction, whenever you purchase or use any product or service offered by “Basra” through any sales channel.
2.1. Basra Airlines (“Basra”), with headquarters located at “St. No. 14, Al Mansour 601, Bldg. No. 03, Baghdad /10001, Iraq”, acts as a data controller as per applicable national and international law on the protection of personal data, in relation to your personal data processed within the context of the Basra Privacy Policy and other Basra privacy notices.
1.2.2. In this context, your personal data is recorded, updated and maintained to the extent permitted by the purpose of processing, shared with third parties in Iraq and abroad and otherwise processed as stipulated by the law, by Basra or on its behalf as the data controller, in each case subject to the applicable law and the rules stipulated in this Policy.
3.1. ”Basra” may obtain your personal data through:
a. The Basra Website, the Basra Mobile Applications, the Basra Call Center, Airport Ticket Sales Offices, airport check-in counters and aircraft boarding control points,
b. Travel Agents authorized to sell Basra products and services, other airlines selling tickets for Basra scheduled flights based on airline cooperation agreements and tour operators contracted for charter flights,
c. Enjoy & Watch, our in-flight entertainment system,
d. Basra social media accounts and instant messaging applications used for guest services offered via virtual characters or real people,
e. Notifications received from public authorities and bodies, real people or private law legal entities,
in each case in written, verbal, electronic form and using automatic or non-automatic processing methods.
3.2. Whenever a transaction is made with Basra on behalf of another passenger or service recipient, Basra may process the personal data relating to both the person carrying out the transaction and the person on whose behalf the transaction is made. In this case, Basra may communicate with the passenger or service recipient directly about their flight or services.
4.1. ”Basra” may process the following categories of personal data either based on your consent, or without your consent if any other legal purposes listed in Paragraph 2.5 below apply.
a. Identification and Passport Information: Your name and surname, birth date, Iraqi ID number, whenever passport declaration is required your passport information including bearer identification, issuing country, passport number and passport expiry date, and identification information covered in other travel documentation requiring control as per applicable travel rules.
b. Contact Information: Your e-mail address, telephone number, only if you have disclosed it to us for communication purposes your residence address, your social media contact information and all other contact information you disclose to Basra.
c. Travel, Product & Service Information: Your passenger name record (“PNR”), your advanced passenger information (“API”) derived from PNR and travel documents information submitted to us prior to your entry to your destination. PNR and API content includes contractual transactions (such as reissue, ticket cancellation, refund), records regarding product or service purchase (such as excess baggage allowance, seat selection), travel information (such as delay/flight cancellation, check-in and boarding information), sales channel data (such as website, call center, travel agent), transaction date and times, special service requests (“SSR”) optionally sought from us regarding our services (such as wheelchair) and additional identification information required for check-in (such as Iraqi ID Number for domestic flights and passport and visa information for international flights), in each case from ticketing until the completion of the last flight included in the PNR.
d. Loyalty Program Membership Information: If you are a member of our Basra loyalty membership program, your membership and Basra loyalty Program transaction data associated with your membership account.
e. Customer Transaction Information: Information communicated in writing, verbally or electronically, within the context of your requests, feedback and complaints regarding our products and services.
f. Marketing Information: Your choices and past experience regarding our products and services, survey results, cookies records, promotional campaign data and social media user information.
g. Financial Information: All information regarding invoicing and payment methods (in accordance with PCI DSS rules, only the necessary fields are retained).
h. Flight Security Information: Civil Aviation Laws stipulates that information regarding people traveling by air may be collected, recorded, processed, shared in accordance with the PDP Law for the purposes of facilitating travel or conducting security and risk assessment, and such information can be evaluated to introduce measures to ensure flight safety and security. In line with these provisions, and to ensure flight security and to protect the lives and the property of our employees, our service providers and their staff and our guests, we maintain records for unruly passenger events or other events constituting security risk or threat, from the moment our guests start interacting with “Basra”. Such records cover information on passengers concerned, the details and description of the event, security controls applied, witness information and unruly act classification information.
