PRIVACY POLICY

This policy is designed to inform all users of Aena facilities and users of our corporate website.

What is the purpose of this document?

The purpose of this document is to notify you that your personal details are processed in accordance with Personal Data Protection laws, in particular, those of Regulation (EU) 679/2016 of the European Parliament and Council of 27 April 2016, relating to the protection of individuals with regards to the processing of personal data and free circulation of those data (General Data Protection Regulation (GDPR)).

Who is the Data Controller?

Contact details of the Data Controller:
Aena SME, S.A.
Address: Peonías, 12. 28042, Madrid.
C.I.F (Tax ID. number): A86212420
Companies Register of Madrid, Volume 28806, Folio 211, Section 8, Page M-518648.
Contact telephone: (+34) 91 321 10 00
Contact details of the Data Protection Officer
dpd@aena.es

What types of data will be processed?

The following types of data are processed:

  • Identification, contact, image, voice (telephone recordings) data.
  • Financial data (payment methods).
  • Health data (in case of receiving medical care, PRM).
  • Data on your vehicle (to manage parking).
  • Data on your flight.
  • Social data (airline loyalty cards, data on your complaint or claim).

Why do we process your personal data?

The personal data you have or will provide when you begin your employment relationship with Aena SME, S.A., and data that may be collected or generated throughout the relationship, will be processed using automated means by Aena SME, S.A for the purposes detailed below:

  • Video surveillance for facility security.
  • If you are an authority, your data will be processed to provide your assistance and to provide services to authorities: managing visits, managing authority lounges, recording and maintaining institutional contacts.
  • Managing services provided to users: access and check-in services, VIP Lounge users, Aena Customer Club users, Publication Sales users, WiFi service.
  • Sending commercial communications, where appropriate.
  • Managing airport users: visits, left-luggage.
  • Managing the service for Persons with Reduced Mobility (PRM).
  • Where appropriate, recording your telephone calls to certain Aena telephone numbers (operatives, incident investigation, emergencies).
  • Managing the Car Park service: entry and exit control (cards), subscriber control (where appropriate) and invoicing the service.
  • Controlling and managing passengers passing through security checkpoints to the boarding area and Fast Line VIP service (where appropriate).
  • Managing and controlling medical care (if attended by the airport medical service).
  • Managing, controlling and processing claims and complaints sent to Aena (where appropriate).
  • Legal defence and consultancy: when part of legal proceedings concerning Aena.
  • Managing, controlling and processing the exercise of data protection rights (where appropriate).
  • Managing property that is lost and stored, and the transfer thereof.
  • Statistical purposes.
  • Record of entry/exit and archiving of documentation (if submitting or involved in the documentation).

And also, regarding services offered on the Aena website:

  • As regards the Contact methods provided via our website, the purpose is to provide a response to your requests for contact, services, information, queries, suggestions or complaints of any nature that we may receive by making use of the contact methods provided.
  • As regards the Aena Jobs section, the purpose is to manage your requests for employment and the information provided to us via our website in relation to the recruitment processes undertaken within the Aena Group.
  • As regards our Customer Club, the purpose is to inform you of possible benefits to you as a member of the Club, as well as providing you with detailed and updated information regarding discounts, promotions, offers and benefits of the services provided by Aena regarding VIP Products, Parking, Flights, and other Aena airport management services. In accordance with the general Terms and Conditions which regulate the Aena Customer Club service, sending communications with information regarding these discounts, promotions, offers, news and benefits of the Aena services is a necessary requirement for subscription to the agreement between yourself as a registered member and user of the Club, and Aena, and to have access to these benefits. Therefore, by unsubscribing from these communications you will also cancel your Club membership, meaning you will not be informed of the benefits applicable to the services offered through the Club. If you would not like to receive these communications you may cancel your Club membership at any time through the relevant channels.

    At the same time, with regards to our Customer Club, and with your permission, the purpose is to email you commercial and advertising correspondence, such as offers and discount coupons for AENA Airport shops or for third parties concerning the following areas or sectors: cars and vehicle hire, leisure, travel agencies, tourism, transport, airlines, catering, the textile industry, fashion, beauty and cosmetics, finance and insurance, press and magazines, and gambling (third-party communication).

    In order to access this service, Aena offers the possibility of downloading the mobile application (APP) onto the device for registering with and managing the service.

    Whenever you have enabled location services (settings option on your device), Aena will collect information on WiFi access points or relating to latitude and longitude in order for this information to assist us in showing your location so that we can provide you with our services.

    Customer Club members may use the following services:

    1. Mobile payment. You are hereby informed that Aena will store the last four digits of your credit card in order to identify the card used for payment of the contracted service.

      When using the Parking services, your car registration number will be stored to allow us to determine how long you have used the parking services, so that we can bill you accordingly.

      If paying using your mobile device to use a VIP lounge managed by Aena, your ID information will be collected for identification purposes.

      In the event that you associate the payment made via our mobile app with your status as a “Customer Club” member, we will inform you that Aena will process the information collected to create a commercial profile on you as a member of the “Customer Club”, the segmentation of the customers who form part of the Club, the sending of personalised commercial offers and improvement of your experience as user of our mobile app.

    2. Payment by Registration. This new stay management and payment system by Aena will entail processing the vehicle registration and credit card details provided by the user in his or her Aena Customer Club profile.

      The Payment by Registration service involves reading and identifying the vehicle registration when entering and leaving the car park. It will therefore not be necessary to issue a ticket when entering and leaving. Once you have entered the car park, the reader will recognise your registered number plate, and this will be associated with the user with the Payment by Registration service enabled, which will automatically raise the barrier and allow you to enter and park your vehicle. This service is only intended for vehicles. This means that motorcycles are excluded from using the Payment by Registration system, in light of complexities arising when reading their registration numbers.

