This policy applies to all received personal information of which xcmxfa app is a “Data controller”, and our use of that personal information on the user's behalf, for which we act as a “Data processor”, including:

Personal information of individuals who have signed up to use the XcmXfa app and website processes, and

The contact points of third parties with whom the app interacts on behalf of the signed up individuals, such as KLM, Station managers and ground handlers

Who is XcmXfa?

This website, “XcmXfa.com”, is owned and operated by Olu Ayoola, a private individual

The website address is: https://www.xcmxfa.com

Information we may collect from you

This is information you voluntarily give us in order to access and use the website, as well as personal information such as

Personal details necessary to register to join and participate as a 'User'

Personal details necessary to process an email request for a flight booking / listing / check-in as staff traveller (XXDHC/XCM/XFA) on airlines in the Air France / KLM Group.

Other information we may collect about you

If you visit our website, or use the web app, we may automatically collect information about you, for example:

Technical information about your viewing device and browser

Your IP addresses

Your URL

Information we receive from other sources

We may use third parties to provide user analytics and advertisements (eg Google). They provide XcmXfa with wider general statistics about visitor behaviour.

How we use the information about you?

Your location and preferences

Information supplied by you to signify your location, and / or information automatically obtained about your location will only be used for setting a location 'cookie' that will be locally stored on your device. This is true for both guests and registered users.

Flight listing and booking

Information supplied as part of your online profile at xcmxfa.com, together with information about your intended travel plans will only be used for requesting flight listing, booking and check-in on your behalf from KLM or Passenger handling agents of KLM. This is true for registered users only.

Your personal details may be used to send you information relating to your flight listing / booking /check-in, e.g. your email address for emails, and your telephone number for SMS messages.

Marketing

Your information will not be used for marketing or passed to third parties not associated with creating your flight listing / booking /check-in.

We may send you promotional announcements from time to time about new regulations, content, products and services that you might find useful.

You may opt out from receiving information from us at any time by sending an email to admin@xcmxfa.com

We will never sell or pass your personal information on to others.

Analytics

General statistics and user behaviour is used to improve our website and content.

How and where we store your personal data

Your data is stored in on a server hosted by Fastcomet Web Services in London, England. Here is a link to the Fastcomet information on security : ????

General security measures:

access to administrative functions is restricted to the website owner /administrator and /or authorised individuals in specific remote locations through a firewall

database access restricted to internal servers only with a proxy for remote management

web traffic is transferred over HTTPS

passwords are stored using one-way encryption

Servers are kept up to date with the latest security fixes

Flight listing processing

This website (and related personal data) is hosted in the UK or EU/European Economic Area (“EEA”)

Details of any payments are stored by PayPal

Where we have given you (or where you have chosen) a password which enables you to access Flight listing / booking / check-in processing parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone

Transmission and storage of your personal data

Unfortunately, the transmission of information via the internet is not completely secure. Although we use best practice to ensure your data is encrypted to the standard required to protect your personal data, we cannot guarantee the security of your data as it is transmitted and stored.

All data in transit, eg via email, is encrypted using SSL/TLS

Data at rest is stored on servers running MySQL Enterprise TDE

MySQL Enterprise TDE enables data-at-rest encryption by encrypting the physical files of the database. Data is encrypted automatically, in real time, prior to writing to storage and decrypted when read from storage. As a result, hackers and malicious users are unable to read sensitive data directly from database files. MySQL Enterprise TDE uses industry standard AES algorithms.

More info on database encryption can be found here

How long will you keep my personal information?

Flight listing / booking / check-in processing

Guests: Information relating to your location and preferences will only be kept on our system for 30 days

Registered Users: All personal data is deleted when you opt to end your registration and use of the app. If you do not cancel your registration, we will automatically delete your registration and personal data, 90 days after your last login or last use of the app

We are happy to remove all personal information from our system by request

Cookies

See our Cookie Policy

Advertisements

Third party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites on the Internet

Google’s use of advertising cookies enables it and its partners to serve ads based on their visit to this site and/or other sites on the Internet

You may opt out of a third-party vendor’s use of cookies for personalised advertising by visiting www.aboutads.info

Other websites

Our website contains links to other websites.  This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies

How to contact us

We are contactable by email at admin@xcmxfa.com

Your agreement to our privacy & cookie policy

By signing this electronic form with the 'agree' button, you are confirming your agreement to our privacy and cookie policy as outlined above, and that we may store and use / continue to store and use your personal information and personal data as described above

Agree Decline