ID Centre Privacy Notice
LHR Airports Limited (Heathrow) ID Centre website privacy notice.
Last updated: May 2018
This privacy notice tells you what to expect when Heathrow Airport Ltd (“Heathrow”) collects personal information about you when you use the services of the Heathrow ID Pass Scheme. Heathrow is committed to protecting your personal information when you use Heathrow services. Whenever you provide such information we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the General Data Protection Regulation (GDPR).
This privacy notice tells you what to expect when Heathrow Airport Limited (Heathrow) collects personal information about you when you use Heathrow.com or if you report a fault, deliver maintenance works or produce project documentation whilst at the airport. Heathrow is committed to protecting your personal information when you use Heathrow services. Whenever you provide such information we will only use your information in line with all applicable data protection laws, including the General Data Protection Regulation (GDPR). Your information will be kept in a secure environment and access to it will be restricted according to the 'need to know' principle.
What information will we collect about you?
Personal data that we hold includes:
- Date of birth
- Country of birth
- Contact details
- Corporate contact details
- Identity document details
- Employment details
- Career history
- Reference information, including all relevant communication
- Criminal record details
- Other information
How will Heathrow use the information it collects about me?
Heathrow is committed to collecting and using personal information responsibly, securely and fairly. The information provided to us would be used for the following purposes:
- To check the eligibility and suitability of applicants to hold an airport ID Pass;
- To administer the airport ID pass scheme in accordance with regulatory requirements;
- To manage and record access to the security restricted areas;
- To investigate allegations of misuse of airport ID passes and misconduct at work;
- To prevent and detect crime and for the purposes of national security; and
- To research into airport surface access opportunities
The lawful justification for collecting and using your personal data is necessary for the performance of the Heathrow ID Pass scheme, which you contractually enter. To fulfil these purposes, we may need to disclose information to employers, our trusted third-party organisations, the Police and government agencies. They will only use the personal information provided by us for these purposes and in some instances, this may require information to be transferred overseas, but we will always ensure the disclosure is legitimate and proportionate for processing.
How long will Heathrow keep my information?
We keep personal information in line with our retention policy, which is often a minimum of the length of employment, plus 6 years. We keep details on pass holders for no longer than is necessary. Information will be retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle.
There will be circumstances where we may disclose your personal information without your consent, e.g. where we are required by law to disclose information, or where the information is required to prevent or detect a crime. In the case of all disclosures, we will always ensure the disclosure is legitimate and proportionate for the purpose.
Your information will be handled and used by the following recipients to deliver the ID Pass scheme services:
We will keep your information within Heathrow and our trusted third parties, except where disclosure is required by law, for example to government bodies and law enforcement agencies.
What rights do I have over my personal data?
Under the General Data Protection Regulation, you have the right to:
- Access your personal data by making a subject access request where this is justified
- Rectification of your information where this is justified
- Data portability where this is justified
Email: firstname.lastname@example.org or by mailing:
Data Protection Officer
Heathrow Airport Limited
The Compass Centre
What if I find your response unsatisfactory?
Heathrow tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this seriously. We encourage people to bring it to our attention if they think our collection or use of personal information is unfair, misleading or inappropriate.
If you are not satisfied with how Heathrow has addressed your query, or if you have further concerns, you may contact the Information Commissioner’s Office which is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. The postal addresses for various ICO offices may be found on the ICO website.
The ICO can be contacted via telephone on 0303 123 1113 or by using the ICO website at www.ico.org.uk/concerns/.
Changes to this privacy notice
We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.