EVA Air is committed to protecting your privacy.

You are encouraged to make yourself aware of all your rights concerning using the services of this website provided by EVA Airways Corporation (hereinafter "the Company" or "EVA Air"). EVA Air hereby makes the following statement in accordance with Article 8 of the Personal Information Protection Act of Taiwan and Article 7 of EU General Data Protection Regulation, which includes the guidelines we use for protecting the information you provide us during a visit to our website.

EVA Air collects passengers' personal information for the following purposes: the flight-booking process, establishment of ticket-related data, ticketing notifications, issuing itineraries, transportation management, providing consumer/passenger/membership services and management, handling payment issues and irregularities, baggage claims, product marketing, online shopping, inflight shopping, additional purchases, service, online advertising, and statistical surveys and analyses in order to improve service quality and strengthen personalised services.

To safeguard your rights and interests during the transaction process through EVA Air, the personal information which you have provided us with will be verified against that of a third-party agency to facilitate transaction security and prevent your credit card from being used fraudulently by others.

EVA Air will collect passengers' personal information through the following means:

• Infinity MileageLands membership application
• EVA Fans application
• Online booking and other pre-paid services
• Taiwan High-Speed Rail additional purchase service
• Online shopping, inflight shopping, refund and after-sales services
• Online services (meal selection, check-in, filling out the mandatory arrival/departure records as required by a competent government authority)
• Short message service (text message) subscriptions
• Online activities/advertising
• EVASION tour package
• Liaison regarding flight booking, ticketing, membership services, customers' opinion surveys, etc.
• Service procedures at EVA Air ticketing counters
• Airport operation procedures
• Others

The types of personal information EVA Air collects through the above collection methods may include:

• C001: Personal identifiers, including but not limited to: name, job title, home address, work address, previous addresses, home phone numbers, mobile phone numbers, instant-messaging accounts, online-platform accounts, mailing and registered addresses, photographs, fingerprints, email addresses, electronic signatures, personal certificate card numbers, digital-certificate numbers, records of online identification/queries, log-in password, IP addresses, cookies, mobile-device identifiers or any other information for identifying a person;
• C002: Identifiers of personal finance, including but not limited to: account numbers/names with financial institutions, credit/debit card numbers, insurance policy numbers, or any other number or account regarding personal finance;
• C003: Identifiers issued by government agencies, including but not limited to: Personal ID card number, ROC Uniform ID number, taxpayer ID number, insurance certificate number, disabled certificate number, retiree certificate number, licence numbers, passport number, etc.;
• C011: Personal details, including but not limited to: age, gender, date of birth, place of birth, nationality, voice, etc.;
• C023: Details of the member's family members, including but not limited to: information about children, dependents, other family members or relatives, parents, cohabiters, or relatives living in China and elsewhere;
• C031: Residence and housing facilities, including but not limited to: home address, equipment types, house ownership or tenancy, duration of residence, rents, taxes and other housing costs, type and value of housing, owner's name, etc.;
• C034: Travel and other migration details, including but not limited to: details of previous migration/travel, foreign passports, residence certificates, work permits, etc.;
• C035: Leisure activities and hobbies, including but not limited to: hobbies, sports and other interests;
• C038: Occupations, including but not limited to: school principals/presidents, parliamentary representatives, etc.;
• C094: Compensations, including but not limited to: the details and amount of compensation/claims;
• C111: Health records, including but not limited to: medical reports, treatment and diagnostic records, physical-exam results, types and levels of disabilities, disability-certificate expiry date and number, contact persons, etc.
• C132: Uncategorised information, including but not limited to: correspondence, files, reports, audio recordings or electronic mails that cannot be categorised.

If you cannot provide the personal information required by the scope of the respective service, we may not be able to provide, in whole or in part, the services and/or transactions you have requested.

