This Privacy Notice applies to all personal data you provide to us and also to all personal data which we collect about you, either about how you use our website or mobile application (using "cookies") or about your travel patterns if you make bookings with us.
1. WHO WE ARE?
Hungary Ltd. (“Wizz Air” or “we” or “us”) (registered seat: Laurus Offices,
Kőér street 2/A, Building B, II-V., H-1103, Budapest, Hungary; company
registration number: 01-10-140174) acts as a data controller. It means Wizz Air
decides how your personal data is processed and for what purposes.
If you are the customer or passenger of Wizz Air UK Limited (London Luton airport, Luton, LU2 9LY, United Kingdom) the present Privacy Notice applies to you accordingly. In these cases Wizz Air
Hungary Ltd. acts as joint data controller or data processor in respect of the
processing of your personal data. When Wizz Air UK Limited and WiZZ Air Hungary
Ltd. act as joint data controllers, they will, in a transparent manner, determine
their respective responsibilities for compliance with the obligations under
mandatory data protection laws, in particular as regards the exercising of your
rights and their respective duties to provide the information required by such
laws, by means of an arrangement between them. Irrespective of the terms of
such arrangement, you may exercise your rights under mandatory data protection
laws in respect of and against each of the controllers.
As a data controller, Wizz Air is registered by
the Hungarian National Authority for Data Protection and Freedom of Information
(“NAIH”) (the registration number related to the
processing of passenger data is 01001, the registration number related to
direct marketing is NAIH-83118/2015 and the registration number related to
database development is NAIH-83120/2015NAIH).
2. HOW TO CONTACT US
details of Wizz Air
In respect of data
protection related questions, to exercise your rights or file a complaint,
please contact the Data Protection Officer by sending an email to the email
address set forth below. You may alternatively contact us by post at the following address or by choosing the relevant data protection related category of request after logging in to your Wizz Air account or clicking on this link.
details of Wizz Air’s Data Protection Officer
Wizz Air has a Data Protection
Officer (DPO) to whom you can turn with your questions.
Contact details of the DPO:
Email: email@example.com Postal address:
attn.: DPO; Wizz Air Hungary Ltd., Laurus Offices, Kőér street 2/A, Building B,
II-V., H-1103 Budapest.
PERSONAL DATA –
WHAT IS IT?
data relates to a living
individual who can clearly be identified from that data, in particular
your name, address, phone number, email address, credit or bank card number,
information on special care. Identification can be made by the
or in conjunction with any other information otherwise in the data
controller’s possession or likely to come into such possession.
4. HOW DO WE COLLECT
We collect your data on our website, mobile app, via email, call centre and post.
5. WHY DO WE COLLECT
(DATA PROCESSING PURPOSES)
We collect and
use your personal data for the following purposes:
a) To create
your WIZZ Account, for this purpose we collect the following data: name, gender,
mobile phone number, email address, nationality (citizenship).
b) In order to process your
booking, we collect the following data: passenger names,
addresses, passport or Government issued EU National ID card numbers, telephone
numbers, e-mail and IP addresses, credit/debit card or other payment details.
c) To deliver the services
you have purchased from us, for this purpose we collect the following data:
passenger name, nationality, gender, phone number, email address, credit or
bank card details, information on special care (sensitive personal data),
flight details, confirmation number, date of birth, details of travel
documents, and WIZZ Account number.
d) To facilitate the
purchase of third parties’ services or products on our website. For this
purpose, we collect the following data: passenger name, nationality, gender, phone
number, email address, credit or bank card details, information on special
care, flight details, confirmation number, date of birth, details of travel
documents, and WIZZ Account number.
e) To communicate with
you (for example in the event of flight disruption). For this purpose, we
collect the following data: name and contact details, flight.
f) To send you reminders on
unfinished bookings. For this purpose, we collect the following data:
selected starting point and destination, one-way or return flight, departure and
arrival times, number of passengers, selected fare type, total amount of fare
price, whether the user is a newsletter subscriber, booking type (normal, Wizz
Discount Club, group), selected services, language of the site/Wizz Air
g) To send you newsletters.
