London Luton Aiport Operations Limited's Privacy Notice

You have the right to:

Request access to your personal data (commonly known as a “data subject access request”). You can get a copy of the personal data we hold about you and check that we are processing it lawfully.

Request correction of the personal data that we hold about you. You can have any incomplete or inaccurate data we hold about you corrected, though we may need to check that any new data you provide to us is accurate.

Request erasure of your personal data (commonly known as “the right to be forgotten”). You can ask us to delete or remove personal data where there is no good reason for us to still be processing it. There are sometimes legal reasons why we can’t comply with your request of erasure, which we will explain at the time if they apply.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which means that the processing impacts on your fundamental rights and freedoms. Sometimes we will have a reason for processing which overrides your objection, but if that is the case we will explain what that is. You also have the right to object without giving a reason, where we are processing your personal data for direct marketing purposes.

Request restriction of processing of your personal data. You can ask us to stop processing your personal data if:

1. you want us to check that it’s accurate;
2. our use of the data is unlawful but you don’t want us to erase it;
3. you need us to hold the data for longer than normal, to help you to bring or defend legal claims; or
4. you have made an objection to our use of your data which we are looking into.

Request the transfer of your personal data to you or to a third party. You can ask for us to provide your personal data in a structured, commonly used, machine-readable format if it’s being processed automatically on the basis of your consent or to perform a contract with you.

Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If that has an impact on the services we can offer to you, we will explain that at the time.

Complain to the ICO if you are not satisfied with any aspect of our handling of your personal data. Contact details for the ICO can be found here: https://ico.org.uk/make-a-complaint/ or by calling their helpline (0303 123 1113), but we would always appreciate being given a chance to resolve the problem first, if we can.

LLA is the controller for the personal information we process, unless otherwise stated. You can contact us by email at [email protected] or via our postal address: London Luton Airport, Percival House, 134 Percival Way, Luton, Bedfordshire LU2 9NU. If you write to us at our postal address, please mark your envelope ‘Customer Services Department’.

Our Data Protection Officer The DPO Centre Ltd. You can contact the DPO Centre at [email protected] or via their postal address: The DPO Centre Ltd, 50 Liverpool Street, London, EC2M 7PR.

How we collect your data

We collect your personal data by collecting ‘cookies’ when you visit our website or when you submit any information to us using our website (including if you subscribe to our newsletter, enter a competition, complete any form, create a user account, submit feedback or register for an event on our website). For more information on which types of cookies we use, please see our cookies policy here.

What data will we collect

If you create a user account with us on our website, we will collect your title, name, gender, date of birth, nationality, details of any special assistance requirements you may have, your country of residence, contact telephone number, postcode, intended travel dates and flight numbers.

Why we need your data

1. identifying and resolving any errors with our website’s performance;
2. analysing visitor information (including browser information and returning visitor numbers) to help improve the performance of the website and tailor adverts and information to you appropriately (including travel information for your planned journeys);
3. to permit your access and use of a user account, if you register for one on our website;
4. to provide you with offers and discounts from us and third parties;
5. to permit your participation in competitions we offer;
6. to ensure certain features of our website work correctly;
7. to monitor the effectiveness of our advertising;
8. to contact you with marketing materials (if you have provided your consent for us to do so); and
9. to contact you to seek your feedback on our website or your experience at the Airport; and
10. to comply with our legal obligations.

1. in respect of any marketing materials we may send you, based on your consent for us to do so;
2. in respect of any competition or event you register for, our legitimate interest in running the competition or event;
3. in respect of any our discounts or offers which you seek to use, our legitimate interest in providing such discount or offer to you correctly or permitting a third party to do so;
4. in respect of forms and feedback you submit in relation to the Airport, based on our legitimate interest in dealing with your comments and queries and the administration of the Airport;
5. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
6. in all other circumstances, including in connection with any user account you register with us, based on our legitimate interest in providing a functioning, secure, relevant and easy to navigate website to you.

What we do with your data

1. our sub-contractors for the purposes of improving and maintaining our website;
2. our sub-contractors (including Zeus Enterprise Limited trading as Yieldify and Google) for the purposes of analysing your browsing behaviour when you visit our website and tailoring adverts and information to you;
3. our cookie suppliers/third party developers for the purpose of monitoring and improving the performance of our website;
4. our sub-contractors (including Zeus Enterprise Limited trading as Yieldify) for the purposes of sending marketing materials to you (provided you have consented for us to send marketing materials to you); and
5. any persons we are required to provide such personal data to in order to comply with the law.

How long we keep your data

Your personal data which we use for marketing purposes will be kept with us securely until you notify us that you no longer wish to receive marketing material from us. We will keep all data you have provided in connection with a user account you have registered with us, until either you or we close that user account (except if we are communicating with you in connection with your account, in which case, we will keep such data until we have completed the purpose of our communications). We will keep all other data we collect about you for 12 months after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency). 

Any bookings you make for flights, holidays or train services using our website are directed to, and processed by, the airline or operator who will provide the service to you. We do not collect your personal data in connection with the sale of flights, holidays or train bookings. Please refer to the privacy policy or notices of the relevant airline or operator if you wish to know how they handle your personal data.

This section of this notice applies to you if you purchase car parking at the Airport online using our website, the website of one of our sales agents, or from one of our ticket machines at the Airport.  

How we collect your data

We collect your personal data by asking you to submit information to us during our (or our sales agent's) online order process or whilst using one of our ticket machines at the Airport.

What data will we collect

We may collect your name, address, flight information, contact telephone number, email address, payment details and car registration number.

