Privacy policy

Last modification: 03/05/23

Organisation responsible for processing

The organisation responsible for the processing of the personal data to which this Privacy and Protection of Personal data policy refers is BINTER CANARIAS S.A. (BINTER), with tax code A38666897, registered in the Companies Register of Las Palmas on sheet 214, volume 1671, section 8, page GC31164 and with its address for the purposes of this policy at C/ Ignacio Ellacuría Beascoechea 2, Parque Empresarial Melenara, 35214 Telde, Gran Canaria, Spain.

The service for the reservation and sale of air transport tickets through the Web sites www.bintercanarias.com, m.bintercanarias.com and the BINTER mobile application is provided by the mercantile organisation Operaciones Turísticas Canarias Viaja S.A (OTCV) with tax code A38876454 and its address in Calle El Pilar 28 – Local A - Entresuelo, 38002 Santa Cruz de Tenerife, Spain. For this, with regard to the personal data associated with the reservation and purchase of tickets on the above mentioned Web sites, both BINTER and OTCV will be responsible for the processing. You can consult the privacy policy of OTCV at https://www.canariasviaja.com/info/politica-de-privacidad/.

For reservations made through travel agents, providers of reservations systems or on flights of other airlines, the travel agency, the provider of the reservations system or the other company will also be responsible for the processing of your data. You can find further information on the relevant Web sites or at http://www.iatatravelcenter.com/privacy.

When the contracted services are provided by third parties such as, for example, car rental services, insurance or hotel reservation services, these third parties will be responsible for the processing, therefore applying their own privacy conditions and policies.

Collection of personal data

We collect personal data when you contract and use our services, browse our Web sites, use our mobile application or communicate with us to, for example, give us your requests, complaints or suggestions.

When you use our Web sites you will be informed which of the data requested are obligatory and which are voluntary for the correct provision of the service. Obligatory data not filled in or filled in incompletely or falsely may prevent the correct provision of the service.

When you enter any of our Web sites, information on the browsing will be collected, such as the IP address, browser version, operating system and the time spent anonymously on the site. This information is associated with your data when you accept conditions or contract services.

Purposes and legal basis of the processing

PurposeLegal basis

Management and processing of travel reservations, to provide the services contracted by the interested party and to ensure that they are provided suitably.

Care of unaccompanied minors and passengers with special needs.

Manage the check-in and boarding processes and ground assistant for passengers.

Provide the interested party with relevant information on the contracted services for their undertaking (such as, for example, changes, cancellations, delays or incidents).

Undertake procedures with third parties required for the fulfilment of the contract.

Management of payments.

Customer service. Manage requests for information, complaints and claims relating to the contracted services.

Contractual relationship

Complying with the legal obligations imposed on airlines by the authorities.

Management of immigration and Customs formalities.

Management of admission in international destinations. Management of passengers not admitted or deported.

Airport security.

Management of subsidies to passengers such as, for example, the subsidies for residence or large families.

Communication, management and coordination with the authorities in situations of emergency, catastrophise or force majeure.

Legal obligations

Participation in the BinterMás loyalty programme including:

 (I) Handling your application for participation in the “BinterMás” programme.

 (II) Management of any activity relating to the programme’s own ends as well as the integral management of the contractual relationship arising from your condition as member of the programme and holder of the BinterMás card.

 (III) Preparation of studies and analysis for the implementation of improvements and extensions of the benefits of the BinterMás programme.

 (IV) The periodic sending of information relating to the use of the BinterMás card, promotions, benefits and attentions that apply at any time in BINTER and in the participating companies or any other that offers special conditions for members of the programme, both by e-mail, conventional mail, SMS or any other communication system. All information will be sent by any of the means indicated by the member in the application to join the programme.

 (V) Use the history data to contribute to the purposes of the development, improvement, control and management of the contractual relationship and of the BinterMás programme.

Management of the requests for services provided by third parties such as, for example, car rental, offered in the BINTER sales channels and the communication of your data to the third party providing the service.

Periodic sending by e-mail of news, offers of flights, information on new routes, competitions and other promotions with the subscription to the Newsletter service.

Management of participation in promotions.

Personnel recruitment purposes. Management of CVs received.

Consent of the interested party

Direct marketing. Sending of commercial communications on the services offered by BINTER, promotions and offers, news relating to the company.

Undertaking of market analysis and studies.

Management of participation in promotions, draws and competitions.

Legitimate interest for the development of the business
Video surveillance to preserve the safety of people, property and facilities.Public interest

Recipients of your data

The data on the acquisition and purchase of tickets may be communicated to third part companies that provide payment services (among others, banks, savings banks, rural banks, issuers or handlers of cards or means of payment) for verification by those providers of operations undertaken in the acquisition of tickets. This communication is undertaken in virtue of the relations agreed between the acquirer and the issue of the means of payment as well as for the management of payments.

When you contract services provided by third party companies through BINTER, such as, for example, other airlines, car rental companies or insurance companies, the minimum data required to complete the contracting of the service requested by you will be communicated to the third party company.

If you participate in the BinterMás programme, your data may be given to the companies in the Sistema Binter, through any company that is a subsidiary of or participated in by BINTER, companies participating in or associated with the BinterMás programme, reservation systems and consultancies, marketing or logistics organisations, as long as this granting or communication is necessary to offer members the services of the programme itself and others that are specifically requested by the members at any time, the assignees always being obliged to maintain the strictest confidentiality of these data and to comply with the data protection legislation.

When you contract a reservation to fly to international destinations, your personal data may be sent to countries outside the European Economic Space to be able to provide you with the requested services and to comply with the obligations arising from the transport contract. Specifically, your data may be communicated to the immigration and Customs control authorities of other countries outside the EU and to companies that provide the required services to complete the transport.