i. Audiovisual Information: Call center records, and records obtained through voice recorders installed at check-in desks and video recorders installed at specific Basra service points with the aim of ensuring the security and wellbeing of those present. Basra does not obtain any audiovisual records inside the general areas of the passenger terminals located in airports or inside the aircraft cabin.
j. Legal Transaction and Compliance Information: Documents and information requested by administrative and judicial bodies, judicial processes initiated by or against Basra (such as lawsuits and investigations) and records relating to administrative or judicial processes.
k. Health Data: To carry out its operations, Basra does not use special categories of (sensitive) personal data in a regular and comprehensive manner. However; the use of special categories of personal data may be required within the context of health information you disclose to us regarding your use of our products and services, special service requests for passengers with reduced mobility, food allergy and special selection information and travel suitability and documentation rules.
l. Location Data: Momentary location information of your device accessed from the “Basra” Mobile Application and/or browser/device settings, depending on your preference(can be disabled within your preference).
5.1. Basra may process your personal data for the following purposes and based on the legal grounds specified below. Addressing Travel Requirements and Managing Flight Account:
Based on the legal ground that the use of personal data belonging to the parties to the contract is necessary, provided that it is directly related to the establishment or performance of the contract; Starting from the ticketing process, your personal data described in Paragraph 2.4 Alinea (a), (b), (c), (f), (g), (h), (i) and (j) will be used for the purposes of executing the terms of the contract of carriage, carrying out ticket sales and all other ticket, product and service transactions, assessing suitability for travel, creating trave records, carrying out boarding, providing support services before, during and after the flight, carrying out communication and notifications regarding the flight, recording contractual transactions (such as reissue, ticket cancellation and refund), carrying out ancillary product/service and special service requests and for emergency response management purposes.
If you are a Basra Loyalty member, in addition to the above, your membership information and point transactions will be used for managing your membership account and to execute transactions with our loyalty program business partners, in conjunction with your flights associated with your membership account.
Your personal data specified in Articles 2.4. (a), (b), (c), (d), (e), (f), (g), (h), (i), (j), and (l) will be used to address your travel requirements and flight transactions, primarily based on the requirements of the Civil Aviation Laws the applicable civil aviation regulations, and international treaties on civil aviation, and also based on the necessity for Basra to comply with its legal obligations.
b. Complaint and Request Management:
Based on the legal ground that data processing is necessary for the establishment, exercise, or protection of a right; Your personal data described in Paragraph 2.4 Alinea (a), (b) and (e) will be used for the purposes of increasing customer satisfaction and managing, resolving, analyzing and reporting all complaints and requests submitted to us through the Basra Website, the Basra Mobile Applications, the Basra Call Center, Basra social media accounts and instant messaging applications offered via virtual characters or real people, or through the General Directorate of Civil Aviation, Consumer Dispute Councils, competent courts in and outside of Iraq authorized to resolve disputes, alternative dispute resolution channels and official authorities.
c. Utilization of Artificial Intelligence-Supported Technologies for Improving and Developing Business Operations:
Based on the legal ground that data processing is necessary for the establishment, exercise, or protection of a right; your personal data specified in Articles 2.4 (a), (b), (d), and (e) will be used in our services, including bots responding to your questions and requests which can make suggestions, predictions, and decisions (e.g., Basra Visual Assistant),are provided to you through artificial intelligence-supported technologies (We would like to emphasize that especially in conversations conducted using bot technology, users should refrain from sharing any data other than what is necessary to perform the requested/intended transaction – this is also communicated to users during Basra Visual Assistant interactions).
