Privacy Policy

Privacy Policy

Azul has been providing quality air transportation services for over 10 years, which has been shown by numerous national and international awards, and the achievement of some of the best rates in the Brazilian aviation sector.

We have a non-negotiable commitment to safety, consideration, integrity, passion, innovation and excellence. These values guide our conduct and operations. In this way, we follow these same values to protect your personal data. We work to maintain a culture of privacy and personal data protection involving all our activities, always focusing on transparency with our public, as well as maintaining the security of your personal data.


Our activity is based on the principles of good faith, purpose, necessity, transparency, security, prevention, non-discrimination, adequacy, free access, accountability and data quality, in accordance with the General Data Protection Law (GDPL) and with the guidelines of the Data Protection National Authority (DPNA).


Thus, we make our Privacy Policy available, so that you learn how we use your personal information and how you can exercise your rights in relation to your personal data.


It is important that you read this Policy carefully. If you still have any questions about how we process your personal data, please contact us at privacy@voeazul.com.br.


In order to keep this Policy always up to date, we may change it at any time, and the updated version will be made available on our institutional website. We recommend that you periodically visit this page so that you are aware of the modifications made. If relevant changes are made, we will communicate you depending on your relationship with us.

This policy uses some expressions you may not be familiar with. For this reason, we have included a brief explanation of some terms used:

  • What does “GDPL” mean? GDPL means General Data Protection Law (Law 13709/2018), which has been in force in Brazil since September 2020.

  • Who is the “data owner”? The data owner is the natural person to whom the personal data in question refers. When you transact with us and share your personal data, during and after the provision of our services, you are the data owner.

  • What are “Personal Data”? Personal data are information related to a data owner that enables them to be directly or indirectly identified. For example, their full name, email address, parents’ names, their date of birth, and other data that either identify or can identify a person.

  • What are “Personal Data”? Sensitive personal data are personal data about racial, ethnic, religious beliefs, political opinion, union membership, organization of religious, philosophical or political character, given regarding health or sexual life, genetic or biometric data. They demand more attention from us. For the purposes of this privacy policy, whenever we are talking about personal data, we will be referring to both personal data and sensitive personal data.

  • What is “treatment”? Data processing is a definition brought by the GDPL that comprises any and all activity carried out with the personal data. This includes collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, as well as its modification, communication, transfer, diffusion, or extraction. Thus, whenever we use the term “treatment,” we are referring to any of these activities.

  • What are “legal bases”? Legal bases are the hypotheses provided for in the legislation that allow the processing of personal data.

  • What does “DPNA” mean? DPNA is the Data Protection National Authority, a federal public administration body responsible for ensuring, implementing, and monitoring compliance with the GDPL throughout the national territory.

Azul Linhas Aéreas, CNPJ 09.296.295/0001-60, located at Av. Marcos Penteado de Ulhoa Rodrigues 939, Floor 9, Tambore – Barueri/SP, CEP 06460-040. Our contact email is privacy@voeazul.com.br

Recipients of this policy

In order to provide greater clarity regarding the processing of your personal data, we ask you to select below which relationship you have with us.

Thank you very much for trusting our services. Below you will find complete information about how we treat your personal data.

Source of personal data

Your personal data is collected in the following ways:

  • Provided directly by you on our website, in our apps, in our sales center, or in our stores.
  • Your data may also be collected by travel agencies or our partners, for example, loyalty programs and miles.
  • Data may also be collected for surveys, promotions, and marketing campaigns.


Personal data processed

In summary, we process your personal data to enable the provision of our services, evaluate our service and comply with legal requirements. Below is a detailed list of our processing activities, as well as examples of the main personal data used.

How we process personal data

What personal data is used

Carry out all activities related to the provision of our services:

  • Carry out ticket sales
  • Draft and manage contracts
  • receive payments
  • Manage travel packages
  • Issue payment slips
  • register customers
  • Check travel tickets and confirm status
  • Carry out satisfaction surveys and analyze complaints
  • Provide support and manage self-service in our totems
  • Check baggage for boarding and disembarking
  • Manage customer loyalty program
  • Full name
  • Identification generated by official bodies (CPF, RG, CTPS, passport, PIS/PASEP, RNE)
  • Address and home or cell phone number
  • Personal email
  • Gender
  • photographs
  • Customer experience rating
  • Flight data
  • Medical examinations - for epidemiological survey
  • Credit card details or bank details used to confirm payments
  • Address and business phone
  • business email
  • Data from mobile devices such as: IP address, device model, device operating system, language set on the device and screen size used in purchases made through our websites or applications
  • Azul loyalty program number
  • Loyalty program information when stated by the customer
  • For international travel, other information may be requested, if necessary to meet the requirements of the authorities of the country of destination.