Why we need your data

We need to know your personal data for the purposes of:

1. providing you with access to our car parks;
2. charging you the correct amount for using our car parks;
3. maintaining security within the Airport;
4. ensuring the orderly administration and operation of the Airport;
5. investigating incidents occurring at the Airport;
6. to contact you with information in respect of your booking;
7. to contact you with marketing materials (if you have provided your consent for us to do so);
8. to tailor our adverts to you on third party websites;
9. dealing with any complaints or enquiries you make;
10. to contact you to seek your feedback on our car parking services or your experience at the Airport; and
11. to comply with our legal obligations.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone

The lawful basis for our processing of your personal data is based on our performance of our contract with you to provide car parking at the Airport except:

1. where we utilise your data to investigate incidents occurring at the Airport, ensure the orderly administration of the Airport or deal with any complaints or enquiries you may have (which shall be based on our legitimate interest in correctly maintaining and administering Airport operations);
2. where we send marketing materials to you (which shall be based on your consent for us to do so);
3. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
4. where we tailor adverts on third party websites to you (which shall be based on our legitimate interests in improving the efficacy of our third party advertising).  

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our subcontractors for the purposes of managing our car parks and access to the Airport;
2. our subcontractors for the purposes of processing and taking payment;
3. our subcontractors for the purposes of sending marketing materials to you (provided you have consented for us to send marketing materials to you);
4. our subcontractors (including Google and 8 Million Stories Limited) for the purposes of analysing your browsing behaviour when you visit our website and tailoring advertisements and information to you;
5. our subcontractors (including Ethos Farm Limited) for the purposes of contacting you to seek your feedback on our car parking services or your experience at the Airport;
6. our regulators for the purpose of demonstrating compliance with our legal obligations;
7. law enforcement agencies for the purposes of their investigations;
8. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties (except where we transfer data to Google, in which case the data may be transferred to servers located outside of the UK). Where we transfer data outside of the UK we will only do so if we are satisfied the transfer complies with data protection law, appropriate safeguards are in place, and that enforceable rights and effective legal remedies are available for data subjects. We do not use personal data in connection with any automated decision making.

How long we keep your data

Your personal data which we use for marketing purposes will be kept with us securely until you notify us that you no longer wish to receive marketing material from us. We will keep all other data we collect about you for 24 months following the date on which your car park booking is due to end. After that 24 month period, we will retain anonymised data relating to your car park booking, but will delete all data from which you can be identified (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency).

This section of this notice applies to you if you use the Express Drop Off at the Airport, or you pay for charges incurred in connection with your use of the Express Drop Off through https://lutondropoff.apcoa.com

How we collect your data

We collect your personal data by using video surveillance equipment which records registration numbers of vehicles at the Airport, from records provided to us by the DVLA and from the information you provide to us when you set up a payment account, or make payment of charges, on https://lutondropoff.apcoa.com.

What data will we collect

We may collect your name, address, email address, image, contact telephone number, email address, payment details, Express Drop Off access times and dates and car registration number, and still images of you, your vehicle and your number plate.

Why we need your data

We need to know your personal data for the purposes of:

1. charging you for your use of the Express Drop Off (including through any payment account you set up at https://lutondropoff.apcoa.com);
2. taking enforcement action against you (including issuing Parking Charge Notices to you) in accordance with our general terms of use at https://www.london-luton.co.uk/lla-terms;
3. to contact you with marketing materials (if you have provided your consent for us to do so);
4. permitting or restricting access to certain parts of the Airport;
5. maintaining security within the Airport;
6. ensuring the orderly administration and operation of the Airport;
7. investigating incidents occurring at the Airport; and
8. dealing with any complaints or enquiries you make; and
9. to comply with our legal obligations.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is based on our performance of our contract with you to provide access to the Express Drop Off at the Airport except:

1. where we utilise your data to investigate incidents occurring at the Airport, to maintain security at the Airport, to ensure the orderly administration of the Airport or deal with any complaints or enquiries you may have (which shall be based on our legitimate interest in correctly maintaining and administering Airport operations);
2. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
3. where we send marketing materials to you (which shall be based on your consent for us to do so).

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our subcontractors (including APCOA Parking (UK) Limited) for the purposes of managing the Express Drop Off, collecting the payment of Express Drop Off charges and taking enforcement action (including issuing Parking Charge Notices) in accordance with our general terms of use at https://www.london-luton.co.uk/lla-terms;
2. our subcontractors for the purposes of sending marketing materials to you (provided you have consented for us to send marketing materials to you);
3. our subcontractors (including Google and 8 Million Stories Limited) for the purposes of analysing your browsing behaviour when you visit our website and tailoring advertisements and information to you;
4. our subcontractors (including Ethos Farm Limited) for the purposes of contacting you to seek your feedback on our car parking services or your experience at the Airport;
5. our regulators for the purpose of demonstrating compliance with our legal obligations;
6. law enforcement agencies for the purposes of their investigations;
7. third parties operating at the Airport (including concessionaires, airlines, groundhandlers, the police and APCOA Parking (UK) Limited) for the purpose investigating incidents occurring at the Airport and/or maintaining the secure operation of the Airport and/or maintaining the orderly administration of the Airport and/or dealing with any complaints or enquiries you have; and
8. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties (except where we transfer data to Google, in which case the data may be transferred to servers located outside of the UK). Where we transfer data outside of the UK we will only do so if we are satisfied the transfer complies with data protection law, appropriate safeguards are in place, and that enforceable rights and effective legal remedies are available for data subjects. We do not use personal data in connection with any automated decision making.

How long we keep your data

Your personal data which we use for marketing purposes will be kept with us securely until you notify us that you no longer wish to receive marketing material from us.

If we take enforcement action against you, or you and we are otherwise involved in any legal action, we will keep your personal data until that enforcement action or legal action has finally concluded. In all other circumstances:

1. we will keep ANPR images for a period of 3 months after collection;

2. we will keep your vehicle registration number for 24 months after collection;

3. we will keep personal information submitted in connection with an account you set up with us at https://lutondropoff.apcoa.com for a period of 24 months from the last date on which either you accessed your account or it was used to pay Express Drop Off charges; and

4. we will keep personal data you submit in connection with a guest payment you make on https://lutondropoff.apcoa.com (without setting up an account) for a period of 12 months;

unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency

This section of this notice applies to you if you purchase a Fast Track Security pass online using our website, the website of one of our sales agents, or when you visit our Airport terminal building.

