SAS uses cookies to enhance your experience and to make your visit on our website as pleasant as possible. Some cookies are technically necessary for the website to function and are therefore always activated. We also use cookies to analyze your interest based on searches and other behavior during your visit on the website.
By clicking on "I Accept" you consent to all cookies. Be aware that your experience can be affected if you choose not to accept all cookies, as well as some areas or functions on the website might not work as intended.
In Cookie settings you can give a controlled consent. Read more how we use cookies and how you change your settings in our Cookie policy.
This information notice summarizes the Privacy Policy for SAS Profile account holders.
Effective: 14 March, 2018
We are committed to ensuring your right to privacy and will only process your personal data as set out in this Privacy Policy for Profile Account holders. The Privacy Policy for Profile Account holders is an integral part of the Profile Account Terms and Conditions.
We will below explain how we collect, use, transfer, store or otherwise process any personal data relating to you as a Profile Account holder. Our aim is to be as clear, transparent and candid as possible. Should you still have questions about how we process your personal data, please contact our Data Protection Officer at dataprotectionofficer@sas.se.
Personal data means any information relating to you as a natural person and through which you can be identified, directly or indirectly, such as your name or photo.
We recognize that special categories of data, such as data revealing ethnic origin, religious beliefs or health information, are particularly sensitive. We will only collect and use such sensitive data in accordance with this Privacy Policy for Profile Account holders and where strictly necessary. For instance, it is important for us to know if you are late stage pregnant or require a wheelchair to board a flight.
Processing of personal data means any operation or set of operations performed on personal data, whether or not by automated means. All actions carried out on personal data, from collection and storage to alteration, use or disclosure thus constitute ‘processing’.
Your choice to create a Profile Account necessitates SAS to register and process your personal data and your activities while logged in and using our website. We will thus process your personal data on the legal basis that the processing is necessary in order to fulfill our requirements under the Profile Account Terms and Conditions.
We will process personal data based on our legitimate interests to remain competitive within our market segment and therefore to be able to, among other things, analyze the personal data of our Profile Account holders related to booking flights, popular destinations, choice of ancillary products, use of the homepage and application, and following up the outcome of e.g. email communications.
We will also process personal data based on our legitimate interests to prevent, investigate or report cases of fraud or safety issues and to cooperate with law enforcement agencies.
We have weighed our legitimate interest against the level of privacy intrusion that our processing of your personal data could lead to. We process your personal data on a general and aggregated level, in a transparent manner, for the purpose of improving our products and services offered to you and with a very high level of security and safeguards in place. We thus assess that the level of privacy intrusion is limited and that our interests of carrying out this processing of personal data is justified and legitimate.
We will process your personal data when we are under a legal obligation to do so, for instance when we are obliged to provide information to government authorities or we are subject to a court order.
SAS registers and processes the following personal data about you and your activities, collectively the “personal data”:
The personal data that we process is primarily collected directly from you, e.g. when you enter your contact details to register a Profile Account. In addition, we collect and derive personal data from our flight schedules, airport departments and systems as necessary to fulfill our requirements under the Profile Account Terms and Conditions.
The personal data is registered and processed for the following purposes:
We process the personal data regarding you as long as you are registered with an account. Your personal data is retained until the Profile Account is terminated.
Personal data is shared between affiliates within the SAS group to operate our international flights, to manage the Profile Account, for statistical analyzes, among other things.
Personal data that is shared within the SAS group will sometimes be transferred to countries that do not belong to the European Union (“EU”) or the European Economic Area (“EEA”) and which do not ensure an adequate level of protection for personal data. Such transfers will be carried out in compliance with applicable data protection laws.
When transferring personal data to a non-EU/EEA country without an adequate level of protection for personal data we will apply appropriate safeguards normally by entering into standard contractual clauses adopted by the European Commission. The standard contractual clauses can be found via the following link
Where there is no adequacy decision by the European Commission and also no established appropriate safeguards in the form of standard contractual clauses as outlined above, we will transfer your personal data to affiliates within the SAS group and to our business partners on the legal basis of the Profile Account Terms and Conditions, including the present Privacy Policy for Profile Account holders. More specifically, we will transfer your personal data on the basis that the transfer is necessary for us to perform the Profile Account Terms and Conditions.
Scandinavian Airlines System Denmark- Norway-Sweden, a consortium established under the laws of Denmark, Norway and Sweden, and having its principle office at Frösundaviks allé 1, SE-195 87 Stockholm, Sweden, is the controller which will determine the purposes and means of the processing of your personal data.
SAS is the legal entity responsible for personal data in accordance with applicable legislation on data protection, including the General Data Protection Regulation (EU Regulation no. 2016/679).
SAS has designated a Data Protection Officer who supports SAS in ensuring that the members’ personal data is processed correctly. You may contact the Data Protection Officer with questions or requests relating to the processing of your personal data, at the following address: dataprotectionofficer@sas.se.
If you have questions about your Profile Account, please refer to our contact details at flysas.com.
We want to be as transparent and clear as we can on how we process your personal data, and have therefore taken particular care in illustrating your rights under this Privacy Policy for Profile Account holders. On your profile account, you can now not only view and update your contact details, but also find information on your rights and on our processing of personal data laid out interactively. By navigating and operating the profile account, you can also easily enforce your rights.
For instance, you have the right to access the personal data that we process on you. You can easily obtain an excerpt of the personal data on you that we process and find more information by signing in to your profile account.
In the same way, you can find further information on and enforce also the following rights:
You can also find more information about all the different safeguards and technical measures we have put in place to protect your data and your right to privacy and freedom and to ensure that we are fully compliant with applicable data protection legislation.
If you require assistance or have any questions regarding your rights, please contact our Data Protection Officer at dataprotectionofficer@sas.se.
Please note that restricting the processing of your personal data or enforcing your right to be forgotten will mean that we will no longer be able to provide you with our services relating to the Profile Account. The processing of personal data as set out in this Privacy Policy for Profile Account holders is necessary in order for us to perform the Profile Account Terms and Conditions.
In our EuroBonus program, we offer a range of easy, joyful and personalized services and offers to make life easier for our members. You are at any time welcome to become a EuroBonus member by clicking on the following link
In certain situations, we will need your consent in order to process your personal data.
For instance, some of the features and services associated with the EuroBonus membership may be offered also to our Profile Account holders based on your consent. As these services involve processing of personal data beyond what is stated in this Privacy Policy for Profile Account holders, we will only perform such additional features and corresponding processing of personal data subject to your informed and specific consent.
Hence, we may ask you for your consent e.g. to process personal data to better understand your needs and preferences, i.e. for profiling purposes, to use information stored in cookies, or to pre-complete booking forms with your contact details, accompanying persons, passport and payment data etc. to facilitate a faster and simpler use of our services.
We may also ask for your consent to use post, mobile phone, SMS, MMS, email, social media and other digital channels to send promotional communications to you concerning our, or our business partners’, products and services.
Provided that you consent to the use of cookies on our website or application, we may also ask for your consent to process your personal data in order to analyze your online behavior to identify e.g. destinations you may be interested in. Please read more about our use of cookies in our Cookie Policy.
This Privacy Policy for Profile Account holders was last updated on 14 March 2018.