• Usage period: The period of use of the personal information mentioned above is based on the duration of collection for the specified purpose, or as determined by applicable laws (e.g., Civil Law, Personal Data Protection Law of Taiwan, etc.), or the period of preservation necessary for the execution of the business (if longer than the period prescribed by law), or on a contractual basis. The length of time required for the contract to preserve the data.
• Regions: Passengers' personal information will be used by EVA Air's and UNI Air's worldwide business offices for the purpose of providing relevant services.
• Targets and methods:
  • Targets and methods: In addition to applying the collected personal information during the ticket purchase and any other pre-paid service, EVA Air will also use the information in the following areas:
    • Ticketing notifications, certificates of ticket issuance, receipts, invoices, fare information, purchasing information and related online services, etc.
    • Financial transactions and authorisation: The financial information provided by passengers on their ticket or through any ancillary services purchased (e.g., preordering, online or duty-free shopping) will be submitted to the respective financial institution for the ticket purchase process (e.g., for credit card authorisation or bank transfer) before the ticket purchase is complete.
    • Email, app and text messaging services: EVA Air will send flight- and order-related information to the email address and/or mobile phone no. provided by passengers.
  • Passengers' personal information may be used by the Company, its contractors, agencies, subsidiaries, associated companies, group, and/or business partners to offer services that include, but are not limited to: general/online reservations, local transportation services, online shopping, online check-in, text-messaging, online events, social activities, membership rewards programmes, and various types of activities. The data will also serve as a basis for statistical surveys/analyses that will facilitate the provision of the services mentioned above.
  • For the presentation and marketing of products and advertisement, including the services and products of the Company and/or of a third-party contract partner, and the Company's contractors, agencies, subsidiaries, associated companies, groups and/or business partners.
  • The personal information you provide is processed via computerised instruments, with the required cross-border data transmitted to the Company and its contractors, agencies, subsidiaries, associated companies, group, immigration authorities of the arrival country, and business partners, for the provision of products and services. The Company shall make every effort to ensure that its employees, agents, contractors, agencies, subsidiaries, associated companies, groups and partner service providers observe and adhere to the terms of this Privacy Policy.
  • When you book or purchase peripheral services (e.g., car rental, local transportation, accommodation or other related products) through the EVA Air website, EVA Air mobile web, the EVA Sky Shop website or the EVA Sky Shop App, the process may be completed through a third-party transaction platform, and the personal information and finance-related information you have entered may be collected by suppliers of related travel products for subsequent service provision.

We promise that, without your consent, we will neither disclose your personal information to a third party irrelevant to the named service nor use it for any purpose other than that aforementioned, with the following exceptions: Your personal information may be disclosed or used in cooperation with legal investigations initiated by judicial authorities or authorities concerned as per duties and responsibilities of the investigators.

EVA AIR takes the following security measures to ensure the confidentiality, integrity and availability of the personal information we hold: 

• Access to personal information is controlled by identity and access management; 
• EVA Air ensures that all employees and outsourced providers who collect, process or use personal data sign confidentiality agreements, and comply with internal information security policies and regulations; 
• EVA Air requires all employees to complete annual information security training and exercises; 
• EVA Air audits data privacy and reviews the legality of internal policies annually; 
• EVA AIR’s network infrastructure has been validated by ISO 27001. The transaction and privacy information of its customers is protected with Secure Socket Layer (SSL) encryption technology, whereby data is encrypted in advance and securely transmitted over the Internet.

• Purpose: to inform FFP Members of marketing/promotional events and special offers concerning the co-branded cards
• The personal information that may be disclosed includes: Chinese/English full name, gender, ID Card number, membership card number/type, year of birth, telephone number, mobile phone number and home address
• Usage period: within the period of existence of the contractual relationship between the Company and co-branded card issuers, the record retention period stipulated by relevant regulations, or according to the terms and conditions of the co-branded card issuers
• Targets and regions: the co-branded card issuers and locations of their contractors for handling related affairs
• Methods: the collection, processing, and any kinds of international transmission and use of personal information in accordance with the regulations of the Personal Information Protection Act of Taiwan (such as digital files, paper documents, phone, or any other method considered fit based on the dominant technologies at the time of data collection)

In accordance with Article L.237-7 of the French Internal Security Code, please be informed that airlines may be required to communicate personal data for authorised booking, check-in and boarding data collected from their passengers (API/PNR) to the French authorities for the purposes and under the conditions as defined in the Decret N° 2014-1095 dated 26/09/2014.

Anyone who voluntarily provides the Company with their personal information is entitled to the following rights according to Article 3 of the Taiwan Personal Information Protection Act and Article 16 to 20 of the EU General Data Protection Regulation:

• Make an enquiry or request a review of the information
• Request a copy of the information
• Request supplementation or corrections
• Request stoppage of data collection, handling or utilisation
• Request restriction of processing
• Request restriction of automated decision-making, including profiling
• Request deletion (We may not be able to delete your data or respond to other service requests in the case that the data processing is necessary. In such cases, the right to erasure does not apply according to the applicable data protection laws.)
• Request for data portability

You can exercise any of the aforementioned rights through our worldwide business offices; Your request will be handled as soon as your identity is verified. To request personal-data removal, you will need to download the request form. (Click on this link to download the Personal Data Removal Request Form). After completing the request form, please submit it in person to one of our offices worldwide.

We will keep your information for as long as it is necessary to fulfil the purpose for which it was collected. For example, the legal or business purposes of EVA, or as required by relevant laws.

We will keep the information in order to fulfil the specific travel arrangements you have made, after which we will keep the information for a period which enables us to handle or respond to any complaints, queries or concerns relating to the travel agreement, and the information may also be retained so that we can continue to improve your experience with us.

If you provide incorrect or incomplete personal information, such as a nickname, which prevents us from verifying your real identity, we may be unable to uphold the privacy rights listed above.