How we collect your data

We collect your personal data by asking you to submit information to us during our (or our sales agent's) order process (either online through our website or using one of our ticket machines located in our Airport terminal building).

What data will we collect

We will collect your flight number, name, email and postal address, contact telephone number and payment details.

Why we need your data

We need to know your personal data for the purposes of:

1. providing you with access to our Fast Track Security lane;

2. charging you the correct amount for using our Fast Track Security lane;

3. maintaining security within the Airport;

4. ensuring the orderly administration and operation of the Airport;

5. investigating incidents occurring at the Airport;

6. to contact you with information in respect of your booking;

7. to contact you with marketing materials (if you have provided your consent for us to do so);

8. dealing with any complaints or enquiries you make; and

9. to contact you to seek your feedback on our Fast Track Security lane or your experience at the Airport.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.

The lawful basis for our processing of your personal data is:

1. in respect of any marketing materials we may send you, based on your consent for us to do so;
2. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
3. in all other circumstances, based on our performance of our contract with you to provide access to the Fast Track Security lane at the Airport.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our subcontractors for the purposes of managing security at the Airport;
2. to our subcontractors and sales agents for the purposes of processing your orders and collecting your payment;
3. our subcontractors for the purposes of sending marketing materials to you (provided you have consented for us to send marketing materials to you);
4. our regulators for the purpose of demonstrating compliance with our legal obligations;
5. law enforcement agencies for the purposes of their investigations; and
6. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

Your personal data which we use for marketing purposes will be kept with us securely until you notify us that you no longer wish to receive marketing material from us. We will keep all other data we collect about you for 24 months following the date you are due to use the Fast Track Security lane after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency). 

This section of this notice applies to you if you use our Prebook Security service online using the website of our subcontractor Copenhagen Optimization APS (which is accessible from our website).

How we collect your data

We collect your personal data by asking you to submit information to our subcontractor during our Prebook Security service booking process.

What data will we collect

We will collect your flight number, destination, email address, flight time, time slot you book to access Prebook Security service, and the total number of people you book to access our security lanes.

Why we need your data

We need to know your personal data for the purposes of:

1. providing you with access to our security lanes during the time slot you book using our Prebook Security service;

2. maintaining security within the Airport;

3. ensuring the orderly administration and operation of the Airport;

4. investigating incidents occurring at the Airport;

5. to contact you with information in respect of your booking;

6. to contact you with marketing materials (if you have provided your consent for us to do so);

7. dealing with any complaints or enquiries you make; and

8. to contact you to seek your feedback on our Prebook Security service or your experience at the Airport.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.

The lawful basis for our processing of your personal data is:

1. in respect of any marketing materials we may send you, based on your consent for us to do so;

2. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and

3. in all other circumstances, based on our performance of our contract with you to use our Prebook Security service at the Airport.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our subcontractors for the purposes of providing and administering the Prebook Security booking platform;

2. our subcontractors for the purposes of managing security at the Airport;

3. to our subcontractors and sales agents for the purposes of processing your orders and collecting your payment;

4. our subcontractors for the purposes of sending marketing materials to you (provided you have consented for us to send marketing materials to you);

5. our regulators for the purpose of demonstrating compliance with our legal obligations;

6. law enforcement agencies for the purposes of their investigations; and

7. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3rd parties, except to countries within the European Union where our subcontractors are based. We do not use personal data in connection with any automated decision making.

How long we keep your data

Your personal data which we use for marketing purposes will be kept with us securely until you notify us that you no longer wish to receive marketing material from us. We will keep all other data we collect about you until the date on which your booking for Prebook Security is due to take place after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency).

This section of this notice applies to you if you purchase executive lounge access online using our website.

How we collect your data

We collect your personal data by asking you to submit information to us during our online order process.

What data will we collect

We will collect your flight number, name, email and postal address, contact telephone number and payment details.

Why we need your data

We need to know your personal data for the purposes of:

1. booking your access to the executive lounge (which is provided by our executive lounge provider);

2. charging you the correct amount for access to the executive lounge (on behalf of the executive lounge provider);

3. maintaining security within the Airport;

4. ensuring the orderly administration and operation of the Airport;

5. investigating incidents occurring at the Airport;

6. to contact you with information in respect of your booking;

7. to contact you with marketing materials (if you have provided your consent for us to do so);

8. dealing with any complaints or enquiries you make; and

9. to contact you to seek your feedback on the executive lounge you use or your experience at the Airport.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone

The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances based on our performance of the contract between you and the executive lounge provider to provide access to the executive lounge. 

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our executive lounge provider for the purpose of providing the executive lounge service;
2. our subcontractors for the purposes of managing security at the Airport;
3. to our subcontractors or sales agents for the purposes of processing your order and collecting your payment;
4. our subcontractors for the purposes of sending marketing materials to you (provided you have consented for us to send marketing materials to you);
5. our regulators for the purpose of demonstrating compliance with our legal obligations;
6. law enforcement agencies for the purposes of their investigations; and
7. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

Your personal data which we use for marketing purposes will be kept with us securely until you notify us that you no longer wish to receive marketing material from us. We will keep all other data we collect about you for up to 24 months following the date you are due to use the executive lounge after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency). 
 

This section of this notice applies to you if you register to use our WiFi at the Airport

How we collect your data

We collect your personal data when you complete our WiFi registration form if you connect to our wireless internet connection through your mobile phone, laptop computer or other electronic device at the Airport.

