Privacy Vision and Statement
Here at Bristol Airport, we strive to create memorable journeys for our passengers, to create and maintain constructive relationships with our communities and partners, and to ensure our employees and workers are able to do their jobs effectively.
Personal data connects all these groups and we recognise that the way in which we handle people’s personal data is of primary importance to everyone.
Our goal is to ensure that we comply with our legal obligations; and maintain the trust and confidence of all of our stakeholders, passengers and partners when handling their personal data.
Our Privacy Notices demonstrate the transparency with which we will foster trust and confidence. Together, they form our answer to your “right to be informed” under the UK General Data Protection Regulation ((UK) GDPR).
Bristol Airport Limited (“Bristol Airport”, “we", "our" or "us") is a company registered in England and Wales (company number 05403024) whose registered office is Administration Building, Bristol Airport, Bristol BS48 3DY.
We are registered as a data controller with the Information Commissioner’s Office and our registration number is Z5378995.
-
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?When you use Bristol Airport and are involved in any type of medical, safety or security related incident, we will collect your personal information relevant to the incident. The data we collect will include your name and contact details and specific details of the incident. Our team may assist you in seeking medical assistance from the NHS and in doing so will record their actions as part of the incident information. We may also use CCTV data to support any follow up investigation.
Why do we process this Data and what is our lawful basis for doing so?Bristol Airport may process data as noted above for the purposes of ensuring we comply with our legal obligations, these include:
- Maintaining records of any safety or security related incidents which occur anywhere on the Bristol Airport site
- To share details with the relevant authorities should an incident be reportable under RIDDOR (Reporting of Injuries, Diseases, and Dangerous Occurrences Regulations)
- To provide evidence of regulatory compliance to Department for Transport (DfT) and Civil Aviation Authority (CAA)
- For investigative purposes or as evidence to support any formal follow-up to airport incidents
- In response to a subject access request, to comply with the General Data Protection Regulations (GDPR (UK))
- To support improvements to the customer journey and associated processes
The lawful basis for processing your personal data for this purpose is that of our legal obligation under article 6(1)(c) of the UK and EU General Data Protection Regulations (GDPR).Who will we share this Data with?
We will, where necessary for the purposes of fulfilling our obligations, share the data we have collected with third parties responsible for fulfilling elements of the customer journey through Bristol Airport. These include:
- Bristol Airport personnel
- Security personnel (third parties)
- Customer service personnel (third parties)
- Insurance and Legal providers
- Airlines
- Baggage system operators
- Border Force (part of the Home Office)
- Police/security services
- Other Bristol Airport service providers
How long will we keep this Data for?We retain incident data for as long as is it required under our legal obligation, but not normally for longer than 6 years.
How will this Data be stored?The data will be stored on Bristol Airport servers and we will keep your information within Bristol Airport and our trusted third parties except where disclosure is required by law, for example to government bodies, law enforcement agencies or in response to a subject access request.
International transfers
Your information may very occasionally be processed outside of the UK for the purposes of system maintenance and support or for the purposes of international security and crime prevention. In these circumstances, we take appropriate technical and organisational measures to safeguard your personal information as we:
- only allow personal data to be processed in countries which the European Commission have confirmed have adequate protection for personal data (see European Commission: Adequacy of the protection of personal data in non-EU countries) and which decisions the UK have adopted at the end of the transition period and/or
- we enter into appropriate contracts which the European Commission have confirmed provide adequate protection for personal data (see European Commission: Model contracts for the transfer of personal data to third countries) and which the UK have adopted at the end of the transition period.
What are my rights regarding this Data?Under the GDPR (UK) you are have rights in relation to entitled to access (article 15), rectification (article 16), deletion (article 17), restriction of processing (article 18) and data portability (article 20) of your personal data, as well as the right to object to us processing it. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?You can contact us at any time if you have any queries or concerns about the way we process your personal data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk, with a registered address at :-
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport (BRS) processes the customer name (title, first and surname), home address including postcode, telephone number, payment card details and email address.Why do we process this Data and what is our lawful basis for doing so?
To enable you to book a seat on the Airport Flyer Bus between the airport and the city of Bristol or town of Weston super Mare (and intermediate bus stops). Payment card data is also processed but masked in transit to keep it safe.