For this purpose, we collect the following data: name and contact details,
details of your historical searches.
h) To provide offers
tailored to your preferences. For this purpose, we collect the following data:
name and contact details, details of your historical searches and historic
i) To communicate with you to carry
out customer satisfaction survey for analytical purposes, for quality
improvements, for service developments, to improve the performance of the
website, to measure the success of our advertising campaigns or to tailor
services to your needs. For this purpose we collect the following data: name
and contact details and historic booking details.
j) To support
administrative and legal purposes for example anti-fraud screening, for
safety and security purposes. For this purpose, we collect the following data:
passenger name, address, phone number, IP address, geolocation data, booking
and transaction history, credit/debit card details.
k) To comply with the mandatory provisions of
the applicable laws. For this purpose, we collect the following data:
personal data related to immigration and customs control, personal data related
to invoicing, data related to persons requesting special assistance; personal
data related to our obligations in case of flight disruption or flight delay.
We would like to draw your attention to the fact
that the personal data you provide us with duringthe creation of your WIZZ Account will be used
for booking your flight as a passenger with us.
This is why you should make sure that you provide us with personal data during the registration process that exactly matches your travel document that you use for travelling with us.
If your personal data is inaccurate or incomplete, you may have the right to obtain from us the rectification or completion of your personal data according to point 10.2. of this Privacy
6.1. PROCESSING SENSITIVE
cases, we also need to process special categories of personal data (sensitive personal data), e.g. health related data, for example when you request
special assistance from us and/or an airport operator (such as the provision of
oxygen), or when you provide us with information about your fitness to fly
(for instance if you are pregnant, or allergy information) for safety reasons.
To process your sensitive personal data, we will
need to obtain your specific consent, otherwise, we may not be able to provide
you with the requested service(s). We may use your sensitive personal data, where necessary, in order to establish, exercise or defend legal claims, and to
ensure compliance with the mandatory legal requirements. The transfer of your
sensitive personal data to third parties, even outside the European Economic
Area, may also be required during the provision of the services requested from
us based on mandatory legal provisions.
Based on your consent, we perform profiling in order
to provide you with offers tailored to your needs, preferences and interests.
Offers might include, inter alia, discounts on flight tickets, discounts on other
services, vouchers provided in exchange of participation in surveys. Offers
might mean offers of Wizz Air Hungary Ltd., Wizz Air UK Limited or of our
contracted partners (e.g. banks issuing WIZZ branded credit/debit cards, with
special benefits) or other third persons. The offers might be provided via
email, phone or push notifications.
Profiling is any form of automated processing of your personal data, consisting of the use of personal data to evaluate certain personal aspects relating to you, in particular to analyse or predict aspects concerning economic situation, health, personal preferences, interests, reliability, behaviour or your location/movements.
7. LEGAL BASIS OF DATA PROCESSING
The legal basis of data processing activities
indicated in point a)-f) of Section 5 of this Privacy Notice lies in Subsection
(a) Paragraph (1) of Article 5 of Act CXII of 2011 on the Right of
Informational Self-Determination and on Freedom of Information (hereinafter the
“Freedom of information Act”), i.e. based on your consent, and
commencing from 25 May 2018 also Article 6 (1) (b) of the General Data
Protection Regulation (Regulation No. 2016/679 of the European Parliament and
of the Council) ("GDPR"), i.e. such processing activities are
necessary for the performance of the contract or in order to take steps at the request of data, subject to entering into a contract.
The legal basis of data processing activities
indicated in point g)-h) of Section 5 of this Privacy Notice lies in Subsection
(a) Paragraph (1) of Article 5 and Subsection (a) Paragraph (2) of Article 5 of
the Freedom of information Act, i.e. based on your consent, and commencing from
25 May 2018 also Article 6 (1) (a) and Article 9 (2) (a) of the GDPR, i.e. such
processing activities will be based on your consent.
The legal basis of data processing activity indicated in point i)-j) of Section 5 of this Privacy Notice lies in Subsection (a) Paragraph (5) of Article 6 of the Freedom of Information Act, i.e. based on your consent, and commencing from 25 May 2018 also Article 6 (1) (f) of the GDPR, i.e. such processing activity will be based on Wizz Air’s legitimate interest. If the legal basis is the legitimate interest of Wizz
Air, we will carefully consider your interests and fundamental rights and
freedoms, and whether these override such legitimate interests (balancing
The legal basis of data processing activity
indicated in point k) of Section 5 of this Privacy Notice lies in Subsection
(b) Paragraph (1) of Article 5 and Subsection (a) Paragraph (5) of Article 6 of
the Freedom of information Act, i.e. based on your consent, and commencing from
25 May 2018 also Article 6 (1) (c) of the GDPR, i.e. such processing activity
is necessary for compliance with legal obligation(s).
of refusal/failure of providing personal data
Please be aware that we need the personal data listed in point b) of Section 5 in order to perform the General Conditions of Carriage and provide you with our services. If you do not provide us with the requested
personal data, we will not be able to provide you with all or parts of the
services you have requested.