Carry out performance evaluations of our service in our sales channels or call center, including in relation to the service provided.

  • Full name
  • Identification generated by official bodies (CPF, RG, passport and RNE)
  • Flight related data
  • Data related to the payment method
  • Medical examinations for epidemiological survey
  • Telephone or email provided during contact

Comply with legal or regulatory obligations related to the service we provide, providing the necessary information to public bodies, including ANAC or Federal Revenue.

Obs.: This data will also be shared with authorities of the place of destination, in case the legislation determines this sharing.

  • Full name
  • Identification generated by official bodies (such as CPF, RG, CNH, passport)
  • Personal characteristics (ethnicity, gender)
  • Home or business address and phone number
  • Personal email
  • personal cell number
  • Mileage program number
  • credit card details
  • Flight related data

Register and deal with occurrences related to fraud or situations that occurred during the provision of our services, as well as exercising our regular rights in judicial, administrative or arbitration proceedings.

  • Full name
  • Identification generated by official bodies (CPF, RG, CNH, CTPS and passport)
  • Personal data provided for the purchase of the ticket, including data related to payment
  • flight history
  • Depending on the case, information about the holder's health, photos or videos
  • Other information related to any ongoing judicial/administrative/arbitration proceedings.

Information on the processing of your dependents' personal data

Due to the service we offer, we also process the personal data of our customers' dependents, including children and adolescents, from the moment our services are also intended for them. The personal data of dependents is provided by our customers when they interact with us. We treat the data of your dependents always in their best interest and exclusively for the stated purposes. When necessary, the consent of a parent or legal guardian will be requested. In some situations, we will process data using other legal bases, where permitted by law, such as to comply with legal obligations or for the regular exercise of our rights.

Period during which personal data will be processed

We will keep personal data for the duration of your relationship with us. After the end of this relationship, personal data may still be kept, for example, to serve Azul's interests, comply with legal obligations to which we are subject due to our professional activity, or for the regular exercise of our rights in legal proceedings. judicial or administrative. We carry out a technical analysis to determine the appropriate retention period for each type of personal data collected, considering its nature, need for collection and purpose for which it will be treated.

Information about the sharing of personal data

Sharing with subsidiaries, partners and suppliers

Azul may share personal data with our partner subsidiaries and suppliers in Brazil or outside the national territory.

This sharing will always be carried out to meet the purpose of processing personal data, for example, to make reservations, fulfill travel package contracts, among other purposes related to the provision of our services.
In accordance with the conditions set out above, we have listed the main categories of Azul partners who may receive your data:

                              i. Customer service: assist us in designing and maintaining customer contact and service channels (for example, call center via telephone and chat).

                              ii. Agencies and/or travel service platforms: processing agents that can intermediate the obtaining of services provided by Azul (for example, ticket sales platform).

                             iii. Website/application analysis services: to understand how users use our websites and applications, we contract specific analysis services (analytics).

                             iv. Banking institutions: for processing payments and other financial transactions.

                              v. Marketing services: we can contract specific services to assist in advertising actions and campaigns (for example, creation of promotional websites), loyalty management, among others.

                             vi. Partner airlines: depending on the air route, it is possible that we use the services of other airlines.

                           vii. Software supply and/or development: we use specialized services mainly for data hosting, supply or development of applications/information systems for Azul, information security consultancy, among others.

We reserve the right to share any personal data that we believe is necessary to comply with a legal obligation, enforce our contracts or even protect the rights of Azul, our employees and customers.

Sharing with public bodies in Brazil and abroad

Azul also shares personal data with public and administrative bodies, such as ANAC, for compliance with legal or regulatory obligations that Azul must comply with due to the activities it performs.

Personal data may also be shared with the Judiciary or the Public Prosecutor's Office, when related to any matter concerning such bodies.
Due to its activity and due to legal requirements in some countries, it is possible for Azul to share your personal data with other countries. This sharing will always be based on one of the criteria established by law.
Azul encourages its partners to adopt personal data protection measures in line with best market practices, compatible with the LGPD, and to adopt adequate privacy and data protection rules.

We at Azul work to provide services with high quality standards to our customers and you, our partners, are essential for this. Below you will find complete information about how we treat your personal data.

Here you can find information on how we handle the personal data of business partners providing services in the administrative area, airport agents, representatives of our suppliers, and other service providers.

Source of personal data

Your personal data is collected in the following ways:

- Provided directly by you to the contract manager at Azul, in person or by email.
- Provided directly by you when filling out forms provided by Azul.
- Provided by your employer, in the course of a negotiation with us, for future provision of services.

Personal data processed

We process your personal data to enable the contracting and management of contracted services. Below is a detailed list of our processing activities and the personal data used.

