Data protection

1. General Information

Our personal data protection policy describes and informs you of how Air Moana is committed to collecting, using, and protecting your personal data exclusively for the purposes for which they were collected.

Your data will not be sold, rented, or exchanged with third parties without your prior express consent, except in the exceptional case where Air Moana is legally required to do so.

Air Moana performs automated processing of all personal data that you provide to us in order to offer you information or services related to our activities.

2. Data Security

The security of Personal Data held by Air Moana is subject to specific policies and measures. The information you have provided to us is stored and/or transferred securely in accordance with the Company's security policy.

How does Air Moana collect your data ?

As a data controller, Air Moana collects personal data that you provide directly, that we receive from your travel agency, our airline partners, or other companies involved in the organization and management of travel, particularly through the following means:

• By phone, through the use of our website, by mail, through our authorized or accredited agents in agencies, and when you use your social media provider to transmit information to us.

For what purposes and legal bases does Air Moana use your data ?

In the context of our relationships, the main purposes for which we use your data are:

• Your booking (in agency or online), your travel arrangements, the provision of specific services related to the transport service, the issuance of your ticket to facilitate administrative procedures, and to provide you with flight-related information

o Legal basis for processing: The execution of your transport contract and the provision of our services

• Accounting management for your billing, audits, credit card verification and selection, prevention of unpaid amounts, combating payment fraud or identity theft

o Legal basis for processing: Legal obligations

• Your visit to our website, the use of the request forms made available to you; preferences for cookies

o Legal basis for processing: Our legitimate interest in providing these services and your consent in choosing cookies

• Interactions with us through the various channels made available to you

o Legal basis for processing: Legitimate interest in serving you best through your chosen channel

• Your participation in our contest

o Legal basis for processing: The legitimate interest of the data controller

• Your subscription or unsubscription from our newsletter and receiving our products and services via SMS to promote our services and carry out direct marketing activities.

o Legal basis for processing: Your consent.

• Air Moana regularly conducts satisfaction and customer surveys. Unless the customer objects during data collection, the data will be used for surveys conducted by or on behalf of Air Moana and will be carried out in accordance with Law No. 78-17 of January 6, 1978, as amended by the Law of August 6, 2004, and the Law of June 20, 2018, as well as the General Data Protection Regulation (Regulation EU 2016/679) or "GDPR," relating to data processing, files, and freedoms.

o Legal basis for processing: The legitimate interest of the data controller in assessing your needs so that we can improve our services.

• Management of analyses and statistics to conduct sales and marketing research, track pages viewed on the Air Moana website and visitors' browsing patterns, monitor, and target marketing campaigns and marketing emails.

o Legal basis for processing: The legitimate interest of the data controller.

• Prevention of flight safety and security, immigration and customs control, security, and fraud prevention.

o Legal basis for processing: Legal obligations (regulatory and tax) as well as our legitimate interest in ensuring the safety of our flights and other passengers.

• Management of litigation, handling your complaints.

o Legal basis for processing: The legitimate interest of the data controller.

What categories of personal data do we process ?

The information that may be collected includes, but is not limited to:

When you make a booking :

- Your identification data: your civil status (title, name, first name, date of birth, and place of birth).

- Information on your travel documents (passport number, nationality, ID card number, or any document proving your identity that you present to us).
- Your contact details (postal address, email address, phone numbers).

- Your delivery and/or billing address, if applicable.
- Your travel preferences (special meals, medical assistance, and any other service provided by the Company).

Note that some information may be sensitive under applicable personal data protection laws and may indirectly indicate your ethnic origin, religious beliefs, or health status and may fall under Article 9 of the GDPR.
- The content of your flights (itinerary and connections), fare details, booking date, schedules, luggage, seat options, and data required to finalize and pay for your booking.

In the case of unaccompanied minors, we collect the identification data of the parents or legal guardian as well as the individuals responsible for dropping off the child at the departure and arrival airports.

When you use our website https://www.airmoana.pf/

- Your shortcuts on the Air Moana websites.

- Your IP address, the type of browser you use.
- The history of bookings and purchases you have made, the pages of the site you visited.

- Information about cookies. For more information on Cookies, you can consult our cookie policy in this document.

- Data we collect in our forms, identification data (name, first name, email address, message you leave) to respond to you.

When you sign up for our newsletter

- Your email address.

Who may access your personal data ?

Your data is accessible to our duly authorized staff: agents of our customer contact centers, operational agents, flight crew, IT services, etc.

