PRIVACY NOTICE FOR WEBSITE USERS

Athens International Airport S.A. (AIA) acknowledges and respects the importance of privacy of your personal data. This Privacy Notice sets out the principles on which your personal data are collected by us or provided by you via this Website, in compliance with applicable Personal Data Protection regulatory framework and AIA’s Privacy Policy.

Please read the following information carefully and demonstrate your preferences, where so instructed.

  1. Layout – Structure of www.aia.gr

Our Website is an integrated information and services hub for both our business partners and the public; a gateway to services and easements we provide to passengers, visitors and tourists who seek to obtain first-hand information for the Airport, services offered by our Company, Public Services or business partners, and for the City of Athens as a destination.

We must point out that third-party websites, that you may visit by following links provided on our Website, are outside of our sphere of control and are governed by different terms of use and different Privacy Policies for the management of personal data. For these policies, our Company does not take any responsibility.

  1. Data Controller:

You are hereby informed that our Company, "Athens International Airport S.A.", whose corporate seat is at Spata Attica, Administration Building (B17) , postal code 190 19, is the Data Controller (as defined in EU Regulation 2016/679, or "GDPR") for this www.aia.gr Website (the "Site") and holds all rights and obligations reserved for such capacity under the Law.

  1. Our Data Protection Officer’s Contact Details

For any query or request related to the processing of your personal data you may contact our assigned Data Protection Officer:

  • by filling in the form on our Site www.aia.gr/data-protection-preferences
  • by sending an email at privacy@aia.gr, or
  • by postal mail to "Manager, Data Protection & Compliance Athens International Airport S.A. Administration Building (B17) 190 19 Spata, Attica"
  1. Information we may collect from you and why we collect it:

Information about you is collected through the following means:

  1. Via your browser cookies when navigating through our Site, for the purpose of addressing, delivering and routing your online requests with precision. In this respect, we may collect information about your browser type for system administration purposes and to acquire cumulative information on visitors. This is statistical data about our users' browsing actions and patterns and does not identify any individual.
  2. After you have filled in our contact form www.aia.gr/traveler/contact/to post a comment or require further information, in order for us to be able to look into your inquiry and reply.
  3. When you use our “flight tracker” service www.aia.gr/en/traveler/flight-info/flight-tracker/ and you wish to receive an email notification every time there is a significant update in your flight status.
  4. When you use our “e-parking” platform www.aia.gr/traveler/parking/e-parking/parking-fee-calculator to book a vehicle parking space at the Airport’s Car Park Lots, in order to conclude a contract and provide you with the requested service.
  5. When you access our "Infogate" and "Auto-Pilot" pages www.aia.gr/igate/ and www.aia.gr/autopilot/ (as a registered business partner user), in order to be able to access specialised content and tools for the aviation professionals.
  6. When you use our environmental issues contact form www.aia.gr/company-and-business/environment/e-Noise-complaint-form/ to raise or report an environmental issue or inquire to receive further information, in order for us to look into your inquiry and reply.
  1. We may also collect personal data about you in the following circumstances:
  • When you participate in competitions, surveys or other interactive features of our Site;
  • When you opt to receive promotional activities by us or our Airport Business Partners via the Site;
  • when you subscribe to AIA’s email newsletters;
  • to ensure that content from our website is presented in the most effective manner for your connected device;
  1. Categories of personal data collected:

Depending on the purpose of your visit and the service you wish to receive from our Site, the type of personal data we collect may include name, address, email address, telephone number, vehicle license plate, as well as additional information, such as airline and flight no. Credit card details are currently processed exclusively through an external website of an AIA business partner.

In some cases, we may also need to collect sensitive personal data such as information concerning medical conditions, disabilities and special requirements, so as to be able to address your particular needs (e.g. when you post a comment or inquiry on the website).

On all such occasions, you are in absolute control of the personal information with which you provide us, as such information is explicitly received with your documented consent for specific purposes.

You can indicate your respective preference by ticking certain boxes on the forms we use to collect your data on each of our Site modules. Your preferences shall be recorded to the appropriate data registry.

