Why SAS processes your data
SAS processes your personal data to provide the travel services you have purchased, make sure your baggage arrives at your destination and handle any issues connected with your trip. We also use this data to improve our products and services. The data is based on your booking reference and processed according to the IATA standard PNR (passenger name record). Once you’ve completed your trip, we delete your passport number but save the booking reference for further reference.
Data processed by suppliers
SAS cooperates with a number of suppliers including airports, ground handling suppliers, travel agents, IT service suppliers, authorities and other service providers such as call centers, hotels and transport companies. Additionally, information about SAS’ available flights and seats can be accessed by travel agents all over the world through global distribution systems such as Amadeus, Abacus and Travelport. These systems are also subject to GDPR.
Suppliers process your personal data according to a data protection agreement (DPA) or data exchange agreement (DEA). Your data may only be used in association with services you have purchased.
Where SAS stores personal data
Personal data related to travelers is stored in Norway, Denmark, Sweden, Germany, Latvia, Poland, India and the US.