What data will we collect

When you submit your details on our WiFi registration form, we collect your name, email address, flight number, the MAC address of your electronic device and details of the browser you use to access our website,

Why we need your data

We need to know your personal data for the purposes of

1. providing access to our WiFi connection;
2. preventing misuse of our WiFi connection;
3. analysing visitor information (including browser information) to help improve the performance of our WiFi and to tailor adverts and information we provide to you appropriately;
4. to contact you with marketing materials (if you have provided your consent for us to do so); and
5. to contact you to seek your feedback on our WiFi or your experience at the Airport.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any marketing materials we may send you, based on your consent for us to do so; and
2. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
3. in all other circumstances, based on our legitimate interest in providing a functioning, relevant and easy to use WiFi connection which is not misused.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our sub-contractors (including Virgin Media Business Limited) for the purposes of operating, improving and maintaining our WiFi;
2. our subcontractors for the purposes of sending marketing materials to you (provided you have consented for us to send marketing materials to you); and
3. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

Your personal data which we use for marketing purposes will be kept with us securely until you notify us that you no longer wish to receive marketing material from us. We, and Virgin Media Business Limited, will keep all other data we collect about you for 12 months after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency).

This section of this notice applies to you if you use submit any complaint or enquiry to us, or you correspond with us or meet with us.

How we collect your data

We collect the personal data you submit to us when you write to us, speak with us, meet with us or submit a noise complaint using our flight tracking system on our website.

What data will we collect

We may collect your name, date of birth, telephone numbers, email address, address, signature, photographic images, vehicle registration numbers, dates of attending the Airport, flight number, payment details, proofs of identification (including passports, driving licences etc), medical records, details of incidents you are involved in or witness, your correspondence history with us.

Why we need your data

We need to know your personal data for the purposes of

1. corresponding with you;
2. arranging and administering meetings;
3. investigating and recording incidents, enquiries or complaints;
4. safeguarding our staff, you and other persons;
5. maintaining the safe and secure ongoing operation of the Airport; and
6. demonstrating compliance with our legal obligations to our regulators.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in dealing with your complaint or correspondence.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our sub-contractors for the purposes of investigating an incident, enquiry or complaint;
2. our sub-contractors for the purposes of arranging and administering meetings;
3. our sub-contractors, law enforcement agencies, public bodies and charitable organisations for the purposes of safeguarding our staff, you and other persons;
4. our sub-contractors, law enforcement agencies and public bodies for the purposes of maintaining the safe and secure operation of the Airport.
5. airlines, concessionaires or any other party operating at the Airport to which a complaint or enquiry relates for the purposes of their answering or addressing such complaint or enquiry;
6. our regulators for the purpose of demonstrating compliance with our legal obligations;
7. our insurers or solicitors for the purpose of dealing with any potential legal claims;
8. law enforcement agencies for the purposes of their investigations; and
9. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We may keep the data we collect about you for up to 12 months unless:

1. we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency;
2. the data relates to a potential legal claim in respect of personal injury, in which case we may keep such data for up to 3 years;
3. the data relates to any other legal claim; in which case we may keep such data for up to 6 years;
4. the data relates to noise complaints, in which case we may keep such data for up to 4 years; or
5. there are ongoing legal proceedings in respect of which the data is relevant, in which case we may keep the data for the duration of such legal proceedings.

After the applicable time period set out above the data will be destroyed.

This section of this notice applies to you if you are involved in a security or safety incident, or accident, at the Airport which relates to:

1. personal injury;
2. breach of any health and safety requirements;
3. breach of any security requirements;
4. loss, damage or theft of property; or
5. breach of any laws (including the Airport byelaws).

How we collect your data

We collect your personal data by asking you to provide your details following a security or safety incident, or accident, by asking you to fill out a written form. We may also collect your data from CCTV footage, images, or data about you we may hold in relation to your travel, or from other people such as Airport staff or witnesses to any safety incident, or accident, at the Airport. 

What data will we collect

We may collect your name, address, occupation, contact telephone number, email address, age, date of birth, medical conditions, details of any injuries, a physical description of you, photographs of you, CCTV images of you, and a description of your activities whilst at the Airport.

Why we need your data

We need to know your personal data for the purposes of:

1. maintaining security within the Airport;
2. maintaining the health and safety of persons at the Airport;
3. ensuring the orderly administration and operation of the Airport;
4. investigating accidents and incidents occurring at the Airport;
5. dealing with any complaints or enquiries you make;
6. dealing with any legal claims which arise following an accident or incident at the Airport;
7. to fulfil our regulatory reporting requirements to our regulators; and
8. undertaking safety training of persons working at, or visiting, the Airport.

The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in safely and securely administering the Airport.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our sub-contractors for the purposes of investigating an accident or incident;
2. airlines, concessionaires, groundhandlers or any other party operating at the Airport for the purposes of:
   1. investigating the accident or incident;
   2. dealing with the accident or incident if they are responsible for the accident or incident; or
   3. undertaking disciplinary proceedings in respect of persons working at the Airport;
3. our insurers or solicitors for the purpose of dealing with any potential legal claims;
4. our regulators for the purpose of demonstrating compliance with our legal obligations;
5. law enforcement agencies for the purposes of their investigations;
6. persons working at, or visiting, the Airport for the purpose of undertaking safety training; and
7. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We may keep the data we collect about you for up to 12 months unless:

1. we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency; or
2. the data relates to a potential legal claim in respect of personal injury, in which case we may keep such data for up to 3 years; or
3. the data relates to any other legal claim; in which case we may keep such data for up to 6 years; or
4. there are ongoing legal proceedings in respect of which the data is relevant, in which case we may keep the data for the duration of such legal proceedings.

After the applicable time period set out above the data will be destroyed.

This section of this notice applies to you if you visit the Airport.  

How we collect your data

We collect your personal data by using closed circuit television cameras, body worn cameras and other video surveillance equipment.

What data will we collect

We will collect moving and still images of you whilst you are present at the Airport.

