Your personal data will be collected by Glasgow Airport who will act as the “Data Controller”. A Data Controller determines the purposes and means of processing personal data. We are registered as a data controller at the UK Information Commissioner’s Office (ICO) under registration number Z1077461.
Importantly, within the airport environment, other organisations may collect your personal information, for example shops, restaurants, telecommunication providers. The personal data collected by these organisations will not be covered by this privacy notice and therefore your personal data privacy in this instance will be the responsibilities of these outlets.
PRIVACY NOTE EDIT HISTORY
Text last updated: 10 May 2018
Page visually refreshed: 13 Dec 2018
Contact details - Your name, address, telephone number, email address.
Financial information - Your bank account number, sort code, credit/debit card details.
Travel information - National Identity (passport numbers), flight numbers, trip purpose, products booked through our website, details of minors in your custody, travel schedule.
Image and voice - Call recording is underway on all calls to the airport. CCTV is in operation in and around the airport and on shuttle buses.
Data that identifies you - Your IP address, login information, online identifiers, browser type and version, time zone setting, browser plug-in types, geolocation information about where you might be, operating system and version.
Data on how you use Glasgow Airport website - Your URL clickstreams (the path you take through our website), products/services viewed, page response times, download errors, how long you stay on our pages, what you do on those pages and other actions.
What about sensitive data - “Sensitive data” is data about race, ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data, health data, data about your sexual life, sexual orientation, and offences or alleged offences.
In some circumstances we collect sensitive data about:
Data protection laws mean that we can only use your data for certain reasons and where we have a legal basis to do so. Here are the reasons for which we process your data.
Boarding card information will be collected for the purpose of access to air-side facilities, voice recording is underway on telephone calls to airport information lines to protect members of staff from malicious or abusive content and baggage will be scanned and images processed for security purposes.
The legal basis for this data usage:
When you pass through Glasgow Airport we will collect static or moving imagery via our CCTV system. Glasgow Airport collects imagery via CCTV cameras located throughout the airport, in both landside (public) and airside (restricted access) locations and on some of our shuttle buses between terminals.
Glasgow Airport may use CCTV imagery for a number of purposes including but not limited to the following:
The legal basis for this data usage:
Managing your purchases of Glasgow Airports products or services e.g. car parking. Purchases of third-party services e.g. flights and Wi-Fi.
The legal basis for this data usage:
Gathering visitor data to our website and e-commerce platform, which includes profiling.
Our website uses SessionCam, Hotjar, SEMRush and Google Analytics for analysis purposes and specifically to identify any technical issues or difficulties the users of our websites are having during the customer journey. To do this, SessionCam, Hotjar, SEMRush and Google Analytics record your mouse clicks, mouse movements and how you scroll the pages on our website. The information that we collect from web sessions through SessionCam, SEMRush, Hotjar and Google Analytics does not include your personal details, financial details or any special categories of personal data. The information collected is used for internal purposes only and is used to improve the usability of our website and is stored and used only for the purposes of collecting aggregates and statistics relating to the functional performance of our websites.
The legal basis for this data usage:
To enable our customers to make enquiries, requests for information reports or submit a complaint.
The legal basis for this data usage:
Sending you emails and text messages about airport destinations, holidays, products and services and our partners. Asking our customers to take part in research and surveys.
The legal basis for this data usage:
consent
Text updated on 15th January 2019
For publicity purposes where images are taken in places where there is no expectation of privacy e.g. public foyer or retail spaces.
The legal basis for this data usage:
If you attend one of our airport lounges, we will collect personal information from you to assist with the government’s COVID-19 track and trace programme.
This information will consist of: your name, email, date of travel, flight number, telephone number and your post code.
AGS Airports use SalesForce to process this information and provide an automated confirmation email(s) to update you once you have registered for Track and Trace.
Ordinarily*, your information will be securely deleted after 21 days. AGS Airports will only share your personal information when it is requested by a legitimate public health authority.
We process this information for the performance of a task carried out in the public interest and/or our legal obligations. (*However, you may ‘opt in’ to receive future offers or marketing from us. If you make this choice, your details will be securely stored within our CRM system, Sales Force)
You have given clear consent for us to process your data for a specific purpose. You can change your mind! If you have previously given consent to us to process your data you can freely withdraw your consent at any time. You can do this by emailing us at DPO@agsairports.co.uk.