If you withdraw your consent or do not provide the
consent for the use of your sensitive data mentioned in Section 6.1, we may not
be able to provide all or parts of the services you have requested. Please note
that in these circumstances you will not be able to cancel or obtain a refund
of any fees you have paid.
8. FOR HOW LONG DO WE KEEP YOUR PERSONAL
We process your personal data for
the time required consistent with the purposes set out in this Privacy Notice
or for the period of limitation prescribed in the relevant laws.
We keep your personal data for no longer than
reasonably necessary: for a period of 6 years from the fulfilment of the
contract concluded with us (i.e. deletion of your Wizz account) in order to
comply with applicable data retention laws.
We store internet search data
collected concerning you for four days.
In the case of accounting documents, the retention period is 8 years from the closing of the financial year, in accordance with Section 169 of Act C of 2000 on Accounting.
If a court or disciplinary procedure
is initiated, then the personal data will be retained until the termination of
the proceedings, including the duration of any possible remedy, which data
thereafter, in the case of civil claims, will be deleted after the civil law
statute of limitation runs.
In the case of consent-based
data processing, personal data will be processed until the consent is
9. FURTHER PROCESSING OF PERSONAL
If we wish to use your personal
data for a new purpose, not covered by this Privacy Notice, we will provide you
with a new notice explaining all conditions relating to the new processing prior
to the new processing takes place. If required, we will seek your consent
before commencing the new data processing activity.
10. YOUR PERSONAL DATA PROTECTION
Pursuant to the applicable data
protection law you may have the right:
request access to your personal data,
request rectification of your personal data,
request erasure of your personal data,
request restriction of processing of your personal data,
request data portability,
object to the processing of your personal data (including objection to
profiling as well as other rights in connection with automated decision-making),
withdraw your consent, and
to lodge a complaint with
the supervisory authority.
You may have the right to obtain
from us confirmation as to whether or not personal data concerning you is
processed, and, where that is the case, to request access to the personal data.
You may have the right to obtain a copy of the
personal data undergoing processing. We may request additional information from
you for identification or for further copies requested by you, we may charge a
reasonable fee based on administrative costs
You may have the right to obtain
from us the rectification of inaccurate personal data concerning you. Depending
on the purposes of the processing, you may have the right to have incomplete
personal data completed, including by means of providing a supplementary
Your right to rectification is provided by us free of charge in principle but in the case of passenger name changes in the existing booking up to 3 hours before the scheduled time of departure, we may charge you with the costs of the name change if certain conditions are met. For more information
in relation to our rules of name change correction, please click here.
to erasure (right to be forgotten)
Under certain circumstances you may have the right to
request from us the erasure of your personal data and we may be obliged to
erase such personal data. In such cases we will not be able to further provide
you with our services.
to restrict processing
Under certain circumstances you may have the right to request from us the restriction of the processing your personal data. In this case the respective data will be marked and may only be
processed by us for certain purposes.
to object and rights relating to automated decision-making
Under certain circumstances you
may have the right to object, on grounds relating to your particular situation,
at any time
to the processing of your personal data, including profiling, by us and we can
be required to no longer process your personal data.
Moreover, if your personal data
is processed based on our legitimate interest, you have the right to object at
any time to the processing of personal data concerning you for such purpose.
Furthermore, under certain
circumstances in case of automated individual decision-making, you have the
right to obtain human intervention.. We inform you that Wizz Air does not apply an automated decision-making mechanism.
to data portability
Under certain circumstances you may have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format (i.e. in digital form) and you may have the right to request the transmission of that data to another entity without hindrance from us if such transmission is technically feasible.
to withdraw consent
When the processing of your
personal data is based on your consent, you can withdraw your consent at any
time without giving any reason to us, free of charge, by clicking the link
provided in each newsletter, or via changing preferences in your Wizz Air
account or mobile device.. The withdrawal of consent does not affect the
lawfulness of processing based on consent before its withdrawal.
