# Omega World Travel

Presentation

Aviation Advisory Committee

For Aviation Consumer Protections

May 21, 2013

### Stan Brown

VP of Business Development

Omega World Travel

# W HAT 

# I NFORMATION IS 

# C OLLECTEDOmega Profile/Record Data 

## OmegaTravel.com Data Usage Data Usage

First Name Airline, TSA, Country * Country Airline , Country I

Last Name Airline, TSA, Country * Street Airline , Country I

Middle Name Airline, TSA, Country * City Airline, Country I

Telephone GDS, Vendors, Airline * State or Province Airline, Country I

Itinerary * Zip or Postal Code Airline, Country I

Who Booked GDS, Travel Co. * Place of Birth Airline , Country I

Credit Card w/EXP Vendors Document Type Airline , Country *I

Credit Card CVV Train (Not Stored) Document Number Airline , Country I

Date of Birth Airline, TSA * Visa Place of issue Airline , Country I

Gender Airline, TSA * Visa Issue Date Airline, Country I

Redress Number Airline, TSA Visa Applicable Country Airline, Country I

Address Type Airline, Country *I Document issue country Airline , Country I

Country Airline , Country *I Document Nationality

Country Airline , Country I

Document Expiration Date Airline , Country I * = Required I = International 

### G OVERNMENT AND 

### A IRLINE 

### R EQUIRED 

### D ATA Web Application

 Online Travel Tool

 Telephone

 Synchronized to Global

Distribution System 

### T RAVELER 

### P ROFILE 

### I NFORMATION• Frequent Flyer Number

• Mobile Phone Number

• Email Addresses

• Special Requests

• Corporate Discount Numbers

(Cars / Hotel) 

### O THER 

### D ATA 

### O MEGA 

### C OLLECTS

### O MEGA 

### ’ S 

### D ATA 

### S ECURITY 

### P ROTECTION 

### P ROCESSES

• Omega operates a secure data network protected by industry

standard firewall and password protection systems

• Security and privacy policies are periodically reviewed and

enhanced as necessary

• Only authorized individuals have access to the information

provided by our customers.

### S ECURITY OF 

### P ERSONAL 

### I NFORMATION

• Omega secures personal information from unauthorized access

,

use or disclosure

• Omega secures personally identifiable information on computer servers

in a controlled, secure environment

• Personal information (such as a credit card number) is transmitted through the

use of Secure Socket Layer (SSL) encrypted protection

.

• Omega never releases personal information about travelers to third parties,

unless expressly instructed to do so by the owner(s) of that information.

### S ECURITY OF 

### P ERSONAL 

### I NFORMATION

• All Omega employees are trained on the importance of client confidentiality

• We do not, nor will we ever, publish any information about our clients

• Omega does not sell client lists and do not subscribe to any services that have access

to client names

• GDS and our automated systems were designed with security modules in place to

protect client information

### Omega’s Data Security Procedures

• Omega has a Data Security Program in place for protecting electronic information

from persons without proper authorization

• Protecting against external forces, ie viruses or “hacking.”

• All networks are protected via firewall/router using a private network

IP to DSL modem.

• All PCs run Computer Associates’ Virus Scanning system and Omega’s Web mail

system is protected with Symantec anti

- virus system.

### Omega’s Data Security Procedures

• Travel Consultants must provide the computer system with an individual login to gain

access to the network system and their PC located within their workspace.

• In addition to logging into the Omega system to access applications and Web mail,

Travel Consultants must sign into the GDS using a separate and distinct login to

access travel data.

### Security for Online Booking Systems

• All reservations made in these systems are entered into the GDS

• Omega has direct access to all reservations after they have been completed

via the GDS

• All Web sites that require client travel information for profiles and/or travel requests

are secured with 128 bit Secure Socket Layer (SSL) protocol

• In addition to online booking security, all Omega Web servers are physically stored in a

secured facility at our ISP Rack space, running Microsoft operating systems and

secured by a firewall

• Database server storing client specific data housed on a private network allowing

inbound traffic from a specific IP address

• This database server is accessible by only three persons at Omega.

### Accounting Data

• Accounting data and our accounting system are on an internal private network

• Access is controlled via a Novell network login and password as well as an application

login and password.