How we process personal data

What personal data is used

Carry out activities related to the hiring and approval of new service providers, third parties and partners.

  • Full name
  • Identification generated by official bodies (CPF, RG and passport)
  • Enroll in the employer
  • Place of provision of services
  • Contact address and telephone
  • Occupation/Position
  • Anac Code
  • Bank details required for payment

Grant benefits to service providers, third parties and partners, when related to the activities performed.

  • Full name
  • Date of birth
  • Identification generated by official bodies (passport)
  • Link with the contracted company

Provide support in the integration of Azul systems and tool management

  • Full name
  • Date of birth
  • Contact address and telephone
  • Email
  • Cell phone
  • Identification generated by official bodies (CPF, RG, CNH, passport and PIS/PASEP)
  • Licenses and professional membership
  • Occupation/Position
  • network login
  • corporate phone
  • Name of manager or person responsible for hiring

Carry out the authorization process to carry out cargo transport (CTE) before SEFAZ and other cargo logistics activities.

  • Full name
  • Identification generated by official bodies (CPF)
  • IATA
  • Contact address and telephone
  • cell phone and email
  • Credit card details

Period during which personal data will be processed

We will keep personal data for the duration of your relationship with us. After the end of this relationship, personal data may still be kept, for example, to serve Azul's interests, comply with legal obligations to which we are subject due to our professional activity or for the regular exercise of our rights in legal proceedings. or administrative. We carry out a technical analysis to determine the appropriate retention period for each type of Personal Data collected, considering its nature, need for collection and purpose for which it will be processed.

Information about the sharing of personal data

We share the personal data of our service providers with third parties that assist us in the development of the infrastructure and systems necessary to carry out Azul's operations. This sharing is necessary for the integration of the third party to be carried out and for the necessary accesses to be granted so that the contracted service can be properly performed.

In addition, we share personal data with public bodies, for example, with the finance departments (SEFAZ) and with the Federal Revenue of Brazil. This sharing is necessary to comply with tax obligations, as well as other legislation to which Azul is subject.

We also reserve the right to share any personal data that we believe is necessary to comply with a legal obligation, enforce our contracts or even protect the rights of Azul, our employees and customers.

Thank you very much for choosing Azul to negotiate your customers' travel arrangements.

Source of personal data

Your personal data is provided directly by you, through our website, application or email.

Personal data processed

We process your personal data to carry out the registration of the travel agencies in which they work, as well as to manage the income of these agencies. For this purpose, the following personal data are processed:

  • Full name;
  • CPF;
  • Business email;
  • Information about the travel agency.


Period during which personal data will be processed

Personal data is processed for the duration of your relationship with us. After the end of this relationship, personal data may still be kept, for example, to serve Azul's interests, comply with legal obligations to which we are subject due to our professional activity or for the regular exercise of our rights in legal proceedings. or administrative. We carry out a technical analysis to determine the appropriate retention period for each type of Personal Data collected, considering its nature, need for collection and purpose for which it will be processed.

Information about the sharing of personal data

We share personal data with partners who work in the development of our computer systems and management of the tools we have. In addition, we share personal data with public bodies, such as the Federal Revenue Service of Brazil, in order to comply with the tax obligations to which Azul is subject.

We also reserve the right to share any personal data that we believe is necessary to comply with a legal obligation, enforce our contracts or even protect the rights of Azul, our employees and customers.

We are delighted that you are interested in working with us. In this privacy policy, we inform you how we handle the personal data of candidates for jobs at Azul.

Source of personal data

The personal data we process is provided directly by the data subject, through the Candidate Portal or by delivering the curriculum to our crew members.

Personal data processed

Personal data are processed for the purposes of the recruitment and selection process of candidates.

The following personal data are processed, as provided by the candidate on the portal, or contained in the curriculum:

  • Full name;
  • Identification generated by official bodies (CPF, RG, CNH, CTPS, PIS/PASEP, voter registration card and military discharge certificate);
  • Nationality and naturalness;
  • Contact address and telephone number;
  • Academic and professional information;


Health information present in the vaccination card and other health data necessary for hiring; It is

Licenses and professional associations.

In the case of selective processes for hiring pilots, information related to their flight experience and respective licenses is also collected.

Period during which personal data will be processed

Personal data are processed for the duration of the selection process. After filling the vacancy, the CVs are discarded or, if possible, integrated into the database of CVs, in case of a new suitable opportunity for the candidate, being discarded after the deadline established internally.

Information about the sharing of personal data

Personal data is shared with Azul partners, who assist in the process of selecting professionals. Resumes submitted using an electronic form are stored in an Azul partner cloud.

