Welcome to EVA Air

This application uses cookies

Privacy Protection

last updated on 29 Dec, 2023

EVA AIR (hereinafter referred to as "the Company") believes that personal data belongs to each data subject, including traveler, visitor, member, etc, referred to collectively as "You". Safeguarding the personal data entrusted to the Company and Your privacy is the responsibility of the Company.

By commencing or continuing the use of the Company's services, You signify that You have read, understood, and agreed to the Company's Privacy Policy (hereinafter referred to as "this Policy"). The Company may periodically revise this Policy to ensure the lawful protection of Your personal data and privacy. The most recent version, clearly indicating the update date, is available on our Company's website. Unless otherwise specified at the time of publication, any changes to this Policy will become effective immediately and supersede all previous versions.

The Company encourages You to be aware of Your rights regarding personal data and privacy, enabling You to use the tailored services provided by the Company with peace of confidence. Herein, in accordance with the Personal Data Protection Act of the Republic of China (hereinafter referred to as "Taiwan"),the General Data Protection Regulation of the European Union (hereinafter referred to as "GDPR"), the California Privacy Rights Act (hereinafter referred to as "CPRA") and other applicable data protection laws, regulations (hereinafter collectively referred to as “the applicable data protection laws”), the Company informs You of the following provisions regarding the protection of personal data and privacy.

Purpose of Personal Data Collection

The Company collects Your personal data for the following purposes:

  1. Establishment of reservations and related information for ticketing.
  2. Ticketing notifications and issuing itineraries.
  3. Transportation management.
  4. Provision of various consumer, traveler, and member-related services and management.
  5. Handling of other exceptional services, customer complaints, and opinions.
  6. Payment processing.
  7. Baggage claims.
  8. Marketing activities.
  9. Online shopping.
  10. In-flight shopping.
  11. Purchase of additional goods and services.
  12. Online advertising.
  13. Statistical surveys and analysis for service quality improvement.

In addition to the aforementioned scope of this Policy, the Company may use or exceptionably utilize Your information for specific purposes due to the following situations:

  1. To comply with the applicable laws and regulations of both domestic and international jurisdiction, including but not limited to civil aviation, customs, diplomacy, public health (quarantine), law enforcement, and judicial investigation.
  2. In the interest of public interest.
  3. To prevent risks to Your life, body, freedom, or property.
  4. To prevent significant harm to the rights and interests of individuals other than Yours .
  5. With Your consent or when it is in Your best interests.
  6. In accordance with Article 6, paragraph 1, subparagraphs of the Personal Data Protection Act of Taiwan and Article 9(2) of the GDPR.

Methods of Personal Data Collection

The Company will collect Your personal data through the following methods and channels:

  1. When You:
    • Become a member of "Infinity MileageLands,"or "EVA Fans."
    • Book, purchase, or pre-order products or services, including various add-on services, high-speed rail tickets, and online or in-flight shopping. Or participate in offline or online activities including online advertisements.
    • Use online services (such as seat or meal selection, check-in, SMS registration, flight feedback) or contact our customer service channels (including service centers, town or airport counters) for onward services.
    • Consent to the Company's use of cookies and similar tracking technologies.
  2. When You participate in the Company's market research activities (including marketing statistics) and fill out forms or questionnaires.
  3. The Company may collect or receive Your personal data through other third parties:
    • Agents who book tickets or itineraries on behalf of Your .
    • Government, law enforcement, and judicial agencies in various countries.

Please be well noted that when You book or purchase travel-related products (including car rentals, local transportation, accommodation, etc.) other than those sold by the Company through its channels (including the global, duty-free or mobile websites), Your personal data may be collected, processed, and used by third parties. The third parties’ collection and use Your personal data will be subject to their own privacy policies and please read their privacy policies carefully before deciding whether to consent to them.

Categories of Collected Personal Data

Through the aforementioned methods and channels of personal data collection, the Company may collect, process, and utilize Your personal data, including but not limited to:

  1. Identifiable Personal Information:

    Name, title, address, office (company) address, home phone number, mobile phone number, online platform account, communication and domicile addresses, email addresses, records providing online identity verification or inquiry services, user passwords, location Information (IP addresses, GPS Location), cookies, device unique identifiers, or any other personally identifiable information.