Why we need your data

We need to know your personal data for the purposes of:

1. maintaining security within the Airport;
2. maintaining the health and safety of persons at the Airport;
3. ensuring the orderly administration and operation of the Airport;
4. investigating incidents occurring at the Airport;
5. dealing with any complaints or enquiries you make; and
6. undertaking safety training of persons working at, or visiting, the Airport.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone

The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in safely and securely administering the Airport.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our sub-contractors for the purpose of operating parts of the Airport (including APCOA Parking (UK) Limited);

2. our sub-contractors for the purposes of investigating an accident or incident;

3. airlines, concessionaires or any other party operating at the Airport for the purposes of:

   1. investigating the accident or incident;

   2. dealing with the accident or incident if they are responsible for the accident or incident; or

   3. undertaking disciplinary proceedings in respect of persons working at the Airport;

4. our insurers or solicitors for the purpose of dealing with any potential legal claims;

5. our regulators for the purpose of demonstrating compliance with our legal obligations;

6. law enforcement agencies for the purposes of their investigations;

7. persons working at, or visiting, the Airport for the purpose of undertaking safety training; and

8. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We may keep the data we collect about you for up to 3 months unless:

1.  we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency; or

2. the data relates to a potential legal claim in respect of personal injury, in which case we may keep such data for up to 3 years; or

3. the data relates to any other legal claim; in which case we may keep such data for up to 6 years; or

4. there are ongoing legal proceedings in respect of which the data is relevant, in which case we may keep the data for the duration of such legal proceedings.

After the applicable time period set out above the data will be destroyed.

This section of this notice applies to you if you visit the Airport by vehicle. If you use our Express Drop Off at the Airport, please see the section above in respect of the personal data we collect and use in connection with that use.  

How we collect your data

We collect your personal data by using video surveillance equipment which records registration numbers of vehicles at the Airport.

What data will we collect

We will collect still images of you, your vehicle and your number plate, and record the registration number of your vehicle. 

Why we need your data

We need to know your personal data for the purposes of:

1. charging for entry and exit to certain parts of the Airport (including to car parks and passenger collection and drop off points);
2. taking enforcement action against you (including issuing Parking Charge Notices to you) in accordance with our terms of use;
3. permitting or restricting access to certain parts of the Airport;
4. maintaining security within the Airport;
5. ensuring the orderly administration and operation of the Airport;
6. investigating incidents occurring at the Airport;
7. dealing with any complaints or enquiries you make.

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on it being necessary to perform our contract with you permitting the use of a vehicle at the Airport (as set out in the terms and conditions displayed at the Airport).

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our subcontractors for the purposes of managing access to the Airport and car parking;
2. law enforcement agencies for the purposes of their investigations or our regulators for the purpose of demonstrating compliance with our legal obligations; and
3. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep the data we collect about you for 12 months after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency). 

This section of this notice applies to you if you use our security lanes at the Airport.  

How we collect your data

We collect your personal data by:

1. asking you to present your boarding pass to our security officers;
2. tracking your movement using facial and body recognition systems;
3. taking a photograph and x-ray scan of items you place in our x-ray scanners; and
4. undertaking a body scan.
5. if you refuse to undertake a body scan, asking you for your details and your reasons for refusing a body scan.

What data will we collect

We may collect your name, access date and time, gate number, flight number, passport number, destination, assign you a unique identifying number, boarding pass, a photograph of your face and body, a photograph and x-ray image of items in your possession (which may include photographic images of baggage tags which may contain names, addresses, email addresses and telephone numbers and other personal information you have included), a scan of your body (although please note that no image of your body is created; software processes the scan data automatically and indicates the areas that need to be checked by highlighting them on a generic mannequin diagram), your reasons for your refusal to undertake a body scan (which may include medical information you provide) and your signature.

Why we need your data

We need to know your personal data for the purposes of:

1. maintaining security within the Airport;
2. maintaining the health and safety of persons at the Airport;
3. ensuring the orderly administration and operation of the Airport;
4. investigating incidents occurring at the Airport;
5. analysing passenger flows through our security lanes for the purpose of forecasting future passenger numbers to ensure sufficient resources are available to cope with demand;
6. monitoring and improving queue times in our security lanes;
7. demonstrating compliance with our legal obligations to our regulators;
8. dealing with any complaints or enquiries you make.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.

The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in safely and securely administering the Airport.

If you provide us with a medical reason for refusing to undertake a body scan, the additional lawful basis for us processing such special category data is based on a substantial public interest in meeting our regulatory requirements and in protecting the public.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our regulators for the purpose of demonstrating compliance with our legal obligations;
2. law enforcement agencies for the purposes of their investigations; and
3. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep the data we collect about you for up to 12 months following your use of the security lane except in respect of:

1. facial and body recognition photographs which are retained only for a short period (whilst being processed by software) before being deleted;
2. photographs and x-rays of items you place in our x-ray scanners, which are stored for up to 30 days;
3. the results of body scans, which are retained only for a short period (usually no longer than 10 minutes) during which a security officer checks the results; and
4. your personal data which we collect if you refuse a body scan, which is retained for a period of 24 hours.

Except that if we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency.

After the applicable time period set out above the data will be destroyed.

This section of this notice applies to you if you apply for or are provided with an ID card by us.

How we collect your data

We collect your personal data by asking you to submit information to us during your application for an ID card, from the information we obtain in the course of our operations whilst you hold an ID card (including in respect of your conduct and behaviour at the Airport) and from third parties we contact, or who contact us, in connection with your suitability to hold an ID card and/or work at the Airport.

What data will we collect

We may collect your name, telephone numbers, date of birth, email address, address, signature, photographic images, vehicle registration numbers, national insurance number, nationality, place of birth, work history (including employer/business details, dates of engagements, periods of unemployment and job titles), proofs of identification (including passports, driving licences etc), criminal records, arrest or criminal investigation details, current job title and employer/business details; names of educational establishments and years of attendance, and other biographical details which may affect your suitability to hold an ID card (including details of your past behaviours, or incidents you were involved in).

Why we need your data

We need to know your personal data for the purposes of:

1. maintaining security within the Airport;
2. maintaining the health and safety of persons at the Airport;
3. ensuring the orderly administration and operation of the Airport;
4. investigating incidents occurring at the Airport; and
5. demonstrating compliance with our legal obligations to our regulators.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in safely and securely administering the Airport.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our subcontractors (including IDGateway Limited) for the purpose of administering our identification pass application system;
2. our regulators for the purpose of demonstrating compliance with our legal obligations;
3. law enforcement agencies for the purposes of their investigations; or our investigations;
4. third parties for the purposes of our investigations (including in respect of determining your suitability to hold an ID card); and
5. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep the data we collect about you for 12 months following the date of your application for an ID card, or if an ID card is issued to you, 12 months after the expiry date printed on your ID card at which time it will be destroyed unless:

1. we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or any law enforcement agency; or
2. the information would permit or require us to refuse an application submitted by you for an ID card in the future, in which case we will keep it for the duration of your lifetime.