We need to process your Data to fulfil our contractual obligations to you once you make a booking.
If you have consented to receiving marketing emails, please see our Marketing Privacy Notice for details of how we process your Data.
Who will we share this Data with?
We share this data with our third-party partners who host the booking process on our behalf.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK or the EU.
How long will we keep this Data for?
Individual records are deleted automatically after 5 years.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
We collect your name, email address, IP and MAC address of your device.
Why do we process this Data and what is our lawful basis for doing so?
To enable you to access for free a Wi-Fi network whilst you are at the Airport.
We rely on your consent to do this.
If you have consented to receiving marketing emails, please see our Marketing Privacy Notice for details of how we process your Data.
Who will we share this Data with?
We share this data with our third-party partners who host the wifi on our behalf.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
How long will we keep this Data for?
Scripts are kept for a period of time in an unidentifiable format.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport (BRS) processes the customer name (title, first and surname), home address including postcode, telephone number, email address, passport number, payment card information, vehicle details, including registration number, and Drivers' Licence number.
Why do we process this Data and what is our lawful basis for doing so?- To register you as a new customer for our services
- To carry out our obligations arising from any contracts entered into between you and us including managing payments, paying refunds or compensation, fees and charges, to process payments and make reservations for our products and services including parking, lounges and Fast Track security
We rely on our contractual obligations with you as our lawful basis.
We also process your Data to provide you with the information, products and services that you request from us including, but not limited to, contacting you about your experience of our airport, and to ask you to leave a review or take a survey. We rely on our legitimate interests to do so.
If you have consented to receiving marketing emails, please see our Marketing Privacy Notice for details of how we process your Data.
Who will we share this Data with?
We share this data with our third-party partners to process the booking and collect any outstanding charges or fines.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
How long will we keep this Data for?
We retain this Data for 5 years following the date of your most recent car park booking.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
From time to time, we run competitions on Facebook and on our website. We process your name, address, contact details and have access to your social media profile to do this.
Why do we process this Data and what is our lawful basis for doing so?
To enable you to partake in a prize draw or competition.
We rely on your consent to do so.
Who will we share this Data with?
We use secure third parties to process Data on our behalf in relation to competition entrants.
If you are selected as the winner, your Data may be passed to a third-party partner who is providing the prize, in order for you to redeem the prize.
We may ask you if you wish to receive news and offers from the third-party partners who are offering the prizes for the competitions. If you have opted-in to this, your Data will be shared with those partners.
We also ask you if you wish to sign up to receive marketing emails from Bristol Airport. If you opt-in to this, your Data will be processed in line with our Marketing Privacy Notice.
How long will we keep this Data for?
Your Data is held for up to 5 years for the purposes of entering the competition. If you are a customer or have signed up to our marketing emails, your Data will be held in line with the Marketing Privacy Notice for those purposes.
How will this Data be stored?
The Data will be stored on our processors’ secure servers as well as our secure internal systems, all of which are based in the UK.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
When holding consultation events or communicating with stakeholders we will, on occasion, provide the opportunity for individuals to express their interest in being kept informed on our current operations and future development plans. In these cases, we will retain your name and contact details, the details of your feedback and records of how we have responded.
Why do we process this Data and what is our lawful basis for doing so?
Bristol Airport processes personal data to enable anyone with an interest in our current operations or future development plans to provide feedback, request information or be kept up to date with the latest relevant updates.
Our legal basis for doing so is our legitimate interest in ensuring we receive and address feedback from stakeholders and can take this into account when reviewing operations or considering future plans.
Who will we share this Data with?
On occasion we share this personal data with external recipients and/or external advisors for the purposes of obtaining advice, for example, to undertake assessments for the purpose of consultations and stakeholder engagement mapping. We also share data with external bodies, such as the local planning authority, Civil Aviation Authority and other government bodies.
How will this Data be stored?
Information is stored on our secure internal systems, and where we share data with external recipients, data is stored securely on systems of our external advisors.
How long will we keep this Data for?