  2. Identifiable Financial Information:

    Financial institution account numbers and names, credit card or debit card numbers and other personal numbers or accounts.

  3. Personally identifiable information (PII) contained in government data:

    ID numbers, unified certificate numbers, disability numbers, license numbers, passport numbers, etc.

  4. Information About Personal Descriptions:

    Age, gender, date of birth, place of birth, nationality, voice, etc.

  5. Details About Other Family Members (Personal family member information):

    Details about children, dependents, other family members or relatives, parents, cohabitants, and relatives residing abroad and in mainland China.

  6. Information About Residence and Facilities:

    Information about residence addresses, etc.

  7. Details About Travel and Other Migration:

    Details about migrations and travels, past foreign passports, residence certificates, and work permits.

  8. Information About Leisure Activities and Interests:

    Hobbies, sports and other interests, etc.

  9. Occupational Information:

    Various occupational information, position, title, etc.

  10. Compensation Information:

    Details about compensation claims (contractual content, compensation items, quantity), amounts, etc.

  11. Health Record Information:

    Medical reports, treatment and diagnosis records, medical diagnosis certificate, test results, type of disabilities, levels, validity periods, disability handbook certificate numbers, and contacts, etc.

  12. Other Data (Data Uncategorized):

    Unclassifiable letters, files, reports, recordings, emails or Your feedback (letters, emails), etc.

Special Personal Data

Depending on the specific case, the Company may be subject to single, multi-national, or various personal data protection laws when processing Your personal data. This may result in certain personal data being classified as special or sensitive types of personal data, such as biometric identification, health-related information, etc. In principle, the Company does not process the aforementioned special or sensitive types of personal data unless required by applicable laws. However, if You voluntarily provide such data to facilitate the Company's processing of Your personalized needs, the Company will collect, process, and utilize the data in accordance with relevant legal requirements.

It is particularly emphasized that if You are unable to provide the personal data necessary for the selected service scope, the Company may be unable to complete all or part of the service and transaction.

Usage of Personal Data

The Company will use your personal data upon your consent in the following ways to fulfill the services per Your request, as well as safeguarding Your rights:

  1. In addition to ticket purchase and any other pre-paid services, the Company will use Your personal data to:
    • book, issue tickets and create related records including ticketing notifications, certificates of ticket issuance, receipts, invoices, fare information, purchasing information and related online services(including shopping), etc.
    • submit to the respective financial institution for the ticket purchase process (e.g., for credit card authorization or bank transfer) before the ticket purchase is complete, as well as safeguarding the security and reliability of transaction.
    • send flight-related reminder and order information by emails, app notifications or text messages.
  2. Transfer (including cross-border transfer) of Your personal data to the Company and its contractors, agencies, subsidiaries, affiliates, group, immigration authorities of the arrival country and business partners (hereinafter collectively referred to as “the Company's partners”), for the provision of products and services which include booking, ticketing, local transportation, check-in, shopping, texting, affiliated marketing, loyalty program, and various on-line and off-line activities.
  3. Promote the services and products of the Company and/or of a third-party contract partner, and the Company's partners. Opt-out will be provided to You during the initial and subsequent marketing campaigns to secure your rights. You can always choose to opt out of receiving such marketing information through the aforementioned options even You’ve agreed before.

Personal Data Usage Period

The Company will retain the personal data You provide based on the following factors:

  1. Specific collection purposes.
  2. Relevant laws and regulations, such as the Civil Code , Personal Data Protection Act of Taiwan, GDPR, CPRA and other applicable regulations.
  3. Necessity to fulfill the contract (which may be longer than the periods specified in the aforementioned laws and regulations).
  4. Retention periods specified in individual contracts between You and the Company.
  5. Required by government and judicial investigations or litigation.

The Company will delete your personal data automatically when it is no longer required for the purpose of collection or when the retention period expires.

Region of Personal Data Use and Cross-Border Transfer

Your personal data will be transmitted (including domestic and cross-border transfer) and stored in a secure information environment. It will be processed and utilized by business offices of the Company and UNI AIRWAYS CORPORATION operated to fulfill the services You require.

