ATOL trade privacy notices

The UK CAA's Consumers and Markets Group collects and stores your name, address, telephone, email, CV and passport (for new directors) for the purpose of processing; a new ATOL application, an ATOL renewal application to extend a current licence or an ATOL variation application to change ownership and/or control of an organisation that holds an ATOL. Such information is used for fitness checks of new directors and also updating our records on the ownership and control of organisations that hold ATOLs.

Why we process your personal information

The processing of your personal information is necessary for the performance of a task we carry out in the public interest or official authority vested in us in accordance with UK/EU law.

Who sees your personal information and why

We need to share your personal data with CAA staff for the purpose of processing a new ATOL application, an ATOL renewal application to extend a current licence or an ATOL variation application to change ownership and control of an organisations that hold an ATOL.

How long we keep your personal information and why

We will delete all personal information associated with the ATOL a maximum of 10 years after expiry of an ATOL or refusal to grant an ATOL. The data is held for this period to provide a fuller record of a person's past activity in order to inform the decisions set out above.

Your individual rights

You may submit an information enquiry or make a complaint about how we have processed your personal information by emailing FOI.requests@caa.co.uk. Please be aware that the CAA is subject to the Freedom of Information Act, which means we may need to release information you have supplied to us. However, we would never disclose your personal information without first obtaining your consent.

You have further rights as a data subject, which are available to review. Contact details of the CAA's Data Protection Officer are available.  You have a right to complain to the ICO about the CAA's processing of personal data. Access our General privacy notice.

This privacy notice is subject to change.

The UK CAA's Consumers and Markets Group collects and stores your name, address, telephone, email, CV and passport (for new directors) for the purpose of processing; a new ATOL application, an ATOL renewal application to extend a current licence or an ATOL variation application to change ownership and/or control of an organisation that holds an ATOL. We may also share such information on an adhoc basis with the CAA's legal and financial advisers, ATT Insurers, UK Trading Standards and Law Enforcement Agencies.

Why we process your personal information

The processing of your personal information is necessary for the performance of a task we carry out in the public interest or official authority vested in us in accordance with UK/EU law.

Who sees your personal information and why

We need to share your personal data with CAA staff, the CAA's legal and financial advisers, ATT Insurers, UK Trading Standards and Law Enforcement Agencies who act as joint controllers/processors for information sharing (on adhoc basis) and for the purpose of enforcing the ATOL Regulations and the prosecution of companies/individuals who are in breach of the ATOL Regulations.

How long we keep your personal information and why

We will delete all personal information associated with the ATOL a maximum of 10 years after expiry of an ATOL, refusal to grant an ATOL or a revocation of an ATOL. The data is held for this period to provide a fuller record of a person's past activity in order to inform the decisions set out above.

Your individual rights

You may submit an information enquiry or make a complaint about how we have processed your personal information by emailing FOI.requests@caa.co.uk. Please be aware that the CAA is subject to the Freedom of Information Act, which means we may need to release information you have supplied to us. However, we would never disclose your personal information without first obtaining your consent.

You have further rights as a data subject, which are available to review. Contact details of the CAA's Data Protection Officer are available.  You have a right to complain to the ICO about the CAA's processing of personal data. Access our General privacy notice.

This privacy notice is subject to change.

The UK CAA's Consumers and Markets Group collects and stores your name, address, telephone, email, firm details and Professional Accountancy Body (PAB) membership information for the purpose of your designation as an ATOL Reporting Accountant (ARA) and for processing ATOL renewal applications which you are associated with; AAR Part 1, AAR Part 2 and Airline Ticket Agent reports, where applicable.

Why we process your personal information

The processing of your personal information is necessary for the performance of a task we carry out in the public interest or official authority vested in us in accordance with UK/EU law.

Who sees your personal information and why

We need to share your personal data with internal CAA staff for the purpose of processing ATOL renewal applications.

We may also share your personal data with the applicable PAB based in the UK, who also act as data controllers/processors for the purpose of sharing information related to their members and for updating their current members status for the Designated ARA register held by the CAA. The PABs are: ACCA (Association of Chartered Certified Accountants), AAT (Association of Accounting Technicians), AIA (Association of International Accountants), IFA (Institute of Financial Accountants), ICAS (Institute of Chartered Accountants of Scotland), ICAI (Institute of Chartered Accountants in Ireland) and ICAEW (Institute of Chartered Accountants in England & Wales).

ACCA, AIA and ICAEW have additional offices outside of the EU, but your personal information will not be transferred outside the EU.

How long we keep your personal information and why

We will delete all personal information associated with an individual ATOL holder, a maximum of 10 years after expiry of an ATOL, refusal to grant an ATOL or a revocation of an ATOL. The data is held for industry intelligence and policy work purposes. We will also delete all personal information associated with the ARA register 5 years after you have ceased to be an ARA designate. The data is held for this period to provide a fuller historical picture in the context of the decision set out above.

Your individual rights

You may submit an information enquiry or make a complaint about how we have processed your personal information by emailing FOI.requests@caa.co.uk. Please be aware that the CAA is subject to the Freedom of Information Act, which means we may need to release information you have supplied to us. However, we would never disclose your personal information without first obtaining your consent.

You have further rights as a data subject, which are available to review. Contact details of the CAA's Data Protection Officer are available.  You have a right to complain to the ICO about the CAA's processing of personal data. Access our General privacy notice.

This privacy notice is subject to change.

The UK CAA's Consumers and Markets Group collects and stores your name, address, telephone, email, firm details and Professional Accountancy Body (PAB) membership information to verify your identity and update your current membership status in the CAA's ATOL Reporting Accountants (ARA) register.

Why we process your personal information

The processing of your personal information is necessary for the performance of a task we carry out in the public interest or official authority vested in us in accordance with UK/EU law.

Who sees your personal information and why

We need to share your personal data with the applicable PAB,: ACCA (Association of Chartered Certified Accountants), AAT (Association of Accounting Technicians), AIA (Association of International Accountants), IFA (Institute of Financial Accountants), ICAS (Institute of Chartered Accountants of Scotland), ICAI (Institute of Chartered Accountants in Ireland) and ICAEW (Institute of Chartered Accountants in England & Wales), based in the UK, who also act as data controllers/processors, in order that they can verify your identity and membership status. The CAA requires that information to be accurate to ensure that only qualified ARAs report on ATOL holder's regulatory returns.

ACCA, AIA and ICAEW have additional offices outside of the EU, but your personal information will not be transferred outside the EU.

How long we keep your personal information and why

We will delete all personal information associated with the ARA register 5 years after you have ceased to be an ARA designate. The data is held for this period to provide a fuller historical picture in the context of the decision set out above.

Your individual rights

You may submit an information enquiry or make a complaint about how we have processed your personal information by emailing FOI.requests@caa.co.uk. Please be aware that the CAA is subject to the Freedom of Information Act, which means we may need to release information you have supplied to us. However, we would never disclose your personal information without first obtaining your consent.

You have further rights as a data subject, which are available to review. Contact details of the CAA's Data Protection Officer are available.  You have a right to complain to the ICO about the CAA's processing of personal data. Access our General privacy notice.

This privacy notice is subject to change.