Information relating to engagement or consultation on a specific project will be retained for the duration of that project and destroyed.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the Bristol Airport Liftshare Community data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport Limited (BAL) processes the members’ name (first and surname), email address, home address including postcode, mobile phone number, geolocation tracking, vehicle details including registration number, employer name.
Data Type Mandatory/Optional Reason for Collection Member's full name Mandatory Required to identify the member creating the account. Member's email address Mandatory Required to uniquely identify and verify the member. Member's postcode Mandatory Required to create a journey. Member's address Optional Option to provide for further accuracy of journey matches. Member's phone number Optional Option to provide for further account profile details. Geolocation tracking Optional Certain elements of Mobilityways services and the Platform may use geolocation tracking, which you will need to expressly authorise within the Platform. This is entirely optional, but you may lose some functionality within the Platform if this is not enabled. You can turn the geolocation functions on or off within the Platform at any time at your discretion. Where you request to Mobilityways to make geolocation tracking available within the Platform, no location data will be shared with your employer.
Car registration number Optional Option to obtain a car share permit to access car share parking spaces within the staff car park. Employee name Mandatory Required to verify the member and provide access to the Bristol Airport Liftshare Community.
Why do we process this Data and what is our lawful basis for doing so?- To register you as a member of the Bristol Airport Liftshare Community within the Mobilityways app, to enable employees to find potential car sharing partners.
We rely on your consent as our lawful basis for processing your data.
We also process your data to provide you with the information, products and services that you request from us including, but not limited to, contacting you about your Permit for a 2+ Bay within the Staff Car Park, your experience of Liftshare and the Mobilityways app, and to ask you to leave a review or take a survey. We rely on your consent to do so.
Who will we share this Data with?
Our third-party partner, Mobilityways Limited, processes this data on our behalf. For information on how Mobilityways Limited handles data, please review the Mobilityways Privacy Policy.
How will this Data be stored?
All collected member data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK, the European Economic Area (EEA) or any other country where Mobilityways Limited have ensured there are appropriate data transfer mechanisms in place.
How long will we keep this Data for?
Mobilityways retains this Data for 24 months after your membership ends.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have queries or concerns about the way we process your Data.
If you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
We will retain your name and contact details, the details of your complaint or feedback, and records of what we have done about it. This may include your car registration plate, and details of your flight booking.We may also record telephone calls when you make contact with any of our teams.
Why do we process this Data and what is our lawful basis for doing so?
Our legal basis is our legitimate interest of ensuring we take on and/or address customer feedback received, or where the matter is a complaint, to defend potential legal claims.
Where a response or outcome involves a financial transaction, we keep a record to comply with legal obligations imposed on us by HMRC.
Who will we share this Data with?
We do not generally share this personal data with external recipients but may occasionally share it with our external advisors for the purposes of obtaining advice.
We also share this personal data with our IT service providers, for instance the companies that host our website and Customer Relations Management (CRM) system.
How will this Data be stored?
A CRM system stores the content of the feedback and personal details. We use secure third-party partners to store large documents and photos.
How long will we keep this Data for?
Your Data is held for 5 years
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport (BRS) processes the customer name (title, first and surname), home address including postcode, telephone number, email address, payment card information.
Why do we process this Data and what is our lawful basis for doing so?
To enable us to provide you with access to the Executive Lounge.
We rely on our contractual obligations with you to do so.
If you have consented to receiving marketing emails, please see our Marketing Privacy Notice for details of how we process your Data.
Who will we share this Data with?
We share this data with our third-party partners to process the booking. Your details are also shared with the operator of the Lounge(s), Swissport UK (for arrivals until end April 2023) and CAVU Experiences (EMEA) Limited (for arrivals from 1st May 2023).How long will we keep this Data for?
We retain this Data for 5 years following the date of your most recent Lounge arrival date.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport (BRS) processes the customer name (title, first and surname), home address including postcode, telephone number, email address, payment card information.
Why do we process this Data and what is our lawful basis for doing so?- To register you as a new customer for our services
- To carry out our obligations arising from any contracts entered into between you and us including managing payments, paying refunds or compensation, fees and charges, to process payments and make reservations for our products and services including parking, lounges and Fast Track security
- To provide you with the information, products and services that you request from us including, but not limited to, contacting you about your experience of our airport
- To ask you to leave a review or take a survey
We ask for your consent to receive marketing regarding our products and services.