Additionally, based on the legal ground of legitimate interest, your personal data specified in Articles 2.4 (a), (b), (c), (e), (g), (h), and (i) will be used in the context of utilizing artificial intelligence-supported technologies for improving and developing business processes including but not limited to suspicious passenger checks, check-in, and boarding procedures.
d. Responding to and Managing Passenger Information Requests by Official Authorities:
Based on the legal grounds of being explicitly stipulated by laws and being necessary for the data controller to fulfill its legal obligations; Your personal data described in Paragraph 1.4 all Alinea may have to be used by Basra, for the purposes of complying with legal obligations under national and international law and international treaties, to respond to lawful requests from the General Directorate of Civil Aviation, Iraq Ministry of Interior General Directorate of Migration Management, Iraq Ministry of Health, competent border authorities in travel destinations, courts, consumer dispute resolution bodies and other administrative and judicial bodies.
e. Marketing Activities and Customer Satisfaction:
Based on your explicit consent; Your personal data described in Paragraph 2.4 (a), (b), (c), (d), (e), (f), (g), (h), (i), (j), and (l) will be used by Basra, for the purposes of defining our marketing strategy, creating databases, carrying-out listing, reporting, verification, analysis and evaluations, producing statistical data, undertaking segmentation, profiling, unification and data enrichment activities aimed at guest experience, conducting analysis on how you use the “Basra” Communication and Sales Channels and to personalize our communication channels for a better service, proposing personalized flight offers and services, conducting research and development on our products and services and your personal choice alternatives regarding these products and services, contacting you directly or through service providers for market research purposes, using the contact information provided to us and conducting commercial marketing communication for promoting our products and services, promoting new services, special flight offers and other information we consider that may be of interest to you.
Your personal data will be used to carry out marketing activities and to increase guest satisfaction, primarily based on the necessary for the purposes of the legitimate interests pursued by Basra. In these cases, we are implementing controls to ensure that the interests and fundamental rights and freedoms of the data subjects are not prejudiced in violation of the applicable law.
We would like to underline that the commercial marketing communication by e-mail or SMS are sent to you only based on your consent and only through your selected communication media.
f. Improving Search Results Based on Location and Advertising Based on Customer Location:
Your personal data specified under article 2.4.(l) will be used in case you give consent to share your location data with Basra via the device/browser/app used, to improve location-based search results and to advertise products and services based on your location (e.g. showing the closest location to you) in order to improve our Company's products and services.
We would like to underline that, where such advertisements will be made via electronic marketing communications, marketing communications will be sent to you by our Company only based on your consent and only through your selected communication media.
Basra does not have access to your location data without your consent. If you later want to withdraw your consent to sharing location data for these purposes, you can withdraw your consent from the Basra application and/or browser/device settings.
g. Carrying-out Financial Operations:
Based on the legal ground that data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject; Your personal data described in Paragraph 2.4 Alinea (a), (b), (c), (d) and (g) will be used for the purposes of financial reporting, control, verification, analysis and assessments, executing payments and/or refunds, meeting tax and similar payment and reporting obligations and implementing protective measures against financial fraud and violation cases.
h. Legal Compliance Review:
Based on the legal ground that processing is necessary for the data controller to fulfill its legal obligations; Your personal data described in Paragraph 2.4 all Alinea may have to be used by “Basra”, for the purposes of complying with legal obligations regarding travel documentation and controls, illegal immigration, anti- money laundering, fraud and other crime prevention and financial sanctions, ensuring flight safety and security and to protect the lives and the property of our employees, our service providers and their employees and our passengers, preventing financial fraud and violation and ensuring overall legal compliance.
6.1. Basra may share your personal data within Iraq and abroad for the purposes and legal grounds specified in this section:
(i) Within the scope of our legitimate interests; business partners with whom we offer products and services or with whom we cooperate under the Basra Loyalty Program,
(ii) Within the scope of our legitimate interests; Group companies, service providers, authorized travel agents, other airlines we collaborate with as part of flight networks and partnerships, in each case participating in the delivery and performance of our products and services,
(iii) Based on the legal grounds of being explicitly stipulated by laws and being necessary for the data controller to fulfill its legal obligations; competent official authorities in Iraq and abroad, authorized to seek out information from “Basra” and other people and entities to the extent imposed on “Basra” by legal obligations,
(iv) Based on the legal grounds of being explicitly stipulated by laws and being necessary for the data controller to fulfill its legal obligations; competent official authorities acting on the grounds of public order, flight security and fulfillment of legal obligations arising from the applicable law where “Basra” operates flights.
