This portal https://compass.flights and each webpage forming part of this portal (the Portal) is solely owned, hosted and operated by HADID International Services FZE, a free zone establishment incorporated pursuant to the prevailing laws of Dubai, United Arab Emirates, its branches and/or subsidiaries (the Company).
The Company is engaged in Air Freight & Passengers Charters, Aviation Services Coordination and Aviation Consultancy. The Company is a trusted brand name that provides wide array of air and non-air related travel services through its network offices and affiliates globally using its vast experience, know-how, man-power and inventory.
This document sets out the details as to how information is collected, saved, processed and used when a visitor and/or Authorised User accesses the Portal. The privacy of the Visitor and/or Authorised User is important to us. It is the Company’s policy to respect the privacy of the Visitor and/or Authorised User concerning any information the Company may collect from the Visitor and/or Authorised User across the Portal, and other sites owned and operated by the Company. The Portal will be hosted on third-party servers for which the Company will provide a security certificate that will encrypt the Visitor’s and/or Authorised User’s connection with the Portal.
Protecting the privacy of the Visitor and/or Authorised User is important to the Company; the Company therefore conducts its business in line with applicable laws on data privacy protection and data security. Any amendments the Company may make to its privacy policy in the future will be posted on this page.
Information the Company collects
Log Data
When the Visitor and/or Authorised User visit the Portal, the Company’s servers may automatically log the standard data provided by the Visitor’s and/or Authorised User’s web browser. It includes the Internet Protocol (IP) address, the browser type and version, the pages the Visitor and/or Authorised User visit, the date and time of the visit and other details.
Device Data
Data may be collected about the device being used to access the Portal. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What the Company collects can depend on the individual settings of the Visitor’s and/or Authorised User’s device and software. The Company recommends the Visitor and/or Authorised User to check the policies of the device manufacturer or the settings to know what information is made available to the Company.
Personal Data
Personal Data is the information that will allow the Company to identify or contact the Visitor and/or Authorised User, and includes, but is not limited to, name, email address, date of birth, gender, nationality, Passport Number, ID Number, phone/mobile number, home/mailing address/P.O. Box Number, work address, and payment information.
The Portal gathers information and personal data in the following ways:
- Directly - for instance, when the Visitor and/or Authorised User provide information to sign up for a newsletter or register on the Portal or extranet or wish to leave a comment on a forum;
- Indirectly - for instance, through the Portal's technology or through the affiliates; and
- Information supplied by the Visitor and/or Authorised User on the Company’s social media pages including, but not limited to, Facebook, Twitter, Google Plus and
Legal processing of data
The Company will process the Personal Data lawfully, fairly and in a transparent manner. The Company collects and processes data about the Authorised User only on legal bases. These legal bases depend on the services the Authorised User uses and how the Authorised User uses them, meaning the Company collects and uses the Authorised User’s information only where:
- it’s necessary for the performance of a contract to which the Authorised User is a party or to take steps at the Authorised User’s request before entering into such a contract, i.e. when the Company provides a service requested by the Authorised User;
- it satisfies a legitimate interest, provided it is not overridden by the Authorised User’s data protection interests, including, but not limited to, for research and development, for marketing and promoting our services, and for protecting our legal rights and interests;
- the Authorised User has given the Company consent to do so for a specific purpose and the Authorised User will have the right to change their consent at any time, but this will not affect any processing that has already taken place; or
- the Company needs to process the Authorised User’s data to comply with a legal
Collection and use of information
The Company will not keep Personal Data for longer than is necessary. While the Company retains this data, the Company will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. If necessary, the Company shall retain the Visitor’s and/or Authorised User’s Personal Data for the Company’s compliance with a legal obligation or to protect the Visitor’s or Authorised User’s vital interests or the vital interests of another natural person. As no method of electronic transmission or storage is 100 percent secure, the Company cannot guarantee absolute data security. The Company does not collect sensitive personal information through the Portal. The Company only collects this data if the Company is asked by law enforcement or local authorities or is required to comply with any data protection and privacy requirements. Several data privacy regulations including European and American data privacy laws mandate special treatment when it comes to collecting sensitive personal information. Sensitive personal information may include details such as the Authorised User’s social security number, personal tax identification numbers, political or religious views and so on. The Company uses “cookies” to collect information about the Authorised User and Authorised User’s activity across the Portal. A cookie is a small piece of data that the Portal stores on the Visitor’s and/or Authorised User’s computer, and accesses each time the Visitor and/or Authorised User visits, so the Company can understand how the Visitor and/or Authorised User uses the Portal, and helps the Company gather statistical data to analyse and aggregate information such as number of users who visited the Portal. This helps the Company serve the Visitor and/or Authorised User content based on preferences the Visitor and/or Authorised User has specified.