Personal data may also be shared with the Judiciary or the Public Prosecutor's Office, when related to any matter concerning such bodies.

We also reserve the right to share any personal data that we believe is necessary to comply with a legal obligation, enforce our contracts or even protect the rights of Azul, our employees and customers.

Our responsibility is to take care of your personal data and use it only for purposes aligned with this policy. Azul adopts safety, technical, and administrative measures that are based on recognized market practices in order to protect personal data. This includes measures to protect personal data from external threats, preserve information confidentiality, and prohibits the physical or electronic access of personal data by unauthorized people.

We work to protect your privacy and your personal data, but unfortunately we cannot guarantee total security. Unauthorized entry or use of third parties to your account, hardware or software failures that are not under Azul’s control, and other external factors may compromise the personal data security. Therefore, your action is paramount to maintain a safe environment for all. You can help us by adopting good security practices in relation to your account and your data (such as not sharing your password with third parties), and if you identify or become aware of something that compromises the security of your data, please contact us through the contact information listed below.

Links to third-party websites. Our websites may display advertisements, links, or any content that directs you to third-party websites, usually companies with which we are related, or have partnerships. Azul cannot control or be responsible for the privacy practices and content of these third parties. We encourage you to read the privacy notices and policies of these companies as they may differ from our policies.

What are the rights of Data Subjects and how to exercise them

As a result of Brazilian law, you have the following rights:

Your rights

Explanation

Confirmation of treatment and access

You can ask Azul to confirm the existence of processing of your personal data so that, if so, you can access it, including by requesting copies of the records we have about you.

Correction

You can request the correction of your personal data if they are incomplete, inaccurate or out of date.

Anonymization, blocking or deletion

You can request:

  • i) the anonymization of your personal data, so that they can no longer be related to you and, therefore, cease to be personal data;
  • ii) the blocking of your personal data, temporarily suspending the possibility of processing them for certain purposes; It is
  • iii) the deletion of your personal data, in which case we must delete all your personal data without the possibility of reversal.

Portability

You may request that Azul provide your personal data in a structured and interoperable format with a view to transferring it to a third party, provided that such transfer does not violate any intellectual property or business secrets of Azul.

Information about sharing

You have the right to know the public and private entities with which Azul shares your personal data. We maintain in this policy the indication of our main relationships with third parties that may involve the sharing of personal data; in any case, if you have questions or want more details, you have the right to ask us for this information. Depending on the case, we may limit the information provided to you, if its disclosure could violate Azul's intellectual property or business secret.

Information about the possibility of not consenting

You have the right to receive clear and complete information about the possibility and consequences of not providing consent, when and when requested by Azul. Your consent, where necessary, must be free and informed. Therefore, whenever we ask for your consent, you are free to refuse it - in such cases, it is possible that some services cannot be provided.

Revocation of consent

If you have consented to any processing of your personal data, you can always choose to revoke your consent. However, this will not affect the legality of any treatment carried out prior to the revocation. If you withdraw your consent, we may be unable to provide services to you, but we will notify you when this occurs.

Opposition

The law authorizes the processing of personal data even without your consent. In these situations, we will only process your personal data if we have legitimate reasons to do so. If you do not agree with any purpose for the processing of your personal data, you may file an opposition requesting its interruption.

Automated decision review

You may request a review of the decisions taken based on the automated treatments carried out by us, when applicable, provided that you respect Azul's business secrets.

It is important to clarify that there may be exceptions to the above requests. These situations include, for example, cases in which the disclosure of specific information could violate business secrets of Azul or third parties, as well as cases in which requests for anonymization, blocking or deletion of data cannot be met due to the existence of an obligation of Azul from retaining such data, whether to comply with legal or regulatory obligations or to enable the defense of Azul's rights or those of third parties, including disputes of any nature.

We know that malicious people can use this type of request to impersonate you and obtain your data. In order to prevent fraud of this type and ensure your security, we may ask for more information to confirm your identity when you send us a request. The data provided for this verification will be used exclusively for this purpose.

Also, some requests may not be responded to immediately, but Azul undertakes to respond to all requests within a reasonable time and always in compliance with the applicable legislation.

To exercise your rights, or resolve any queries regarding how Azul treats your personal data, you can contact us through the following channels:

Data Protection Officer: Baptista Luz Advogados
E-mail: privacy@voeazul.com.br
Relationship Center: - Capitals and Metropolitan Regions: 4003-1118 - Other Locations: 0800-887-1118
Conventional mail or in person: Av. Marcos P. de U. Rodrigues, 939 - Edif. C. Branco Office Park, Torre Jatobá, 9th floor, Alphaville Industrial – Barueri/SP, CEP 06460-040.

Thank you so much for trusting our work!


Azul Airlines