1.Data Controller
“Athens International Airport S.A.” (AIA), with corporate seat at Administration Building (B17), Spata Attica, postal code 190 19, is the Data Controller for this process, as defined in EU Regulation 2016/679 on the protection of natural persons in regard to the processing of personal data and holds all rights and obligations reserved for such capacity under the legislation.
2.AIA’s Data Protection Officer may be contacted:
Through AIA’s website https://www.aia.gr/privacy and email address privacy@aia.gr.
By correspondence at:
Manager, Data Protection & Compliance Dept.
Athens International Airport S.A.
Administration Building (B17)
190 19 Spata, Attica
3.Type of physical persons involved, and personal data processed: Partnernon Marbles interactive voting is performed by adult passengers at the Airport facilities when using the special devices where this electronic application is installed. Furthermore, the service is also available at AIA’s website. Once users have voted, they may submit their email address which is stored in AIA’s database.
4.Purpose and legal basis on which your data are being processed: Personal data processing requires users’ explicit consent. The purpose of such data processing refers to users’ subscription as to receive Airport newsletters.
5.Security of Processing: AIA commits for the availability, integrity and confidentiality of any personal data collected through this application. A valid trusted certificate is usitilised to encrypt the communication exchanged between the dedicated devices and the hosting server. All information is encrypted prior to being transmitted over the Internet, through HTTP over TLS (Transport Layer Security) and retained in encrypted databases.
6.Third party data processing: Consent management is performed by DOPE Studio S.A., located in Mesogeion Str. 451, 15343, Athens (hello@wearedope.com) who processes personal data, on AIA’s behalf, providing support and maintenance services for the respective consent mechanism.
AIA’s email marketing campaigns are performed by Grammedia LTD (ContactPigeon), located in Pentelis Str. 74, 15234 Athens (help@contactpigeon.com) on behalf of AIA.
Any data processed is not transferred to non-European Economic Area (EEA).
7.Retention Period: Users’ email addresses are retained until the users exercise their rights for objection to data processing and deletion of their data, via communicating such request to AIA.
Note: AIA may retain personal data for the duration of any period necessary to establish, exercise or defend any legal rights or at such longer retention period as may be required by applicable law.
8.User rights to access and manage their personal data: Personal data legislation in force provides the data subjects with the right to be able to affirm that their personal data is being processed lawfully. Moreover, data subjects may exercise the rights of data access, rectification, deletion, transfer, the rights of data processing objection and restriction. Such requests should be communicated to AIA’s Data Protection Officer (indicated above under para. 2).
Note: The exercise of any of above rights is subject to applicable regulatory, or operational restrictions.
9.Right to lodge a complaint with the Hellenic Data Protection Authority (DPA): (www.dpa.gr), in case they consider that AIA’s processing of their personal data infringes the GDPR and the National Law 4624/2019.
10.Privacy Notice Revision: The Privacy Notice may be subject to future revision. The applicable version will be always presented on this application.