プライバシーポリシー（GDPR準拠）| Air Tahiti Nui

The purpose of this Privacy Policy is to inform you of the terms and conditions under which ATN collects, processes and uses your personal data, as well as of your rights and obligations with regard to the protection of personal data in connection with the use of all its services (services also accessible via its website or mobile applications).

1. Identity of the data controller - AIR TAHITI NUI

Please contact us at the following address or email if you have any questions relating to this Privacy Policy:

AIR TAHITI NUI

Postal address: BP 60044 - 98702 FAA'A - French Polynesia
Email: dpo@airtahitinui.pf
Company registration number: RCS Papeete TPI 96 217B - Tahiti No. 382192

Our customers may send any questions relating to personal data protection, privacy and security to the relevant department at: dpo@airtahitinui.pf

2. What information do we collect?

2.1. Information you provide to us

When you use our services, you may be asked to provide a certain amount of personal data.

“Personal data” means any information that enables you to be identified directly or indirectly, in particular by reference to an identification number or to one or more factors that are specific to you.

At the time of collection, you will be informed whether the provision of the requested personal data is mandatory or optional, as well as the possible consequences of not providing this data.

2.2.1. When you use the contact form

The following personal data may be collected when using the contact form:

Surname; first name; email address; telephone number; country of residence; personal data entered by you in the body of the message; documents attached to the form.

Depending on the purpose of your request, you may be asked to provide a certain amount of additional information (reservation number, flight number, etc.).

Subscription to our newsletter using your e-mail address will allow you to receive news and promotional offers from AIR TAHITI NUI.

If you no longer wish to receive Air Tahiti Nui’s electronic newsletter by email, you may unsubscribe at any time by clicking the unsubscribe link located at the bottom of each communication.

2.2.3. When you use instant messaging

When you contact Air Tahiti Nui's customer service via the website's instant messaging system, we may access the public information from your Facebook social network profile and any personal data you enter in the body of the message.

The use of instant messaging enables us to respond to your request more rapidly.

2.2.4 Information that we collect automatically when you use our services.

When you browse our website and use our services, we collect information about the services you use and how you use them. We collect information via cookies and similar technologies, including in particular the following data:

IP address, date and time of connection, connection device (operating system, screen resolution), unique visitor number, browser information (browser settings, chosen language), interactions with the website (pages visited, date and time of visit).

Please refer to our Cookie Policy for further information.

When a booking is made, ATN collects identification data (surname, first name, gender, date of birth, nationality, country of residence and information appearing on travel documents (passport)) for all passengers concerned. In the case of unaccompanied minors, ATN collects the identification details of the parents or legal representative.

The data collected also includes details of your flights as well as the prices and dates of your bookings. Information relating to additional services (extra baggage, seat options) is also collected.

For journeys operated by ATN, information relating to your trip (itinerary, online or airport check-in, boarding pass) may be processed. Your assistance requirements and meal preferences may also be processed.

ATN may also collect data relating to confirmation of your passage through the various control points forming part of your airport journey from certain airport management bodies.

2.3.1. When you use the flight booking tool

The following personal data may be collected when using the flight booking tool:

Surname; first name; email address; telephone number; gender; date of birth; country of nationality; passport number; destination address; membership number.

The collection of certain personal data is necessary in order to access the online booking service. You may, however, exercise your right to object to the collection and processing of this data, although this may make it impossible for you to benefit from these services.

2.3.2. When you check-in online

The following personal data may be collected when you use the online check-in tool:

Surname, booking reference or electronic ticket number.

The collection of this personal data is necessary to enable access to certain services or features. Online check-in is available from 36 hours to 5 hours prior to flight departure. Online check-in remains optional.

2.3.3. When you use the complaints form

The following personal data may be collected when using the complaints form:

Surname; first name; email address; telephone number; postal address; personal data entered by you in the body of the message.

The information entered in this form will enable us to receive/track your complaints and compliments in order to provide you with the best possible service. Depending on the purpose of your request, you may be asked to provide a certain amount of additional information.

2.4.1. When you join or access your “Club Tiare” account

You can join “Club Tiare” or access your “Club Tiare” account via our website.

To join “Club Tiare”, we request the following information:

Title, surname, first name, maiden name, gender, date of birth, e-mail address, communication language, address, telephone numbers, meal preference, preferred cabin location.

Accessing your “Club Tiare” account allows you to view your loyalty points and choose how to use them, for example by redeeming them for an Air Tahiti Nui offer.

2.5.1. When you use the unsolicited application form

You can submit your application via the website.

We request the following information:

Title, surname, first name, city, e-mail address, telephone number
Level of education, overall experience, geographical mobility, job family, availability date, type of contract desired, monthly salary sought, disabled worker (YES/NO)
CV, cover letter

The collection of this data is necessary to enable our Human Resources Department to process your application.

For certain events, campaigns, games or competitions organised by ATN, personal data may be collected and processed in accordance with this policy.

