Baggage privacy notice

If you travel with checked baggage at Heathrow, we process information about your baggage. Your luggage will have a license plate known as a bag tag number. This will be linked to your name, your flight details, possibly your frequent flyer number and any other information you may have displayed on your bag. During the process, we scan this bag tag with automatic tag readers, cameras and manual scanners.

In order to ensure a smooth flow of baggage, your data will be processed. This is done, among other things, when routing, sorting and (if necessary) temporarily storing the baggage. We also have a legal obligation to screen baggage. In this way, we ensure that no dangerous substances or prohibited substances end up on board the aircraft. For this screening, we process personal data if it is necessary to link your baggage to you.

The legal justifications for collecting and using your personal data

The lawful justification for collecting and using your personal data is that it is necessary for the performance and maintaining the safety of the Airside environment and operational functions around the airport.

The lawful basis that we may rely on include:

•  It is necessary for the performance of a contract with you OR
•  It is necessary for compliance with our legal obligations OR
• Where we have a legitimate interest to process this data.

To enable a smooth flow of your baggage, we may share information about the progress of your baggage with the following entities:

• ·Airlines
• Suppliers of the baggage/IT systems
• Suppliers who move baggage around the airport
• Border Force or Customs

We will keep your information within Heathrow and our trusted third parties except where disclosure is required by law, for example to government bodies and law enforcement agencies.

Your information is largely processed only in the UK/EEA and is not moved or transferred overseas unless there is a lawful basis and mechanism for the international data transfer.

In most circumstances your personal data will generally be deleted within three days of the departure of your flight.

Under UK GDPR, you have the right to:

• Access your personal data by making a subject access request
• Rectification, erasure or restriction of your information where this is justified
• Object to the processing of your information where this is justified
• Data portability

To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:

By email: privacy@heathrow.com
By post to:

Privacy requests
Office of the DPO
Heathrow Airport Ltd
The Compass Centre
Nelson Road
Hounslow, Middlesex
TW6 2GW

From time to time, we may process personal data from EU residents. Whenever applicable, we have appointed an EU Representative to ensure that we continuously process your personal data in compliance with applicable laws and without undermining your statutory rights.

You can contact our EU Representative

By email: HeathrowEURepresentative@eversheds-sutherland.com 
Subject matter: 'EU Representative'

By post: You may also contact our EU Representative per post mail at:

Attn. EU Representative Heathrow Airport
Eversheds Sutherland Netherlands B.V.
Floor 2A
Fascinatio Boulevard 212 
3065 WB Rotterdam
The Netherlands

Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website regarding the complaints process.

We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.