Privacy Notice

This policy is effective from 2nd May 2025

1. Who We Are

Farnborough Airport Limited (“Farnborough”, “we”, “us”, “our”) is committed to protecting the privacy and security of the personal data we collect from visitors (“you/your”).

We are further committed to ensuring we meet our legal obligations when processing your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

The purpose of this privacy notice is to explain what personal data we collect about you and how we use it during your visit with us. We are a company registered in England and Wales under registration number 03454447 and with a registered office address of 3 Bunhill Row, London EC1Y 8YZ. We are the controller of the personal data we collect and we are registered with the Information Commissioner’s Office (ICO) under registration number Z6906011.

We have appointed GRCI Law Limited (of GRC International Group) to act as our EU representative. If you wish to exercise your rights under the EU General Data Protection Regulation (EU GDPR) or have any queries in relation to your rights or general privacy matters, please contact us as per the details below.

PLEASE NOTE: When contacting GRCI Law Limited, it is important to quote our company name, to avoid any delays in your communication being processed.

This privacy notice applies to you if you visit our website or our premises, make a purchase from us, make enquiries with us, you are a business associate of ours eg: you are a representative of an existing, former or potential supplier or vendor of ours or if you sign up to receive airport news/updates and/or other promotional communications from us. This notice does not form part of any contract of employment or other contract to provide services.

We may update this privacy notice from time to time in response to changes in applicable laws and regulations and to our processing practices. When changes are made, we will amend the date at the top of this document.

2. Personal Data We Collect and How We Collect It

We collect your personal information in a variety of ways. For example, when you visit our website or our premises, when you purchase goods or services from us, or when you sign up to receive direct marketing from us.

We may also collect personal data about you from third parties such as website analytic companies and third-party suppliers.

The personal data includes:

Name
Address
Contact details (including email address and phone number)
Details of national identity card, passport and other identification documents
Immigration status
Travel schedules
Details of minors or persons in your custody
Gender
Vehicle registration details
Automatic Number Plate Recognition (ANPR) images
CCTV images and recordings
X-ray baggage scanning images
Bank and credit card details
Products booked
Device information (including device and browser data when using guest WiFi)
Website pages viewed
Emails opened and clicked
Details of enquiries
Details of complaints
Identification details (where necessary)
Details of incidents
Name of the person being visited and their company
Business name and address
Job title
Business email address
Business phone number
Employment history, experience and qualifications
Biometric data for identification purposes
Medical information (including health condition and disability details)
Racial or ethnic origin

3. Purposes for Using Your Personal Data

We use your personal data for the following purposes:

‍

If you fail to provide personal data

Where Personal Data is processed because it is necessary for the performance of a contract to which you are a party, we will be unable to provide our services without the required information.

4. Sharing Your Personal Data

We will share your personal data that we hold with the following organisations:

Microsoft
Regulators such as the Civil Aviation Authority
Law enforcement and local authorities
Intelligence services and other government authorities
Airline partners

We may disclose your personal data to other organisations who assist us pass your details to reputable third parties to ensure that you receive appropriate advice; make a lawful request for disclosure; provide us with professional services or advice; or assist us in our marketing and promotional work.

We may disclose personal data where we receive a lawful request for disclosure (e.g. from the police). We may also disclose personal data pursuant to fulfilling our role as a data protection officer or privacy officer for a customer (e.g. to the ICO, other controllers and processors).

Please note that this is an indicative list, for more information please contact us under the “How to Contact Us” Section.

Links to other websites

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our site, we encourage you to read the privacy policy of every website you visit.

5. International Transfers

We may transfer personal data out of the UK either directly or through our use of certain data processors. Whenever we arrange for restricted international transfers of personal data outside of the UK, we will ensure that arrangements are in place to provide suitable safeguards for the people whose information we transfer.

For example, when we appoint data processors, we check that suitable arrangements are in place such as Adequacy Regulations, binding corporate rules, international data transfer agreements, standard contractual clauses, or other permitted mechanisms. The restricted transfers we make include transferring personal data to the EU (Germany and Ireland), Australia and the US under the UK extension of the EU:US Data Privacy Framework and/or standard contractual clauses. Further information about the safeguards related to the restricted transfers we make can be provided on request.

6. How Long We Keep Hold of Your Data

We will retain your Personal Data for only as long as is necessary for the purposes it was collected for.

Typically, this is for the duration of your engagement with us, your visit to us, whether this is on our website or in person at our premises.

We will also retain Personal Data where it is necessary to comply with our legal obligations or as necessary in relation to legal claims.

Details of retention periods for different aspects of your personal information are available in our retention policy which can be exercised under the “How to Contact Us” section of this notice.

7. Automated Decision Making

We do not make any decisions about you based solely on automated decisions.

8. Your Rights

You have certain rights in relation to the processing of your personal data, including:

Right to be Informed about how and why we use your personal data. This is provided through privacy notices.
Right of Access to your personal data (commonly known as a “Subject Access Request”). This enables you to receive a copy of the personal data we hold about you and to check we are lawfully processing it.
Right to Rectification of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Right to Erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for to continue processing it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
Right to Restrict the processing of your personal data. This enables you to ask us to suspend the processing of your personal data, for example if you want us to establish its accuracy or the reason for processing it.
Right to Data Portability provides the opportunity to obtain and reuse their personal data for their own purposes across different services.
Right to Object the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
Rights in relation to Automated decision-making. You have the right not to be subject to a decision based solely on automated processing which will significantly affect you.
Right to Withdraw Consent when we process your personal data under the lawful grounds of consent.

How to exercise your rights

You will not usually need to pay a fee to exercise any of the above rights. However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

If you wish to exercise your rights, you may contact us using the details set out below within the section called ‘How to contact us and our Data Protection Officer’. We may need to request specific information from you to confirm your identity before we can process your request. Once in receipt of this, we will process your request without undue delay and within one month. In some cases, such as with complex requests, it may take us longer than this and, if so, we will keep you updated.

9. Complaints

You have the right to complain if you are unhappy with the way we have handled your personal data. We will acknowledge receipt of your complaint within 30 days, investigate the matter without undue delay, and keep you informed of the progress and outcome. If you wish to complain please use the contact details given below under “How to Contact Us”.

We will do our best to resolve the matter to your satisfaction. If you are not satisfied with the outcome of your complaint, you can complain with the relevant supervisory authority. The supervisory authority in the UK is the Information Commission who can be contacted online at:

For supervisory authorities in other countries within the EU see the link below:

https://edpb.europa.eu/about-edpb/about-edpb/members_en

10. How to Contact Us

For further information regarding your personal data or about Farnborough’s approach to data protection in general please contact our [Data Protection Officer] at:

Farnborough Airport,

Farnborough,

Hampshire,

GU14 6XA.

(e) gdpr@farnboroughairport.com

(t) 01252 379079

11. Changes to This Privacy Notice

We may update this privacy notice from time to time in response to changes in applicable laws and regulations and our processing practices. When changes are made, we will update the effective date at the top of this document.