After the applicable time period set out above the data will be destroyed.

This section of this notice applies to you if you use an ID card to access any secure areas at the Airport.  

How we collect your data

We collect your personal data by recording when you use your ID card to access a secure area at the Airport.

What data will we collect

We collect your name and access date and time.

Why we need your data

We need to know your personal data for the purposes of:

1. maintaining security within the Airport; and
2. investigating incidents occurring at the Airport.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in safely and securely administering the Airport.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. law enforcement agencies for the purposes of their investigations;
2. our regulators for the purpose of demonstrating compliance with our legal obligations
3. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep the data we collect about you for up to 12 months after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency).
 

This section of this notice applies to you if you use our chaplaincy services or volunteer to assist with our chaplaincy services.  

How we collect your data

We collect the personal data you submit to us when you write to us or speak with us.

What data will we collect

We may collect your name, religious faith, occupation, telephone numbers, email address, address or post code, signature and details of your personal circumstances, bank account details and payment details.

Why we need your data

We need to know your personal data for the purposes of

1. corresponding with you;
2. organising volunteer assistance in connection with our chaplaincy services;
3. accepting any financial donations or facilitating assistance you agree to provide to us;
4. providing you with any financial assistance we have agreed to provide you;
5. to ensure you are treated appropriately and safely by us;
6. to contact you with marketing materials (if you have provided your consent for us to do so); and
7. dealing with any complaints or enquiries you make.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in providing our chaplaincy services to you and to other persons (and, in respect of any marketing materials we may send you, your consent for us to do so).

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. law enforcement agencies for the purposes of their investigations;
2. our regulators for the purpose of demonstrating compliance with our legal obligations; and
3. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

Your personal data that we use for marketing purposes or in connection with volunteering will be kept with us securely until you notify us that you no longer wish to receive marketing material from us. If you are a vulnerable adult or a child, we will keep written records of our assistance to you for a period of 75 years. If you have volunteered to assist the Chaplaincy, we will retain your contact details until you inform us you no longer wish to provide volunteer assistance to the Chaplaincy. We will keep all other data we collect about you for 2 years after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency). 
 

This section of this notice applies to you if you work for an organisation other than LLA and are a stakeholder in the operation of the Airport (such as representatives of the police, fire service, concessionaires, airlines, contractors etc).  

How we collect your data

We collect your personal data by requesting it from you or your organisation you are engaged by.

What data will we collect

We may collect your name, email address, contact number and job title.

Why we need your data

We need to know your personal data for the purposes of:

1. maintaining an up to date crisis communication plan;
2. responding to emergencies at the Airport;
3. maintaining security within the Airport;
4. maintaining the health and safety of persons at the Airport; and
5. ensuring the orderly administration and operation of the Airport.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in safely and securely administering the Airport.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our regulators to demonstrate compliance with our legal obligations;
2. law enforcement agencies for the purposes of their investigations;
3. other stakeholders for the purpose of coordinating action in the event of an emergency or other incident at the Airport; or
4. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep the data we collect about you for the period you continue to be a stakeholder at the Airport which is usually your period of engagement with the organisation you work for at the Airport (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency). After the applicable time period your data will be destroyed

This section of this notice applies to you if you arrange to attend any events, meetings or training at the Airport run by us, or you are required to undertake any online training run by us (or on our behalf).

How we collect your data

We collect the personal data which you, or a third party you work for, submit to us:

1. when we are contacted in connection with an event, meeting or training run by us at the Airport which you wish to attend;
2. when we arrange for you to undertake online training run by us (or on our behalf); and
3. when you participate in an event, meeting or training run by us (or on our behalf).

What data will we collect

We may collect your name, occupation, date of birth, telephone numbers, email address, address, signature, medical and dietary requirements, vehicle registration numbers, dates of attending the Airport, payment details and proofs of identification (including passports, driving licences etc). If you participate in a public entertainment event at the Airport, we may collect video and audio recordings of you, or still images of you, during your participation in the public entertainment event.

Why we need your data

We need to know your personal data for the purposes of

1. corresponding with you;
2. permitting you access to certain areas within the Airport or to our online training;
3. keeping a record of the training you have undertaken;
4. running the event, meeting or training you attend or participate in;
5. demonstrating compliance with our legal obligations to our regulators;
6. maintaining security within the Airport;
7. maintaining the health and safety of persons at the Airport;
8. ensuring the orderly administration and operation of the Airport; and
9. if you have participated in a public entertainment event at the Airport, to undertake that event and publicise it (including on our social media feeds, in our advertising and marketing materials and on displays within the Airport).

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.

The lawful basis for our processing of your personal data is:

1. in respect of any marketing materials we may send you, your consent for us to do so;
2. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so;
3. in respect of personal data required to give you access to our online training, either your consent to do so (which you may have given to the third party you work for, if they provide us with your personal data) or our legitimate interests in running the online training; and
4. in all other circumstances based on our legitimate interest in (i) running the event, meeting or training you are attending, and, (ii) in respect of a public entertainment event, publicising it.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our sub-contractors or affiliate charitable organisations for the purposes of running on our behalf the event, meeting or training you are attending or undertaking;
2. our regulators for the purpose of demonstrating compliance with our legal obligations;
3. law enforcement agencies for the purposes of their investigations;
4. if you have participated in a public entertainment event at the Airport, our sub-contractors for the purpose of running that event and publicising it; or
5. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

If you participate in a public entertainment event at the Airport, we will keep the data we collect about you no longer than 12 months after that public entertainment event. We will keep data we collect about you in connection with our online training for the duration you hold one or more identity cards issued by us. We will keep all other data we collect about you until you have attended the relevant event, meeting or training at the Airport (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency). After the applicable time period your data will be destroyed.