(v) Based on the standard contractual clauses issued by the Personal Data Protection Board; your personal data may be shared with our business partners and suppliers located abroad.
6.2. For example, such information may be provided to a competent official authority as per Civil Aviation Laws and the applicable law or may be shared with competent official authorities outside of Iraq in accordance with the international treaties and Iraqi national law applicable to our international flights. On the other hand, handling service providers and travel agents are provided access to the “Basra” Reservation and Sales System in accordance with business requirements, to perform our flight operations and related services. These service providers are instructed as data processors to act as per our guidance and privacy protocols. Basra Loyalty Program membership information is not transferred to third parties. In addition to the foregoing, authorized personnel of our technical infrastructure and call center service providers have access to our IT systems, subject to our information security access protocols, regarding complaint and request management for all our products and services.
6.3. ”Basra” publishes the categories of personal data it uses for its operations, the purpose of use for each category, the relevant data subjects, data retention periods, third-party recipients and information security measures implemented across the organization on the Public Data Controllers.
7.1. You can always apply to “Basra” to: (a) understand if your personal data is processed; (b) request information on the processing of your personal data, (c) understand the purpose of processing for your personal data and whether these are used in line with this purpose; (d) know third parties to whom your personal data is transferred in Iraq and abroad and to inquire about the appropriate safeguards implemented for cross-border personal data transfers; (e) correct your incomplete or incorrect personal data processed and maintained; (f) request the destruction or anonymization of your personal data subject to the purposes for the processing of your personal data being fully exhausted; (g) have third parties notified of the transactions covered in items (e) and (f), (h) object to the results of any analysis of your personal data exclusively through automatic systems.
7.2. You can submit your requests in writing and signed, addressed to the Data Protection Officer, at our Company headquarters located at “St. No. 14, Al Mansour 601, Bldg. No. 03, Baghdad 10001, Iraq,” or send them to us using the Application Form available in the "Contact Us" section of the “Basra” Website.
8.1. Electronic marketing communication and consents required for such communication is regulated by the “Regulation on Commercial Communication and Electronic Marketing Communication”. Commercial electronic marketing communication will be performed based on your contact permissions provided during ticketing, Basra Loyalty Program membership registration or any other applicable medium. In this respect, and subject to your consent, you accept to receive commercial electronic marketing communication regarding the promotion of products and services offered by “Basra” and “Basra”’ business partners, new products and services, special flight offers, other information regarding your trip or information “Basra” may consider to be in your interest. You can always choose not to receive such communication for the future on all or part of your contact details through following the options provided in the relevant marketing communication.
9.1. If you believe that “Basra” has incorrect or incomplete information on your personal data, please Contact Us as soon as possible. “Basra” will correct the information that is incorrect or incomplete.
9.2. You can access or modify your personal information regarding your Basra Loyalty Program membership though the “Edit Profile” tab under the Basra Loyalty Program page through the “Basra” Website or the “Basra” Mobile Applications.
10.1. The protection of your privacy is important for us. All information you submit to us through the “Basra” Website and the “Basra” Mobile Applications are protected by 128 Bit SSL (Secure Sockets Layer), an encrypted communication tool. Once the relevant information reached us, it is protected according to our security and privacy standards. To benefit from SSL, your web browser must support SSL and your browser options should enable the use of SSL.
10.2. “Basra” security and privacy standards are in line with the Information Security Management System. The “Basra” Website is certified with the Security Seal
10.3. Each Basra Loyalty Program member will have a username and a password. “Username” is unique for each member and cannot be assigned to another user. The “password” is created by and is known only to the member. Members can change their passwords as permitted by membership program rules. Creating and maintaining password security is the obligation of the user. “Basra” does not assume any responsibility in respect of the misuse of passwords. Likewise, it is the passenger’s or his/her agent’s responsibility to maintain the privacy of the PNR produced uniquely for your transactions through different communication and sales channels. Others may access your reservation details if your PNR information is disclosed to third parties.