If you withdraw your consent to
our processing your personal data, we may not be able to provide all or parts
of the services which you have requested (e.g. in case of special assistance
service if the processing of sensitive data is required by us).
to lodge a complaint with the supervisory authority
If you feel that your personal
data rights have been breached, you can also contact and lodge a complaint with
the local data protection authority, in particular in the Member State of your
habitual residence, place of work or place of the alleged infringement.
You can also contact the Hungarian
Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi
és Információszabadság Hatóság, H-1125, Hungary, Budapest, Szilágyi Erzsébet
fasor 22/C.; telephone: +36-1 391-1400; telefax: +36-1 391-1410).
11. HOW DO WE PROTECT YOUR PERSONAL
Wizz Air complies with its
obligations under the applicable data protection laws by
personal data up to date;
and destroying it securely;
collecting or retaining excessive amounts of data;
personal data from loss, misuse, unauthorised access and disclosure and by
ensuring that appropriate technical measures are in place to protect personal
appropriate technical and organisational measures to ensure the protection of
your personal data against accidental or unlawful destruction or accidental
loss, alteration, unauthorized disclosure or access, in particular but not
limited to where the processing involves the transmission of data over a
network, and against all other unlawful forms of processing.
Wizz Air, in line with this, among other things, applies different levels of access rights to the data, which ensures that only the appropriate authorised person has access to the data, whose knowledge of the data is necessary to fulfil his or her obligation arising out of or in connection with the performance of his or her job.
We pay special
attention to the safe transmission of the personal and financial data. This
data is transmitted from your computer to the booking server of Wizz Air
through encrypted channels with the support of the state-of-the-art Secure
Socket Layer (SSL) technology.
12. SHARING YOUR PERSONAL DATA
Wizz Air, in the course of its operation, may utilise the services of various data processors and external service providers to handle and process your personal data for specific purposes, on behalf of and in accordance with the instructions of Wizz Air. In
addition, under the applicable aviation laws Wizz Air is required to share your
personal data with governmental bodies, authorities and other enforcement
The data processors shall process the personal data at most as long as the term of the data processing contract concluded with them is valid and in force, or until they are required to keep your data under the applicable data retention laws.
We may disclose your personal data to the following categories of third
parties (recipients) for the purposes described below:
agents and other third parties who you book travel or other services through;
- third party service providers whose services you purchased on our website (including, but not limited to insurance, transfer services), in our application or via our call centre;
partners in loyalty schemes that you have joined;
handling companies and airports to provide the service you requested;
- credit card companies, payment service providers to process the payments you initiated on our website, in our application or via our call centre;
- third parties running customer surveys on our behalf;
third party service providers involved by us for data processing;
parties, such as law firms, courts, other bodies or service providers in order
to enforce or apply any contract with you;
- government authorities or enforcement bodies such as
the police and regulatory authorities, upon their request and only as required
by the applicable law or to protect our rights or the safety of our customers,
staff and assets.
12.1. Wizz Air Group
data may be shared within the Wizz Air Group as far as such is necessary to
provide the services you have purchased from us or to facilitate the purchase
of third parties’ services or products on our website, via our mobile
application or through our call centre. For more
information about Wizz Air Group, please
12.2. Third party service providers
purchase the service of a third party service provider on our website, in our
application or via our call centre (e.g. you order transport service or any
related activities) we will transfer your personal data to the respective service provider to facilitate the purchase.
processing of such third parties may also be governed by their own privacy
policies. Please review the privacy policies on the website of such third
parties directly for more information about their data processing
practices.Furthermore, we also receive
information about you from third parties, for instance when you participate in
a loyalty programme.
Wizz Air engages certain third parties to provide assistance during the
performance of the services bought from us. Such third parties provide the
- ground handling services at
- running loyalty
- provision of IT support services;
- provision of certain services at the
airports, such as sale of tickets, services related to baggage, priority
boarding, flight changes;
12.4. Call centre
We engage third party suppliers for the provision
of call centre services for us. You can find more information about these
suppliers here. Our call centre processes your personal data in
accordance with this Privacy Notice and applicable law. Calls are recorded for
the protection and reproducibility of verbal commitments if you give your
consent to that and they may be connected with other reservation data .
