KLM Privacy Statement – China Addendum

This China Addendum (this "Addendum") applies to you if you reside or are located in the People's Republic of China ("China", which for the purposes of this Addendum only shall exclude Hong Kong, Macau, and Taiwan) as required by the Personal Information Protection Law ("PIPL") and other applicable laws and regulations in China. This Addendum supplements the KLM Privacy Statement (the "Privacy Statement"). If any provision in this Addendum is inconsistent with a provision in the Privacy Statement, this Addendum shall prevail to the extent of the inconsistency regarding the processing of your Personal Information (as defined in this Addendum). Unless otherwise specified, the definitions of the terms in this Addendum have the same meaning as in the Privacy Statement. This Addendum is intended to inform you at or before the time that you provide us with your Personal Information how and why we process your Personal Information. In this Addendum, "Personal Information" refers to all kinds of information related to identified or identifiable natural persons recorded by electronic or other means, excluding the anonymised information. Please carefully read and fully understand the content of this Addendum and the Privacy Statement before using the products and/or services provided by us. Once you click "Agree to the Privacy Statement" or words to a similar effect on a certain online page or start to use our products and/or services, you agree to the Privacy Statement and this Addendum, and you consent that we collect, use, share, transfer, disclose, store and protect your Personal Information for the purposes described in the Privacy Statement and this Addendum.

1. Types of Personal Information we collect and use

1.1 For more information on the categories of Personal Information we process, you may refer to section 2 of the Privacy Statement.

1.2 Sensitive Personal Information

Under the PIPL, 'Sensitive Personal Information' refers to Personal Information that, once leaked or illegally used, will easily lead to infringement of the human dignity or harm to the personal or property safety of a natural person, including ID card number, biometric recognition, religious belief, specific identity, medical and health, financial account, personal location tracking and whereabout of a natural person, as well as any Personal Information of children under the age of 14. In order to provide you with the appropriate service, we may need to collect information that is sensitive under the PIPL. Indeed, this data, such as specific assistance needs or meal preferences, may indirectly give information about your religious beliefs or your state of health and may fall under Article 28 of the PIPL.

1.3 Children under the age of 14

Please refer to our separate rules for the protection ofPersonal Information of children under the age of 14.

2. Purposes for which we use your Personal Information

2.1 Main purposes for which we use your Personal Information:

To facilitate our (corporate) loyalty programmes – it is necessary for the conclusion and performance of your membership contract, the management of your accounts and associated benefits.

2.2 Legal basis

We may collect and use your Personal Information only if we have a legal basis for doing so. In many cases, we need your Personal Information to receive your booking, arrange your flight or purchases, facilitate your participation in our loyalty programmes, or to answer your questions. In those cases, the legal basis for processing your data is 'necessary for the conclusion and performance of your contract'.

If you have consented to the collection and use of your Personal Information (which consent you may withdraw at any time, see 5 "How to exercise your rights" below), we will collect and use your data based on that consent.

We may collect and use your data when this is necessary for the performance of our statutory duties or legal obligations, or for coping with public health emergencies or for the protection of the life, health, and property safety of a natural person.

3. Granting access to or sharing Personal Information with third parties

KLM provides services all across the world. We will share your Personal Information with parties, in compliance with applicable laws and regulations in China, including obtaining your separate consent, if necessary.

4. Personal Information transferred outside China

For the purposes set out in section 4 of the Privacy Statement, we will transfer your Personal Information to recipients who are located outside China.

We will take all reasonable actions to ensure the compliance with applicable legal and regulatory requirements for cross-border transfer of your Personal Information, including to complete the Personal Information protection impact assessment, to pass the security assessment, and to sign standard contracts, if necessary. When the Personal Information cross-border transfer is based on your consent, we will also inform you of relevant information in accordance with the law and obtain your separate consent for processing.

5. How to exercise your rights

You may contact us to exercise any of the rights provided under the PIPL (including without limitation, the right to access and copy; the right of correction; the right of erasure; and the right to data portability) to the extent permitted by law, or if you have any question about this Addendum or how we use your Personal Information. For our contact information, you may refer to section 8.4 of the Privacy Statement.

6. How this Addendum is updated

This Addendum took effect on 2 December 2024.

We reserve the right to amend this Addendum from time to time. All changes are published on our website. We invite you to read it regularly, especially when you book new flights with us. If you choose to continue using our website or app or other online channels after the updated Privacy Statement and its Addendum take effect, you will be deemed to have agreed to the revised Privacy Statement and its Addendum.