The purpose of this privacy policy is to provide all information regarding the processing of your personal data and your rights under the General Data Protection Regulation (EU) 2016/679 (hereinafter, "GDPR") and the Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, "LOPDGDD").

1. Data controller

Air Nostrum Líneas Aéreas del Mediterráneo, S.A.U. (hereinafter, "Air Nostrum") with registered address at Avda. Comarques del País Valencia, 2, 46930 Quart de Poblet (Valencia), Spain, and with Tax Identification Number A-96302724, owner of the website hosted under the domain name www.airnostrum.es , informs you that the personal data that you provide or may provide in the future will be processed in accordance with the provisions of this policy.

Our contact address for any question related to how we treat your personal data is the following: "Departamento Jurídico: Protección de Datos de Air Nostrum" with address at Avda. Comarques del País Valencia, 2, 46930 Quart de Poblet (Valencia), Spain and e-mail address protecciondatos@airnostrum.es

2. How do we collect your personal data?

We obtain your personal data when you request information from us or make a request, query or complaint or when you interact with us by any means.

3. What is the legal base for the processing of your personal data?

The legal base for this processing is the consent given by you when you send us your request, query or complaint, as well as legitimate interest and the fulfilment of legal obligations.

4. For which purposes do we process your data?

- Relationship as a customer. We will process your personal data in order to deal with requests, queries or complaints that may be made through any of the e-mail addresses made available to you on this website.

We will be responsible for managing your customer relationship through the website to ensure proper management of our business relationship with you (dealing with your queries and requests relating to the services we offer).

- Customer service. When you contact us through our Customer Service Department or through the means of contact provided for this purpose and provide us with your data, we process them in order to manage a request, return or complaint, as well as to deal with any queries you may have.

5. Third parties personal data.

In the event that you provide us with data from third parties with whom you have any kind of relationship, we will process the data because we understand that you have notified these third parties and referred them to this privacy policy so that they are aware of how we process their data. However, we will inform them of this privacy policy as soon as we have the opportunity to do so.

6. When and for what reason may we provide your personal data to third parties?

Your data will be communicated to the Public Administrations and supervisory authorities to which Air Nostrum must provide said information by virtue of the legal obligations derived from its activity, as well as to the authorities and judicial bodies when appropriate.

Personal data may be communicated to third party service providers with whom we have signed the corresponding contract or data access clause to the extent that such communication is necessary to guarantee the provision of the services of the website. In any case, the necessary legal and organisational measures will be taken to guarantee the security of the data.

7. International data transfers.

Personal data collected by Air Nostrum may be transferred to, accessed and/or stored in locations and servers within the European Economic Area (EEA), and may be processed by resources and personnel operating outside the EEA who work for us or for one of our service providers. In this case, we will enter into appropriate agreements allowing access to and processing of data by the various entities in accordance with the purposes for which they are intended and taking the appropriate legal steps. In the event that international data transfers are carried out, Air Nostrum will adopt the pertinent legal measures such as the subscription of the corresponding standard clauses. If you would like to obtain more information on current transfers and the legal measures adopted to carry them out in accordance with the applicable regulations, you can send us a request for information to protecciondatos@airnostrum.es

8. How long will we keep your data?

The data provided will be kept for as long as is necessary to ensure compliance with Air Nostrum's legal obligations.

9. How do we guarantee data security?

Air Nostrum informs you that it has implemented the necessary technical and organisational security measures to guarantee the security of your personal data and prevent its alteration, loss, processing and/or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment.

10. Which are your rights?

The User may, under the terms established in the data protection regulations in force at any time, revoke at any time the authorisation granted for the processing and transfer of personal data, as well as exercise the rights of access, modification, deletion, opposition, the right to request the limitation of the processing of their personal data and the right to data portability.

For this purpose, you may submit a complaint to our Data Protection Legal Department by sending a written request with proof of your identity by e-mail to protecciondatos@airnostrum.es or via the postal address indicated in the first section of this policy.

Likewise, the User has the right to submit a complaint to the Spanish Data Protection Agency, through its address C/ Jorge Juan 6, CP. 28001, Madrid (Spain) or telematically through the website www.aepd.es