How to request access to your personal data

Individuals have the following rights over the way organisations use their personal data: 

• the reasons we hold and use your information
• the categories of information we hold about you
• who we give your information to
• where possible, how long we will hold your information
• the right to ask us access to a copy of your personal data, to rectify, erase or restrict use of your information (within certain limitations)
• your right to complain to the Information Commissioner
• where we have information about you from other sources, where that information was obtained from
• whether any automated decision-making, including profiling, takes place and, if so, meaningful information about the logic involved and the significance and any envisaged consequences for you.

You can also find this information on our privacy statement, which is available here.

If you would like to request personal information about you, please note the following:

• To protect your privacy, we may need to verify your identity before processing your request, and we will tell you if this is the case.
• If you are making a request on behalf of someone else, you will need to provide evidence of your authority to act on their behalf, such as a signed letter of consent or a power of attorney document.
• To help us narrow our search, please let us know which team or business area - such as Parking - you believe may hold personal information about you. If you're unsure, please provide the context of your interactions with us, including approximate dates. We may request additional details if needed to refine the search and ensure we can respond within the statutory timeframe. Please only include information necessary to process your request.
  
  

Requests for access to copies of your personal data should be made in writing.

Please use the form provided here:

Request Form

Once we have verified the identity and authority of the requester, we aim to respond to all data protection requests within one calendar month from the date we receive all necessary information. In cases where a request is particularly complex or excessive, we may extend this timeframe by up to two additional months. If an extension is required, we will inform you and explain the reason for the delay.

For more information on response times, refer to the ICO's time limits for responding to data protection rights requests.

We will provide the requested information in a commonly used electronic format, unless you specify otherwise. If you require a different format or need assistance due to accessibility requirements, please let us know - we will accommodate your needs wherever possible.

Our CCTV systems are primarily positioned to support airport operational and safety needs. As such, camera coverage may vary depending on real-time airport activity. Footage may not be available where:

• At the time of the incident, the cameras were directed elsewhere due to operational priorities, and no footage of the incident is available.
• The request for footage was submitted after the footage had already been deleted. In accordance with our Privacy Statement CCTV recordings are retained for 30 days and then automatically deleted, in line with our retention policy.
• The incident was not reported at the time, and no footage of it has been found.
  
  

Please note that Bristol Airport does not process biometric data, facial recognition or fingerprint data.

Where we consider a request to be ‘manifestly unfounded or excessive’, or repetitive, we may either:

• Charge a reasonable fee to cover the administrative costs of providing a response; or
• Refuse to act on the request.

Where one of the above options is invoked, we will set out in writing the reasons it has been applied to your request.

If you are dissatisfied with how your data protection request was handled; or believe your rights under data protection law have not been upheld, you have the right to request an internal review. To do so, please contact our Data Protection Officer by completing this form:

Request Form

Please provide details of your concern and any supporting information. We will acknowledge your request promptly and aim to conduct the review within one month.

We hope our response following the Internal Review meets your expectations. However, if you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection. You can do so by completing their online complaint form.