Heathrow Timeslot Privacy Notice

When you use Heathrow Timeslot we will collect the following information about you:

• Email address
• Date of travel
• Airline
• Flight number
• Number of passengers in the booking transaction (group size)
• Time slot you choose to book
• Feedback about the Heathrow Timeslot service

Heathrow collects information about how you use Heathrow via Heathrow.com website and the device(s) you use to access the website. This includes collecting browser type, operating system date and time of access, internet service provider, unique online identifiers such as IP addresses, which are numbers that uniquely identify a specific computer or other network device on the internet. For more information, see our section on ‘cookies’ below. If you book onto Heathrow Timeslot, you will be directed to a third party booking site. This site is hosted by our supplier Whyline, Inc. (known as “Clear”). Whyline, Inc. does not collect cookies (except essential cookies for site performance) on its website as part of the Heathrow Timeslot service.

Heathrow will use your personal data for several purposes including the following:

• To confirm the reservation made through Heathrow Timeslot service.
• To provide information about the Heathrow Timeslot service.
• To share the QR code required to access the service.
• To provide access to amend or cancel the timeslot booked through the service.
• To get your feedback regarding Heathrow Timeslot service through a survey to improve the service

The lawful justification for collecting and using your personal data is that it is necessary for the performance of the Heathrow Timeslot service which you contractually enter in to. We also have a legitimate interest in collecting your feedback via a survey. If you do not wish to receive the survey, please contact Heathrow.com/contact-us/online and we will remove you from this. Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle.

Your information will be stored and managed by the following recipients in order to deliver the Heathrow Timeslot service:

Heathrow colleagues who manage the Timeslot service

• Copenhagen Optimization Aps  who review anonymous metrics and statistics such as slot times and flight times to assess the impact of Timeslot on the operation
• Whyline Inc based in Argentina. Whyline, Inc. (doing business as "CLEAR") is the contracting entity providing services as part of the Heathrow Timeslot service
• Amazon Web Services who provide IT services
• MongoDB Atlas who provide IT services

Your information is processed within the European Economic Area. Whyline Inc. has access to your personal data from Argentina. Argentina is deemed to have an adequate level of data protection meaning data can flow to Argentina without any further safeguards being necessary.

We will not transfer or disclose your personal information, other than as identified in this Privacy Notice, to our trusted third-party suppliers, to the police, tribunals, courts, regulators, or other authorities to assist them with their investigations or requests or for us to report security incidents or suspected or actual unlawful acts and/or as may be otherwise required by law.

Your personal information will be retained for a period of three days after which point it will be deleted. All survey responses are anonymous so we will keep this information for a reasonable amount of time to allow us to review and action feedback. 

Under UK GDPR, you have the right to:

• Access your personal data by making a subject access request
• Rectification, erasure, or restriction of your information where this is justified
• Object to the processing of your information where this is justified
• Data portability

To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:

By Post -Data Protection Officer Heathrow Airport Limited, The Compass Centre, Nelson Road, Hounslow, Middlesex, TW6 2GW

By Email- privacy@heathrow.com

From time to time, we may process personal data from EU residents. Whenever applicable, we have appointed an EU Representative to ensure that we continuously process your personal data in compliance with applicable laws and without undermining your statutory rights.

You can contact our EU Representative at HeathrowEURepresentative@eversheds-sutherland.com and write EU Representative as subject matter. You may also contact our EU Representative per post mail at:

Eversheds Sutherland Netherlands B.V.
Attn. EU Representative Heathrow Airport
Fascinatio Boulevard 212
Floor 2A
3065 WB Rotterdam

Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website regarding the complaints process.

Cookies are small text files which are stored on your computer when you visit certain web pages. At Heathrow we use cookies to understand how our sites are used which helps us to improve your overall online experience. Some of the cookies we use are necessary for some of our sites to work whilst other cookies are used to provide tailored advertising by trusted third parties. To find out more about cookies, visit www.aboutcookies.org

The different types of cookies we use

Heathrow use the following categories of cookies on our websites:

Strictly necessary – These cookies are essential for certain features of our websites to work for example when you make payments for car parking. These cookies do not record identifiable personal information and we do not need your consent to place these cookies on your device. Without these cookies some services you have asked for cannot be provided.

Performance – These cookies are used to collect anonymous information about how you use our websites. This information is used to help us improve our websites and understand how effective our adverts are. In some case we use trusted third parties to collect this information for us but they only use the information for the purposes explained. By using our websites, you agree that we can place these types of cookies on your device.

Functionality - These cookies are used to provide services or remember settings to enhance your visit for example text size or other preferences. The information these cookies collect is anonymous and does not enable us to track your browsing activity on other websites. By using our websites, you agree that we can place these types of cookies on your device.

Targeting and Advertising – These cookies are used by trusted third parties to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. Information contained in these cookies is anonymous and doesn't contain your personal information. To find out more about cookies used for targeting and advertising follow www.youronlinechoices.com and www.networkadvertising.org or contact us at website_feedback@baa.com for further information about the trusted third parties we use.

Managing cookies

If you'd prefer to restrict, block or delete cookies from Heathrow and our third party advertisers, or any other website, you can use your browser to do this. Each browser is different, so check the 'Help' menu of your particular browser to learn how to change your cookie preferences. If you choose to disable all cookies we cannot guarantee the performance of our websites and some features may not work as expected.

We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.