AGS Privacy Notice
Our role in your privacy
If you are a customer of AGS or just visiting our website, this notice applies to you.
Our responsibilities
Your personal data will be collected by AGS who will act as the “Data Controller”. A data controller determines the purposes and means of processing personal data. We are registered as a data controller at the UK Information Commissioner’s Office (ICO) under registration number ZA296216.
Your responsibilities
Read this privacy notice
If you are a customer, please also check your contracts between us: they may contain further details on how we collect and use your data.
If you provide us with personal information about other people, or if others give us your information, we will only use that for the specific reason for which it was provided to us.
By submitting the information, you confirm that you have the right to authorise us to process it on your behalf in accordance with this privacy notice.
This privacy notice does not cover the links within this site linking to other websites. You should read the privacy notices on the other websites you visit.
The types of data we collect
Contact details
Your name, address, telephone number, email address.
How and why we use your data
Data protection laws mean that we can only use your data for certain reasons and where we have a legal basis to do so. Here are the reasons for which we process your data:
Customer services
To enable our customers to make enquiries, requests for information reports or submit a complaint.
Legal basis for this data usage: legitimate interests
Here is what legitimate interests mean
Legitimate Interests
Processing your data is necessary for our legitimate interests or those of a third party, provided those interests are not outweighed by your rights and interests. These legitimate interests are:
Delivering, developing and improving AGS and its services.
Your privacy choices and data subject rights
You can choose not to provide us with personal data. If you choose to do this, you can use the website, however, you may not be able to access some services without providing personal data. You can turn off cookies in your browser by changing your settings. You can block cookies by using a setting on your browser to refuse cookies. You can also delete your cookies through your browser settings. If you refuse cookies or turn cookies off you will still be able to visit our website however some pages may not work effectively.
Your rights
AGS will respect all of your data subject rights. You can exercise any of your rights by contacting our group data protection officer at DPO@agsairports.co.uk. If we do hold information we will:
Authenticate you as the data subject
Determine if a right can be administered
Complete your request within 30 days
Communicate to you in clear and intelligible language
You have the right to be informed
You have the right to know how we manage your data and that is why we have made this great privacy notice! We have to tell you:
The categories of data we process
Why and how we use your data
Who (if any) third parties we share your data with
How long we hold your data
Your rights regarding your data (which we have explained below)
You have a right to access to any personal data we hold about you
You can ask at any time, for a copy of your personal data. AGS will respond within one month to advise you if we hold your personal data and if so, we will provide you with a copy of the data unless it would adversely affect the rights of another person e.g. if providing it to you, broke another person’s confidentiality.
You have a right to have any inaccurate data rectified
This right allows you to submit changes to your records and once changes are verified, they will be amended on AGS records. Similarly, AGS will periodically request you to check your data is held accurately.
You have a right to be forgotten
You can request that delete all of your personal data. If you do this, and there is no other lawful basis to keep your data, then it will be removed.
You have the right in some circumstances to restrict our use of your data
You have the right to ask us to restrict how we process your data in some circumstances. This means we are permitted to store the data but not further process it. We keep just enough data to make sure we respect your request in the future. This is not an absolute right.
You have the right in some circumstances to object to us using your data
You have the right in some circumstances to object to how we use your data. This is not an absolute right.
Rights related to automated decision making including profiling
AGS do not perform automated decision making. We may from time to time perform online profiling however this does not produce any decisions of legal effects.
You have the right to lodge a complaint about how we use your data
If you have concerns regarding how we use your data, please contact our Data Protection Officer in the first instance: DPO@agsairports.co.uk.
If you are still unhappy regarding how we have dealt with your complaint, you have the right to contact the UK Information Commissioner’s Office (ICO). You can do this by calling their helpline, contacting them through their website or writing to them. Their details are as follows:
ICO telephone helpline: 0303 123 1113
ICO website: https://ico.org.uk/concerns
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Information security
We have physical and electronic procedures to secure the personal data we use and collect. All of our staff are trained in data protection.
Transmission: where personal data is electronically transmitted from one computing device to another over a public network an encrypted path will be used e.g. SSL. If your data is transmitted in a hard-copy format from one place to another a secure or locked method of transport will be used, suitable to the nature of the personal data.
Storage: personal electronic records are located on servers in secure premises. If your data is required to be stored outside of the secure premises, the data will be in an encrypted format. Personal paper-based records will be stored in a locked filing cabinet in secure offices to prevent inadvertent access by unauthorised 3rd parties.
Access: only personnel authorised by AGS will have access to your personal data records on a need to know basis.
Disclosure of personal data: we do not disclose personal data unless we’re required to do so to comply with the law, under contract, have your consent, or if it is in your vital interest.
Transfer to international countries
Your data may be transferred internationally. If your data is transferred, AGS will legally safeguard your personal data by:
Transferring to the EEA countries (Members of the European Economic Area);
Transferring to an EU adequate country, which are defined as countries outside the EU that offer adequate levels of data protection; and
Transferring under “EU Model Clauses” agreement with the importing party. These are standardised contractual clauses that make specific guarantees around the transfer of personal data from EEA countries to the rest of the world.