To achieve the above purposes, the Company will adopt adequate safeguard measures to comply with applicable personal data protection laws, relevant regulations, and the requirements of this Policy.

Data Protection Measures and Contact Information

To ensure that all personnel of the Company, as well as employees of vendors and their temporary employees, visitors, and others with business dealings with the Company, comply with relevant laws in the collection, processing, and utilization of Your personal data, the Company has established guidelines (EVA Air Personal Data File Security Maintenance Plan) as regulations for various operational processes.

The following security measures are adopted to protect the personal data You provide to the Company, ensuring the confidentiality, integrity, and availability of Your personal data:

  1. Access to Your personal data must pass through the Company's identity and access control mechanisms.
  2. The Company and its employees and outsourced vendors are contractually obligated to maintain confidentiality when collecting, processing, or utilizing Your personal data. They must also adhere to the Company's information security policies and regulations.
  3. Annual information security and personal data protection education and training are provided to employees to enhance compliance awareness.
  4. Annual internal compliance audits of the collection, processing, and utilization of Your personal data are conducted, reviewing the legality of internal policies. External and internal issues are collected, and requests from relevant stakeholders are incorporated into risk assessments, integrated into risk management procedures to identify potential risks and address them promptly.
  5. Twice a year, external independent organizations audit the Company's personal data protection management measures to strengthen control mechanisms from an independent and objective perspective for effective implementation.
  6. The Company's network infrastructure has passed ISO 27001 certification, ensuring secure transmission through high-tech encryption methods for online transactions and personal confidential data. Data is encrypted before online transmission to prevent interception and misuse.
  7. The Company adopts a zero-tolerance policy for violations of personal data protection. If an investigation reveals confirmed involvement in violations of applicable personal data protection regulations, including failure by individuals with supervisory responsibilities to report misconduct, the Company will immediately review and improve management measures. Disciplinary actions will be taken in accordance with employment contracts, internal disciplinary regulations, and procedures, including dismissal.
  8. If You have any opinions on this Policy, You can contact us through the following channels:

    EVA Airways Corporation
    Data Protection Officer/Personal Information Protection Officer
    376, Section 1, XinNan Road, Luzhu District, Taoyuan City 33801, Taiwan

    DPO@evaair.com

Your Rights Regarding Personal Data

Once You have provided the Company with Your personal data, the company will collect, process, and utilize it within the scope and purposes to which You have consented. You are entitled to exercise the following rights in accordance with the applicable data protection laws:

  1. Inquiry or Request for Access.
  2. Request for Copy.
  3. Request for Supplementary or Correction.
  4. Restriction of Collection, Processing, or Utilization.
  5. Request for Deletion: You may request the deletion or erasure of Your personal data. However, if the processing of Your personal data is deemed necessary and compliant with relevant personal data regulations, the data may not be subject to deletion or erasure, and the Company may be unable to proceed or respond accordingly.
  6. Refusal of Marketing, Request to withdraw from Marketing: You have the right to refuse the company's processing of Your personal data for the purpose of direct marketing of the company's products or services. For refusal or rejection of marketing, please refer to the content of point 3 under subject "Usage of Personal Data".
  7. Request for Restriction of Processing.
  8. Request for Data Portability.
  9. Restriction of Automated Decision-Making.

If You are a resident of California, You also have the right to exercise the following rights:

  1. Right to Deletion: In accordance with CPRA, the Company will notify third-party vendors who have received Your personal data to delete it, not limited to the data stored by the Company.
  2. Right to Know Request: In compliance with CPRA, You can request the Company to disclose the types of personal data collected within the past 12 months (from the date of Your request), collection sources, and recipients of Your personal data sold or shared for business purposes.
  3. Right to Opt-Out of Sale or Sharing of Personal Data: If You wish to exercise this right, please use the service hotline provided in point 6 or download the application form (Click on this link to download the Personal Data Rights and Privacy Request Form) and submit it to the Company's offices worldwide.
  4. Right to Restrict the Use and Disclosure of Sensitive Personal Data: You may request the Company to limit the use of Your sensitive personal data to purposes necessary for providing services or products.
  5. Right to Non-Discrimination: The Company will not treat You differently for exercising the rights granted by CPRA.
  6. Rights Exercise Hotline: You can exercise Your rights granted by CPRA through the Company's service hotline at +1-800-695-1188 in the Americas.