If you have consented to receiving marketing emails, please see our Marketing Privacy Notice for details of how we process your Data.
Who will we share this Data with?
We share this data with our third-party partners to process the booking.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
How long will we keep this Data for?
We retain this Data for 5 years following the date of your most recent car park booking date.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
We collect your name, contact details, ID proof (eg. driving licence, passport), and DBS certificate.
Why do we process this Data and what is our lawful basis for doing so?- To be able to issue you with an ID pass to access the Critical Part of the airport and other sensitive areas or sensitive data as required by EU and DfT regulations
- To manage and record access permissions
The processing of this data is in the public’s interest and categorised under Public Task.
Who will we share this Data with?Staff ID Pass data will be shared with our internal business partners, only in relation to their own staff, to support operational needs.
This data will not normally be shared externally, except in specific circumstances. External sharing may occur with the Department for Transport or other government bodies, but only when a formal request is made in accordance with their legal powers and on a case-by-case basis.
How long will we keep this Data for?
The data will be kept for the duration of your employment at Bristol Airport or at one of our internal business partners.
How will this Data be stored?
The data will be stored in a secure cloud-based environment.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Name, contact details, educational credentials and qualifications, work history, health information where relevant for example to enable us to make reasonable adjustments for you to be able to attend an interview.
Why do we process this Data and what is our lawful basis for doing so?
To enable us to consider your suitability for a role working for Bristol Airport.
We rely on our legitimate interests to do this.
Who will we share this Data with?
Data is shared with selection panel and recruitment team only. Once offered a role data is shared with our referencing partner, who will in turn share with external agencies such as the police in order to obtain DBS check.
How will this Data be stored?
Data is stored on our external secure cloud-based software provider’s servers, in the UK.
How long will we keep this Data for?
Up to a maximum of 12 months. If you are successful in being offered a job, your data will be processed in line with our Employee Privacy Notice.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport processes the customer name (title, first and surname), home address including postcode and email address.
Why do we process this Data and what is our lawful basis for doing so?
To send a quarterly Local Community Newsletter and also other communication relating to community issues by email to near-by residents in a more sustainable way.
We rely on consent as our lawful basis for processing your data.
Who will we share this Data with?
We share this information with our third-party partners to communicate any updates at the airport with you. We only use third-party partners who provide sufficient guarantees to implement appropriate technical and organisational measures to ensure that they comply with the UK GDPR and we enter into UK GDPR compliant Data Processing Agreements with them.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
How long will we keep this Data for?
We will retain this personal data for 5 years in order for us to continue to send you newsletters and other communication relating to community issues. We will stop sending you newsletters when you unsubscribe.
What are my rights regarding this Data?Under the UK General Data Protection Regulations ((UK) GDPR), you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. You also have rights relating to restriction, data portability and automated decision making, although we do not use automated decision making when sending you newsletters. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at -Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport processes the customer name (title, first and surname), home address including postcode and email address.
Why do we process this Data and what is our lawful basis for doing so?
To enable us to send out a Travel Pass for the Airport Flyer Bus between the airport and the city of Bristol or town of Weston super Mare (and intermediate bus stops).
We rely on our contractual obligations with you as our lawful basis for processing your data.
Who will we share this Data with?
We share this information with our third-party partners to produce your pass.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK or the EU.
How long will we keep this Data for?
Individual records are deleted after one month.
What are my rights regarding this Data?Under the General Data Protection Regulations ((UK) GDPR), you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport processes the customer name (first and surname), organisation name, home address including postcode, phone number and email address.
Why do we process this Data and what is our lawful basis for doing so?
To enable us to consider all applications and subsequently to pay grants to successful applicants for the installation of noise insulation treatments. Where a successful application involves a financial transaction, we keep a record to comply with legal obligations imposed on us by HMRC.To enable us to consider all applications and subsequently to pay grants to successful applicants for community initiatives and projects. Where a successful application involves a financial transaction, we keep a record to comply with legal obligations imposed on us by HMRC.
