Aer Lingus Privacy Statement

Aer Lingus is committed to respecting your privacy and protecting your personal information

This Privacy Statement sets out what we do with your personal information and how we keep it secure. It explains what personal information we collect, where, why and how we collect it, as well as what your rights are over the personal information we hold about you. We use the terms "personal data" and "personal information" interchangeably in this Statement to mean details which identify you or could be used to identify you, such as your name and contact details, your travel arrangements and purchase history etc. This Privacy Statement gives effect to our commitment to protect your personal information. It applies to personal information about you that we collect, use and otherwise process in connection with your relationship with us as a guest or potential guest, including: when you travel with us or use our other services; when you interact with us on social media or use our websites or mobile applications, through our virtual online "chat" service, contact our service agents or call centres and/or book to use our services through third parties (such as travel agents and other airlines); and/or where you are a member of AerClub (our loyalty, reward & recognition programme). The purpose of this Privacy Statement is to enable you to understand how we process your personal data and to exercise control over it. The principle of "transparency" in data protection law requires that we communicate to you (via this Privacy Statement) about how we process your personal data in an easily accessible and easy to understand format. As a valued Aer Lingus guest, your personal privacy is very important to us. Therefore:

  • We are transparent about the personal data we collect and what we do with it.
  • We use the personal data you give us for the purposes described in this Privacy Statement, (this include providing you with services you have requested / enhancing your experience)
  • We also use your personal data to help us understand you better so that we can improve your guest experience / provide you with relevant offers.
  • If you tell us you don't want to receive marketing emails we will stop sending them. We will, of course, continue to send you essential information relating to a product or service you have purchased to keep you informed about your booking and travel itinerary.
  • We put in place measures to protect your personal data and keep it secure.
  • We respect your data protection rights and aim to give you control over your personal data.

You can access our full Privacy Statement below to help you to understand better how we use your personal information. In it, we explain in more detail the types of personal information we collect, how we collect it, what we use it for and who we share it with. Our "Privacy Essentials" section below summarises the most important parts of our Privacy Statement. In the full Privacy Statement you can also find some specific examples of why and how we use your personal information. If you have further questions please get in touch with us at or write to us at Data Protection Officer, Aer Lingus, Dublin Airport, County Dublin, Ireland. Without prejudice to your rights under applicable laws, this Privacy Statement is not contractual and does not form part of your contract with us.

This Privacy Statement is applicable to services provided by Aer Lingus Limited and Aer Lingus (U.K.) Limited. References to "Aer Lingus”, “we", "our" "ourselves" and "us" means Aer Lingus Limited and/or Aer Lingus (UK) Limited, as applicable.

Privacy Essentials

Key information "at a glance". For details please read the Privacy Statement in full.

Who is collecting your data?

Aer Lingus Limited (Dublin Airport, Co Dublin, Ireland; email address is the data controller of your personal data where you book services that we provide to you. Aer Lingus (U.K.) Limited is the data controller of your personal data where you book services provided by that company (Belfast City Airport, Sydenham Bypass, Belfast, Co Antrim BT3 9JH, Northern Ireland; email address The relevant operator of your flight will be identified in your booking confirmation. If you are a member of AerClub, Avios Group (AGL) Limited will also separately be a "data controller" of your personal information. AGL's address is Astral Towers, Betts Way, Crawley RH10 9XY, UK and email address We may engage certain third parties (e.g. call centre partners, ground handling agents) to provide services on our behalf, see Section 9 below, or to provide services jointly with us, for example we use Facebook Messenger Chat to facilitate online enquiries from customers via our website and mobile app, see the Contact Us section on our website. However, if you make a booking for services offered by a third party (e.g. a connecting flight with another airline, travel insurance, car hire, a hotel room or a holiday package) then the applicable booking terms and conditions will identify the third party provider (i.e. the other airline, insurance provider, car hire provider or hotel operator) who will also separately be a "data controller" of your personal data for the purpose of providing that third party service. You can access the privacy statements of those providers from them directly. You can access the privacy statements of other airlines via

What personal data do we collect?

We collect the following data: your name, title, date of birth, passport details; contact information including email address and phone number; payment details; travel itinerary, any Aer Lingus or third party services booked or special assistance requested; purchase history; sales channel; social media interactions, information about your searches and web usage, home airport and preferences and interests. If you are an AerClub member we also collect your membership data. A full description of personal data we collect is set out in Section 4 of the Privacy Statement.

What we do with the personal data we collect?

