Privacy Notice

This Privacy Notice tells you what to expect when Heathrow collects personal data from you through the Heathrow Digital Identity (HDI) service. Heathrow is committed to protecting your personal information. Whenever you provide such information we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the General Data Protection Regulation (GDPR).

What information will we collect about you?

To support your account application with us we collect the following information about you:

• name
• work email address
• work user principle name (upn), if applicable

How will Heathrow use the information it collects about me?

Heathrow will use your personal data to meet our obligation as an employer, to meet legal and statutory requirements, to support your ongoing access to Heathrow systems, and to meet other occasional legitimate interests. The specific reasons for collecting and processing your data fall into the following broad categories:

• account generation and maintenance
• access controls
• maintaining a register of HDI accounts that have access to Heathrow services
• notification of changes to Heathrow services

The legal justifications for collecting and using your personal data are that:

• it is necessary for the performance of our employment contract with you, or;
• it is necessary for compliance with our legal obligations, or;
• you have given consent for a specific usage of your data

Your information may be handled and used by the following recipients in order to meet the above obligations:

• third-party IT service suppliers

We will keep your information within Heathrow and our trusted third-parties except where disclosure is required by law, for example, to government bodies and law enforcement agencies.

Please be aware that some of your information will be processed overseas.

How long will Heathrow keep my information?

Your information will be retained indefinitely whilst you are registered via HDI. If you no longer require access to Heathrow services and are removed from HDI, your information will be retained in line with statutory requirements.

Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle.

What rights do I have over my personal data?

Under the General Data Protection Regulation, you have the right to:

• access your personal data by making a subject access request
• rectification, erasure or restriction of your information where this is justified
• object to the processing of your information where this is justified
• data portability

To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:

By email to: privacy@heathrow.com

By post to:

Heathrow Data Protection Officer
Heathrow Airport Ltd
The Compass Centre
Nelson Road
Hounslow, Middlesex
TW6 2GW

Privacy & Cookies

Cookies are small text files which are stored on your computer when you visit certain web pages. At Heathrow we use cookies to understand how our sites are used which helps us to improve your overall online experience. Some of the cookies we use are necessary for some of our sites to work whilst other cookies are used to provide tailored advertising by trusted third parties. The cookies we and our third parties place on your computer do not collect personally identifiable information like your name, address or payment details. To find out more about cookies, visit www.aboutcookies.org

What type of cookies do we use?

Heathrow use the following categories of cookies on our websites:

Strictly necessary – These cookies are essential for certain features of our websites to work for example when you make payments for car parking. These cookies do not record identifiable personal information and we do not need your consent to place these cookies on your device. Without these cookies some services you have asked for cannot be provided.

Performance – These cookies are used to collect anonymous information about how you use our websites. This information is used to help us improve our websites and understand how effective our adverts are. In some case we use trusted third parties to collect this information for us but they only use the information for the purposes explained. By using our websites, you agree that we can place these types of cookies on your device.

Functionality – These cookies are used to provide services or remember settings to enhance your visit for example text size or other preferences. The information these cookies collect is anonymous and does not enable us to track your browsing activity on other websites. By using our websites, you agree that we can place these types of cookies on your device.

Targeting and Advertising – These cookies are used by trusted third parties to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. Information contained in these cookies is anonymous and doesn't contain your personal information. To find out more about cookies used for targeting and advertising follow www.youronlinechoices.com and www.networkadvertising.org or contact us at website_feedback@heathrow.com for further information about the trusted third parties we use.

Managing cookies

If you'd prefer to restrict, block or delete cookies from Heathrow and our third-party advertisers, or any other website, you can use your browser to do this. Each browser is different, so check the 'Help' menu of your particular browser to learn how to change your cookie preferences. If you choose to disable all cookies we cannot guarantee the performance of our websites and some features may not work as expected.

Changes to this Privacy Notice

We will keep this Privacy Notice under regular review. This Privacy Notice was last updated in March 2019.