You are free to revoke any or all of your choices at any of the relevant modules of our Site, by contacting us accordingly.

You acknowledge, however, that certain services (e.g. Flight Tracker, e-Parking or Infogate), cannot be efficiently provided or concluded, unless the appropriate data is made available to us.

AIA commits:

  • To process the limited amount and type of personal data necessary for each defined process activity and required service;
  • Not to process your personal data for purposes other than those disclosed to you when you first connect to our Site;
  • To safeguard your data integrity and confidentiality whilst at our disposal.
  1. Personal Data Retention Period

Retention period of your personal data with us relies on the purpose and service you wish to obtain from our Site and its respective modules and is clearly demonstrated therein:

  • Personal data provided in the comments/contact section shall be retained for a maximum of five (5) years from our reply or the dispatch of your comment to the relevant companies and entities operating at Athens International Airport as per our passenger comment management procedure.
  • Data provided in the "Flight Tracker" module are automatically deleted upon completion of the requested service.
  • Data provided in the "e-Parking" shall be retained for a maximum of five (5) years from the booking date.
  • Email addresses provided for subscription purposes to our newsletters are kept until an unsubscribe request has been received by you.
  • Emails or other contact details provided for competitions, surveys or other interactive features of our Site are automatically deleted upon the conclusion of the respective activity.
  1. Third Party Processing

All personal data is processed by our affiliated companies, which are committed to comply with the European Data Protection Regulation (GDPR), while, for the purposes of IT hosting and maintenance this information is located within the European Union. In particular:

"Greek Geeks SA", Mesogeion 451, 153 43, Ag. Paraskevi, Attica (hello@wearedope.com) is the developer of the website and may process data on our behalf,

"E-parking" module data are also processed by the developer of the platform, Chauntry Ltd, New Century House, Cordwallis Street, Maidenhead, Berkshire SL6 7BE (enquire@chauntry.com), and the parking operator, Cityzen Parking and Services SA, Kifissias Ave 294 & Tzouna 1, 145 63 Kifissia Attica (customerservice@cityzen.com.gr).

  1. Transfer of your personal data:

Responding to your opt-in option, your data is transferred the relevant company or entity operating at Athens International Airport for the relevant processing purpose (e.g. in the case of offers/promotional activities, reply to comments, etc.).

  1. Your rights to access and manage your personal data:

Personal data legislation in force gives you the right to ensure that your personal data is being processed lawfully ("access rights"). Additionally, your rights to amend, restrict, transfer or request deletion of your data can be exercised by contacting us as indicated above under (3) in accordance with the personal data legislation in force.

  1. Data Security:

The transmission of information via the internet is not completely secure and every effort is made to protect your personal data, given that our Site has a valid trusted certificate in place. All information you provide to us is stored on our secure servers. Any payment transaction is encrypted using SSL technology and is processed by a trusted merchant. You are responsible for keeping passwords that we have given you or you have chosen in order to access certain places of our Site confidential. We ask you to not share a password with anyone. AIA will not contact you directly or indirectly asking for your password.

  1. Links to Third Party Web Sites:

On our Site links to and from websites of our principals, suppliers, advertisers and other third parties can be found. Those websites have their own privacy policies and we do not accept any responsibility or liability either for these policies or for those third-party websites. When following a link from our Site to any third-party website, please check their policies before you submit any personal data.

  1. Cookies

The Site uses cookies to distinguish you from other users. Some of these cookies are essential to make this Site work properly and provide a good experience when you browse. Furthermore, cookies allow us to improve our Site or the way we provide our service to the Public, or are used to provide you with information or offers from AIA, or third parties that may be of interest to you.

  1. Complaints to the competent Data Protection Authority

If you wish to file a complaint on how we have handled your personal data, you may contact our Data Protection Officer who will investigate the matter. If you are not satisfied with our response or you believe we are not processing your personal data in accordance with the law, you can complain to the Hellenic Data Protection Authority www.dpa.gr or any other co-competent Authority as per GDPR. Visit their website for further information.

  1. Changes to our Privacy Policy

We may change the terms of this Privacy Policy from time to time. Any changes will be posted on this page.