Privacy

AGS Airports take the issue of data protection very seriously, including compliance with the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

You have the right to be informed of what information we use about you when using the ‘Aberdeen Airport’ application, hereinafter referred to as ‘the App’. This notice explains:

• The categories of personal data we process.

• Why and how we use your data.

• Who (if any) third parties we share your data with.

• How long we hold your data.

• Your rights regarding your data.

During the course of using our application, we will process personal data (which may be held on paper, electronically, or otherwise) about you and we recognise the need to treat it in an appropriate and lawful manner. The purpose of this notice is to make you aware of how we will process your personal data.

Your personal data will be processed by Aberdeen International Airport Limited (‘the Airport’) who is the data controller. A data controller determines the purposes and means of processing personal data. We are registered as a data controller with the Information Commissioner’s Office (‘ICO’), under registration number Z5843276.

If you are a customer, please also check your contracts between us: they may contain further details on how we collect and use your data.

The app contains links to external websites. This privacy notice does not cover those websites. You should read the privacy notices on the other websites you visit.

Please note we have a separate privacy notice for our customers (such as visitors to the airport) and website users.

Contact details - Your name, address, telephone number, email address, vehicle registration number if using our car parks and social media username (if public)

Financial information - Your bank account number, sort code, credit/debit card details.

Travel Information - Flight numbers, service bookings including parking, lounges, and priority security.

Online data that identifies you - Your device’s IP address, login information (when logging into the App account, online identifiers, mobile device information, time zone setting, geolocation information about where you might be, operating system and version.

Data on how you use our app - Type of mobile device, mobile operating system version, the pages of our App that you visit, the time and date of this visit, the time spent on these pages, device ID

In some circumstances we collect special categories of personal data about:

• biometric data, where used for facial recognition purposes for app login verification.

Data protection laws mean that we can only use your data for certain reasons and where we have a legal basis to do so.

The legal bases for processing personal data are:

• consent, where the individual has given clear consent for us to process their personal data for a specific purpose, such as for direct marketing and notifications – please note that you also have the right to withdraw such consent.

• contract, where the processing is necessary for a contract we have with you such as to book our lounges or car park, or because you have asked us to take specific steps before entering into a contract.

• legal obligation, where the processing is necessary for us to comply with the law, for example, for health and safety, or where we are required to report a crime to the Police.

• vital interests, where the processing is necessary in order to protect someone’s life;

• public task, where the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law;

• legitimate interests, where the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect individual’s personal data which overrides those legitimate interests.

Our legitimate interests include audits, use of body worn cameras, CCTV, commercial statistical usage of CRM data, emergency contact & beneficiary details, data-sharing with key stakeholders, Mosaic Experian data, noise feedback, profiling and segmentation, reference requests, marketing via soft opt-in, surveys, third-party usage of staff car park, and for the general running of our business.

Here is a summary of the reasons we process your data. 

To provide the services hosted within the App, whilst also monitoring the usage of the App. This also includes registration as a user of the App and managing that user account.

Managing your purchases of App products or services e.g. car parking, lounge booking, priority security, and keeping you updated on changes to your contract.

Gathering visitor data to the App, which includes profiling.

The information collected is used for internal purposes only and is used to improve the usability of the App and is stored and used only for the purposes of collecting aggregates and statistics relating to the functional performance of the App. We may use your information for data analysis, identifying usage trends, determining the effectiveness of the App and improve the App.

Sending you emails and text messages about airport destinations, holidays, products and services and our partners. Asking you to take part in research and surveys.

We will always tell you before collecting your data for marketing. If you have previously opted in to marketing, you can either unsubscribe at the bottom of any of our emails or you can contact us at [email protected]. If you opt out of marketing then you will not receive any related news, updates, offers or notices of events, except where we are updating you on changes to your contract.

If you do not wish to provide us with your personal data, you will not be able to use the app. You are able to use some of the services made available by the App, without the creation of a user account. In this scenario, certain functions will not be usable, such as purchasing parking, priority security, or lounges – these require the provision of personal data via an App account.

The Airport will respect all of your data subject rights. You can exercise any of your rights by contacting our group data protection lead at [email protected]. If we do hold the information we will:

• Authenticate you as the data subject.

• Determine if a right can be administered.

• Normally complete your request within one month.

• Communicate to you in clear and intelligible language.

A fee will not generally be charged for exercising any of these rights unless your requests are unfounded or are manifestly excessive.

Please note that not all rights can be exercised in all circumstances. Where we are unable to assist you to exercise your rights, we will explain the legal basis for this.

