Birmingham Airport Data Subject Rights Requests Privacy Notice
Privacy notice – Data Subject Rights Requests
Birmingham Airport is collecting your personal data. When we collect personal data, we are legally obliged to provide you with certain information, it is called the “Right to be Informed”. That information is contained in the below Notice. If any of the information we provide to you is not clear enough, there are contact details for Birmingham Airport’s Data Protection Officer further down this Notice, please do not hesitate to make contact and ask for further information.
- Why we need it - the purpose of processing
Your name, contact details and ID (where required) will be collected and used by Birmingham Airport in order to complete your information request. This means any request which falls under the below Data Subject Rights as listed in the GDPR.
- Right of access by the data subject
- Rectification and erasure
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to Portability
- Right to object and automated individual decision-making
- Right to object
- Automated individual decision-making, including profiling
Your information will be used to confirm your identity and to progress your request under the legislation detailed in the GDPR and the Data Protection Act 2018 (where relevant).
- Why we’re allowed to process your personal information in this way – the legal basis
- Article 6 condition – Legal Obligation (GDPR & Data Protection Act 2018)
- Who we will share your personal information with?
Your information will be used by the Information Security team, whose role it is to ensure your request is logged and dealt with.
Minimum details will also be shared with the department or departments which hold the information you have made your request about, so that they can fulfil the request on your behalf.
- Where your personal information will be stored or transferred to
Your information will be held on the Information Security teams logging software, provided by a company called MetaCompliance. They are a data processor only, which means they provide the software and will maintain that software but will not have use for or access your personal information for any other reason. A contract, and appropriate legal documentation, is in place to keep your information secure and within the legal requirements of the GDPR.
MetaCompliance servers are located in Dublin with backup servers located in Amsterdam. Birmingham Airport servers are located in the UK.
- How long we will keep your personal information for
Your request will be kept for 2 years past the point we send your response.
This is to ensure we have the details of your request, should you wish to ask us to re-assess our response, or you are not satisfied and take a complaint to the Information Commissioners Office.
Your ID, however, will be securely deleted with 1 month of your response being sent to you. We do not need to keep a copy of your passport/driving license etc, once we have confirmed your identity. What we do is keep a log of what ID you provided and that we verified it before sending you your response.
- Your rights
You are entitled to request the following from Birmingham Airport. These are called your Data Subject Rights and there is more information on Birmingham Airport’s website about each of these and what they mean to you. You can find this information by going to birminghamairport.co.uk/dataprotection
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Rights with regards to automated individual decision making, including profiling
Right to object
The right to object is particularly important if we are processing your information under the conditions of a “public task”, or “legitimate interests”, and you can check that information above in section 2. This is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact us on dataprotection@birminghamairport.co.uk
If you have any questions or wish to contact us and ask us to look at your rights at any time, please contact Birmingham Airport’s Data Protection Officer on the below details.
Postal Address:
Data Protection Officer
Birmingham Airport Limited
Diamond House
Airport Way
Birmingham
B26 3QJ
Email: dataprotection@birminghamairport.co.uk
- If you are unhappy with the way in which we use your personal information
If you are unhappy with the way in which Birmingham Airport has used your personal information and you have already been in contact with us (on the above details) and feel we did not resolve your issues to your satisfaction, you can contact the Information Commissioner’s Office (The UK’s Data Protection Regulator), the details are below. However, the Information Commissioner does prefer that you have contacted Birmingham Airport first with your concerns before you then take those concerns to the Regulator.
Postal Address:
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email: casework@ico.co.uk
- Is your personal data being processed because of a statutory or contractual requirement?
Yes, it is a statutory requirement under the GDPR and the Data Protection Act 2018.
- Are we using automated decision making or profiling with regards to your personal data?
No.