PRIVACY NOTICE AND COOKIES POLICY

Athens International Airport S.A. (AIA) acknowledges and respects the importance of privacy of your personal data. This Privacy Notice sets out the principles on which your personal data are collected by us or provided by you via this Website, in compliance with applicable Personal Data Protection regulatory framework and AIA’s Privacy Policy.

Please read the following information carefully and demonstrate your preferences, where so instructed.

  1. Layout – Structure of www.aia.gr

Our Website is an integrated information and services hub for both our business partners and the public; a gateway to services and easements we provide to passengers, visitors and tourists who seek to obtain first-hand information for the Airport, services offered by our Company, Public Services or business partners, and for the City of Athens as a destination.

We must point out that third-party websites, that you may visit by following links provided on our Website, are outside of our sphere of control and are governed by different terms of use and different Privacy Policies for the management of personal data. For these policies, our Company does not take any responsibility.

  1. Data Controller:

You are hereby informed that our Company, "Athens International Airport S.A.", whose corporate seat is at Spata Attica, Administration Building (B17) , postal code 190 19, is the Data Controller (as defined in EU Regulation 2016/679, or "GDPR") for this www.aia.gr Website (the "Site") and holds all rights and obligations reserved for such capacity under the Law.

  1. Data Protection Officer

For any query or request related to the processing of your personal data you may contact our assigned Data Protection Officer:

  • by filling in the form on our Site www.aia.gr/data-protection-preferences
  • by sending an email at privacy@aia.gr, or
  • by postal mail to "Manager, Data Protection & Compliance Athens International Airport S.A. Administration Building (B17) 190 19 Spata, Attica".
  1. Information we may collect and purpose of processing

Information about you is collected through the following means:

  1. When navigating through our Site, your browser cookies statistical data and browsing actions and patterns, as demonstrated hereinbelow in par. 13.
  2. When filling our contact form www.aia.gr/traveler/contact/ to post a comment or require further information, in order for us to be able to look into your inquiry and reply.
  3. When using our "flight tracker" service www.aia.gr/en/traveler/flight-info/flight-tracker/ and you wish to receive an email notification every time there is a significant update in your flight status.
  4. When using our "e-parking" platform secure-parking.aia.gr to:
    • book a vehicle parking space at the Airport’s Car Park Lots, in order to conclude a contract and provide you with the requested service
    • subscribe to newsletter in order to receive targeted offers and promotionals.
  5. When accessing our "iGate" and "Auto-Pilot" pages www.aia.gr/igate/ and www.aia.gr/autopilot/ (as a registered business partner user), in order to be able to access specialized content and tools for the aviation professionals.
  6. When using our environmental issues contact form www.aia.gr/company-and-business/environment/e-Noise-complaint-form/ to raise or report an environmental issue or inquire to receive further information, in order for us to look into your inquiry and reply.
  1. We may also collect personal data about you in the following circumstances
  • When you participate in competitions, surveys or other interactive modules of our Site;
  • When you opt-in to receive promotional activities by us or our Airport Business Partners via our Site;
  • When you subscribe to AIA’s email newsletters;
  • To ensure that content from our website is presented in the most effective manner for your connected device;
  1. Categories of personal data collected

Depending on the purpose of your visit and the service you wish to receive from our Site, the type of personal data we collect may include name, address, email address, telephone number, vehicle license plate, as well as additional information, such as airline and flight no. Credit card details are currently processed exclusively through an external website of an AIA business partner.

In some cases, we may also need to collect sensitive personal data such as information concerning medical conditions, disabilities and special requirements, as to be able to address your particular needs (e.g. when you post a comment or inquiry on the website).

On all such occasions, you are in absolute control of the personal information with which you provide us, as such information is explicitly received with your documented consent for specific purposes.

You can indicate your respective preference by ticking certain boxes on the forms we use to collect your data on each of our Site modules. Your preferences shall be recorded to the appropriate data registry.

You are free to revoke any or all of your preferences at any of the relevant modules of our Site, by contacting us accordingly.

You acknowledge, however, that certain services (e.g. Flight Tracker, e-Parking or iGATE), cannot be efficiently provided or concluded, unless the appropriate data is made available to us.

AIA commits:

  • To process the limited amount and type of personal data necessary for each defined process activity and required service;
  • Not to process your personal data for purposes other than those disclosed to you when you first connect to our Site;
  • To safeguard your data integrity and confidentiality whilst at our disposal.
  1. Personal Data Retention Period

Retention period of your personal data with us relies on the purpose and service you wish to obtain from our Site and its respective modules and is clearly demonstrated therein:

  • Personal data provided in the comments/contact section is retained for a maximum of five (5) years from our reply or the dispatch of your comment to the relevant companies and entities operating at Athens International Airport as per our corporate passenger comment management procedure.
  • Data provided in the "Flight Tracker" module is automatically deleted upon completion of the requested service.
  • Data provided in the "e-Parking» is retained for a maximum of five (5) years from the booking date.
  • Email addresses provided for subscription purposes to our newsletters are kept until an unsubscribe request has been received by you.
  • Emails or other contact details provided for competitions, surveys or other interactive features of our Site are automatically deleted upon the conclusion of the respective activity.
  1. Third Party Processing

All personal data is processed by our affiliated companies, which are committed to comply with the European Data Protection Regulation (GDPR), while, for the purposes of IT hosting and maintenance this information is located within the European Union. In particular:

DOPE", Mesogeion 451, 153 43, Ag. Paraskevi, Attica (hello@wearedope.com) is the developer of the website and may process data on our behalf,

"E-parking" module data are is also processed by the developer of the platform, Chauntry Ltd, New Century House, Cordwallis Street, Maidenhead, Berkshire SL6 7BE (enquire@chauntry.com), and the parking operator, Cityzen Parking and Services SA, Kifissias Ave 294 & Tzouna 1, 145 63 Kifissia Attica (customerservice@cityzen.com.gr).