3. What are the legal bases for our processing?

Your data is processed on the basis of one or more of the following legal grounds:

Your consent
Performance of a pre-contractual measure or a contract to which you are a party
ATN's legitimate interest
A legal obligation

Purpose	Legal basis
To ensure the proper technical and administrative operation of the website.	Performance of the contract Legitimate interests
To monitor and analyse website usage.	Consent Legitimate interests
To measure website audience.	Consent
To provide you the services or information you request.	Performance of the contract
To enable targeted commercial offers to be sent by e-mail.	Consent
To enable us to process the exercise of data-subject rights	Legal obligation
To manage your "Club Tiare" account and associated preferences.	Performance of the contract Legitimate interests
To manage your bookings and flights	Performance of the contract
To process unsolicited job applications to Air Tahiti Nui	Pre-contractual performance

4. How do we protect your information?

Air Tahiti Nui implements appropriate technical, physical and organisational measures in line with industry standards to protect your personal data against destruction, loss, alteration, unauthorised use, modification, disclosure or unauthorised access.

We take all necessary measures to regularly analyse our websites and information systems to identify and address any security vulnerabilities. We carry out regular data backups.
Appropriate physical security measures are in place in our premises and server rooms to protect your personal data.
All staff members are made aware of cybersecurity risks and are subject to contractual confidentiality obligations. Furthermore, access to personal data is restricted to a limited number of authorised personnel trained in personal data protection.

Personal and banking data transmitted is protected using Secure Sockets Layer (SSL) encryption technology. Air Tahiti Nui does not retain any bank card transaction data. All transactions are processed by a payment gateway provider and are not stored on our servers.

All subcontractors are required to sign confidentiality agreements and to comply with security requirements at least equivalent to those applied by ATN, including PCI DSS standards.

5. Who are the recipients of your personal data?

Your personal data is processed by our staff who require access to it in the course of their duties.

It may also be processed by or transferred to the following third parties:

Our subcontractors contracted to act on our behalf and in accordance with our instructions and under our control. Our subcontractors will have access only to the personal data strictly necessary for the performance of their services.
Our partners using cookies on our platform. For more information on these partners, please consult our Cookie Policy.
Any third party company involved in a restructuring, acquisition or merger affecting all or part of our company.
Any authority, court or other third party where disclosure is required by law, regulation or a European or French court decision, or where such disclosure is necessary to protect and defend our rights.

Outside these cases, your personal data will not be transferred or made accessible to third parties without a valid legal basis.

6. Do we transfer your data outside the EU?

While Air Tahiti Nui is located in French Polynesia, we use service providers located abroad or who themselves use service providers located abroad, including outside the European Economic Area (EEA), in countries where personal data protection legislation may differ from that applicable within the EEA.

Any transfer of personal data outside the EEA to countries that do not provide an adequate level of protection (i.e. that are not subject to a European Commission adequacy decision) is carried out subject to appropriate safeguards, in particular contractual safeguards, in accordance with applicable data-protection regulations, such as the European Commission’s Standard Contractual Clauses.

7. What are your rights and how can you exercise them?

You may exercise your rights outlined herein:

By e-mail to:

dpo@airtahitinui.pf

By post to:

AIR TAHITI NUI – DPO
BP 60044, 98702 PAPEETE,
TAHITI, POLYNÉSIE FRANÇAISE.

Your request will be processed as quickly as possible, in accordance with applicable legal requirements.

You have the right to obtain confirmation as to whether or not personal data relating to you is being processed by ATN and, where it is, access to such data and information relating to its processing.

You have the right to obtain rectification of inaccurate or incomplete personal data concerning you.

You have the right to request erasure of your personal data where:

You have withdrawn your consent;
You have objected to the processing of your personal data;
Your personal data has been processed unlawfully;
The data is no longer necessary for the purposes for which it was collected;
It is required to comply with a legal obligation.

We may refuse such requests in certain cases, in particular where processing is necessary for freedom of expression and information, compliance with a legal obligation, statistical purposes subject to GDPR safeguards, or for the establishment, exercise or defence of legal claims, or where we have legitimate grounds for doing so.

You have the right to obtain a restriction on the processing of your data in limited circumstances:

(I) where you contest the accuracy of the data;

(II) where the processing is unlawful and you request restriction instead of erasure;

(III) where we no longer need the data for the purposes of processing, but is required for the establishment, exercise or defence of legal claims;

(IV) where you have objected to processing pending verification of overriding legitimate grounds by ATN.

You may object at any time, on grounds relating to your particular situation, to the processing of your data where such processing is based on a legitimate interest.

If you exercise this right, we will cease processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or for legal claims.

You may object at any time to processing for direct marketing purposes. Our emails also contain a link allowing you to unsubscribe.

You have the right to request that your personal data be transferred to another organisation, or provided to you.

This right applies only to personal data that you have provided to us and whose processing is based on your consent or a contract with us.

Where processing is based on consent, you may withdraw your consent at any time by contacting us in accordance with Article 7.

You also have the right to lodge a complaint with a supervisory authority. The French supervisory authority is the “Commission nationale de l'informatique et des libertés” (CNIL). It can be contacted by post at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, or via its website.

8. How long do we retain your personal data?

Your personal data is retained for the period necessary to achieve the purposes for which it was collected. Once this retention period has expired, the data is archived for accounting, tax or evidential purposes in accordance with regulatory requirements and then destroyed or anonymised, or destroyed immediately if not archived.

For the retention periods applicable to cookies, independent of the information collected by them, refer to our Cookie Policy .

9. Updates to this Privacy Policy

We reserve the right to modify this Privacy Policy. Any changes to it will be notified on this page.

Last updated on 4 February 2026.

プライバシーポリシー（GDPR準拠）