We require your information to deliver services to you and to understand your needs and provide you with a better service. From time to time, we may also use your information to contact you for market research purposes. We may use your information to improve our products and services or customize the website/app according to your interests. We may send promotional emails about special offers and deals to the email address you have provided (unless you indicate you don't wish to receive these).

How do we keep your personal data secure?

In order to prevent unauthorized access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

How can you control your personal data?

If you have previously agreed to us using your personal data for direct marketing purposes, you may change your mind at any time by clicking on the unsubscribe link in each marketing email or via the unsubscribe page. We may use your personal data to send you promotional emails about third parties which we think you may find interesting. We will not sell your personal data to third parties. If you are a "registered user" of our website/app or an AerClub member you can update your account details on a self- service basis. You may request details of personal data which we hold about you (please see Section 12). If data we hold on you is incorrect/ incomplete, please contact us (details here). We will promptly correct any data found to be incorrect.

How do we use cookies?

Cookies help us to keep our website functioning securely and to provide you with a better service. Cookies allow us to recognise your device or computer and to see how you interact with our website, but not to identify you as an individual. You can choose to accept or decline cookies or change your cookie preferences on the website at any time by clicking the button below. This button will direct you to the cookie consent banner where you can adjust the available sliders to 'On' or 'Off', then click 'Confirm My Choices'. Alternatively, most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set see our Cookie Policy for more details.


A note regarding links to other websites

Our website contains links to enable you to visit other websites. Once you use those links to leave our service, we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any data which you provide whilst visiting such other websites and such websites are not governed by this Privacy Statement. You can find out how those sites use and protect your data by reading their privacy statements.


Covid 19

When travelling to Ireland or other countries you may be required by local authorities at your destination to complete a form and/or provide personal data including for example, your contact details and/or evidence of your compliance with pre-departure requirements including for example, proof of negative Covid 19 test and/or proof of vaccinations and/or immunity ("Proof Data"), as part of international Covid 19 containment/ and contact tracing efforts. Please see the "Country Information" section of our website for the specific requirements in the country you are travelling to.

Aer Lingus will require to see evidence from you that your Proof Data is sufficient to allow Aer Lingus to permit you to board the relevant Aer Lingus flight.

There may be circumstances where your Proof Data is provided by Aer Lingus (or a third party - see below) to authorities including health authorities either in Ireland or in another country to which you are intending to travel or have travelled as part of international Covid 19 containment / contact tracing efforts.

In order to travel to the United States, you are required to complete an attestation form prescribed by the US Centers for Disease Control (CDC) to confirm you meet (or are exempt from) the COVID-19 entry requirements for yourself and on behalf of any one who cannot sign the attestation for themselves. Aer Lingus is the data controller of US CDC Attestation Form data (whether you provide it directly to Aer Lingus at check-in or boarding or submit it via a third party app such as VeriFLY). Aer Lingus is required to retain the attestation form for 2 years and may be required to provide the attestation form to the United States government or authorities.

For travel to the United States, Aer Lingus is required to collect 'Contact Tracing' data from you so that we can fulfil your travel arrangements and perform the contract we have with you and this data may be used by U.S. public health officials to follow up with passengers who may have been exposed to a contagious disease before or during travel.

Save as explicitly set out herein, Aer Lingus is not generally the controller of Proof Data where it is provided by you directly to a third party, for example, you are handed a blank paper form to complete by an Aer Lingus staff member and you then provide the completed form directly to authorities at your destination, or you provide your Proof Data via a third party to verify your compliance with travel requirements e.g. VeriFLY (with the exception of attestation data, see below). You should consult the privacy statement provided by the third party to whom you submit this data for further information.

Aer Lingus is the data controller of (a) US CDC Attestation Form data (whether or not you provide it directly to Aer Lingus or submit it via a third party app such as VeriFLY); (b) confirmation message data relating to a passenger that has submitted Proof Data to a third party app or portal (such as "ok to travel") received from a third party app that is used to update your booking on our systems with confirmation of that your Proof Data is sufficient to allow you to travel and to check-in online; and (c) Contact Tracing data.

Aer Lingus's lawful basis for the processing of Proof Data as data controller under applicable data protection law is either,

  • It is in the legitimate interests of Aer Lingus when balanced against the rights and interests of passengers who might otherwise be unable to travel; or
  • It is in the "vital interests" of the passenger. If you were in close contact with a confirmed case, we may be required to provide your contact details to the relevant authorities so you can be contacted to be informed of this; or
  • It is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or
  • It is necessary for reasons of public interest in the area of public health; or
  • It is necessary for the performance of a contract to which you are a party.

Full Privacy Statement


Last updated 5 November 2021.