If you would like to exercise any of these rights, or if you have any concerns about how your personal data is being processed, please contact us, using the contact details at the end of this Privacy Notice.

You have the right to know how we manage your data. This is explained in this privacy notice. 

You can ask at any time, for a copy of your personal data. After checking your identity, the Airport will respond within one month to advise you if we hold your personal data and if so, we will provide you with a copy of the data, unless it is exempt from release, e.g. if providing it to you broke another person’s confidentiality, or release would otherwise not be authorised under the law.

This right allows you to submit changes to your records and once changes are verified, they will be amended on the Airport records. Similarly, the Airport may periodically request you to check your data is held accurately.

You can request that we delete all of your personal data. If you do this, and there is no other lawful basis to keep your data, then it will be deleted.

You have the right to ask us to restrict how we process your data. This means that we would be permitted to store the data but not further process it. We keep just enough data to make sure we respect your request in the future. This is not an absolute right.

You have the right in some circumstances to object to how we use your data. This is not an absolute right.

The Airport does not perform automated-decision making. We may from time to time perform online profiling, however, this does not produce any decisions or legal effects.

We have physical and electronic procedures to secure the personal data we process. All of our staff are trained in data protection.

Transmission: where personal data is electronically transmitted from one computing device to another over a public network an encrypted path will be used e.g. SSL. If your data is transmitted in a hard-copy format from one place to another a secure or locked method of transport will be used, suitable to the nature of the personal data.

Storage: personal electronic records are located on servers in secure premises. If your data is required to be stored outside of the secure premises, the data will be in an encrypted format. Personal paper-based records will be stored in a locked filing cabinet in secure offices to prevent inadvertent access by unauthorised third parties.

Access: only personnel authorised by the Airport will have access to your personal data records on a need-to-know basis.

Your information will only be stored within the United Kingdom and the European Economic Area (‘EEA’) except where international transfers are authorised by law or with your consent.

We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law, as recorded in our Data Retention Standard Operating Procedure.

The Airport will share your personal data with other organisations in order to supply products or services to you. This could include but is not limited to both car parking and Wi-Fi providers.

We may also share your data in the following circumstances:

• You have given us your express consent to do so

• Where it is fair and reasonable for us to do so in the circumstances.

• If the Airport shares your data on a regular basis, it will perform due-diligence and hold written contracts and agreement with these organisations to legally safeguard your data.

• If you have consented for us to share your data with other organisations for the purposes of direct marketing, we will keep your consent on record until it is withdrawn or the purpose of holding your data is no longer valid. On deletion of your data, the Airport will endeavour to contact you to confirm that your information has been removed.

• We also use third parties to help us host our applications and platforms to help us to communicate with customers etc. We only use third parties who are compliant with data protection laws; and

• We may share your personal data to any of our employees, officers, contractors, insurers, professional advisors, agents, suppliers or subcontractors, and trusted third parties (including group company key commercial shareholders) insofar as reasonably necessary, and in accordance with data protection legislation.  

We may also share your personal data:

• to the extent that we are required to do so by law.

• to protect the rights, property and safety of us, our customers, users of our App and other persons.

• in connection with any ongoing or prospective legal proceedings.

• to the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling; and

• to another organisation if we enter into a joint venture or merge with another organisations. 

We keep our privacy notice under regular review and we will place any updates on this webpage. This privacy notice was last updated on:

Text last updated: 30/07/2024

Page visually refreshed: 21/08/2024

The Airport tries to meet the highest standards when processing personal information. For this reason, we take any complaints we receive about this seriously. We encourage people to bring it to our attention if they think our collection or use of personal information is unfair, misleading, or inappropriate. Please contact the Group Data Protection Lead:

AGS Data Protection Lead
Glasgow Airport,
Erskine Court,
St. Andrew’s Drive,
Paisley
PA3 2SW

[email protected]

Please reference the App (Aberdeen Airport) in your correspondence.

We have appointed RGDP LLP, as our Data Protection Officer, who can be contacted either via 0131 222 3239 or [email protected].

We have also appointed GDPR Local, as our EU representative, who can be contacted by calling them on +44 1772 217800.

If you are still unhappy regarding how we have dealt with your complaint, you have the right to contact the UK Information Commissioner’s Office (ICO). You can do this by calling their helpline, contacting them through their website or writing to them. Their details are as follows:

ICO telephone helpline: 0303 123 1113

ICO website: Make a complaint | ICO

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF