Organisations that collect and use your personal information are required to provide you with a Privacy Notice, sometimes called a Fair Processing Notice, to provide information to which you are legally entitled to.
There are two ways of doing this, the first is what organisations must provide to you when they collect your personal information from you. You may fill out a form online, or a paper application, or even give your personal information to an organisation over the phone. Where you do this, you will be provided with what is called an “Article 13” Privacy Notice.
The second is where organisations collect and use personal information that they have collected from another organisation, and not from you. In these instances, they are required to provide you an “Article 14” Privacy Notice. These two Notices are very similar but the main difference is that the Article 14 version must tell you where the organisation got your information from.
Privacy Notices are designed to inform you of how your personal data is being used but also give you control over it, that is one of the main focuses of the General Data Protection Regulation.
Birmingham Airport Privacy Notices
If you have given the Airport personal information and not received a Privacy Notice please contact the Airports Data Protection Officer immediately on the below contact details.
Privacy Notices
Birmingham Airport Limited and NCP
Airport Parking Booking Privacy Notice
Birmingham Airport and NCP are collecting your personal information. When we collect personal information, we are obliged to provide you with certain information, it is called the Right to be Informed. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer and NCP’s Data Protection Officer further down this Notice, please do not hesitate to contact either and ask for further information.
Birmingham Airport and NCP will be collecting the following from you for your parking reservation;
Name
Contact details (telephone number, email address, postal address)
Your vehicle registration number
1. Why we need it - the purpose of processing
Birmingham Airport and NCP are collecting your personal information to provide you with a car parking space at a date and time of your choosing. We may use this information for validation purposes to ensure that the parking of your vehicle is authorised (this includes the parking of vehicles by employees and contract staff in any carparks on the Birmingham Airport estate).
We will process your personal data to create an account and provide you with parking and to take payment for that space.
2. Why we’re allowed to process your personal information in this way – the legal basis
o Article 6 condition – Processing is necessary for the performance of a contract
3. Who we will share your personal information with?
We will share your personal information with a company called Rezcomm, who provide the booking site which you will enter your parking information into. Rezcomm will have access to the personal data held in its software for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Rezcomm servers are located in Strasbourg, France and the UK.
Birmingham Airport and NCP both have secure servers located in the UK.
5. How long we will keep your personal information for
For the purposes of your parking, an account is created for you upon booking. This account is used to provide you with the parking space and take payment and will be kept for a year after the last time you booked parking. This is to allow our returning visitors ease of use.
6. Your rights
You are entitled to request the following from Birmingham Airport and NCP. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
If you wish to contact NCP details are here;
Lawrence Cleeve - Data Protection Officer
T: 07500050231 - E: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport or NCP have used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport or NCP first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
Yes, for the purposes of parking your car in the NCP operated car park, it is a contractual arrangement. Although there is no signed contract, we are agreeing with you to provide a service for a set cost.
9. Are we using automated decision making, including profiling with regards to your personal data?
No, we are not using automated decision making, including profiling with regards to your information.
Birmingham Airport Assisted Travel Self Mobilisation Registration Process Privacy Notice
Birmingham Airport are committed to ensuring that the personal data of our passengers is handled in accordance with data protection law. This privacy notice reflects the requirements of the UK General Data Protection Regulation (UK GDPR) and will be updated to reflect any future changes to data protection laws.
The type of personal information we collect
We ask passengers to provide us with the following information:
Name
Email address
Flight number
This information is collected so that we can assist you in completing a declaration form stating that you are able to make the journey from landside to airside without assistance. A copy of this declaration (receipt) will also be sent to your email address.
How we get the personal information and why we have it
Your information is provided to us by you when we complete the declaration on Microsoft Forms on your behalf.
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information is:
processing is necessary for the legitimate interests of the Data Controller
Who we share your personal information with
Your information will be shared with the Assisted Travel Team at Birmingham Airport.
How we store your personal information
Your information will be stored on
Birmingham Airport servers, based in the UK
Microsoft servers, based in the USA
Your information will be retained for 6 months to facilitate investigations into any potential complaints that may arise.
Is your personal data being processed because of a regulatory or contractual requirement?
No.
Are we using automated decision making or profiling with regards to your personal data?
No.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at:
Data Protection Team Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
E-mail: [email protected] You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
ICO website: https://www.ico.org.uk
Birmingham Airports Assisted Travel Survey Privacy Notice
Birmingham Airport are committed to ensuring that the personal data of our passengers is handled in accordance with data protection law. This privacy notice reflects the requirements of the UK General Data Protection Regulation (UK GDPR) and will be updated to reflect any future changes to data protection laws.
The type of personal information we collect
We ask passengers to provide us with an email address in order to complete our assisted travel survey.
How we get the personal information and why we have it
Your email address is voluntarily provided to us directly by you in the following ways:
By scanning one of the QR codes provided across the site or on one of our business cards that are provided when you sign up to use our assisted travel service
By opting in to complete the survey when completing our self-mobilisation process
Due to a requirement under Civil Aviation Authority (CAA) regulations, Birmingham Airport have produced a survey to gather feedback from passengers based on their assisted travel service experiences. Your email address will be used to send this survey directly to you. Your survey responses are anonymous and will not be linked to your email address.
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:
processing is necessary for the legitimate interests of the Data Controller
Who we share your personal information with
We will share this information with:
our survey provider, Survey Monkey
our Terminal Operations Team in order to improve service levels and meet CAA obligations
Survey responses will be shared with the CAA but your email address will not be provided as part of this.
How we store your personal information
Your email address will be stored on
Birmingham Airport servers, based in the UK
Survey Monkey’s servers, based in the USA
Your email address will be retained for two months, after which it will be securely deleted.
Is your personal data being processed because of a regulatory or contractual requirement?
Yes, CAA Regulation (CAP 1228).
Are we using automated decision making or profiling with regards to your personal data?
No.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at:
Data Protection Team Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
E-mail: [email protected] You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
ICO website: https://www.ico.org.uk
Birmingham Airport Limited Training Privacy Notice
Birmingham Airport is collecting your personal data in order to fulfil its obligation to train relevant staff and third parties, in accordance with applicable legislative and regulatory requirements. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed.” That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Information Security Manager further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We are collecting your personal information to provide you with required training for working at Birmingham Airport. We will use the information you provide to us to provide the training and keep a record of the training completion on our files. We will also use the training record should there be a failure in procedure or an incident with relevant airport equipment or processes. Your records will be assessed if they need to be to ensure procedure was followed and training was in place and up to date. In the case of any incidents, as part of our incident process, you could be suspended from working on specific equipment, or have your access temporarily removed. Your manager will also be informed of any incidents or resulting action.
2. Why we’re allowed to process your personal information in this way - the legal basis Legal Obligation / Vital Interest
Birmingham Airport has a responsibility to ensure staff and relevant third parties are appropriately trained in accordance with legislative and regulatory requirements and also for the protection
3. Who will we share your personal information with?
Training information will be shared with Birmingham Airport Training and Compliance Team as records, as part of their daily responsibilities. If you are involved in an incident involving equipment that you have been trained on, your training records and details of the incident may be shared with your manager/HR department (for Birmingham Airport employees), your employer (for third parties) and external agencies as necessary.
4. Where your personal information will be stored or transferred to Training records will be kept electronically on a secure airport system. The servers for this system are located in the UK.
5. How long we will keep your personal information for Training records will be held for 3 years after each training session, or for the duration of time that an individual is employed at Birmingham Airport Limited.
6. Your rights You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information by going to birminghamairport.co.uk/dataprotection • Right of access • Right to rectification • Right to erasure • Right to restriction of processing • Right to data portability • Rights with regards to automated individual decision making, including profiling
Right to object The right to object is particularly important if we are processing your information under the conditions of a “public task,” or “legitimate interests,” and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airport’s Information Security Manager, Peter Harwood, on the below details.
Postal Address: Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ Email: [email protected]
7. If you are unhappy with the way in which we use your personal information If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Birmingham Airports BlipTrack Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
Birmingham Airport uses the ‘BlipTrack’ system, which detects WiFi and Bluetooth-enabled devices, such as mobile phones, headphones and smartwatches. As a device passes a sensor, the unique device identifier is time-stamped and encrypted. The system then reidentifies the device, as the device passes multiple sensors across the Terminal. The system supplier then provides the Airport with analysis of this data, reporting on direction travelled and time taken by our visitors.