This section of this notice applies to you if you enter any competitions or prize draws run by us. 

How we collect your data

We collect the personal data you submit to us when you enter any competition or prize draw run by us.

What data will we collect

We may collect your name, date of birth, gender, personal interests and preferences, images or recordings of you, address, postcode, telephone number, personal identification document details, email address, social media account usernames, vehicle registration, flight information and/or payment details.

Why we need your data

We need to know your personal data for the purposes of

1. corresponding with you;
2. running the competition or prize draw;
3. providing any prizes to the winner(s) of the competition or prize draw;
4. publicising the winner(s) of the competition or prize draw on LLA’s website, through LLA’s social media channels, through third party media outlets and in LLA’s advertising materials; and
5. to contact you with marketing materials (if you have provided your consent for us to do so).

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in running any relevant competition or prize draw. 

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our sub-contractors for the purposes of running on our behalf the competition or prize draw;
2. our third party affiliates who we inform you are providing prize(s) for the competition or prize draw for the purposes of providing those prize(s);
3. law enforcement agencies for the purposes of their investigations; and
4. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep all other data we collect about you until the competition prize(s) have been allocated to the winner(s) of the competition or prize draw you have entered (unless we are asked to retain such information for a longer period by any law enforcement agency, in which case we will keep it for such period as is required by the relevant law enforcement agency). After the applicable time period your data will be destroyed.

This section of this notice applies to you if you are the operator of a Hackney Carriage and apply for a Hackney Carriage Access Licence from us. 

How we collect your data

We collect your personal data when you submit an application for a Hackney Carriage Access Licence to us.

What data will we collect

When you submit an application for a Hackney Carriage Access Licence to us we may collect your name, address, email address, telephone number, email address, vehicle registration and signature. 

Why we need your data

We need to know your personal data for the purposes of 

1. processing your application for a Hackney Carriage Licence and maintaining records of the persons authorised to operate Hackney Carriages at the Airport;
2. permitting or denying access to and from the Hackney Carriage taxi cartridge and rank at the Airport (and charging for such use);
3. maintaining security within the Airport;
4. ensuring the orderly administration and operation of the Airport; 
5. investigating incidents occurring at the Airport; and
6. dealing with any complaints or enquiries you make (or others make about you).

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in safely and securely administering the Airport (including in connection with ensuring a functioning Hackney Carriage licensing scheme).

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our regulators to demonstrate compliance with our legal obligations;
2. law enforcement agencies for the purposes of their investigations;
3. our subcontractors (including APCOA Parking (UK) Limited) for the purpose of administering our Hackney Carriage licensing scheme; and
4. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep all data we collect about you for the 12 months after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency). 
 

This section of this notice applies to you if you submit an application for a job vacancy with us. 

How we collect your data

We collect the personal data you submit to us when you write to us or speak with us.

What data will we collect

We may collect your name, telephone numbers, date of birth, email address, addresses, periods of residence, signature, national insurance number, nationality, place of birth, work history (including employer/business details, dates of engagements, periods of unemployment and job titles and descriptions), qualifications, proofs of identification (including passports, driving licences etc), criminal records, court judgments, financial history, current job title and employer/business details; and names of educational establishments and years of attendance.

Why we need your data

We need to know your personal data for the purposes of

1. corresponding with you;
2. processing your job application;
3. determining whether you are likely to pass the security vetting checks necessary to work at the airport;
4. arranging the security vetting checks necessary for you to work at the airport;
5. maintaining personnel records for our employees (if your job application is successful); and
6. demonstrating compliance with our legal obligations to our regulators.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and
2. in all other circumstances, based on our legitimate interest in processing your job application.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our subcontractors and government agencies (including Staffvetting.com Limited and the United Kingdom Security Vetting) for the purpose of commencing security clearance vetting;
2. our regulators for the purpose of demonstrating compliance with our legal obligations;
3. our insurers or solicitors for the purpose of dealing with any potential legal claims;
4. law enforcement agencies for the purposes of their investigations; and
5. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3^rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We may keep the data we collect about you for up to 12 months unless:

1. you are employed or engaged by LLA, in which case the data will be kept throughout the duration of your employment or services contract with LLA and for a period of 6 years after your employment or services contract has come to an end;
2. we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency;
3. the data relates to any legal claim; in which case we may keep such data for up to 6 years; or
4. there are ongoing legal proceedings in respect of which the data is relevant, in which case we may keep the data for the duration of such legal proceedings.

After the applicable time period set out above the data will be destroyed

This section of this notice applies to you if you work at the Airport for a third party and:

1. you take a drug or alcohol test administered by a member of our staff;

2. you, or another party on your behalf, provides us with details in respect of a drug or alcohol test you have undertaken in connection with your work at the Airport;

3. you, or another party on your behalf, provides us with details of medication you are taking or intend to take;

4. you, or another party, provides us with details of details of any “impairment” you may be suffering from (including as a result of the use of drugs or alcohol) which may make you unfit to safely carry out the work you undertake at the Airport; and

5. you, or another party on your behalf, provides us with details of details of any medical treatment or support you are receiving, or intend to receive, to prevent a re-occurrence of an “impairment” you have previously suffered whilst working at the Airport.

How we collect your data

We collect your personal data through disclosures you, or a third party, make, and through our own drug and alcohol testing process.

What data will we collect

We may collect your name, LLA identification pass number, details of any drugs you have taken, are taking or intend to take (including medication and alcohol), the results of drug and alcohol tests you have taken, details of any “impairment” you are, or have suffered from, which may make you unfit to safely carry out your work at the Airport (including reasons for that “impairment” occurring) and details of medical treatments or support you are receiving, or intend to receive, to prevent a re-occurrence of an “impairment”.

