Privacy Policy

At TAP Air Portugal’s Maintenance and Engineering Unit (TAP-ME), we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Data Protection Policy explains how we collect, use and protect your personal data when you interact with our websites or contact our maintenance and engineering, training and equipment calibration services.

1. Who We Are

The Maintenance and Engineering Unit is part of Transportes Aéreos Portugueses, S.A., a public limited company headquartered at Edifício 25 of Lisbon Airport, 1700-008 Lisbon, Portugal, registered with the Commercial Registry Office of Lisbon under the unique registration and tax identification number 500 278 725, which also uses the trade name TAP Air Portugal.

Transportes Aéreos Portugueses, S.A., is thus the controller of the personal data collected and processed by TAP-ME, within the scope of its activities of maintenance and repair of aircraft, engines and components, management of continued airworthiness, engineering, training, laboratories and equipment calibration.

2. Data We Collect

At TAP-ME, we collect different types of data depending on the interactions you have with our websites or services:

Identification Data: When you fill in forms, request information or use our services, we may collect your name, email address, telephone number, job title, company name and other relevant data that directly identifies you; if you use our training services, we may also collect data such as educational and professional qualifications;

Your Device Data: When you access our websites, our system collects, through files called cookies, data such as the browser used, internet service provider, IP address, date and time of access and duration of the visit, necessary to ensure access and help improve functionality and the user experience;

Operational Data: If you are a customer or business partner, we may collect information related to contracts in which you participated, service requests and technical skills relevant to the services we provide.

3. How We Use Your Data

We process your personal data for the following purposes:

To provide the services, provide requested information, including updates, and technical or commercial support;
To communicate with you about the services we offer;
To improve the performance and functionality of our websites, as well as to conduct satisfaction surveys about the services provided;
To comply with legal obligations and industry regulatory requirements.

4. Legal Basis for Processing Personal Data

We process personal data on the following legal grounds:

Contractual Compliance, including Pre-contractual Due Diligence: To fulfil obligations arising from contracts related to the services provided, technical support and provision of other commercial information;

Legitimate Interest: Improvement of websites; sending marketing communications in the context of providing Business to Business services, unless you expressly object to their receipt;

Consent: Where consent is required for specific communications, we will request your express consent in advance;

Legal Obligation: To comply with legal or regulatory requirements, including security or aviation regulations.

5. Data Sharing

We may share your data only in the following circumstances:

Service Providers: We may share personal data with information technology, marketing, consulting or auditing service providers, among others, that assist us in the performance of our business. We ensure, however, that any subcontractor will process your data in accordance with our instructions, applying technical and organisational measures that ensure the security and protection of information, pursuant to subcontracting agreements entered into and in strict compliance with the law.

Regulatory and Legal Requirements: We may disclose personal information where required by law, including in legal proceedings or in response to requests from government authorities.

6. International Transfers

The provision of certain services may involve the transfer of your personal data to third countries (other than the European Union or the European Economic Area) to manage the services contracted by you and to comply with the legal obligations to which we are bound. In these cases, we undertake to take the necessary and appropriate measures, considering applicable law, to ensure the protection of all personal data that is the subject of an international transfer.

7. Data Retention

The period during which personal data is stored and retained varies according to the purpose for which the information is processed.

Indeed, there are legal requirements that oblige data to be retained for a minimum period. Thus, and whenever there is no specific legal requirement, the data will be stored and retained only for the minimum period necessary for the purposes that motivated its collection or subsequent processing, as defined by law.

8. Data Security

At TAP-ME, as in all other business areas of TAP Air Portugal, we are committed to ensuring the confidentiality, protection and security of the personal data of all those who interact with us, through the implementation of appropriate technical and organisational measures to protect them against any form of improper or unlawful processing and against any accidental loss or destruction thereof. To this end, we have systems and teams that ensure data security, creating and updating procedures that prevent unauthorised access, accidental loss and/or destruction of personal data.

Always committed to compliance with the legislation relating to the protection of personal data, TAP Air Portugal ensures that it processes such data only for the purposes for which it was collected or as legally permissible, with the guarantee that it is processed with the appropriate levels of security and confidentiality.

All employees receive regular data protection training and undertake not to disclose to third parties or use, for purposes contrary to the law, any personal information whose knowledge arises from the performance of their duties.

In this regard, TAP Air Portugal has also appointed a Data Protection Officer (“DPO”) to monitor compliance with applicable personal data protection policies and standards.

9. Your Rights

You may request, at any time, access to your personal data, as well as its rectification, deletion or limit its processing, the portability of your data, or object to its processing, subject to the conditions legally provided for, through this link.

For more information about the processing of your personal data, you can contact our Data Protection Officer at dpo@tap.pt.

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) or with another competent supervisory authority under the law.

10. Changes to the Privacy Policy

TAP Air Portugal, within the scope of the provision of Maintenance and Engineering services, reserves the right to amend this Privacy Policy, and the version in force shall be the one that, at any given time, is available on the TAP – ME websites.