You can exercise the rights under this Policy or applicable personal data laws. Upon verification of Your identity, the Company will process Your requests as soon as possible. If You request the deletion, non-sale, or non-sharing of Your personal data, You need to download the application form the Company's global website (Click on this link to download the Personal Data Rights and Privacy Request Form). After completing the form, submit it to the Company's offices worldwide.

If the personal data provided by You is incorrect or incomplete (such as using a nickname), preventing the Company from verifying Your true identity, the Company may be unable to respond to Your privacy rights claims. In accordance with legal requirements, the Company may reject Your requests and provide explanations for such refusals.

Cookies

EVA AIR is committed to protecting your privacy.

You are encouraged to know all your rights about using the services of this website provided by EVA Airways Corporation (hereinafter ‘the Company’ or ‘EVA AIR’). EVA AIR hereby makes the following statement in accordance with Article 8 of the Personal Information Protection Act of Taiwan and Article 7 of EU General Data Protection Regulation, which includes the guidelines we use for protecting the information you provide us during a visit to our web-site.

Collection of information through 'Cookies'

A 'cookie' is a small piece of data sent by a web server to be stored on a web browser. The data collected from cookies is to differentiate the preference of the individual user. Most of the web-sites may use cookies to provide services to their customers. However, a cookie will only identify the use of the computer other than the user. Therefore, you can configure your browser to not accept cookies if you choose, however, if you disable your cookies, you will not have access to certain personalized features or participate in all of the activities on the web-sites.

Keeping our commitment:

EVA AIR will not disclose the data obtained from the Cookies in order to safeguard your privacy. EVA AIR may only use cookies to collect information through your web browser for the following purposes:

  • To provide you with the personalized transaction and all kinds of services, and invite you to participate in all of the activities on the web-site.
  • To identify your web preferences for our reference in order to provide you with better services. To disable the use of cookies, please visit the EVA AIR web-site to get more information.
  • To assist you in this process, we provide links of some of the most popular web browsers:

Internet Explorer™- https://support.microsoft.com/en-us/help/17442/

windows-internet-explorer-delete-manage-cookies Chrome™- https://support.google.com/chrome/answer/95647?hl=en&hlrm=en 

Firefox™- https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Information about the cookies we use

  • Essential Cookie - Essential cookies are essential for the operation of our website that will let you move around our website freely and use functions on the websites. These cookies don’t gather your personal identifiable information that could be used for marketing and are not disclosed to any third party.
  • Functional Cookies – Functional cookies are used to remember choices you make and improve functionality and your personal features on our web-site.
  • Performance Cookies - Performance cookies collect information about which pages visitors go to most often, and if you experienced any errors. These cookies help us to improve the performance and user experience of our website.
  • Advertising Cookies - In order to provide you with the most relevant information about our services and products, we use Advertising cookies to enable us and our advertising agencies to serve you with advertising campaigns that we believe are relevant to you and your interests. You might see these advertisements on the websites of EVA Air and on other sites you visit.

Use of third-party cookies

We place third-party tracking code on the website, where a short text is written on the user’s hard disk through the browser to read cookies for the following usage:

  • Determine and track visitor volume linked from third-party website’s online advertisement to our website
  • Track the usage of our website
  • Put the promotion information or advertisement of products searched by the user.
  • To disable the use of cookies, please visit the EVA AIR web-site for more information. To assist you in this process, we provide links of some of the most popular web browsers:

EVA AIR partners advertising networks, Google, Knorex, Facebbok and Criteo, to capture non-personally identifiable data from you through third-party cookies. This enables Google, Knorex, Facebbok and Criteo to display targeted and relevant messages from selected third-party websites, based on your viewing behavior on the EVA AIR websites and other selected websites.

Your non-personally identifiable data is shared by EVA AIR with Google, Knorex, Facebbok and Criteo in the strictest confidence, for the unique purpose of serving more relevant advertising. Standards have been defined to ensure appropriate advertising is served, and all served relevant advertisements offer the possibility for you to opt out of such selective advertising by Google, Knorex, Facebbok and Criteo.