If you do withdraw your consent, and if we do not have another legal basis to process your data, then we will stop processing your personal data. If we do have another legal basis for processing your data, then we may continue to do so subject to your legal rights.
Processing your data is necessary for a contract that you have with us.
We need to process your personal data to comply with a common law or statutory obligation.
Processing your data is necessary for our legitimate interests or those of a third party, provided those interests are not outweighed by your rights and interests. These legitimate interests are:
If you choose to do this, you can come into the airport however you will not be able to pass airside. You can also use the website however will not be able to purchase any products or services without providing personal data.
You can block cookies by using a setting on your browser to refuse cookies. You can also delete your cookies through your browser settings. If you refuse cookies or turn cookies off you will still be able to visit our website however some pages may not work effectively.
We will always ask you before collecting your data for marketing. This is your choice and we never pre tick our boxes. If you have previously opted in to marketing you can either unsubscribe at the bottom of any of our emails or you can contact us at DPO@agsairports.co.uk. If you opt out of marketing then you will not receive any related news, updates, offers or notices of events.
Glasgow Airport will respect all of your data subject rights. You can exercise any of your rights by contacting our group data protection officer at DPO@agsairports.co.uk. If we do hold the information we will:
You have the right to know how we manage your data and that is why we have made this great privacy notice! We have to tell you:
You can ask at any time, for a copy of your personal data. Glasgow Airport will respond within one month to advise you if we hold your personal data and if so, we will provide you with a copy of the data unless it would adversely affect the rights of another person e.g. if providing it to you, broke another person’s confidentiality.
This right allows you to submit changes to your records and once changes are verified, they will be amended on Glasgow Airport records. Similarly, Glasgow Airport will periodically request you to check your data is held accurately.
You can request that delete all of your personal data. If you do this, and there is no other lawful basis to keep your data, then it will be removed.
You have the right to ask us to restrict how we process your data in some circumstances. This means we are permitted to store the data but not further process it. We keep just enough data to make sure we respect your request in the future. This is not an absolute right.
You have the right in some circumstances to object to how we use your data. This is not an absolute right.
Glasgow Airport does not perform automated decision making. We may from time to time perform online profiling, however, this does not produce any decisions or legal effects.
If you have concerns regarding how we use your data, please contact our Data Protection Officer in the first instance: DPO@agsairports.co.uk.
If you are still unhappy regarding how we have dealt with your complaint, you have the right to contact the UK Information Commissioner’s Office (ICO). You can do this by calling their helpline, contacting them through their website or writing to them. Their details are as follows:
ICO telephone helpline: 0303 123 1113
ICO website: https://ico.org.uk/concerns
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
We have physical and electronic procedures to secure the personal data we use and collect. All of our staff are trained in data protection.
Transmission: where personal data is electronically transmitted from one computing device to another over a public network an encrypted path will be used e.g. SSL. If your data is transmitted in a hard-copy format from one place to another a secure or locked method of transport will be used, suitable to the nature of the personal data.
Storage: personal electronic records are located on servers in secure premises. If your data is required to be stored outside of the secure premises, the data will be in an encrypted format. Personal paper-based records will be stored in a locked filing cabinet in secure offices to prevent inadvertent access by unauthorised 3rd parties.
Access: only personnel authorised by Glasgow Airport will have access to your personal data records on a need to know basis.
Disclosure of personal data: we do not disclose personal data unless we’re required to do so to comply with the law, under contract, have your consent, or if it is in your vital interest.
Your data may be transferred internationally. If your data is transferred, Glasgow Airport will legally safeguard your personal data by:
Transferring to the EEA countries (Members of the European Economic Area);
Transferring to an EU adequate country, which are defined as countries outside the EU that offer adequate levels of data protection; and
Transferring under “EU Model Clauses” agreement with the importing party. These are standardised contractual clauses that make specific guarantees around the transfer of personal data from EEA countries to the rest of the world.
Owing to the global nature of the internet infrastructure, the information you provide may be transferred in transit to countries outside the European Economic Area that do not have similar protections in place regarding the protection of your personal data. Where this is the case, end-to-end encryption will be employed to transmit the data securely e.g. using industry standard data encryption (SSL or TLS) to connect to websites or using email encryption technologies.