We are collecting and processing personal information via the ‘BlipTrack’ systems for the following purposes:
Capacity management.
Improving the layout of existing Airport facilities.
Improving the passenger experience.
2. Why we’re allowed to process your personal information in this way – the legal basis
We are processing your device location data throughout your journey at the Airport. As your device is being carried, the ‘BlipTrack’ system is gathering your physical location data, which under Article 4 (1) of the General Data Protection Regulation (GDPR), is classified as personal data.
To process your personal information, via ‘BlipTrack’, we are relying on the following Article 6 condition of GDPR:
For the legitimate interests of the Data Controller.
We believe we are doing so with a minimal privacy impact, as no attempt will be made to identify an individual from their unique device identifier.
If you do not understand any of the following and would like clarification, please contact the Data Protection Officer on details at the bottom of this notice.
3. Who we will share your personal information with i.e. the recipients?
Your personal data will be shared with the system’s supplier, ‘BlipTrack Systems’, under the ‘Veovo’ brand.
4. Where your personal information will be stored or transferred to
Your personal data will be stored on Birmingham Airport servers and ‘BlipTrack’s servers in Denmark.
5. How long we will keep your personal information for
The unique identifier used to map your device will be retained for no longer than 24 hours. Once this has been disposed of, your location data will become anonymised and will no longer be classified as personal data.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Due to the nature of this system, Birmingham Airport will be unable to reidentify you from your location data, therefore it may not be possible to exercise your data subject rights listed within the GDPR 2016.
The unique device identifier used to track your location will be disposed of 24 hours after being capture by Birmingham Airport sensors. After this time, the location data is no longer personal data, as it has been anonymised.
We are processing your data in the legitimate interests of the Airport. The following underlined data subject rights are relevant to the ‘BlipTrack’ system:
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer, on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
Not applicable to this processing activity.
9. Are we using automated decision making or profiling with regards to your personal data?
Not applicable for this processing activity. Your location data’s unique identifier is disposed of by the supplier after 24 hours. Decisions made by Birmingham Airport will be made using the anonymised outputs of this system.
Any further questions about how we use your personal information in regard to the CCTV, that has not been covered in this notice or there is any information above that you do not understand, please contact the Airport on [email protected].
Birmingham Airports Community Trust Fund privacy notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We are collecting your personal information to assess your organisation’s eligibility for a Community Trust Fund grant, to process your application, to make a decision on whether or not to award a Community Trust Fund grant to the organisation you represent and to ensure that any grant is paid correctly, according to the Community Trust Fund rules.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – the establishment or performance of a contract
Article 9 condition – not applicable
3. Who we will share your personal information with?
Your information will be shared with the Trustees of the Community Trust, who will make any funding decisions, and with other members of staff of Birmingham Airport Ltd who promote the work of the Community Trust Fund.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Your personal information will be stored and used within the UK.
5. How long we will keep your personal information for
We will keep your personal information for a period of two years from the date of the Trustees meeting where your application is considered.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Rights with regards to automated individual decision making, including profiling
If you have any questions about them, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
Telephone: 0121 7678870
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
If the organisation you represent is successful in receiving a Community Trust Fund grant, your personal information will be used because of a contractual requirement. We need your personal information to decide if the organisation you represent is eligible to receive funding and to effectively process your application. If you do not provide the personal information we are asking for, we will not be able to put your application forward for consideration and your organisation will not receive funding.
9. Are we using automated decision making or profiling with regards to your personal data?
We are not carrying out any automated decision making or profiling on your personal information.
Birmingham Airport Competitions Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
Birmingham Airport is asking its marketing customers to complete a survey about our website. As part of the survey we are inviting people to give their name and email address so we can enter you into a competition to win some amazing prizes. In order to do this, we need to collect your name and email address only. Your name and email address will be used to identify and contact the winner of the competition, it will not be used for anything further.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition - Consent
You can withdraw your consent for the competition at any time by emailing us at [email protected]
3. Who we will share your personal information with?
The only organisation who will have access to your information will be Google for a short time, as they are running the survey for us, their servers are in Europe. Your information will also sit on Birmingham Airport servers which are in the UK.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
As above, your information will be stored on secure servers in the UK and Europe.
5. How long we will keep your personal information for
Your information will be kept for 1 month after we have presented the prizes to the winners of the competition. This will provide enough time for us to confirm the prize has been accepted and the names and email addresses are no longer required. At this point they will be securely deleted.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected] If you have any questions about them, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer, Kristie Marshman, on the below details. Postal Address: Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected] 7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
No.
9. Are we using automated decision making or profiling with regards to your personal data?
No, there is no automated decision making or profiling carried out on your personal data for this purpose.
CRM Department – Customer Correspondence and Refunds
Birmingham Airport is collecting your personal data. When we collect personal data, we are legally obliged to provide you with certain information, it is called the ‘Right to be Informed’. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
If you contact the airport to comment, query, or make a complaint the airport processes your personal information to enable us to respond to you. This includes when you go directly to the specific department, or if you provide feedback through our website.
We will also process your information if we have agreed that you require a refund for purchases you have made to Birmingham Airport.
Please note, a lot of complaints or queries that come through to Birmingham Airport are about services offered by our onsite partners. Where this is the case your complaint/query will be passed on to the relevant organisation, this will allow your complaint to be investigated and answered directly.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – legitimate Interests (relating to correspondence)
Article 6 condition – legal obligation (where relating to the Consumer Rights Act 2015 for refunds)
3. Who we will share your personal information with?
If you have raised a complaint to Birmingham Airport about services we provide, your complaint will be answered by the relevant department. If this is the case, then we do not share your personal information with any other organisation.
However, we have many trusted partners who also operate on our site. If your complaint is regarding goods or services carried out by our partners, your feedback will be passed on so they may address your comments.
Organisations on site include, but are not limited to, the following:
Duty free retailers
Software providers
Car park providers
Luggage service providers
Crime agencies
Airlines/tour operators/travel agents
Handling agents
Retail/catering outlets
Lounge operators
Legal organisations
Border Force/West Midlands Police/Immigration
Regulators
If your feedback is for Birmingham Airport your details will be held with the relevant department and the software which they use to log and track feedback and complaints.
The software suppliers may have access to the personal data for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
4. Where your personal information will be stored or transferred to
Your personal information will be stored on our supplier’s servers, all of which are detailed on the Airports Record of Processing Activities, as legally required by the GDPR. Where your information is held on Birmingham Airport’s servers, we can confirm these servers are located in the UK.
5. How long we will keep your personal information for
Any queries, compliments or complaints that come to us through the Airport’s website will be kept for 2 years, unless it involves a noise complaint, in which case it will be kept for 3 years. Further information on Noise complaints can be found on the Noise Complaint Privacy Notice on the Birmingham Airport website.
Where your complaint goes directly to a department within Birmingham Airport, they will have their own retention periods, as many of our departments are heavily regulated. A such there are statutory retention periods, or business retention periods which are specific to the department. You can request to know these retention periods at any time by asking the department who is handling your feedback, or you can contact the Information Security Team on the details further down this notice, as they hold the retention policy for the Airport as a whole.
Data relating to refund transactions will be retained for 6 years plus 1 year, as per The Limitations Act 1980, to allow for challenges and defence on any issues.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a ‘public task’, or ‘legitimate interests’, and you can check that information above in section 2. This is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airport’s Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioner’s Office
Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
For refunds only, there is a contractual obligation to provide a refund on products or services, in line with your consumer rights.
9. Are we using automated decision making or profiling with regards to your personal data?
No, we are not using automated decision making or profiling for the purposes detailed within this Notice.
Birmingham Airport Data Subject Rights Requests Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are legally obliged to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
Your name, contact details and ID (where required) will be collected and used by Birmingham Airport in order to complete your information request. This means any request which falls under the below Data Subject Rights as listed in the GDPR.
Rectification and erasure
Right to object and automated individual decision-making
Your information will be used to confirm your identity and to progress your request under the legislation detailed in the GDPR and the Data Protection Act 2018 (where relevant).
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – Legal Obligation (GDPR & Data Protection Act 2018)
3. Who we will share your personal information with?
Your information will be used by the Information Security team, whose role it is to ensure your request is logged and dealt with.
Minimum details will also be shared with the department or departments which hold the information you have made your request about, so that they can fulfil the request on your behalf.
4. Where your personal information will be stored or transferred to
Your information will be held on the Information Security teams logging software, provided by a company called MetaCompliance. They are a data processor only, which means they provide the software and will maintain that software but will not have use for or access your personal information for any other reason. A contract, and appropriate legal documentation, is in place to keep your information secure and within the legal requirements of the GDPR.
MetaCompliance servers are located in Dublin with backup servers located in Amsterdam. Birmingham Airport servers are located in the UK.
5. How long we will keep your personal information for
Your request will be kept for 2 years past the point we send your response.
This is to ensure we have the details of your request, should you wish to ask us to re-assess our response, or you are not satisfied and take a complaint to the Information Commissioners Office.
Your ID, however, will be securely deleted with 1 month of your response being sent to you. We do not need to keep a copy of your passport/driving license etc, once we have confirmed your identity. What we do is keep a log of what ID you provided and that we verified it before sending you your response.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. This is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airport’s Data Protection Officer on the below details.
Postal Address:
Data Protection Officer Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioner’s Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a statutory or contractual requirement?
Yes, it is a statutory requirement under the GDPR and the Data Protection Act 2018.
9. Are we using automated decision making or profiling with regards to your personal data?
No.
Birmingham Airport Drone Requests Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We will use your personal data to authorise your drone flights.
If a drone flight is reported within Birmingham Airports Restricted Airspace we will use your contact information to verify you are flying your drone in the authorised area and at the authorised time.
Where necessary we will provide your personal information to the Airport Police Unit for them to respond to any reports of drone flights, so they can contact you and confirm your details and flight plans.
This is all to ensure that unauthorised and/or dangerous drone flights are responded to correctly and those individuals with approval are discounted as part of an investigation.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – Legal obligation
We are required under Civil Aviation Authority Regulations to approve and authorise appropriate drone flight requests and monitor Airport air space for unapproved drone flights which may be a threat to aviation safety.
3. Who we will share your personal information with?
Your information will be shared internally with the departments which need to know, or may be asked about, drone flights in Airport airspace. These departments are the Airport Control Centre and Air Traffic Control.
We will also share your personal information with the police, should you be authorised to fly a drone, in the event that the police get a drone report and need to investigate. They can then contact you to determine if you are flying on the date, time and place of your authorisation to discount you from any investigations.
4. Where your personal information will be stored or transferred to
Your personal information will be stored on Birmingham Airport servers which are based in the UK. It is secure and access has been granted only to those individuals which will need to contact you.
5. How long we will keep your personal information for
Your personal information will be kept for 1 month past the point of your last authorised drone flight.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Data Protection Officer
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a statutory or contractual requirement?
Yes, the Civil Aviation Authority Regulation CAP 1763 – Air Navigation Order 2018 and 2019 Amendments – Guidance for Small Unmanned Aircraft Users
9. Are we using automated decision making or profiling with regards to your personal data?
No.
Birmingham Airports Education Visits Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We are collecting your personal information to arrange your education visit. We need to know who is coming to visit the airport and we may also need to arrange permissions to allow you access to the relevant areas within the airport.
We may also collect information relating to your health and mobility from you, which we may need to know to ensure that your visit runs smoothly.
2. Why we’re allowed to process your personal information in this way – the legal basis
The following conditions are part of the Data Protection Act and we are required to identify which condition we are relying upon to use your information. If you would like more information about these conditions and how they are used, please contact the Data Protection Officer on the contact details further down this Notice.
Article 6 condition – Legitimate Interests
Article 9 condition – For the Prevention of any Unlawful Act
3. Who we will share your personal information with?
We will share your personal information with the relevant internal departments, such as the Airport Control Centre, who will arrange vehicle access. We will also pass relevant details to the managers of those parts of the airport you might visit.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Your personal information will be held by Birmingham Airport and will not leave the UK.
5. How long we will keep your personal information for
We will keep your personal information for a period of two years from the date of your visit
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Rights with regards to automated individual decision making, including profiling
If you have any questions about them, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
There is no contractual obligation or regulatory requirement with regard to your personal information.
9. Are we using automated decision making or profiling with regards to your personal data?
We are not carrying out any automated decision making or profiling on your personal information.
Birmingham Airport Employee Travel Survey Privacy Notice
Birmingham Airport are committed to ensuring that the personal data of our employees is handled in accordance with data protection law. This privacy notice reflects the requirements of the UK General Data Protection Regulation (UK GDPR) and will be updated to reflect any future changes to data protection laws.
The type of personal information we collect
We ask employees of Birmingham Airport and third parties to provide us with the following information when completing our travel survey:
Company
Role
Postcode
Gender
Age Group
Email Address
Please note that all responses are optional.
How we get the personal information and why we have it
Your personal data is provided voluntarily by you. The survey will be available via a link on the intranet. A paper copy will be distributed to those who don’t have access to the intranet.
The survey is being conducted by Birmingham Airport annually to:
help understand how employees travel to work and their reasons
monitor changes in travel patterns and the impact of measures we introduce
The information we capture is used for various reasons:
Personal Data | Reason |
|---|---|
Company and Role | To determine which companies have not completed the survey. To analyse and identify travel trends among companies and roles |
Postcode | To identify where further transport links are required |
Gender | To determine if there is a correlation between genders and the usage of particular modes of transport |
Age Group | To determine if there is a correlation between age groups and the usage of particular modes of transport |
Email Address | To be entered into the prize draw To be contacted for the purposes of developing transport to the Airport (if opted in) |
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:
processing is necessary for the legitimate interests of the data controller
the data subject has given consent to the processing of their personal data
Who we share your personal information with
We will share this information with ARUP who are conducting the survey.
How we store your personal information
Your personal data will be stored on:
Birmingham Airport servers, based in the UK
ARUP’s servers, based in the UK
Your personal data will be retained for a year, until the next survey is released.
Is your personal data being processed because of a regulatory or contractual requirement?
No.
Are we using automated decision making or profiling with regards to your personal data?
No.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at:
Data Protection Team Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
E-mail: [email protected] You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
ICO website: https://www.ico.org.uk
Birmingham Airport Everbridge Notification Platform Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are legally obliged to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
Your data is being processed as part of Birmingham Airport’s chosen information notification system, which is used to keep you updated on any incident occurring within the airport. The notification platform is also used as part of the airport’s business continuity and disaster recovery plan.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – Consent
3. Who we will share your personal information with?
Everbridge, Inc.
4. Where your personal information will be stored or transferred to
Your personal information will be stored on Everbridge’s servers which are located within the United States.
5. How long we will keep your personal information for
Your information will only be held on Everbridge’s servers whilst you have an active user account on the Everbridge notification platform.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. This is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airport’s Data Protection Officer, on the below details.
Postal Address:
Data Protection Officer Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioner’s Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a statutory or contractual requirement?
No.
9. Are we using automated decision making or profiling with regards to your personal data?
No.
Birmingham Airport Express Lane Privacy Notice
Birmingham Airport are collecting your personal information. When we collect personal information, we are obliged to provide you with certain information, it is called the Right to be Informed. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
Birmingham Airport will be collecting the following from you for your express lane ticket:
Name
Contact details (telephone number, email address, postal address)
1. Why we need it - the purpose of processing
Birmingham Airport are collecting your personal information to provide you with an express lane ticket at a date and time of your choosing.
We will process your personal data to create an account and provide you with a ticket. The account creation allows us to take payment for the ticket.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – Processing is necessary for the performance of a contract
3. Who we will share your personal information with?
We will share your personal information with a company called Rezcomm, who provide the booking site which you will enter your information into. Rezcomm will have access to the personal data held in its software for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
We will share your information with NCP who look after the bookings on our behalf.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Rezcomm servers are located in Strasbourg, France and the UK.
Birmingham Airport and NCP both have secure servers located in the UK.