The Company may collect, hold, use and disclose Personal Data for the following purposes and Personal Data will not be further processed in a manner that is incompatible with these purposes:
- to enable the Visitor and/or Authorised User to customise or personalise the experience of the Portal;
- to enable the Visitor and/or Authorised User to access and use the Portal, associated applications and associated social media platforms;
- to contact and communicate with the Visitor and/or Authorised User;
- for internal record keeping and administrative purposes;
- for analytics, market research and business development, including to operate and improve the Portal, associated applications and associated social media platforms;
- for advertising and marketing, including to send the Visitor and/or Authorised User promotional information about the Company’s services and information about third-parties that the Company considers may be of interest to the Visitor and/or Authorised User; and
- to comply with the Company’s legal obligations and resolve any disputes that the Company may have; and
When complying with the services provided by the Company, including, but not limited to aircraft, cargo, crew and passenger ground handling, airport fees settlement, flight clearances, air traffic rights and approvals, aircraft refuelling, navigational fees settlement, catering, hotel reservations, renting a car, and booking a pick-up from/to the airport, the Company may be required to comply with third-party service providers and the Company may accordingly collect and disclose Personal Data.
The Company may disclose Personal Data to:
- third-party service providers for the purpose of enabling them to provide their services;
- the Company’s employees and/or related entities;
- sponsors or promoters of any services the Company runs;
- debt colleting agencies, courts, tribunals and regulatory authorities, in the event the Authorised User fails to pay for the services provided by the Company to the Authorised User;
- courts, tribunals, regulatory authorities and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;
- third-parties, including agents or sub-contractors, who assist the Company in providing information, services or direct marketing to the Visitor and/or Authorised User; and
- third-parties to collect and process
The Personal Data collected by the Company is stored and processed in the United Arab Emirates and/or United States of America and/or Pakistan and/or where the Company or the Company’s partners, affiliates and third-party providers maintain facilities. By providing the Company with the Personal Data, the Authorised User consents to the disclosure to these overseas third parties.
The Company ensures that any transfer of Personal Data to the overseas countries will be protected by appropriate safeguards. Where the Company transfers Personal Data to third-parties in other jurisdictions, the Authorised User acknowledges that such third-parties may not be subject to similar data protection laws to the ones in the Company’s jurisdiction. The Authorised User will not be able to seek redress under the Company’s jurisdiction’s privacy laws if any such third-party engages in any act or practice that would contravene the data privacy laws in the Company’s jurisdiction.
The General Data Protection Regulation
The Company when storing and/or processing Personal Data about the European Union citizens will comply with the General Data Protection Regulation (GDPR).
The Visitor’s and/or Authorised User’s Rights
The Company respects the Visitor’s and/or Authorised User’s privacy. The Company gives the Visitor and/or Authorised User the option to either subscribe to or; unsubscribe from the Portal. The Authorised User is entitled to know whether the Company holds Personal Data about and, if so, to have access to that Personal Data and require it to be corrected if it is inaccurate. The Authorised User may request details of the Personal Data that the Company holds about the Authorised User. The Authorised User may request a copy of the Personal Data the Company holds about the Authorised User. Where possible, the Company will provide this information in easily readable machine format. The Authorised User may request that the Company erases the Personal Data the Company holds about the Authorised User at any time. The Authorised User may also request that the Company transfers this Personal Data to another third-party. The Authorised User can do the above by using the Company’s “Contact Us” form.
Links to other sites
The Portal contains links to advertisements, events, business partners, and third- party links. Those websites have their own privacy statements and policies. This privacy statement will not apply when the Visitor and/or Authorised User moves to other sites. The Company is neither responsible nor liable for privacy practices employed by websites linked to the Company. The Company does not guarantee, assure, approve or endorse any information, material or service/product contained in these links. These links are for reference purposes only and the Visitor and/or Authorised User clicking these links is at the Visitor’s and/or Authorised User’s sole risk. The Company reserves the right to amend this privacy statement. If the Visitor and/or Authorised User has any questions or concerns regarding the Company’s privacy statement, please contact the Company using the “Contact Us” form
Effective: November 2020