Complaints submitted electronically, via post or via email, are also archived,
and may be connected with other reservation data for possible future complaints
authorities and enforcement bodies:
transfer your personal data to government authorities or enforcement bodies
such as the police and regulatory authorities, upon their request and only as
required by applicable law; or to protect our rights or the safety of our
customers, staff and assets.
12.6. Border police and immigration authorities:
In certain countries,
Wizz Air is required by law to give border control agencies access to booking
and travel information. Therefore, any information we hold about you and your
travel arrangements may be disclosed to the customs and immigration authorities
of your place of departure or your destination. In addition, applicable laws in
certain countries require Wizz Air to collect passport and associated
information for all passengers prior to travel to or from those countries. When
required by applicable law, Wizz Air will provide this information to the
relevant customs and immigration authorities.
13. TRANSFERRING YOUR PERSONAL DATA
TO THIRD COUNTRIES
The transfer of your personal data outside of the European
Economic Area may be necessary in
order to provide you with a service that you have requested, and your personal
data may be accessed by Wizz Air Group members and data processors and service
providers from countries that do not provide the same level of data protection
as provided in the European Economic Area. If necessary, Wizz Air will therefore take all measures, which in relation to the recipients of your personal data, is necessary to ensure an adequate level of protection as defined by the applicable data protection law, in particular through the application of the Standard Contractual Clauses issued by the European Commission or by a decision of the European Commission which states that the country in which the recipient of the transferred data is provides an adequate level of data protection.
If, in relation to data transfers
abroad, an adequate level of protection of personal data cannot be ensured,
then we shall request your express consent relating to any such data transfers
abroad. Please note that such data transfers may be associated with certain risks, particularly that in the country of the data recipient, unauthorised third parties may also have unreasonable access to said data and you may not be able to exercise the rights of the data subject and/or your right to object against acts that may harm your personal data and your right to privacy.
On the website among the origins and destinations, you can find the third countries where your personal data may be transferred, or where it may be accessed from, based on your travel destination.
When you use
our website, cookies are stored by your browser on your device. Read more about
the cookies used by Wizz Air and how you can block them by clicking here. Please note that if you disable cookies our
website may not function properly on your browser. Our aim is to ensure that
our website offers visitors what they are looking for and provides them with
the most relevant marketing communication. In order to achieve this goal, we
may store and use your data, building usage profiles for market research, for quality
improvements of our website and our services, for service developments, to
improve the performance of the website, to measure the success of our
advertising campaigns or to tailor services to your needs.
Until you log in to your Wizz Air Account, the use of such data for the purposes described in the preceding sentence will be in pseudonymised form. That means we will replace
your name and other features which may identify you with another identifier in
order to make it impossible to identify you as a person and we will not bundle
such usage profiles with other data we store about you. Once you are logged in your Wizz Air account, the use of such data for the purposes described in the preceding sentence will be personalised and connected to you.
entitled to object against the use of your data for building usage profiles as
described above at any time.
We may also transfer
your non-personally identifiable data such as, but not limited to, anonymous
demographic information and online behaviour to our contracted partners (e.g.
third party service providers or banks issuing WIZZ branded credit/debit cards,
with special benefits) for the purpose of market research. “Non-personally
identifiable data” in this respect means we modify your personal data so that
the information concerning personal or material circumstances cannot be
attributed to you or that such attribution would require a disproportionate
amount of time, expense and effort. We store data sent by your browser and
device to our website during the reservation process. No such data will be
disclosed to third parties except in aggregate, non-personally identifiable
15. THE USE OF YOUR PERSONAL DATA FOR
We send you newsletters on actual bargains and special offers if you have requested such
communication from us by subscribing to such services, or if you provided us with your details. We will not contact you
electronically for marketing purposes unless you have expressly indicated your
consent by ticking relevant tick boxes on the data entry form in which you
entered your contact information.
16. CHANGES TO OUR
If we change
this Privacy Notice, we will publish the updated version of it on our
17. THIRD PARTY
The wizzair.com website provides links to other
websites for your convenience and information. Please be aware that these sites
may be owned and run by other companies and organisations and have different
security and privacy policies. Wizz Air has no control over and takes no
responsibility for any information, material, products or services contained on
or accessible through those websites.
18. THIRD-PARTY LIABILITY
Wizz Air is not responsible for third parties’ use of your data, where
such use is permitted for their own purposes. In such cases that these third parties are also considered data controllers, please consult their privacy policies for further information.
Policy is effective from 5 April 2019.