Our lawful basis for processing your data is our legitimate interest of ensuring we progress all applications. If an application is successful, then our contractual obligations with you becomes our lawful basis for processing your data.
Who will we share this Data with?
We do not generally share this personal data with external recipients but may occasionally share it with our external advisors for the purposes of obtaining advice.
We also share this personal data with our IT service providers, for instance the companies that host our Corporate Social Responsibility System (CSR). The sole purpose of sharing the information with the IT services providers is to enable them to provide their service and we ensure that we enter into GDPR compliant Data Processing Agreements with them.How will this Data be stored?
A CSR system stores the completed applications and personal details. We use secure third-party partners to store large documents and photos.
How long will we keep this Data for?
Individual records are kept for 10 years, in line with standard glazing industry warranties and HMRC requirements.
What are my rights regarding this Data?
Under the UK General Data Protection Regulation ((UK) GDPR), you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. You also have rights relating to restriction, data portability and automated decision making, although we do not use automated decision making when processing applications regarding noise insulation. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Personal Data.
If you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk or you can write to them at –
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Name, contact email address, postal address and details of your use of our services (eg. Bristol Flyer, car park bookings, Executive Lounge, FastTrack), behavioural data, and interests and preferences you tell us about to allow us to tailor our products and offers to you.
Why do we process this Data and what is our lawful basis for doing so?We rely on consent for our lawful basis to process your data. In order to send you email communications which we think is the most relevant to you, we combine the data we hold on you in order to build up a picture of the types of products and services which might be of interest to you in the future. The data used to do this may come from information you have previously shared with us, your past transactions and online behaviour as well as information about our emails you have opened or clicked on.
We process your data for the following purposes:- To send you Bristol Airport communication emails, including airport news, discounts, new routes, airline offers, and shopping and restaurant promotions.
- To make suggestions and recommendations to you about goods, services or content that we feel may interest you
- To notify you about changes to our website, services, terms or privacy policy
- To measure or understand the effectiveness of the communications we serve to you
Who will we share this Data with?
We use our third-party partners to:
- Manage email sign ups
- Distribute communications
- Obtain customer feedback on our services
- Manage and host our websites
- Assist us administering the provision of our services to you
- Assist us with analytics for the improvement and optimisation of our site
- Analyse data on our behalf for our marketing purposes
How long will we keep this Data for?
We will retain this personal data for a period of five years following the most recent interaction, such as subscribing to our emails, or clicking a link, within our emails. We will stop sending you email communications when you unsubscribe, unless it relates to a service or product you have purchased.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
If you no longer wish to receive email communications from us, you may unsubscribe at any time by unsubscribing from the relevant communication channel or by contacting us here. If you choose not to receive this information, we will be unable to keep you informed of new products, services and promotions that may interest you.
Whatever you choose, you'll still receive booking confirmations and information relating to your journey through the airport.
What if I wish to complain?Under the Data Use and Access Act 2025 (which incorporates the UK GDPR), you have the right to complain directly to the controller if you believe your personal data is being processed unlawfully. You may complain by emailing: [email protected]
If you remain dissatisfied with the controller's internal response or their handling of your concerns, you have the further right to lodge a formal complaint with the Information Commission, the UK’s independent regulatory authority.
You can contact the Information Commission on 0303 123 1113 or write to the Information Commission, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
-
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Name, image, email address, social media account username (handle).
Why do we process this Data and what is our lawful basis for doing so?
In order to share images and user-generated content showing customer’s experience of Bristol Airport on Bristol Airport’s social media accounts for social media marketing purposes only.
We rely on your consent to process and share this personal data. We will contact social media users via Bristol Airport social media accounts to request written consent to share images, name and social media username and will only share data you have consented to.
For processing special category data, we will rely on the following conditions under Article 9:
- (a) Explicit consent
- (e) Made public by the data subject
Who will we share this Data with?We will not share the personal data with third parties. We will share images of individuals (including children and disabled persons), social media account username and name with consent on our public-facing social media accounts.
How long will we keep this Data for?
Data posted on our social media accounts in the form of social media posts will remain indefinitely.