      In order to enjoy club discounts, you will need to scan your return boarding pass so that the new balance can be calculated and automatically saved.

  • The purpose of Sale of Publications is to manage orders placed via the Publications Shop. At the same time, and with your permission, we will inform you of ways in which you might benefit, and will also provide you with information that may be of interest to you relating to services provided by Aena regarding Sale or Publications. We would also like to email you commercial and advertising correspondence, such as offers and discount coupons on specific dates, including World Book Day, the Book Fair, Black Friday etc.
  • The purpose of Aena Car Park Bookings is to manage car parking space bookings that you make via our website, as well as to send you information that may be of interest to you. At the same time, and with your permission, we will email you commercial and advertising correspondence, such as newsletters with information of interest to passengers, offers and discount coupons for Aena Airport shops or for third parties concerning the following areas or sectors: cars and vehicle hire, leisure, travel agencies, tourism, transport, airlines, catering, the textile industry, fashion, beauty and cosmetics, finance and insurance, press and magazines, and gambling.
  • The purpose of airport VIP Services is to manage VIP Lounge access purchases that you make via our website, as well as to send you information that may be of interest to you. At the same time, and with your permission, we will email you commercial and advertising correspondence, such as newsletters with information of interest to passengers, offers and discount coupons for Aena Airport shops or for third parties concerning the following areas or sectors: cars and vehicle hire, leisure, travel agencies, tourism, transport, airlines, catering, the textile industry, fashion, beauty and cosmetics, finance and insurance, press and magazines, and gambling.

    VIP Service users may also use the Fast Line for preferential access to the security checkpoints of existing filters. The purpose of the processing is to manage priority access bookings that you make via our website, as well as to send you information that may be of interest to you.

  • As regards the PRM Services, we hereby inform you that the data you provide via the form provided for this purpose on the Aena website will be used to manage the services requested by you for assistance for persons with reduced mobility, as well as to carry out a satisfaction survey to improve the service.
  • The purpose of the Corporate Responsibility blog is to manage subscriptions for receiving information via email on news from the blog, newsletter, projects and initiatives from Aena’s Corporate Social Responsibility department.

What is the basis for processing your data?

Your personal data will be processed on the following bases:

Legal Obligation:

  • Legal defence and consultancy.
  • Managing Authorities.
  • Controlling and managing passengers passing through security checkpoints to the boarding area.
  • Managing, controlling and processing the exercise of data protection rights.
  • Legal defence and consultancy: When it forms part of legal proceedings concerning Aena.
  • Record of entry/exit and archiving of documentation.

Legitimate Interest or Public Interest:

  • Video surveillance for facility security.

Execution of a contract:

  • Managing services provided to the user.
  • Managing airport users: left-luggage.
  • Managing the service for Persons with Reduced Mobility (PRM).
  • Recording your telephone calls to certain Aena telephone numbers (operatives, incident investigation).
  • Managing the Car Park service: entry and exit control (cards), subscriber control (where appropriate) and invoicing the service.
  • VIP Services and Fast Line.

Vital interest:

  • Recording your telephone calls to certain Aena telephone numbers (emergencies).
  • Managing and controlling medical care (if attended by the airport medical service and not in conditions to give consent).

Express consent:

  • Sending commercial communications.
  • Managing airport users: visits.
  • Managing and controlling medical care (if attended by the airport medical service).
  • Managing, controlling and processing claims and complaints sent to Aena.
  • Managing property that is lost and stored, and the transfer thereof.
  • Statistical purposes.

You have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing based on your consent prior to the withdrawal.

How long will we store your data for?

Your data will be retained while necessary to comply with the purpose for which they were collected.

They are subsequently stored for as long as claims and obligations may arise as a result of the processing of your data for the purpose for which they were collected.

Who receives your data?

It is anticipated that the following parties will receive your data:

  • To entities involved in Administrative and Legal Proceedings (where appropriate)
  • To Courts (where appropriate).
  • To Security Forces and Custom Authorities (to comply with legal obligations).
  • To your bank or savings bank to pay for the services provided.
  • To the State Air Security Agency (AESA) for inspections.
  • To your Airline when you pass through security checkpoints to their boarding gate.
  • To other entities involved in processing your claim or complaint.
  • And to any individuals, entities or authorities who may require them as required by law.

What security measures are guaranteed with regards to your data?

Aena S.M.E., S.A., as the data controller, will adopt the technical and organisational measures required to guarantee the security of the personal data provided, preventing their unauthorised alteration, loss, manipulation or access.

How do I go about exercising my rights?

Any data subject is entitled to receive confirmation as to whether or not his or her personal data are being processed. The General Data Protection Regulation also stipulates the following rights for the data subject:

  • Access to his or her data.
  • Requests for rectification or deletion of his or her data.
  • Requests for limitation of data processing.
  • Portability of his or her data.
  • Objection to his or her data being processed.

Requests will receive a response at the earliest possible opportunity, and in any case within a month from such time as the request is received. The aforementioned time period may be extended for another two months where necessary, in the event of possible complexities or a high volume of requests. Aena will notify the interested party of the extension within the first month from the time of the request.

To exercise these rights, the data subject may contact us at the following email address ocpd@aena.es or by writing to Calle Peonías, No. 12, 28042-Madrid, or using the Online Services Portal (https://serviciostelematicos.aena.es).

How do I contact the Data Protection Officer?

If you have any doubts relating to Data Protection, please contact our Data Protection Officer at the following email address: dpd@aena.es.

Furthermore, you are entitled to lodge a complaint with the Spanish Data Protection Agency (AEPD); the control and supervisory body for data protection in Spain.