5. How long we will keep your personal information for
For the purposes of your ticket, an account is created for you upon booking. This account is used to provide you with the ticket and take payment and will be kept for a year after the last time you booked with us. This is to allow our returning visitors ease of use. However, you can request that we close your account anytime after your ticket has been used by contacting the Data Protection Officer on the details further down this notice.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport have used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
Yes, for the purposes of your express lane ticket, it is a contractual arrangement. Although there is no signed contract, we are agreeing with you to provide a service for a set cost.
9. Are we using automated decision making, including profiling with regards to your personal data?
No, we are not using automated decision making, including profiling with regards to your information.
Birmingham Airports Health and Safety - Accidents and Incidents Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We collect your personal information following an incident in order for us to comply with the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) should we need to report the incident to the Health and Safety Executive.
Your personal information will also help us to investigate the incident and benchmark against similar incidents. We will also use your information to decide an appropriate course of action and carry out any remedial actions that are required.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – Legal Obligation* *Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 Article 6 condition – Legitimate Interests
3. Who we will share your personal information with?
Your information will be used internally at Birmingham Airport by the Health & safety team to investigate any incidents. Where it is necessary and proportionate to do so, your information will be shared with other internal departments to help with any investigations.
We will share your personal information with the Health & Safety Executive where required by law to report any incidents required by RIDDOR.
We use software provided by a company called Southall Associates to log all incidents. Southall Associates will have access to the personal data held in the software for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
4. Where your personal information will be stored or transferred to
Your information will be stored on Birmingham Airport systems, which are based in the UK and Southall Associates software, which is also based in the UK.
5. How long we will keep your personal information for
Your personal information is kept for 3 years and 4 months. For incidents involving children we will keep the personal information for 3 years and 4 months after the child’s 18th birthday.
We are legally obliged under the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (RIDDOR) to keep reported incident data for at least 3 years and 4 months. This is time to give any injured party the appropriate period to pursue a civil legal claim.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer, on the below details.
Postal Address:
Data Protection Officer Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address: Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
8. Is your personal data being processed because of a regulatory or contractual requirement?
Yes, we are using your personal information because of the Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013.
9. Are we using automated decision making or profiling with regards to your personal data?
No, there is no automated decision making or profiling taking place.
Birmingham Airport Human Resource Privacy Notice
Birmingham Airport are committed to ensuring that the personal data of our passengers is handled in accordance with data protection law. This privacy notice reflects the requirements of the UK General Data Protection Regulation (UK GDPR) and will be updated to reflect any future changes to data protection laws.
The type of personal information we collect
We may collect and process the following information about you as part of the recruitment process:
your name
address and contact details, including email address and telephone numbers
date of birth
gender
employment history
qualifications
We may also process the following special category data of a more sensitive nature:
Equality, Diversity, and Inclusion (EDI) information
health information
criminal convictions or offences
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you when you apply for one of our roles. We will also perform social media screening to evaluate candidates’ professional suitability. This involves reviewing publicly accessible information.
We also receive personal information indirectly, from the following sources:
an employment agency
referees
security clearance providers
health providers
We use the information that is provided to us to assess your suitability for the role that you have applied for. We will share this information with:
our HR software system provider, MHR, who will have access to personal data held for the purposes of supporting the IT infrastructure only
our HR Team who requires access to your information throughout the recruitment process
West Midlands Police and the Home Office who require your information to perform weekly checks for criminal records
ARR, a reference company who use your information to carry out reference checks on our behalf
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
processing is necessary for the establishment or performance of a contract (employment contract)
processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law
processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee
How we store your personal information
Your information is securely stored on our HR system, iTrent. iTrent servers are based in the UK and your information will not be transferred outside of the European Economic Area (EEA).
If you are successful in the recruitment process and offered a position, your information will be retained in your personnel file for 6 years after you have left the company.
If you are unsuccessful in the recruitment process, your personal information will be retained for no longer than one year from the recruitment process.
Is your personal data being processed because of a regulatory or contractual requirement?
Yes, vetting is a regulatory requirement by the Civil Aviation Authority.
Are we using automated decision making or profiling with regards to your personal data?
Yes, we employ automated decision-making and profiling to review and assess candidate details submitted through our online application form. This approach is designed to simplify the initial selection phase, thereby saving your time, and enabling our HR department to focus on evaluating qualified candidates. Algorithms analyse the data provided and make decisions according to the specific criteria set by Birmingham Airport, such as eligibility to work in the UK. Should you not provide the necessary answers, the system will halt the application process and provide an explanation as to why this has occurred.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at:
Data Protection Team Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
E-mail: [email protected] You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
ICO website: https://www.ico.org.uk
Birmingham Airport Limited - ID Pass Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We are collecting your personal data for initial, and continuous, background checking to provide you with an airport security pass. The security pass is required for all areas of the airport.
Should you receive a criminal conviction during the lifetime of your ID Pass and not inform the Airport, as required in the ID Centre Code of Practice, West Midlands Police will inform the Airport via the up to weekly checks they carry out on your information. This will result in an investigation and if your criminal conviction is of a disqualifiable conviction, which prevents you holding an Airport Security Pass, or it is highlighted there is significant intelligence which may identify you as a potential Safety or Security risk to Aviation Security , it will be removed, and your employer informed. More information about disqualifiable convictions can be found in the ID Centre Code of Practice.
We collect and use your personal information to check the eligibility and suitability of applicants to hold an airport ID pass and to administer the airport ID pass scheme in accordance with regulatory requirements.
To cross reference your information with the Police National Database to ensure you do not have any criminal convictions which prevent you holding the ID Pass, as per the Department for Transport Regulations, or that you do not have any significant intelligence which may identify you as a potential Safety or Security risk to Aviation Security. The data will also be processed against a National database by CTP WMCTU to identify any terrorism and National Security risks.
Your information will also be shared with the Home Office on a regular basis in order to enable the repeat checks in support of the ‘enhanced background check’ process as mandated under the Direction to Aerodrome Managers served by the Secretary of State for Transport under section 14(1a) of the Aviation Security Act 1982.
This is necessary to support the safeguarding of national security and the prevention and detection of crime, including to help prevent attacks against airports and aviation in the UK.
We will manage and record access to the Critical Part, Airside and Landside Areas of the airport
We will investigate allegations of misuse of airport ID passes and misconduct at work
We will use your information to prevent and detect crime and for security purposes.
We will use your information to research into airport surface access requirements.
We will use your information to prevent or deter an insider from exploiting or intending to exploit their role for unauthorised purposes.
Once you have received your pass, we will also have access to the information collected by the door access system, each time you use your pass to gain entry to different areas of the airport, this will include the car parks, if you have been given a vehicle pass. This information will be passed onto your employer, should there be a serious concern with regards to security, crime or health & safety.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – legal obligation – Department for Transport Regulations, section 14(1a) of the Aviation Security Act 1982 (sharing with the Home Office).
Article 6 condition – legitimate interests – Sharing with West Midlands Police
Article 9 condition - for the prevention of any unlawful acts – Sharing with West Midlands Police
3. Who we will share your personal information with?
Your name and date of birth will be shared with West Midlands Police and West Midlands Counter Terrorist Policing on an up to weekly basis. This sharing is done to cross reference your information against the Police National Database to check for any disqualifiable criminal convictions. This continues the original DBS check completed before your ID Pass was granted to you at the start of your employment. Your name and date of birth may also be processed against a National database by CTP WMCTU to identify any terrorism and National Security risks. This will happen for the period in which you hold the ID Pass.
Your information will also be shared with the Home Office on a regular basis in order to enable the repeat checks in support of the ‘enhanced background check’ process as mandated under the Direction to Aerodrome Managers served by the Secretary of State for Transport under section 14(1a) of the Aviation Security Act 1982. This will happen for the period in which you hold the ID Pass.
Any personal information used for access to car parks, will be shared with NCP (including NCP's relevant data processors) for them to allow your security pass to activate the car park barrier when you wish to enter or exit the car park.
Your personal information is put onto two ID Centre systems, which are provided by ID Gateway and CEM, managed by companies called MCS and ADT. They will have access to the personal data held in the software for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Your personal information is stored within the UK.
5. How long we will keep your personal information for
The personal information collected for the security pass will be kept for the life of the pass plus 1 year.