A record of contact data (name and email address) and consent will be stored by Bristol Airport for 5 years. You may withdraw your consent at any time by contacting us via social media or email, and we will remove all social media posts and delete associated data.
How will this Data be stored?
Data shared via social media posts will be stored within the social media platforms you have consented to (includes Facebook, X, Instagram, TikTok, LinkedIn). All collected customer data to record consent is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If, however, you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
Bristol Airport (BRS) processes the passenger name and email address.
Why do we process this Data and what is our lawful basis for doing so?
We process this data to complete bookings for passengers wishing to use our Sensory Room within the Terminal building.
Our legal basis for processing the data is Legitimate Interest.
Who will we share this Data with?
We share this data with our third-party partners to process the booking.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
How long will we keep this Data for?
We retain this data for 30 days following the date of your most recent sensory room booking date.What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your data, as well as the right to object to us processing the data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at -
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
When you use Bristol Airport we may collect static or moving imagery via CCTV and Body Worn Video Recorders (BWV). Bristol Airport collects imagery via CCTV & BWV cameras located throughout the airport including car parks, roadways and terminal, in both landside (public) and airside (restricted access) locations.
Why do we process this Data and what is our lawful basis for doing so?
Bristol Airport may use CCTV/BWV for a number of purposes including but not limited to the following:- To maintain the safety and security of the airport for our passengers, colleagues and stakeholders, including but not limited to Control Authorities, national security, detection and prevention of crime and aviation security
- To monitor flows and demand throughout the airport to optimise resourcing and passenger experience
- To support the effective management of the airport operation and any incidents
- For investigative purposes or as evidence to support any formal follow-up to airport incidents
- To provide evidence of regulatory compliance to Department for Transport (DfT) and Civil Aviation Authority (CAA)
- To support improvements to the customer journey
The lawful justification for collecting and using CCTV/BWV is that there are legitimate interests to do so.
CCTV/BWV may be handled and used by the following recipients to maintain a safe, secure and efficient airport operation:- Bristol Airport personnel
- Security personnel (third parties)
- Customer service personnel (third parties)
- Airlines
- Baggage system operators
- Border Force (part of the Home Office)
- Police/security services
- Other Bristol Airport service providers
Who will we share this Data with?
Bristol Airport's CCTV/BWV infrastructure is shared with third parties, including the Police, UK Border Force, and local authorities. CCTV footage, or information derived from such footage, may also be shared with insurance companies as part of incident investigations. Where required, the Police and UK Border Force may take control of CCTV cameras for security and crime prevention purposes under formal data-sharing agreements.
How long will we keep this Data for?
We retain CCTV images for 30 days, unless they are downloaded from our CCTV system within that timeframe, for instance in connection with an incident, access request or to share with relevant authorities.
CCTV images downloaded from the system in connection with an incident will be retained until the investigation and any related claims have been closed.
How will this Data be stored?
The data will be stored on Bristol Airport servers and we will keep your information within Bristol Airport and our trusted third parties except where disclosure is required by law, for example to government bodies, law enforcement agencies or in response to a subject access request.
Your information may very occasionally be processed outside of the UK for the purposes of system maintenance and support or for the purposes of international security and crime prevention.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.It should be understood that although CCTV cameras are present in some areas of Silver Zone parking and the short-term car parks, the purpose of CCTV is not to provide safeguarding for the property of individuals who leave their vehicles there. The main purposes of CCTV are for the prevention and detection of crime and to maintain airport safety.
In the event of incidents of damage or collision, these should be reported to the vehicle's insurance company and footage will only be released to them in their official capacity to investigate.
Where CCTV may exist, it is not appropriate to release footage to individuals as the details of any other vehicle/s or person/s is not permitted to be released under data protection legislation. This information, relating to identifiable individuals or vehicle license registration details, will need to be redacted.
This does not affect your rights to make a CCTV Subject Access Request of your vehicle in our car park, however if you are seeking details of other vehicles this will not result in that information being released.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF -
The data controller for the data is Bristol Airport Limited. For information on how to contact the Data Protection team or request access to your personal data, please visit this page.
What Personal Data do we process?
We collect your IP address and Usage and Technical data from our main Bristol Airport website (www.bristolairport.co.uk) as well as our car park, lounge, fast track and Flyer booking webpages.
