PRIVACY POLICY

This policy is designed to inform all users of Aena facilities and users of our corporate website.

What is the purpose of this document?

The purpose of this document is to inform you of how your personal data are processed in accordance with Personal Data Protection regulations, specifically Regulation (EU) 679/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR).

Who is the Data Controller?

The Data Controller is Aena SME, S.A.

Contact details:
Address: Arturo Soria, 109. 28043, Madrid.
C.I.F (Tax Id. number): A86212420
Companies Register of Madrid, Volume 28806, Folio 211, Section 8, Page M-518648.
Contact telephone: 902 404 704

What types of data will be processed?

We process the following types of personal data:

  • Identification, contact, image, voice (telephone recordings) data.
  • Financial data (payment methods).
  • Health data (in case of receiving medical care, PRM).
  • Data on your vehicle (to manage parking).
  • Data on your flight.
  • Social data (airline loyalty cards, data on your complaint or claim).

Why do we process your personal data?

The personal data you have or will provide when you begin your employment relationship with Aena SME, S.A., and data that may be collected or generated throughout the relationship, will be processed using automated means by Aena SME, S.A for the purposes detailed below:

  • Video surveillance for facility security.
  • If you are an authority, your data will be processed to provide your assistance and to provide services to authorities: managing visits, managing authority lounges, recording and maintaining institutional contacts.
  • Managing services provided to users: access and check-in services, VIP Lounge users, Aena Customer Club users, Publication Sales users, WiFi service.
  • Sending commercial communications, where appropriate.
  • Managing airport users: visits, left-luggage.
  • Managing the service for Persons with Reduced Mobility (PRM).
  • Where appropriate, recording your telephone calls to certain Aena telephone numbers (operatives, incident investigation, emergencies).
  • Managing the Car Park service: entry and exit control (cards), subscriber control (where appropriate) and invoicing the service.
  • Controlling and managing passengers passing through security checkpoints to the boarding area and Fast Line VIP service (where appropriate).
  • Managing and controlling medical care (if attended by the airport medical service).
  • Managing, controlling and processing claims and complaints sent to Aena (where appropriate).
  • Legal defence and consultancy: when part of legal proceedings concerning Aena.
  • Managing, controlling and processing the exercise of data protection rights (where appropriate).
  • Managing property that is lost and stored, and the transfer thereof.
  • Statistical purposes.
  • Record of entry/exit and archiving of documentation (if submitting or involved in the documentation).

And also, regarding services offered on the Aena website:

  • As regards the Contact methods provided via our website, the purpose is to provide a response to your requests for contact, services, information, queries, suggestions or complaints of any nature that we may receive by making use of the contact methods provided.
  • As regards the Aena Jobs section, the purpose is to manage your requests for employment and the information provided to us via our website in relation to the recruitment processes undertaken within the Aena Group.
  • As regards our Customer Club, the purpose is to inform you of possible benefits to you, as well as providing you with information that you may find of interest as a Club member with relation to services provided by Aena regarding VIP Products, Parking, Flights, and other Aena airport management services. At the same time, and with your permission, we will email you commercial and advertising correspondence, such as newsletters with information of interest to passengers, offers and discount coupons for Aena Airport shops or for third parties concerning the following areas or sectors: cars and vehicle hire, leisure, travel agencies, tourism, transport, airlines, catering, the textile industry, fashion, beauty and cosmetics, finance and insurance, press and magazines, and gambling.

    In order to access this service, Aena offers the possibility of downloading the mobile application (APP) onto the device for registering with and managing the service.

    Whenever you have enabled location services (settings option on your device), Aena will collect information on WiFi access points or relating to latitude and longitude in order for this information to assist us in showing your location so that we can provide you with our services.

    Customer Club members may use the following services:

    1. Mobile payment. You are hereby informed that Aena will store the last four digits of your credit card in order to identify the card used for payment of the contracted service.

      When using the Parking services, your car registration number will be stored to allow us to determine how long you have used the parking services, so that we can bill you accordingly.

      If paying using your mobile device to use a VIP lounge managed by Aena, your ID information will be collected for identification purposes.

      In the event that you associate the payment made via our mobile app with your status as a “Customer Club” member, we will inform you that Aena will process the information collected to create a commercial profile on you as a member of the “Customer Club”, the segmentation of the customers who form part of the Club, the sending of personalised commercial offers and improvement of your experience as user of our mobile app.

    2. Payment by Registration. This new stay management and payment system by Aena will entail processing the vehicle registration and credit card details provided by the user in his or her Aena Customer Club profile.

      The Payment by Registration service involves reading and identifying the vehicle registration when entering and leaving the car park. It will therefore not be necessary to issue a ticket when entering and leaving. Once you have entered the car park, the reader will recognise your registered number plate, and this will be associated with the user with the Payment by Registration service enabled, which will automatically raise the barrier and allow you to enter and park your vehicle. This service is only intended for vehicles. This means that motorcycles are excluded from using the Payment by Registration system, in light of complexities arising when reading their registration numbers.

      In order to enjoy club discounts, you will need to scan your return boarding pass so that the new balance can be calculated and automatically saved.