For any temporary passes the information will be kept for 12 months plus 1 day.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests” as the legal basis. You can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airport on the below details.
Postal Address:
Information Security Team Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
Yes, a regulatory requirement from the Civil Aviation Authority to ensure security levels within the airport.
9. Are we using automated decision making or profiling with regards to your personal data?
No, for the purposes of security passes no automated decision making or profiling is taking place, these decisions are all taken by individuals working in the ID Centre.
Birmingham Airport Live Chat Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are legally obliged to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Team further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
Your data is being processed as part of Birmingham Airport’s live chat system, which is used to manage information customers provide when they contact the airport, including complaints, enquiries, and feedback.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – Consent.
3. Who we will share your personal information with? Gnatta.
4. Where your personal information will be stored or transferred to - will it be sent outside of the European Economic Area? Gnatta use Microsoft Azure and NetNorth to host data. Data Centres are located in Northern Europe and the UK respectively. Data will not be sent outside of the EEA.
5. How long we will keep your personal information for
Your information will be held for 30 days or until you exercise your right to erasure.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. This is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airport’s Data Protection Team, on the below details. Postal Address:
Data Protection Team Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioner’s Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator. Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a statutory or contractual requirement?
No. 9. Are we using automated decision making or profiling with regards to your personal data?
No.
Birmingham Airport Limited and NCP - Marketing Privacy Notice
Birmingham Airport and NCP are collecting your personal information. When we collect personal information, we are obliged to provide you with certain information, it is called the Right to be Informed. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer and NCP’s Data Protection Officer further down this Notice, please do not hesitate to contact either and ask for further information. We will be collecting the following from you for your parking reservation;
Birmingham Airport and NCP will be collecting the following from you for your parking reservation;
Name
Contact details (telephone number, email address, postal address)
Your vehicle registration number
1. Why we need it - the purpose of processing
If you have ticked the opt in box, we will send you electronic marketing information via your email address. This would include information about the latest destinations, airline offers, marketing surveys, our airport partners, parking and shopping offers as well as advice on how to prepare for your journey through the airport.
2. Why we’re allowed to process your personal information in this way – the legal basis
For the marketing
Article 6 condition - Consent
You can withdraw your consent for us to send you marketing by email at any time by clicking on the unsubscribe link at the bottom of any marketing email we send you.
3. Who we will share your personal information with?
We use an email broadcasting platform called Campaigner to create and dispatch our marketing communications, so your information will sit in their software and on their servers. They will only process your data for marketing purposes, for which Birmingham Airport and NCP provide instruction.
We will share your personal information with a company called Rezcomm, who provide the booking site which you will enter your parking information into. Rezcomm will have access to the personal data held in its software for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Rezcomm servers are located in in the UK and France
Campaigner will store your personal information on their servers which are in the UK.
Birmingham Airport and NCP both have secure servers located in the UK
5. How long we will keep your personal information for
We have a re-engagement programme in place, meaning you will be removed from our marketing database if you have not engaged with us for two years. At this point we will remove your information from our marketing database over the next year, meaning your information will not be kept any longer than 3 years after your last engagement. If you are engaging with us, we will continue to send you marketing until you withdraw your consent.
6. Your rights
You are entitled to request the following from Birmingham Airport and NCP. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected].
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
If you wish to contact NCP their details are here;
Lawrence Cleeve Data Protection Officer
T: 07500050231
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport or NCP have used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport or NCP first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
With regards to sending you marketing information, there is no contractual or regulatory requirement for this.
9. Are we using automated decision making or profiling with regards to your personal data?
No, we are not using automated decision making or profiling with regards to your information.
Birmingham Airport Marketing Sign-up Privacy Notice
Birmingham Airport is collecting your personal information. When we collect personal information, we are obliged to provide you with certain information, it is called the Right to be Informed. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer further down this Notice, please do not hesitate to contact them and ask for further information. We will be collecting the following from you when you sign up to receive marketing communications:
1. Why we need it - the purpose of processing
If you have ticked the opt in box, we will collect your name and email address to send you electronic marketing information. This would include information about the latest destinations, airline offers, our airport partners, parking and shopping offers as well as advice on how to prepare for your journey through the airport.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition - Consent
You can withdraw your consent for us to send you marketing by email at any time by clicking on the unsubscribe link at the bottom of any marketing email we send you.
3.Who we will share your personal information with?
We use an email broadcasting platform called Campaigner to create and dispatch our marketing communications, so your information will sit in their software and on their servers. They will only process your data for marketing purposes, for which Birmingham Airport provide instruction.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Campaigner will store your personal information on their servers which are in the UK.
Birmingham Airport has secure servers located in the UK
5. How long we will keep your personal information for
We have a re-engagement programme in place, meaning you will be removed from our marketing database if you have not engaged with us for two years. At this point we will remove your information from our marketing database over the next year, meaning your information will not be kept any longer than 3 years after your last engagement. If you are engaging with us, we will continue to send you marketing until you withdraw your consent.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Information Security Department Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport have used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
With regards to sending you marketing information, there is no contractual or regulatory requirement for this.
9. Are we using automated decision making or profiling with regards to your personal data?
No, we are not using automated decision making or profiling with regards to your information.
Birmingham Airports Noise Complaints Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
If you report any noise complaints to us we will use your personal information to investigate your complaint. Your personal details are used to enable us to log, investigate and respond directly to you.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – Legitimate Interests
Article 6 condition – Legal obligation (for local council audits only)
3. Who we will share your personal information with?
Your information will be shared with the sustainability department at Birmingham Airport in order to investigate your concerns. Solihull Metropolitan Borough Council will audit the data in order to ensure we are complying with our Section 106 legal Agreement. The Section 106 Agreement sets out legal obligation between Birmingham Airport Limited and Solihull Metropolitan Borough Council which includes the collation of complaint data relating to aircraft operations.
4. Where your personal information will be stored or transferred to
All your personal information will be kept on the Airports systems in the UK.
5. How long we will keep your personal information for
Your personal data will be retained by the Airport for 3 years. After this time it will be permanently deleted.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests” as the legal basis. You can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected].
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
We are required to give you this information, and the answer for noise complaints is no, it is not for a regulatory or contractual purpose.
9. Are we using automated decision making or profiling with regards to your personal data?
No, we are not using automated decision making or profiling for noise complaints.
Birmingham Airports Pension Scheme Privacy Notice
This Notice has been designed to inform you about the use of your data by the Trustee and the Scheme Actuary of the Birmingham Airport Limited Pension Scheme. This Notice is designed to meet the Scheme’s obligations under data protection law, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 (“data protection laws”). This Notice will be reviewed overtime to respond to changes in the Scheme, its advisors and the obligations that are placed upon the Scheme from time to time. This Notice sets out how and why we hold your data, including who we share your data with. We use the term data to mean personal data (also known as personal information).
Controllers
The Trustee of the Scheme is Birmingham Airport Pension Trustees Limited, with appointed directors of that Trustee Company. The Trustee of the Scheme needs personal information about you to run the Scheme and pay benefits. Similarly, other parties involved in running the Scheme will sometimes need to make decisions jointly with the Trustee about how your personal information will be used for those purposes, including the Scheme Actuary, who is Robert Hawkes of Barnett Waddingham LLP.
In accordance with guidance issued by the Information Commissioner’s Office (ICO) and the Institute and Faculty of Actuaries, the Trustee and Scheme Actuary of the Scheme are considered “joint data controllers” (the holders, users and processors of personal data) for the purposes of the data protection laws. This means we need to tell you some things about the personal information we have about you and your other dependents/beneficiaries and what your rights are in relation to it.
In this notice (which is known as a “Privacy Notice”) you will see information about what the Trustee does with your personal information and also what the Scheme Actuary does with it. We describe who to contact if you wish to exercise your rights under data protection laws in relation to the joint use we make of your information.
Except where stated otherwise, ‘we’ means both the Trustee and the Scheme Actuary where they are acting as joint data controllers in relation to your personal information (as described above).
We can be contacted through Barnett Waddingham’s member helpline 0344 443 4410.
What data do we hold and use?
We normally hold some or all of the following types of personal information:
Personal details including your name, National Insurance number, gender, age, date of birth, postal and/or email address and telephone number
Your gender (we use this to understand how long you are likely to receive your pension for and as part of your addressee details if we write to you, e.g. ‘Mr, Mrs, Ms).’
Details of your salary and employment history
If your benefits from the Scheme derive from your employment, details of your employer when you were building up benefits in the Scheme, how long you worked for them and your salary from time to time
Details of the value of your benefits in the Scheme
Bank account information (where your benefits are in payment)
Information about your tax position
Details of your marital status (which may include the gender of your spouse or civil partner)
Any information you have provided about who you would like to receive any benefits due on your death
If your benefits form part of a divorce settlement, details of that settlement
Your investments profile choice, where you have historically made additional voluntary contributions.
Details of any benefits earned in a previous pension arrangement if you have transferred these into the Scheme
Correspondence received about you from HMRC, relating to periods of service when you may have been contracted out of the upper tier of the state scheme.
Correspondence that we may have received about you from your appointed independent financial adviser.
Details in connection with your physical and mental health.
The Trustee may sometimes use other information about you. This could include information about your health where it is relevant to, for example, early payment of benefits from the Scheme, or details about personal relationships to determine who should receive benefits on your death. The Trustee might also, very rarely, have information about criminal convictions and offences, but only where it is relevant to the payment of Scheme benefits.
Where do we get your information from?
A lot of the information we have comes directly from you. In addition, Barnett Waddingham who administers the Scheme on behalf of the Trustee, may have obtained information from you and passed it to us. The Trustee may then in turn pass information about you to the Scheme Actuary or may instruct Barnett Waddingham as the administrator to do so. The Trustee is the source of the personal information which the Scheme Actuary may have about you.
Sometimes we get information from other sources – such as your employer such as your salary and length of service), from another scheme (if you have transferred benefits from that scheme), from government departments (such as HMRC and DWP), from publicly accessible sources (such as the electronic roll) or from a tracing agency if we have lost touch with you and are trying to find you, or from Government records regarding marriage, civil partnerships and divorce to verify marital status. The Trustee may then pass this onto the Scheme Actuary (as above).
Why we hold your personal information?
The Trustee holds your personal information to meet our legal obligations to provide benefits under the Scheme’s Rules and governing documentation and to meet other legal requirements in relation to the running of the Scheme.
The Trustee will use your personal information to comply with these legal obligations, to establish and defend its legal rights, and to prevent and detect crimes such as fraud. The Trustee may need to share your personal information with other people for this reason, such as courts and law enforcement agencies.
The Trustee also has a legitimate interest in properly administering the Scheme. This includes: paying benefits as they fall due; purchasing insurance contracts; communicating with you; and ensuring that correct levels of contributions are paid, benefits are correctly calculated and the expected standards of Scheme governance are met (including standards set out in Pensions Regulator guidance). The Trustee makes sure that your own interests are not outweighed or prejudiced by our legitimate interests.
Sometimes the Trustee may need to use very personal information about you (such as details about your health). In these circumstances, we may ask for your consent. Sometimes, there may be reasons of public interest or law which enables the Trustee to use this information about your health (or other very personal information such as details about personal relationships relevant to who should receive benefits on your death) without consent and it will do so where that is necessary to run the Scheme in a sensible way. You can withdraw your consent at any time by using the contact details above, although this may affect what the Trustee can do for you, unless it has another lawful reason for using your information. For example, if you apply for ill health early retirement and consent to us processing your health data for that, then withdraw that consent, we will usually be unable to consider your application. If you withdraw consent after our processing this will not retrospectively affect the processing that has already happened.
Sometimes, we need to use your personal data, including special categories of personal data, in order to establish, exercise or defend legal claims.
The Scheme Actuary uses your personal data to advise the Trustee on the financial management of the Scheme. This advice helps to ensure the Trustee is able to meet the obligations to pay your benefits, and is necessary to comply with obligations placed on them by legislation.
The Scheme Actuary may also use your personal data in research which assists actuaries in providing this type of advice - for example research into the mortality experience (life expectancy) of pension scheme members in general. This may include the provision of personal data, anonymised as far as possible, to a recognised external authority, such as the Continuous Mortality Investigation (CMI) which investigates mortality experience on behalf of the Institute and Faculty of Actuaries.
Who we will share your information with
The Trustee shares your personal information with the Scheme’s administrator Barnett Waddingham, Scheme Actuary and Additional Voluntary Contribution providers, and any new trustees or trustee directors. They may also share data with the Trustee’s other professional advisers (including the Scheme Auditor and pension consultants) and regulatory bodies (including, but not limited to, HM Revenue and Customs, the Department for Work and Pensions and the Pensions Regulator).
The Trustee can share your data with the employer for the purposes of providing you with options about your benefits and additional options which may be available to you in relation to those benefits.
Your data may be shared with other parties for particular activities such as printing, confirmation of address/existence, IT and data storage and archiving, and tracking and tracing services.
Also, if your benefits are transferred to another scheme, we will also need to provide the administrators of that scheme with information about you.
The Trustee may also share your personal information with someone else where you have given your consent – for example, where you seek advice from a financial adviser or where you transfer your benefits out of the Scheme.
We may need to share personal data with insurers in relation to purchasing and pricing up insurance contracts called ‘annuities’ (unless that can happen based on anonymized data). Insurers will use that data to verify the assets and liabilities of the Scheme. We may write to you before purchasing an annuity to ask for up to date information about your spouse/partner/children/other dependents to this end.
We will share your personal data when we purchase the annuity and at that stage the insurer will typically share information with its chosen re-insurer. Sometimes the insurer’s privacy notice will mention who itsre-insurer is and how to see its privacy notice (either giving you a link to it online or explaining where it can be seen or by providing a copy of it). The Trustee will usually need to write to members to explain about the particular annuity and who the insurer is. In this way you can know who holds your personal data and how to exercise your rights against them. The following categories of personal data would typically be shared with insurers: Scheme membership ID number; marital status and details about spouse/partner; DOB; information about annual pensions increases; pension/benefit amounts payable; age at retirement; service length and retirement.
A comprehensive list of parties with whom data may be shared is set out in the Trustee’s formal Data Mapping document, available on request by contacting the helpline above.
Scheme Actuary:
The Scheme Actuary is appointed by the Trustee to value the Scheme benefits and carry out other calculations in relation to your Scheme benefits. He will use your personal information for this purpose and has a legitimate interest in doing so. The Scheme Actuary will also use your personal information to comply with his own legal obligations and may need to share your details with other people for legal reasons, such as courts and law enforcement agencies. He may also share it with his own professional advisers, auditors and insurers, IT and data storage providers and other service providers.
Sometimes, your information may be used by the Trustee and the Scheme Actuary for statistical research, but only in a form that no longer identifies you.
How to contact the other people we give your personal information to:
Some of the people mentioned above just use your personal information in the way we tell them. However, others may make their own decisions about the way they use this information to provide their services, perform their functions, or comply with their regulatory requirements. In such a case, they have responsibilities as data controllers in their own right. This means that they are subject to the same legal obligations as the Trustee in relation to your information and the rights you have in relation to your information apply to them, too.
Security of your personal information
Protecting your data is very important to us. When we pass your information to a third party, we seek to ensure that they have appropriate security measures in place to keep your information safe and to comply with general principles in relation to data protection.
Other than in very limited circumstances, your data will not be stored, processed or transferred outside of the United Kingdom, but in the event this did happen, we will ensure appropriate protection is in place for your data. Some countries already provide adequate legal protection for your personal information, but in other countries, additional steps will need to be taken to protect it.
You can contact us for more information about the safeguards we use to ensure that your personal information is adequately protected in these circumstances (including how to obtain copies of this information).
Transfers outside the UK can happen lawfully if:
the personal information is transferred at the request and with the consent of the Scheme member in relation to his/her own benefits (or those of a dependent or beneficiary, as appropriate);
the country to which the personal information is being transferred is deemed to provide for adequate protection for personal data by the UK secretary of state and/or the UK’s Information Commissioner who (depending on the circumstances) determine adequacy;
an appropriate standard contractual clauses contract has been put in place with the third party/parties to whom the personal information will be transferred, containing appropriate safeguards in relation to it; or
the transfer is within a group of companies who have obtained Binding Corporate Rules.