If you subsequently make a booking for any of these additional services, your Data is held in line with the Privacy Notices for those services.
Why do we process this Data and what is our lawful basis for doing so?
We collect this Data using “cookies”. Cookies are small text files that are stored on your computer when you use our website. You can read more about how we use cookies on our Cookies Policy.
We collect this Data for the following reasons:- To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
- To use data analytics to improve the Website, products/services, marketing, customer relationships and experiences
- To make suggestions and recommendations to you about goods, services or content that we feel may interest you
We rely on our legitimate interests to do this.
Remarketing Cookies
You may notice that sometimes, after visiting a website, you see increased numbers of adverts from the site you visited. That’s because the website you visited has placed a cookie on your web browser. Using that cookie and web analytic tools, the website owner will be able to show you adverts on third-party websites that they think you might be interested in. This cookie does not give access to your computer or mobile device but may be able to identify you from other details. Bristol Airport sometimes does this.
Google Advertising
Our Website uses Google Advertising to show relevant adverts to visitors who have previously visited us as they browse the web. This enables us to tailor our marketing to better suit your needs and only display ads that are relevant to you. You may see Bristol Airport in search results pages (using Google Adwords), on YouTube, in banner adverts on Gmail and on other services run by Google.
Any information collected will be used in accordance with our Privacy Notices and Google’s Privacy Policy.
If you do not wish to see ads, you can:- Opt out of Google’s use of cookies through Google’s Ads Settings; or
- Refuse the use of cookies by downloading and installing Google Analytics Opt-out Browser Add-on
Facebook Advertising
We also use similar targeted advertising technology to ensure that we only serve people with adverts on their Facebook pages that are relevant to them. To enable us to do this, we include a piece of code on our websites, called the Facebook Pixel. The information collected, for example which pages you visited, which device you used and what actions you took, will be used in accordance with our own privacy policy, as well as Facebook’s privacy policies. The Facebook Pixel only lasts for 60 days. Using the Facebook Pixel, we can also remarket adverts to you through Instagram, which is owned by Facebook. You can set preferences for how Facebook advertises to you using your Facebook ad preferences.
Other Websites
Our site may contain links to other websites which are outside our control and are not covered by this privacy notice. If you access other websites using the links provided, the operators of these websites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours. We do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Internet Based Transfers and Disclaimer
Your privacy and the security of your data matters to us. We use the measures we think are necessary to protect against viruses and other harmful components but the nature of the internet is such that it is impossible to ensure that your access to the Website will be uninterrupted or error-free, or that this Website, its servers or emails which may be sent by us are free of viruses or other harmful components.
Who will we share this Data with?
When you use our websites, we share your anonymized data with our trusted third parties. We use Google Analytics, Google Tag Manager, Google Optimise to track customer behaviour on our websites. HotJar captures web sessions for us to understand customer behaviour.
We also share anonymised data with Facebook and Google. The data shared cannot be viewed by a natural person. They are encrypted data which Facebook and Google may use to provide tailored services to you whilst you use their websites.
We use third party partners to manage email marketing sign ups from the website. You can find out more about our marketing activities by reading our Marketing Privacy Notice.
How long will we keep this Data for?
Our third-party partners retain this Data for up to 5 years on our behalf.
Where Data is processed by way of a cookie, please consult our Cookies Policy for retention information on third party cookies.
How will this Data be stored?
All collected customer data is stored securely on our internal systems and within our third parties’ secure and compliant environments within the UK and the EU.
Where Data is processed by way of a cookie, please consult our Cookies Policy for storage information on third party cookies.
What are my rights regarding this Data?
Under the (UK) GDPR, you are entitled to request access to, or rectification or deletion of your Data, as well as the right to object to us processing the Data. If you wish to exercise any of these rights, please contact us using the details above.
What if I wish to complain?
You can contact us at any time if you have any queries or concerns about the way we process your Data.
If however you are not satisfied with our response, you can contact our Data Protection Officer at here. If you remain dissatisfied, you can contact the Information Commissioner’s Office, whose details are available from their website www.ico.org.uk. Or at:Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF