Security policy and data confidentiality

Whenever personal data is collected, Air France endeavours to include a link to these general conditions. We reserve the right to modify the general conditions, so we advise you to consult them regularly.


Securing transactions: We offer you a secured on-line payment system using the latest technology, including the SSL data transfer protocol. The SSL server software uses algorithms to encode (or "encrypt") the data that you enter (bank account, address, etc) before it is sent over the Internet. Once encoded, the data remains scrambled during transmission on the Web and can only be read by our server using a unique decoding key. The data is encoded using the SSL security keys 3.0 RC4, RSA 128 bits - 512-bit exchange: the version of the SSL protocol that currently offers the highest level of security, so you can be sure of purchasing your ticket in complete confidentiality and safety. General recommendations: When you create an account, you choose an identifier and a password, which you will have to enter if you want to change your account data. Your profile and data are protected by a password so that you, and you alone, have access to this personal data. We advise you not to divulge it to anyone. You are entirely responsible for protecting the confidentiality of your password and/or any data concerning your profile. Also, you must not forget to disconnect from your profile and to close the window of your browser at the end of the session, especially if you share a computer with other people. This will avoid other users accessing your personal data.

Protection of privacy and personal data

Collection of Information

- Your privacy is very important to us.

- Like most Web sites, we collect relevant user information to optimize and enhance your experience with by improving our site content and navigation. The data collected include, service provider, browser type, and pages accessed on our Web site.

The informations that we will ask you for:

- Your status ( marital status, name, date of birth, address, telephone number)
- Your delivery address, if necessary
- Your e-mail address (personal or professionnel e-mail) which is useful to receive a booking confirmation, for any correspondence and subscription with our neswletter, to receive your lost password or user name
- Your passport number and your nationality ( compulsory data for the flights bound for the United states)
- Your preferred shortcuts on Air France site
- Your preferred way of withdrawal of tickets bought online (Note: we do not conserve your payment informations in our files : credit card type, the card number, validity and name of the holder).

- We do not have access to any personally-identifiable information unless you choose to provide us with such information.

- We do not use cookies.

- Children under 13 years of age accessing
We have no way of distinguishing the age of individuals who access, so we will collect the same information from individuals under 13 and apply the same privacy policy as we would with any other individual. However, If a child has provided us with personally-identifiable information without parental or guardian consent, the parent or guardian should contact us to remove the information and/or unsubscribe them from any promotional contact opportunities. Air France supports and complies with the Child Online Protection Act (15 USC 6501).

Use of data

The data collected may solely be used for promotional or commercial communications or for information purposes by Air France or one of its subsidiaries, via different media. We may use this data to conduct research to improve our services.

In very exceptional circumstances, Air France may have to disclose confidential information when necessary for the identification, questioning or prosecution of any individual likely to cause prejudice or harm, intentionally or not, to:
- Air France´s rights or property,
- other users of the Air France site,
- any other person who may be adversely affected by such activities.

Personal data may also be disclosed exceptionally when Air France is legally obliged to do so, e.g. after filing a complaint.

Provisions relating to the flights bound for the United States

To ensure flight safety and for reasons pertaining to national security, the United States adopted a regulation on 25 June 2002 obliging all international airlines operating flights to the United States to give U.S. Customs access to all data concerning their passengers in their reservation systems.
Any breach of the American law will lead to heavy penalties levied on airlines, by the U.S. Authorities.

Air France therefore informs its passengers that, as from 5 March 2003 :

All personal information provided by its customers when booking their flight, will be directly accessible by the U.S. Authorities.

Air France, who is concerned with securing and protecting its customers´ personal data within the French and European legal framework, reminds its passengers that a certain amount of data is compulsory for the booking of flights and ticket issuance, and that their right to oppose this measure in accordance Article 26 of the Law no.78-17 of 6 January 1978 relative to information systems and records and freedoms, could lead to the cancellation of their trip or at least some of the services requested.

return to top of page