How long do we keep your data for?
We will hold your data for as long as necessary to meet our obligations to pay the benefits to you under the Scheme and so that we have enough information to deal with any queries relating to your benefits that might arise in the future and because trustees of pension schemes can commonly face complaints or questions from members, former members, other individuals or regulatory authorities many years after a member / beneficiary has ceased to be entitled or prospectively entitled to benefits, some personal information may need to be kept indefinitely.
Your rights
You have a number of rights in relation to the data we hold about you. In particular, you have the right to:
obtain a copy of your personal data
have your personal data rectified if it is inaccurate and completed if it is incomplete
in particular circumstances, have your personal data deleted or removed
request access to your information and to obtain information about how we process it;
in particular circumstances, move, copy or transfer your information
in particular circumstances, object to your personal data being processed and to restrict the processing of your personal data in certain circumstances
You can exercise all of these rights free of charge except in some very limited circumstances, and we will explain these to you where they are relevant.
To exercise these rights, please use our administrator Barnett Waddingham’s contact details, which are set out earlier. The administrator can also supply more information about these rights to you, on request.
Please do let us know if at any time your information needs to be updated.
Further information
Should you have any further questions about how we use your personal information, you can contact our administrator Barnett Waddingham using the helpline as set out earlier.
If you have concerns about the way we handle your data, you have the option of contacting the Information Commissioner’s Office (ICO). Details of how to contact the ICO can be found at its website at https://ico.org.uk/. The website also includes further details about UK GDPR and your rights under UK GDPR.
Birmingham Airports Recruitment Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We are collecting your information as part of our recruitment process. This is to ensure that you are suitable for the role to which you are applying, and that we have all the information we require to assess that suitability.
We will use your gender, ethnicity, and disability information to comply with equality laws.
We will also use your personal information to produce any feedback you might request from us on your performance.
We will use your information to do any necessary background checks, as needed by the Civil Aviation Authority Regulations. This includes continuous checks via West Midlands Police and their Counter Terrorism Unit, and the Home Office and an external vetting company.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – for the establishment or performance of a contract (employment contract).
Article 9 condition - carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law.
Article 9 condition - processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee.
3. Who we will share your personal information with?
Employee data is kept on the HR software system I-Trent, this is provided to us by MHR.
They will have access to the personal data held in the software for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
Your personal data will also be shared with the recruiting manager and the HR Team as part of the recruitment process.
We will share your personal data with West Midlands Police, including their Counter Terrorism Unit, and the Home Office weekly, to continue checking your records against any disqualifiable criminal records, as per Regulations from the Civil Aviation Authority, or any intelligence which places you or the Airport and its occupants at serious risk.
Depending on recruitments levels, the Airport uses an external company to carry out the Airport reference checks. These are required for you to hold an ID Pass at the Airport. Without this check being carried out you are not allowed to work on site at the Airport, and your employment could be refused. The company currently being used is ARR and your personal information will be shared with them to carry out any vetting required for your post.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Your personal information will be kept on the I-Trent system, as mentioned above. I -Trent servers are based in the UK, and your personal information will not be transferred outside of the European Economic Area (EEA).
5. How long we will keep your personal information for.
If you are successful in the recruitment process and are offered a position within Birmingham Airport you will be provided with another of these Notices, which will explain how long your personal information will be kept as an employee.
If you are unsuccessful on this occasion, your personal information will be kept for no longer than 6 months from the recruitment process, this will include any feedback we provide to you.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to them as the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
Yes, the vetting we do against any criminal checks is a regulatory requirement by the Civil Aviation Authority.
9. Are we using automated decision making or profiling with regards to your personal data?
Yes, we are using automated decision making and profiling as part of the recruitment process. When you fill in the online application form, there are some questions which cause the system to decide on whether to allow you to continue in the recruitment process based on your answers.
The reason behind using automated decision making in this way is to stop the recruitment is you can’t answer certain questions straight the way. These questions are about your eligibility to work in the UK, and or for example, whether you hold certain certificates which are required for certain jobs. Legally we need to ask these questions, or we need to ensure you have the qualification or training required to do the job.
If you are unable to provide the answers that are required, the system will automatically stop the application process, and give you an explanation as to why this has happened. It will save you time, by not allowing you to go through the application process, which takes some time, and allows our Human Resources department to only access applicants who have the correct eligibility to apply.
If you would like further information on this, or are unhappy with the way in which the decision has been made, please contact the Airports Data Protection Officer on the above contact details.
Birmingham Airports Sound Insulation Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information. 1. Why we need it - the purpose of processing We will need your personal data to be able to contact you following your registration of interest in the scheme. This data will then be used to assess your suitability for the scheme, and if successful, track the progress of the works as well as dealing with any matters arising during the delivery of the scheme. 2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – performance of a contract
3. Who we will share your personal information with? Your data will be shared with Birmingham Airports appointed contractors which are David Newman Associates Limited and Profix Window Systems Limited for the purpose of completing the agreed works. 4. Where your personal information will be stored or transferred to All your personal information will be kept on the Airports systems in the UK. 5. How long we will keep your personal information for Your personal data will be stored for 2 years. After this time, we will minimise the personal data we hold on you by securely deleting all but your address and if the works were accepted and completed. This residual information will be held on record for a maximum of 25 years or until the scheme is completed (whichever comes first). This information is required to allow the scheme to be phased and ensure that properties that have already benefitted from the scheme are not offered further works. 6. Your rights You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]. If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details. Postal Address: Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ Email: [email protected] 7. If you are unhappy with the way in which we use your personal information If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator. Postal Address: Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Email: [email protected] 8. Is your personal data being processed because of a regulatory or contractual requirement? We are required to give you this information, and the answer for noise complaints is no, it is not for a regulatory purpose, but it is for a contractual purpose, this is the agreement you have with the Airport with regards to the sound insulation scheme. 9. Are we using automated decision making or profiling with regards to your personal data? No, we are not using automated decision making or profiling for sound insulation purposes.
Birmingham Airports Trade Marketing Privacy Notice
Birmingham Airport are collecting your personal information. When we collect personal information, we are obliged to provide you with certain information, it is called the Right to be Informed. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection further down this Notice, please do not hesitate to contact either and ask for further information. We will be collecting the following from you for your sign up via our website.
Name
Email address
Company
Why we need it - the purpose of processing
If you have ticked the opt in box, we will send you electronic marketing information via your email address.
This would include information about our partner airlines including updates and offers, our airport partners, parking and shopping offers as well as advice for your passengers and business updates. We will also email you information about events and competitions.
Why we’re allowed to process your personal information in this way – the legal basis
o Article 6 condition - Consent
You can withdraw your consent for us to send you marketing by email at any time by clicking on the unsubscribe link at the bottom of any marketing email we send you.
3. Who we will share your personal information with?
We use an email broadcasting platform called Campaigner to create and dispatch our marketing communications, so your information will sit in their software and on their servers. They will only process your data for marketing purposes, for which Birmingham Airport provide instruction.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Campaigner will store your personal information on their servers which are in the UK.
Birmingham Airport have secure servers located in the UK
5. How long we will keep your personal information for
We have a re-engagement programme in place, meaning you will be removed from our marketing database if you have not engaged with us for two years. At this point we will remove your information from our marketing database over the next year, meaning your information will not be kept any longer than 3 years after your last engagement. If you are engaging with us, we will continue to send you marketing until you withdraw your consent.
6. Your rights
You are entitled to request the following from Birmingham Airport and NCP. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against
our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport or NCP have used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport or NCP first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
With regards to sending you marketing information, there is no contractual or regulatory requirement for this.
9. Are we using automated decision making or profiling with regards to your personal data?
No, we are not using automated decision making or profiling with regards to your information.
Birmingham Airports Visitor CCTV and Thermal Imaging Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
Birmingham Airport has CCTV across its infrastructure, including the terminal. CCTV will capture images in real time in whichever direction the cameras are pointed, and these cameras will capture footage of you whilst you are on the premises. Cameras have been situated both inside and outside the buildings.
We are collecting and processing personal information via the CCTV systems for the following purposes:
To ensure the health and safety of Airport visitors.
To detect, prevent or reduce the incidence of crime.
To prevent and respond effectively to all forms of possible harassment and disorder.
