Privacy Notice for the Processing of Personal Data

This Notice provides useful and detailed information regarding the purpose and means of collection and processing of your personal data, as well as your respective rights, in accordance with the applicable legislation.

The right to park your vehicle in the designated Employee Parking Areas at Athens International Airport (“the Areas”) is granted to you under a special Agreement between Athens International Airport S.A. (“AIA”), as manager of the Areas, and your employer or another legal entity for the support of its activities within the Airport premises, and is subject to the terms of the applicable Employee Parking Regulation.

AIA processes only the personal data that are necessary for each specific processing activity and required service, solely for the purpose communicated to you.

1. Data Controller
The Company Athens International Airport S.A. (AIA), headquartered at Administration Building (17), Spata, Attica, Postal Code 19019. AIA’s Data Protection Officer is available for any questions or requests related to the processing of personal data via email at: [email protected] and by post at:

Manager, Regulatory Compliance, Data Protection & Ethics
Athens International Airport S.A.
Administration Building (17)
19019 Spata, Attica

2. Purpose and Legal Basis of Processing
Your personal data are provided to AIA by your employer within the framework of the Agreement pursuant to Article 6(1)(b) of the GDPR (performance of a contract) and are processed by AIA as they are necessary for granting you the right to access and park your vehicle in the Employee Parking Areas.

Your access right to specific Employee Parking Areas is digitally programmed into the Airport Identity Card (Airport ID), which is issued by AIA’s ID Office and is “read” by the access control reader upon entry to the area. Where a CCTV surveillance system operates, the processing of your image and movements is appropriate and necessary for compliance with AIA’s legal obligations under the Airport Development Agreement and its ratifying laws, as well as for the protection of AIA’s legitimate interest in ensuring the smooth and secure operation of the airport while safeguarding its reputation as a safe environment for passengers and visitors.
Article 6(1)(c) and (f) GDPR applies. Information regarding such processing is provided in the specific Privacy Notice for video surveillance displayed in the area.

3. Categories of Personal Data
•    Airport Identity Card Number 
•    Full Name of the Holder 
•    Vehicle Registration Number 
•    Employer / AIA Client Details 

4. Data Processors
AIA cooperates with companies that process data on its behalf and in accordance with the purposes and means defined by AIA. These companies are committed to complying with legal requirements by implementing adequate organizational and technical protection measures at every stage of processing.
The data may also be disclosed to competent public or judicial authorities where required by applicable legislation.

5. Security of Processing
AIA and the companies acting as data processors implement adequate organizational and technical measures to ensure the reliability of system operations and the availability, confidentiality, and integrity of your personal data during collection and processing, throughout the entire retention period.
The data are stored within the European Economic Area (EEA).

6. Retention Period
•    The above personal data will be retained for five (5) years from the year of termination of the Agreement between AIA and the Employer/Client. 
•    CCTV recording material is retained for 14 days, provided that during this period no incident has been identified or reported that would justify extraction and retention of the material in a separate electronic archive of AIA. 

Note: AIA may retain data for as long as required for the establishment, exercise, or defense of any legal claim.

7. Rights Regarding Access and Management of Your Personal Data
You have the right to:
•    Access the personal data held about you. 
•    Rectify inaccurate personal data. 
•    Request deletion of or object to the processing of your personal data, which, however, will result in the withdrawal of your right to use the Employee Parking Areas. 
•    Restrict processing, under specific conditions. 
•    Request portability of your personal data, subject to conditions. 
Any request to exercise your rights must be addressed to AIA’s Data Protection Officer mentioned above.

Note: The exercise of your rights is subject to applicable regulatory or operational restrictions.

8. Right to Lodge a Complaint and Judicial Protection
You may exercise your right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) or seek judicial remedy if you believe that the processing of your personal data violates applicable legislation.