  • The purpose of Sale of Publications is to manage orders placed via the Publications Shop. At the same time, and with your permission, we will inform you of ways in which you might benefit, and will also provide you with information that may be of interest to you relating to services provided by Aena regarding Sale or Publications. We would also like to email you commercial and advertising correspondence, such as offers and discount coupons on specific dates, including World Book Day, the Book Fair, Black Friday etc.
  • The purpose of Aena Car Park Bookings is to manage car parking space bookings that you make via our website, as well as to send you information that may be of interest to you. At the same time, and with your permission, we will email you commercial and advertising correspondence, such as newsletters with information of interest to passengers, offers and discount coupons for Aena Airport shops or for third parties concerning the following areas or sectors: cars and vehicle hire, leisure, travel agencies, tourism, transport, airlines, catering, the textile industry, fashion, beauty and cosmetics, finance and insurance, press and magazines, and gambling.
  • The purpose of airport VIP Services is to manage VIP Lounge access purchases that you make via our website, as well as to send you information that may be of interest to you. At the same time, and with your permission, we will email you commercial and advertising correspondence, such as newsletters with information of interest to passengers, offers and discount coupons for Aena Airport shops or for third parties concerning the following areas or sectors: cars and vehicle hire, leisure, travel agencies, tourism, transport, airlines, catering, the textile industry, fashion, beauty and cosmetics, finance and insurance, press and magazines, and gambling.

    VIP Service users may also use the Fast Line for preferential access to the security checkpoints of existing filters. The purpose of the processing is to manage priority access bookings that you make via our website, as well as to send you information that may be of interest to you.

  • As regards the PRM Services, we hereby inform you that the data you provide via the form provided for this purpose on the Aena website will be used to manage the services requested by you for assistance for persons with reduced mobility, as well as to carry out a satisfaction survey to improve the service.
  • The purpose of the Corporate Responsibility blog is to manage subscriptions for receiving information via email on news from the blog, newsletter, projects and initiatives from Aena’s Corporate Social Responsibility department.

What is the basis for processing your data?

Your personal data will be processed on the following bases:

Legal Obligation:

  • Legal defence and consultancy.
  • Managing Authorities.
  • Controlling and managing passengers passing through security checkpoints to the boarding area.
  • Managing, controlling and processing the exercise of data protection rights.
  • Legal defence and consultancy: When it forms part of legal proceedings concerning Aena.
  • Record of entry/exit and archiving of documentation.

Legitimate Interest or Public Interest:

  • Video surveillance for facility security.

Execution of a contract:

  • Managing services provided to the user.
  • Managing airport users: left-luggage.
  • Managing the service for Persons with Reduced Mobility (PRM).
  • Recording your telephone calls to certain Aena telephone numbers (operatives, incident investigation).
  • Managing the Car Park service: entry and exit control (cards), subscriber control (where appropriate) and invoicing the service.
  • VIP Services and Fast Line.

Vital interest:

  • Recording your telephone calls to certain Aena telephone numbers (emergencies).
  • Managing and controlling medical care (if attended by the airport medical service and not in conditions to give consent).

Express consent:

  • Sending commercial communications.
  • Managing airport users: visits.
  • Managing and controlling medical care (if attended by the airport medical service).
  • Managing, controlling and processing claims and complaints sent to Aena.
  • Managing property that is lost and stored, and the transfer thereof.
  • Statistical purposes.

For how long will we retain your data?

Your data will be retained while necessary to comply with the purpose for which they were collected.

Afterwards, they will be retained for the period that claims and liabilities may arise related to the processing of your data pursuant to the purpose for which they were collected.

Who will your data be communicated to?

Planned communications are as follows:

  • To entities involved in Administrative and Legal Proceedings (where appropriate)
  • To Courts (where appropriate).
  • To Security Forces and Custom Authorities (to comply with legal obligations).
  • To your bank or savings bank to pay for the services provided.
  • To the State Air Security Agency (AESA) for inspections.
  • To your Airline when you pass through security checkpoints to their boarding gate.
  • To other entities involved in processing your claim or complaint.
  • And to any individuals, entities or authorities who may require them as required by law.

What security measures are applied to guarantee your data?

Aena SME, S.A., as the data controller, will adopt the technical and organisational measures required to guarantee the security of the personal data provided, preventing their unauthorised alteration, loss, manipulation or access.

How can I exercise my rights?

Any interested party is entitled to receive confirmation as to whether or not his or her personal data is being processed. The Data Protection Regulations also stipulate the following rights for the interested party:

Any interested party is entitled to receive confirmation as to whether or not his or her personal data is being processed. The Data Protection Regulations also stipulate the following rights for the interested party:

  • Access to his or her data.
  • Requests for rectification or deletion of his or her data.
  • Requests for limitation of data processing.
  • Portability of his or her data.
  • Objection to his or her data being processed.

Requests will receive a response at the earliest possible opportunity, and in any case within a month from such time as the request is received. The aforementioned time period may be extended for another two months where necessary, in the event of possible complexities or a high volume of requests. Aena will notify the interested party of the extension within the first month from the time of the request.

To exercise these rights, the data subject may contact us at the following email address ocpd@aena.es or by writing to Calle Arturo Soria, No. 109, 28043-Madrid, or using the Online Services Portal (https://serviciostelematicos.aena.es).

How can I contact the Data Protection Officer?

If you have any doubts, please contact our Data Protection Officer at the following email address: dpd@aena.es.

Furthermore, you are entitled to lodge a complaint with the Spanish Data Protection Agency (AEPD); the control and supervisory body for data protection in Spain.