We may also share your data with third parties such as your travel agencies, payment service providers, subcontractors, partners, and authorities within the framework of French regulations (cf. article on transfer outside the European Union).

Are your data transferred outside the European Union ?

1. Transfer of Personal Data in the context of your travel:
The Company may disclose some of your Personal Data to third parties, including travel agencies, its authorized or accredited agents, service providers, and, if applicable, airlines if the trip you purchased is code-shared with another carrier.

2. Transfer of Personal Data to authorities:
In accordance with Article L.232-7 of the French Internal Security Code, we inform you that airlines may be required to transmit their passengers' booking, check-in, and boarding data (API/PNR) to the French administration, in accordance with the processing methods and for the purposes specified in Decree No. 2014-1095 of September 26, 2014, as amended by Decree 2018/714 of August 3, 2018.

The Personal Data communicated is necessary for the completion of your journey. Any information held by the Company concerning you or related to your trip may be communicated to the authorities of any country on your itinerary if such a law requires it.

3. Transfer of Personal Data to service providers outside the European Union:
The Company transfers some of your Personal Data to third-party service providers outside the European Union in the conditions provided for by Law No. 78-17 of January 6, 1978, as amended by the Law of August 6, 2004, and the Law of June 20, 2018, as well as the General Data Protection Regulation (Regulation EU 2016/679) or "GDPR," relating to data processing, files, and freedoms.

How long is your data retained ?

Air Moana is committed to retaining your data for a period not exceeding that necessary for the purposes for which it is processed and in accordance with the retention periods provided for by the applicable personal data protection legislation, the General Data Protection Regulation – Regulation (EU) 2016/679 ("GDPR"), Deliberation No. 2016-264 of July 21, 2016, amending a simplified standard concerning the automated processing of personal data related to customer and prospect management.

For your booking, Air Moana retains your personal data for 5 years from the date of your booking.

For your account creation, your data is retained for 3 years if you do not make a booking.

Billing information is retained for 10 years.

What are your rights, and how can you exercise them ?

In accordance with applicable regulations, particularly the provisions of the GDPR and the amended French "Informatique et Libertés" law of January 6, 1978, you can contact us to exercise your rights of access, rectification, erasure, limitation of data processing, as well as your rights to data portability and objection.

Right of access

You can ask us if we hold any data about you and request a copy.

Right to rectification

You have the right to request the rectification of your personal data if you find them inaccurate. You can also request that they be completed, considering the purposes of the processing concerned.

Right to erasure

You have the right to request the erasure of your personal data. This right can only be exercised in certain cases, such as when one of the grounds provided for in Article 17 of the GDPR applies, for example, personal data that is no longer necessary for the purposes for which we collected it or that has been unlawfully processed. If you exercise this right and if one of the grounds applies to your request, we will proceed with the erasure of your personal data as soon as possible.

Right to data portability

You have the right to request the provision of personal data that you have directly provided to us in a structured, commonly used, and machine-readable format if their processing is automated and based on the collection of your consent or the execution of a contract to which you have subscribed. This right does not apply to other legal bases for processing. If applicable and when technically possible, you can also request the direct transfer of this data to another data controller.

Right to restriction of data processing

You have the right to obtain the restriction of the processing of your personal data. This means that we will temporarily suspend their processing. This right can be exercised for the reasons provided for in Article 18 of the GDPR, particularly when you contest the accuracy of your personal data. This right does not result in their erasure.

Right to object

You have the right to object to the processing of your personal data by asking us to stop processing it. For our activities, this right only applies when our legitimate interests constitute the legal basis for processing (e.g., for direct marketing purposes). If you exercise this right, we will no longer process your personal data for these purposes.

You also have the right to withdraw your consent, including:

- By clicking on the unsubscribe link provided in our newsletter.

- By objecting to electronic marketing (noting that your data is only used after obtaining your explicit consent).

- By setting your cookie preferences on our website during your visit.

To exercise your rights:

For any additional requests regarding your data and to exercise your rights, you can send your request specifying the right you wish to exercise to the following addresses:

• By email to [email protected]
• By postal mail to NATIREVA, "Dpo demande de droit" BP 40773 Fare Tony Papeete 98713

Please note that you will be asked to provide a valid proof of identity for identification purposes to process your request and protect against any fraudulent requests.

If you are not satisfied with our response, you have the right to file a complaint with the CNIL (Commission nationale de l’informatique et des libertés): https://www.cnil.fr/fr/plaintes