Owing to the global nature of the internet infrastructure, the information you provide may be transferred in transit to countries outside the European Economic Area that do not have similar protections in place regarding the protection of your personal data. Where this is the case, end-to-end encryption will be employed to transmit the data securely e.g. using industry standard data encryption (SSL or TLS) to connect to websites or using email encryption technologies.
Where AGSs is unable to utilise legal safeguards when transferring data to a third-country, AGS will seek consent from you to facilitate the data transfer. This could be the case when arranging hotels and car-rentals abroad.
How long do we store your personal data
Subject to all applicable law, all personal data collected under contract will be held for 7 years. Data collected under legitimate interest will be held for a period of 3 years from your last interaction with the business, otherwise, it will be removed if no other lawful method of holding your data exists.
Data collected under consent will be used until consent is withdrawn or if it is no longer useful for the purpose for which it was collected. Some data may not be removed if it involves a disproportionate effort e.g. a website image of you is held by the Google search engine. This does not affect your rights as a data subject.
Please note: after this retention period has expired, AGS will be unable to reinstate the original data, offer confirmation of passage through the airport or validate a product or service you may have received, assuming the data was held in the first instance.
Sharing personal data
We may share your data in the following circumstances:
You have given us your express consent to do so
We need to do so for the purposes of making any services which you have ordered or purchased available to you (for example, where you have ordered goods via Shop and Collect, your information is shared with our Shop and Collect service provider, and when you book car parking services your information is shared with third party providers who help us deliver this service);
It is necessary to allow us to meet or enforce a legal obligation (for example, we may need to share CCTV footage of you with the police or with the Department of Transport in certain circumstances); or
Where it is fair and reasonable for us to do so in the circumstances.
If AGS shares your data on a regular basis it will perform due-diligence and hold written contracts and agreement with these organisations to legally safeguard your data.
If you have consented for us to share your data with other organisations for the purposes of direct marketing, we will keep your consent on record until it is withdrawn or the purpose of holding your data is no longer valid. On deletion of your data, AGS will endeavour to contact you to confirm that your information has been removed.
We also use third parties to help us host our applications and platforms to help us to communicate with customers etc. We only use third parties who are compliant with data protections laws.
Cookies
What are cookies?
Cookies are small text files which are stored on your computer when you visit certain web pages. At AGS, we use cookies to understand how our sites are used which helps us to improve your overall online experience. Some of the cookies we use are necessary for some of our sites to work whilst other cookies are used to provide tailored advertising by trusted third parties. The cookies we and our third parties place on your computer do not collect personally identifiable information like your name, address or payment details. To find out more about cookies, visit www.aboutcookies.org.
The privacy of your information is important to us and we want to keep you well informed about cookies. We shall continue to work on initiatives in relation to recent cookie legislation to ensure you have the best experience when visiting our website.
Managing cookies
If you would prefer to restrict, block or delete cookies from AGS and our third party advertisers, or any other website, you can use your browser to do this. Each browser is different so check the 'Help' menu of your particular browser to learn how to change your cookie preferences. If you choose to disable all cookies we cannot guarantee the performance of our websites and some features may not work as expected.
The different types of cookies we use
AGS uses the following categories of cookies on our websites:
Strictly necessary
These cookies are essential for certain features of our websites to work e.g. when you make payments for car parking. These cookies do not record identifiable personal information and we do not need your consent to place these cookies on your device. Without these cookies, some services you have asked for cannot be provided.
Performance
These cookies are used to collect anonymous information about how you use our websites. This information is used to help us improve our websites and understand how effective our adverts are. In some cases we use trusted third parties to collect this information for us but they only use the information for the purposes explained. By using our websites, you agree that we can place these types of cookies on your device.
Functionality
These cookies are used to provide services or remember settings to enhance your visit e.g. text size or other preferences. The information these cookies collect is anonymous and does not enable us to track your browsing activity on other websites. By using our websites, you agree that we can place these types of cookies on your device.
Targeting and advertising
These cookies are used by trusted third parties to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. Information contained in these cookies is anonymous and does not contain your personal information. To find out more about cookies used for targeting and advertising go to www.youronlinechoices.com and www.networkadvertising.org or contact us on our feedback page for further information about the trusted third parties we use.
Changes to this privacy notice
We keep our privacy notice under regular review and we will place any updates on this webpage. At the start of this privacy notice we will tell you when it was last updated.
Last updated 5th August 2019
Complaints and queries
AGS tries to meet the highest standards when collecting and using personal information. For this reason we take any complaints we receive about this seriously. We encourage people to bring it to our attention if they think our collection or use of personal information is unfair, misleading or inappropriate. Please contact the Group Data Protection Officer:
AGS Data Protection Officer
Erskine Court,
St. Andrew’s Drive,
Paisley,
PA3 2SW