Likewise, and in order to comply with the Organic Law 1/2020, we inform you that in the reservations of flights entering or leaving Spanish territory, or in extraordinary cases and with the prior approval of the Council of Ministers in national flights, which do not make stopovers in any other State, your personal data included in the PNR (Passenger Name Record) will be transmitted to the Passenger Information Unit, who as the Controller, from the moment of receipt, will process them for the purposes of prevention, detection, investigation and prosecution of terrorist offences and other serious crimes specifically defined in the aforementioned regulations. For all questions relating to the processing of your PNR data you may contact the Data Protection Officer of the aforementioned Unit.

You can consult the companies that form the Sistema Binter at:

Sistema Binter companies

Conservation criteria

The criteria for the conservation of personal data are:

(I) While necessary to achieve the purpose of processing.

(II) There is a legal obligation of conservation.

(III) The duration of the contractual relationship.

(IV) To attend to the responsibilities arising from a contractual relationship or from the processing.

(V) Request for suppression by the interested party for whatever reason.

Your rights

You may request your unsubscription from the sending of electronic communications by BINTER by e-mail to [email protected] with the subject "Unsubscription of communications" and giving your personal data in the message body.

At any time you can know which data about you have been collected and processed by BINTER, correct the information that is inexact, cancel those data or oppose their processing, this last right being limited to cases in which your consent is not necessary for processing your data, as long as the law does not forbid it, and when there are well-founded and legitimate grounds relating to a particular personal situation or when the processing of your personal data is carried out for advertising and commercial prospection purposes.

Users have the right to request BINTER to limit the processing of their personal data when they comply with the legal requirements. Users have the right to receive the personal data involved in a structured format of common use and mechanical reading and that have been provided to BINTER or request BINTER that they be sent directly to another responsible organisation when technically possible.

Finally, you are informed that any interested party may present a claim to the Spanish Data Protection Agency (www.aepd.es), especially when no satisfaction has been obtained in the exercising of your rights.

These rights may be exercised with a written communication, attaching a copy of your identity document, passport or other legally valid means that accredit the identity of the interested party, sent to our Data Protection Delegate by any of the following means:

  • Post:
    BINTER Canarias
    Data Protection Delegate
    C/ Ignacio Ellacuría Beascoechea, 2 - Parque Empresarial Melenara
    35214 Telde, Gran Canaria
    Spain
  • E-mail: [email protected]

To guarantee that your request can be handled suitably, we need you to provide the following information with it:

  • Name and surname(s).
  • Identity document (national identity card, foreigners identity card or passport.
  • At least one form of contract (e-mail, telephone, postal address).
  • Purpose of the request.
  • Copy of an identity document or passport to be able to check your identity.

The exercising of these rights is very personal so that only the interested party may exercise them with respect to the personal data of which he/she is the owner. However, when admitted, the authorised representative of the interested party may exercise the rights on his/her behalf in the above terms, as long as the communication is accompanied with the document accrediting this representation.

Data Protection Delegate

For any doubts, recommendation or complaints relating to privacy and the protection of personal data or for the exercising of your rights, you can contact our Data Protection Delegate directly at the e-mail address [email protected].

Other contact data

For other matters not relating to this policy, all the contact information is available on our Web site, contact.

Data security

BINTER guarantees the adopting of suitable measures to guarantee the security of the personal data and to prevent their alteration, loss, unauthorised processing or access, taking into account the state of the technology, the nature of the data stored and the risks to which they opposed whether they arise from human action or from the physical or natural medium.

If third party companies that supply services have access to the personal data for the purposes of providing a given service to BINTER such as, for example, as information and not limitation, services companies in the sectors of insurance companies, call centre services, security companies and logistics companies, BINTER guarantees that in the services provision contracts signed with these companies, the security measures that these third-party companies are obliged to adopt because of the nature of the data to which they have access are stipulated in accordance with the current data protection regulations.

Changes in the privacy policy

We may occasionally modify or adapt this privacy and data protection policy. The conditions current at any time can be found on this page. We recommend that you visit it periodically or when you are about to contract a service or interact with us.

Processing associated with the use of defibrillators in aircraft and data notification to the Canary Isles Health Service.

Processing Controller: Canary Isles Health Service

Likewise, Binter will assume joint control over the personal data, to the extent that it is obliged to record and conserve inflight incidents.

Purpose: To record the use of onboard defibrillators, in the event of emergencies requiring their usage. The details of the incident and the data collected of the person(s) affected and of the those involved therein are gathered on a form that is sent to the Canary Isles Health Service, in compliance with legal requirements.

Lawfulness: Legal obligation, art. 6.1.c, GDPR, under the provisions set forth in DECREE DECRETO 157/2015, of 18 June, regulating the use of external semi-automatic and automatic defibrillators by first attenders in the Canary Isles Autonomous Community, and bearing in mind the characteristics of the processing, there may concur the protection of the vital interests of the data subject or another natural person art. 6.1.d, GPDR.

Conservation: If an event is recorded, the data will be sent to the Canary Isles Health Service within 24 hours of the defibrillator being used. Once such has been sent, Binter will erase any information associated with the processing.

Consignee: In fulfilment of a legal obligation, the data will be notified to the Canary Isles Health Service within 24 hours of the defibrillator being used.

International data transfers: Not anticipated.

Rights: Access, rectification, erasure and in some cases portability, objection or limitation of processing. These rights, given the situation of joint control, can be exercised indistinctly before the Canary Isles Health Service or Binter. If before the latter, you may request forms from us to exercise your rights and we will reply to your request within 30 days. You may send it to [email protected] or to the following postal address: C/ Ignacio Ellacuría Beascoechea, 2 Polígono Industrial Melenara 35214 Telde - Gran Canaria (Spain).