Why we need your data

We need to know your personal data for the purposes of:

1. maintaining security within the Airport;

2. maintaining the health and safety of persons at the Airport;

3. ensuring the orderly administration and operation of the Airport;

4. investigating accidents and incidents occurring at the Airport;

5. dealing with any complaints or enquiries you make;

6. dealing with any legal claims which arise following an accident or incident at the Airport; and

7. to fulfil our regulatory reporting requirements to our regulators.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and

2. in all other circumstances, based on our legitimate interest in safely and securely administering the Airport.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our sub-contractors for the purposes of obtaining drugs and alcohol samples, and testing samples for drugs and alcohol;  

2. the third party you work for at the Airport, for the purposes of:

   1. notifying them of the results of any drug and alcohol test you have taken which was administered by us;

   2. obtaining the results of any drug and alcohol test you have taken which was administered by them;

   3. obtaining details of any medical treatment or support you are receiving, or intend to receive following a positive drug and alcohol test you have undertaken which was administered by them;

3. our subcontractors, and other parties operating at the Airport, for the purposes of investigating accidents and incidents at the Airport;

4. our insurers or solicitors for the purpose of dealing with any potential legal claims;

5. our regulators for the purpose of demonstrating compliance with our legal obligations;

6. law enforcement agencies for the purposes of their investigations;

7. persons working at, or visiting, the Airport for the purpose of undertaking safety training; and

8. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We may keep the data we collect about you for up to 12 months unless:

1. the information would permit or require us to refuse an application submitted by you for an ID card in the future, in which case we will keep it for the duration of your lifetime;

2. we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency; or

3. the data relates to a potential legal claim in respect of personal injury, in which case we may keep such data for up to 3 years; or

4. the data relates to any other legal claim; in which case we may keep such data for up to 6 years; or

5. there are ongoing legal proceedings in respect of which the data is relevant, in which case we may keep the data for the duration of such legal proceedings.

After the applicable time period set out above the data will be destroyed.

This section of this notice applies to you if you access or use the LLA Procurement Portal.  

How we collect your data

We collect your personal data by collecting ‘cookies’ when you visit the LLA Procurement Portal or when you submit any information to us on the LLA Procurement Portal. For more information on which types of cookies we use, please see our LLA Procurement Portal cookies policy at https://www.jaggaer.com/cookie-policy/.

What data will we collect

If you enter you submit data through the LLA Procurement Portal we may collect your name, job role, details of the business you work for, email address, address and login details, any personal relationships or circumstances that may create a conflict of interest in connection with our tender process, your past conduct, adherence to the law and suitability to work with LLA, and, if you are a sole trader, your VAT registration number, your income, your compliance with banking facilities and loan requirements, compliance with your tax requirements.

Why we need your data

We need to know your personal data for the purposes of

1. to permit your access and use of a user account, if you register for one on the LLA Procurement Portal;

2. to facilitate your use of the LLA Procurement Portal;

3. to facilitate your participation in tenders we advertise on the LLA Procurement Portal;

4. to facilitate your entry into, and management of, any contracts with us following a successful tender bid; and

5. to comply with our legal obligations.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and

2. in all other circumstances, including in connection with any user account you register with us, based on our legitimate interest in providing a functioning, secure, relevant and easy to navigate procurement portal to you.

What we do with your data

All the personal data we process is processed by our staff in the UK. We may provide your personal data to:

1. our sub-contractors including BravoSolution UK Ltd trading as Jaggear (“Jaggear”) for the purposes of operating, maintaining and improving the LLA Procurement Portal; and

2. any persons we are required to provide such personal data to in order to comply with the law.

Your data will not be transferred outside of the UK by us or any 3rd parties. We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep all data we collect about you for 6 years after which time it will be destroyed, unless:

1. we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency); or

2. there are ongoing legal proceedings in respect of which the data is relevant, in which case we may keep the data for the duration of such legal proceedings

This section of this notice applies to you if you participate in our staff travel survey.

How we collect your data

When you participate in LLA’s staff travel survey, we collect and process your personal information for the purpose of improving our services and to better understand employees commuting habits to and from the Airport. We take your privacy seriously and employ measures to anonymise personal data collected through our staff travel surveys. This means that any information identifying you will be removed or altered from the information we retain, ensuring that the results cannot be used to identify you

What data will we collect

We may collect your name, address, email address, demographic information about you, health information, details of your employer and your Airport pass number. We may also collect data on your commuting mode, travel time and distance, travel frequency and travel experience.

Why we need your data

We need to know your personal data for the purposes of:

1. understanding staff travel patterns to and from the Airport;

2. assessing environmental impacts of staff travel to and from the Airport;

3. improving transportation infrastructure to and from the Airport;

4. promoting more sustainable commuting options to and from the Airport to help reduce staff carbon footprints;

5. enhancing staff satisfaction in respect of  travel to and from the Airport;

6. informing LLA’s travel policies;

7. identifying cost-saving opportunities in respect of travel to and from the Airport;

8. ensuring safety, efficiency and accessibility of travel modes to and from the Airport;

9. supporting overall operational efficiencies at the Airport in connection with travel; and

10. to comply with our legal obligations.

If we do not collect your personal data, we may not be able to fulfil these purposes. We will only collect the personal data about you which we need for these purposes alone.
The lawful basis for our processing of your personal data is:

1. in respect of any personal data we provide to any person in compliance with a legal obligation we may have, based on our legal obligation to do so; and

2. in all other circumstances, based on our legitimate interest in providing and maintaining efficient and sustainable travel access to and from the Airport.

What we do with your data

We may provide your personal data to:

1. our sub-contractors (some of whom may be located outside the UK) for the purposes of analysing your travel behaviour to and from the Airport;

2. any persons we are required to provide such personal data to in order to comply with the law.

We do not use personal data in connection with any automated decision making.

How long we keep your data

We will keep all data we collect about you in connection with our staff travel surveys for 6 years after which time it will be destroyed (unless we are asked to retain such information for a longer period by our regulators or any law enforcement agency, in which case we will keep it for such period as is required by the relevant regulator or law enforcement agency).