10.4. Your data is maintained only to the extent necessitated by our business processes or legal obligations. In line with PCI DSS, details of your credit cards are not maintained on our servers.
11.1. The “Basra” Website contains links to third-party websites, allowing you to access content prepared by third parties by hyperlinks. “Basra” has no authority on the linked third-party websites and does not assume any responsibility for third-party content. The terms and conditions applicable to the “Basra” Website will not apply to your access and use of third-party websites.
11.2. You are fully responsible for your access, content, use and communication to or through the linked third-party websites. All personal data transfer to be carried out through the linked third-party websites will be subject to the information, other notifications and rules determined and published by the third-party operating the website and acting as the data controller under applicable law.
12.1. Tracking technologies such as cookies, pixels, gifs are small text files which are installed on your devices such as tablets, phones or computers when you use online applications such as websites or mobile applications. Through cookies, the servers of our websites and applications recognize your devices and, for instance, manage the traffic on the website. Cookies also help us to analyze the number of visitors and the audience of our website so that we can improve our software to offer you a better experience and, in case you prefer, to personalize the advertisements you view during your use of the internet.
12.2. There are four different categories of cookies based on their purpose: Essential Cookies, Performance and Analytics Cookies, Functionality Cookies, and Personalized Advertising and Marketing Cookies.
12.3. Besides cookies, pixel and similar file applications and internet-based advertisement, promotion and marketing functions may be used in websites for similar purposes.
12.4. “Basra” uses Essential Cookies, Performance and Analytics Cookies, Functionality Cookies and Personalized Advertising and Marketing Cookies on the “Basra” Website.
a) Essential Cookies: Essential cookies are the cookies that are installed on your device while you are browsing the Website and are required for the smooth functioning of the online services offered. These cookies make it possible to visit the “Basra” Website and to benefit from its features.
b) Performance and Analytics Cookies: These cookies store information about how often the website is visited, any relevant error messages received, the duration of the visit and the user’s use of the website. This information is used to improve the website performance. Performance cookies enable us to track and analyze the number of people viewing the Website and the traffic received by the Website. Thanks to these cookies, information about which areas on the Website are visited most frequently or less frequently can be obtained and the traffic of the Website can be optimized.
c) Functionality Cookies: Functionality cookies are used for the purposes of personalization and remembering preferences/choices on the Website. These cookies are used to provide functionality other than Essential Cookies.
d) Personalized Advertising and Marketing Cookies: Personalized advertising cookies are used to promote personalized products and services to you on the “Basra” Website or in other platforms apart from the “Basra” Website in accordance with your viewing history and visitor profile.
12.5. “Basra” Internet Site uses both first-party cookies (installed by the website you are visiting) and third- party cookies (installed by providers other than the website you are visiting).
12.6. In general, internet browsers are pre-defined to automatically accept cookies. Browsers can be adjusted to disable cookies or to alert users when a cookie has been sent to their device. Because cookie management varies from browser to browser, further information can be obtained from the relevant browser’s information website. For details on how to delete or disable cookies or for general information on cookies, please see www.allaboutcookies.org.
12.7. You can accept or reject cookies. You can enable or disable cookies by changing the settings of your internet browser. For information on how to change your browser settings and how to delete cookies please see your browser’s instructions. Please bear in mind that when cookies are disables, some of the website’s features will change. Please refer to the websites below for information about disabling third-party cookies:
a. Mozilla Firefox
b. Internet Explorer
c. Google Chrome
d. Opera
e. Safari
f. iOS
12.8. When you visit the “Basra” Website, you can make your choices on cookies upon being prompted by our cookie’s privacy notification. You can also adjust privacy settings for your “Basra” Mobile Application through your mobile device’s security settings.
