The UK CAA’s Consumer and Markets Group will, in the event of the failure of ATOL holder, contact the appointed Insolvency Practitioner/Administrator or Liquidator to obtain its booking data.  The booking data may contain your personal details including your name, postal and/or email address, telephone number and details of your booking.  This data may be used for the purpose of arranging repatriation and claims management.

Why we process your personal information?

The processing of your personal data is necessary for the purposes of our, or our third parties’, legitimate interests and does not affect your fundamental rights and freedoms as a data subject.

Who sees your personal information and why?

We need to share your claims data with CAA internal auditors, external auditors and the contracted claims processing agencies, based in the UK, for the purpose of audit and processing refund claims after the failure of an ATOL company.

How long we keep your personal information and why?

We retain your personal information for 7 years after the failure of the ATOL company. The data is held for compliance and audit purposes.

Your individual rights

You may submit an information enquiry or make a complaint about how we have processed your personal information by emailing FOI.requests@caa.co.uk. Please be aware that the CAA is subject to the Freedom of Information Act, which means we may need to release information you have supplied to us. However, we would never disclose your personal information without first obtaining your consent.

You have further rights as a data subject, which can be found here. Contact details of the CAA’s Data Protection Officer can be found here. You have a right to complain to the ICO about the CAA’s processing of personal data. Access to our General privacy notice can be found here.
This privacy notice is subject to change.