Where Glasgow Airport is unable to utilise legal safeguards when transferring data to a third-country, Glasgow Airport will seek consent from you to facilitate the data transfer. This could be the case when arranging hotels and car-rentals abroad.
Subject to all applicable law, all personal data collected under contract will be held for 7 years. Data collected under legitimate interest will be held for a period of 3 years from your last interaction with the business, otherwise, it will be removed if no other lawful method of holding your data exists.
CCTV footage is handled in accordance with data protection laws, and in particular, is only held for a limited period of time before it is automatically deleted. CCTV footage may be held for longer if we have a legitimate reason to do so e.g. incident investigation.
Data collected under consent will be used until consent is withdrawn or if it is no longer useful for the purpose for which it was collected. Some data may not be removed if it involves a disproportionate effort e.g. a website image of you is held by the Google search engine. This does not affect your rights as a data subject.
Please note: after this retention period has expired, Glasgow Airport will be unable to reinstate the original data, offer confirmation of passage through the airport or validate a product or service you may have received, assuming the data was held in the first instance.
Glasgow Airport will share your personal data with other organisations in order to supply products or services to you. This could include but is not limited to, car parking, car rentals, hotels, travel companies and Wi-Fi providers.
We may also share your data in the following circumstances:
Cookies are small text files which are stored on your computer when you visit certain web pages. At Glasgow Airport, we use cookies to understand how our sites are used which helps us to improve your overall online experience. Some of the cookies we use are necessary for some of our sites to work whilst other cookies are used to provide tailored advertising by trusted third parties. The cookies we and our third parties place on your computer do not collect personally identifiable information like your name, address or payment details. To find out more about cookies, visit www.aboutcookies.org.
The privacy of your information is important to us and we want to keep you well informed about cookies. We shall continue to work on initiatives in relation to recent cookie legislation to ensure you have the best experience when visiting our website.
If you would prefer to restrict, block or delete cookies from Glasgow Airport and our third party advertisers, or any other website, you can use your browser to do this. Each browser is different so check the 'Help' menu of your particular browser to learn how to change your cookie preferences. If you choose to disable all cookies we cannot guarantee the performance of our websites and some features may not work as expected.
Glasgow Airport uses the following categories of cookies on our websites:
STRICTLY NECESSARY
These cookies are essential for certain features of our websites to work e.g. when you make payments for car parking. These cookies do not record identifiable personal information and we do not need your consent to place these cookies on your device. Without these cookies, some services you have asked for cannot be provided.
PERFORMANCE
These cookies are used to collect anonymous information about how you use our websites. This information is used to help us improve our websites and understand how effective our adverts are. In some cases, we use trusted third parties to collect this information for us but they only use the information for the purposes explained. By using our websites, you agree that we can place these types of cookies on your device.
FUNCTIONALITY
These cookies are used to provide services or remember settings to enhance your visit e.g. text size or other preferences. The information these cookies collect is anonymous and does not enable us to track your browsing activity on other websites. By using our websites, you agree that we can place these types of cookies on your device.
TARGETING AND ADVERTISING
These cookies are used by trusted third parties to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. Information contained in these cookies is anonymous and does not contain your personal information. To find out more about cookies used for targeting and advertising go to www.youronlinechoices.com and www.networkadvertising.org or contact us on our feedback page for further information about the trusted third parties we use.
We keep our privacy notice under regular review and we will place any updates on this webpage. At the start of this privacy notice, we will tell you when it was last updated.
January 2019
Wording changed on marketing consent to clearly cover mobile phones text messages.
May 2019
Changes made to Improving our Website section.
July 2020
Track & Trace added.
October 2020
Updates to Improving our Website section.
March 2021
Updates to Improving our Website section.
Glasgow Airport tries to meet the highest standards when collecting and using personal information. For this reason ,we take any complaints we receive about this seriously. We encourage people to bring it to our attention if they think our collection or use of personal information is unfair, misleading or inappropriate. Please contact the Group Data Protection Officer:
AGS Data Protection Officer
Glasgow Airport,
Erskine Court,
St. Andrew’s Drive,
Paisley
PA3 2SW
Please reference the AGS airport concerned (Aberdeen, Glasgow, or Southampton) in your correspondence.