To reduce the fear of crime.
To create a safer environment.
To provide emergency services assistance.
To monitor the use of IT systems, and their users, throughout the airport for security purposes.
For security compliance & performance monitoring and measuring.
To monitor operational standards throughout the airport, including contractual agreements with partners.
2. Why we’re allowed to process your personal information in this way – the legal basis
To process your personal information via CCTV we are relying on the following schedule 2 conditions of the GDPR. If you do not understand any of the following and would like clarification, please contact the Data Protection Officer on details at the bottom of this notice.
Article 6 condition - Legal obligation - Department for Transport Regulations regarding CCTV systems within the Airport.
Article 6 condition - Public interest
3. Who we will share your personal information with?
There is a small amount of CCTV that is shared with our crime partners, as listed below. There are Information Sharing Agreements in place to document how the airport shares the CCTV footage with other organisations lawfully.
Currently we share limited CCTV footage with the following;
West Midlands Police
The UK’s Counter Terrorism Unit
UK Border Force
Internally CCTV footage will only be processed by airport staff who are authorised to do so and any other departments where a legitimate and lawful reason for their involvement is required. All access is monitored and recorded.
4. Where your personal information will be stored or transferred to
CCTV Footage will be stored on secure Airport servers based within the UK.
5. How long we will keep your personal information for
The CCTV system will keep footage for 31 days, at which point it will be automatically overwritten.
Any footage which is pulled from the system for official purposes will be subject to departmental retention schedules. If you have any questions surrounding these department specific retention timescales, you can request that information from the Data Protection Officer, whose details are at the bottom of this Notice.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on: [email protected].
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Information Security Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
There is a regulatory requirement for certain camera’s, in certain areas’, due to Department for Transport Regulations.
9. Are we using automated decision making or profiling with regards to your personal data?
No.
Any further questions about how we use your personal information in regard to the CCTV, that has not been covered in this notice or there is any information above that you do not understand, please contact the Data Protection Officer on: [email protected].
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We will need your personal data at the time of the suspected Wake Vortex damage to be able to contact you in the future when your property becomes eligible for the scheme. This data will then be used to track the progress of the works as well as dealing with any matters arising during the delivery of the scheme.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition – performance of a contract
3. Who we will share your personal information with?
Your data will be shared with Birmingham Airports appointed contractors which are David Newman Associated Limited and RS Miller Group for the purpose of completing the agreed works.
4. Where your personal information will be stored or transferred to
All your personal information will be kept on the Airports systems in the UK.
5. How long we will keep your personal information for
Your personal data will be stored until your property is eligible for the scheme which is up to a maximum of 5 years. Once your property has been offered works under the scheme it will then be kept for a further 2 years. After this time, we will minimise the personal data we hold on you by securely deleting all but your address and if the works were accepted and completed. This residual information will be held on record for a maximum of 25 years or until the scheme is completed (whichever comes first). This information is required to allow the scheme to be phased and ensure that properties that have already benefitted from the scheme are not offered further works.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. These is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on [email protected]
If you have any questions, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
We are required to give you this information, and the answer for noise complaints is no, it is not for a regulatory purpose, but it is for a contractual purpose, this is the agreement you have with the Airport with regards to the sound insulation scheme.
9. Are we using automated decision making or profiling with regards to your personal data?
No, we are not using automated decision making or profiling for sound insulation purposes.
Birmingham Airports Wifi Privacy Notice
Birmingham Airport are committed to ensuring that the personal data of our passengers is handled in accordance with data protection law. This privacy notice reflects the requirements of the UK General Data Protection Regulation (UK GDPR) and will be updated to reflect any future changes to data protection laws.
The type of personal information we collect
We will collect your name and email address for the purposes of signing up to our free WiFi service. We will also collect your MAC address.
How we get your personal information and why we have it
When signing up to use our WiFi, we will ask for your name and email address. You will also have the chance to opt into receiving marketing communication.
If you have ticked the opt in box, we will send you electronic marketing information via your email address. Marketing information includes:
information about our latest destinations
airline offers
information concerning our airport partners
parking and shopping offers
advice on how to prepare for your journey through the airport
surveys concerning your experience at Birmingham Airport
When you use Birmingham Airport’s free WiFi we will collect your MAC address. A MAC address is a hardware (device such as a smartphone, tablet, laptop, or PC) identification number that uniquely identifies each device on a network.
The MAC address allows the software to recognise the device and allow instant access, rather than the user having to go through the sign up process again.
Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:
processing is necessary for the legitimate interests of the data controller and data subject
the data subject has given consent to the processing of their personal data
processing is necessary for the performance of a contract to which the data subject is party
We also rely on consent under the Privacy and Electronic Communications (EC Direction) Regulations 2003.
You can withdraw your marketing consent at any time by clicking on the unsubscribe link at the bottom of any marketing email we send you.
Who we share your personal information with
We use an email broadcasting platform called Campaigner to create and dispatch our marketing communications so, your information will sit in their software and on their servers. They will only process your data for marketing purposes.
How we store your personal information
Since your information is captured on the WiFi landing pages, Birmingham Airport will capture your marketing information if you have given your consent.
Birmingham Airport will have access to the personal data held in its software for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
Your MAC address will only be used within Birmingham Airport’s IT department. This information will not be used to identify individuals. The Airport does not have the information available to match a MAC address to an individual, nor are we collecting it with this intent.
We have a re-engagement programme in place, meaning you will be removed from our marketing database if you have not engaged with us for two years. At this point we will remove your information from our marketing database over the next year, meaning your information will not be kept any longer than 3 years after your last engagement. If you are engaging with us, we will continue to send you marketing until you withdraw your consent.
If you have not opted into marketing, your data will be retained for a period of 24 hours before it is deleted.
Your MAC address will be kept for 100 days. This time span is required to allow regular users to be able to gain instant access, rather than having to logon each time.
Is your personal data being processed because of a regulatory or contractual requirement?
No.
Are we using automated decision making or profiling with regards to your personal data?
No.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at:
Data Protection Team
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
E-mail: [email protected] You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address: Information Commissioner’s Office
Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
ICO website: https://www.ico.org.uk
Birmingham Airports Website Sign-up Marketing Privacy Notice
Birmingham Airport is collecting your personal data. When we collect personal data, we are obliged legally to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airports Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
1. Why we need it - the purpose of processing
We will use your name and email address for our marketing.
If you have ticked the opt in box, we will send you electronic marketing information via your email address. This would include information about the latest destinations, airline offers, our airport partners, parking and shopping offers as well as advice on how to prepare for your journey through the airport.
2. Why we’re allowed to process your personal information in this way – the legal basis
Article 6 condition - Consent
You can withdraw your consent for us to send you marketing by email at any time by clicking on the unsubscribe link at the bottom of any marketing email we send you.
3. Who we will share your personal information with?
We use an email broadcasting platform called Campaigner to create and dispatch our marketing communications, so your information will sit in their software and on their servers. They will only process your data for marketing purposes.
Campaigner will have access to the personal data held in its software for the purposes of supporting the IT infrastructure only, they will not have access to the information for any other purpose.
4. Where your personal information will be stored or transferred to – will it be sent outside of the European Economic Area?
Campaigner will store your personal information on their servers which are in the UK.
Birmingham Airport has secure servers located in the UK
5. How long we will keep your personal information for
We have a re-engagement programme in place, meaning you will be removed from our marketing database if you have not engaged with us for two years. At this point we will remove your information from our marketing database over the next year, meaning your information will not be kept any longer than 3 years after your last engagement. If you are engaging with us, we will continue to send you marketing until you withdraw your consent.
6. Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airports website about each of these and what they mean to you. You can find this information on our Data Protection page.
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
If you have any questions about them, or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airports Data Protection Officer on the below details.
Postal Address:
Birmingham Airport Limited Diamond House Airport Way Birmingham B26 3QJ
Email: [email protected]
7. If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioners Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Email: [email protected]
8. Is your personal data being processed because of a regulatory or contractual requirement?
With regards to sending you marketing information, there is no contractual or regulatory requirement for this.
9. Are we using automated decision making or profiling with regards to your personal data?
No, there is no automated decision making or profiling carried out on your personal data for this purpose.