Grammedia LTD (ContactPigeon), Leof. Pentelis Str. 74, Chalandri 15234 (help@contactpigeon.com) undertakes the email marketing campaigns on our behalf and Mindshare Media Company, 350 Kifisias & Chr.Lada Chalandri GR 15233, runs our digital advertising campaigns.

All aforementioned companies are committed for the proper use of personal data, in accordance with GDPR.

  1. Transfer of personal data

Responding to your opt-in option, your data is transferred to the competent company or entity operating at Athens International Airport for the relevant processing purpose (e.g. in the case of offers/promotional activities, reply to comments, etc.).

  1. Your rights to access and manage your personal data

Personal data legislation in force gives you the right to ensure that your personal data is being processed lawfully ("access rights"). Additionally, your rights to amend, restrict, transfer or request deletion of your data can be exercised by contacting us as indicated above under (3) in accordance with the personal data legislation in force.

  1. Data Security

The transmission of information via the internet is not completely secure and every effort is made to protect your personal data, given that our Site has a valid trusted certificate in place. All information you provide to us is stored on our secure servers. Any payment transaction is encrypted using SSL technology and is processed by a trusted merchant. You are responsible for keeping passwords that we have given you or you have chosen to access certain places of our Site confidential. We ask you to not share a password with anyone. AIA will not contact you directly or indirectly asking for your password.

  1. Links to Third Party Web Sites

On our Site links to and from websites of our principals, suppliers, advertisers and other third parties can be found. Those websites have their own privacy policies and we do not accept any responsibility or liability either for these policies or for those third-party websites. When following a link from our Site to any third-party website, please check their policies before you submit any personal data.

  1. Cookies

Definition

Cookies are small pieces of text used to store information on web browsers. Cookies are widely used to store and receive identifiers and other information on computers, smartphones, and other on-line smart devices. These types of files have a variety of functionalities, such as remembering your preferences and chosen web content, assisting you to improve your site experience, as well as offer promotions, advertisements or other web content more relevant to you.

Cookies, depending on the time they remain stored on your device, are distinguished in “Session Cookies” and “Persistent Cookies”. “Session cookies” are stored on your device at the time you visit a website and are deleted automatically after you close your browser. “Persistent cookies” are stored on your device at the time you visit a website and remain stored after you close your browser. Persistent cookies will be activated again automatically when you open your browser and browse the internet. Cookies depending on the party placing the cookie are distinguished in “First” and “third party” cookies. First party cookies are created from your visit to our website or our digital apps, whereas third party cookies are saved onto your computer or internet connected device without you having visited the website of this particular third party.

How we use Cookies and Similar Technologies

We use cookies and similar technologies onto the following online platforms:

  1. AIA website (www.aia.gr), 
  2. Official airport parking website https://secure-parking.aia.gr   
  3. ATH mobile APP (on Android and IOS Platforms)
  4. Corporate platforms such as iGate.

These are collected to provide, protect, and improve our services, such as by providing users with targeted content, offering and measuring advertisements, understanding user behaviour, and providing a swift and safer browsing experience. You can remove or reject cookies using your browser or device settings, but in some cases doing so may affect your ability to use our services.

Types of Cookies used on Athens Airport digital assets

Session Cookies

To provide you with core services of our website, these cookies are absolutely necessary for the provision of the online service you requested; for instance, when you visit our website, use our application, browse through, or request specific information, or book vehicle parking space, or other services session cookies occur. The information collected through these cookies is not used for marketing purposes.

Persistent Cookies

Performance & Analytical Cookies (Statistics)

This type of cookies collects anonymous information on how visitors use the site and the data is merged with other users to enable us to improve how the site performs. For example, we utilize Google Analytics cookies to help us understand how customers arrive at our site, browse or use our site and highlight areas where we can improve areas such as navigation, retrieval of Airport related information, marketing campaigns. The data stored by these cookies never shows personal details from which your individual identity can be located.

Marketing & Third-party Cookies

These cookies are used to serve personalized content based on your interests. The information gathered can also be used for targeting purposes of promotion advertising campaigns, promotions and retargeting. These cookies may remember the websites you have visited and share them with the third parties such as advertisers. These cookies are used by third parties to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. Information contained in these cookies is anonymous and doesn't contain your personal data.

Controlling and Opting-In and Out of Cookies

By continuing to use aia.gr or the ATH Airport App, you thereby give consent for cookies to be placed and read out on the website/app and the associated sub-domains, and make full use of our digital services. You can change the settings on your browser or your connected device to prevent cookies being stored on your computer or mobile device, without your explicit consent. Your browser “help” section will normally provide details on how to manage the cookie settings.  If you choose to reject cookies, as noted above, you may not be able to use certain features of our website, application and services.

For information on all of these categories of cookies, and for more information generally on cookies please refer to www.allaboutcookies.org and www.youronlinechoices.eu

  1. Complaints to the competent Data Protection Authority

If you wish to file a complaint on how we have handled your personal data, you may contact our Data Protection Officer who will investigate the matter. If you are not satisfied with our response or you believe we are not processing your personal data in accordance with the law, you can complain to the Hellenic Data Protection Authority www.dpa.gr or any other co-competent Authority as per GDPR. Visit their website for further information.

  1. Changes to our Privacy Notice and Cookies Policy

We may change the terms of this Privacy Policy from time to time. Any changes will be posted on this page.