To opt-out of NAI members’ or DAA participants’ cookies, visit:

Cookie management and browser settings

Most computers and mobile devices browsers are typically set up to accept cookies. If you do not consent to our use of cookie and wish to disable the cookies which are set by EVA Air websites, or any other website, you can do this by changing your browser settings. You can find out how to amend your cookie preference in the help function of your browser.

To assist you in this process, we provide links of some of the most popular web browsers:

Internet Explorer™- https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies 

Chrome™- https://support.google.com/chrome/answer/95647?hl=en&hlrm=en 

Firefox™- https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences 

If you choose to withhold consent and block cookies, you may not be able to access all or part of our websites. To find out more about cookies and how to manage and delete them, you can also visit www.allaboutcookies.org.

Collection of IP Address

An Internet Protocol address (IP address) is a numerical label assigned to each device participating in internet that uses the Internet Protocol for communication. When you access our website and mobile services, we collect your IP address. We store this information to help us manage security, analyze how our website and mobile services interact with you and do the product marketing and advertisement. We also use IP address to block the visitor, who is unable to comply with the terms of service, from accessing to our website and mobile services.

Collection of E-mail Address

EVA AIR will follow the guidelines for “ Categories of personal information collected” in using the e-mail addresses collected from you to deliver relevant information that you have agreed to receive, including transaction information, services and special privileges, various information notice of Infinity MileageLands such as mileage statement, card tier expired or mileage expired letter, notice of special privileges for member only, etc. and will make known on the e-mail that it is sent by EVA AIR. Our email may contain electronic images known as Web Beacons that allow us to know whether and how many times, our email are opend and verify any click through to links within the email. The Web Beacons will be deleted when you delete the email.

Data profiling and automated decision-making

Marketing activities of EVA AIR and its affiliates or service providers target specific information for users who make reservations through EVA AIR, including the total amount of the transaction and the system generated booking reference and travel itinerary, IP address, etc. We will use this information to observe the effectiveness of our marketing activities and may disclose this information to our partners for similar purposes. The third-party service provider organizes and reports on the collected information to provide better and more personalized transactions and various services.

  • To understand the habits of tourists, travelers, and members, as a reference for placing relevant marketing campaign information.
  • To unsubscribe the marketing/promotional message delivery, please visit the EVA AIR web-site to or contact EVA AIR local service center for more information. Link provided below:

https://www.evaair.com/en-us/customer-services/contact-us/contact/

Self-Protection

Please safeguard your personal information, additional services and all kinds of online services. Do not disclose your personal information to others. To prevent others from collecting and abusing your personal information, DO REMEMBER TO LOG OUT of the site when you complete a transaction (incl. Internet reservation, shopping, member contact or other data change), and close the window before you leave the site if you share a computer with others.

Modification of the Privacy & Security Statement

EVA AIR reserves the right to change these guidelines and disclaimers from time to time, and the content presented on this page is considered to be the latest version. Should a material modification to our Privacy & Security statement occur, we will post those changes on our website so that you are aware of the changes. EVA AIR also regularly reviews privacy protection/security statements to comply with applicable laws and regulations.

Secure Website

In order to protect yourself in the Cyber world, you should validate whether or not the website you're visiting is indeed a legitimate website. EVA Air website (www.evaair.com), EVA Sky Shop web-site (www.evaskyshop.com) and EVA Air mobile website (m.evaair.com) are secure site with the GeoTrust server Digital ID – of which enable secure communications between your browser and our website.

Transaction and Data Encryption

EVA AIR protects passenger transaction and privacy information with Secure Socket Layer (SSL) encryption technology, an industry standard for encrypting over the Internet, where text will be automatically encrypted before being securely dispatched over the Internet.

Governing Law and Jurisdiction

This Privacy and Security Statement is governed by and shall be construed in accordance with the laws of Taiwan. Any dispute on claim arising out of this statement will be subject to the exclusive jurisdiction of the Courts in Taoyuan, Taiwan.

Please contact us if you have any questions and comments regarding our Privacy and Security Statement.