Operators privacy notice

While working at Heathrow, or visiting areas within Heathrow, we may collect the following information about you:

• Name
• Contact details e.g. email address, contact numbers, address
• Employment information e.g. company employed by, employee number, grade
• Information in relation to processing airside diver licenses
• Records of your access to and use of all Heathrow systems, including but not limited to, IT, telephone, radio and other systems including emergency calls
• Security, Location and Access information captured by our security control systems
• Car park records
• Location information from Heathrow assets
• Airport Control Emergency logs and call recordings
• Automatic Number Plate Recognition (ANPR)

The specific reasons for collecting and processing your data fall into the following broad categories:

• Safety and security of our colleagues and customers.
• Emergency response / passing details to emergency services.
• Maintain and secure our systems assets and buildings.
• Car park management.
• Surface access management.
• To research into airport surface access opportunities.
• To maintain driving standards in the Airside Environment.
• To keep you informed about operational governance activities, business-as-usual updates and disruption events.

Your information may be handled and used by the following recipients:

• Your employing entity
• Other entities in the Heathrow "group"
• Third party IT service suppliers
• Third party building and car park facilities providers
• Emergency services

We will keep your information within Heathrow and our trusted third parties except where disclosure is required by law, for example to government bodies and law enforcement agencies.

Your information is largely processed only in the UK/EEA and is not moved or transferred overseas unless there is a lawful basis and mechanism for the international data transfer.

Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle.

Your information will be retained whilst you are working at Heathrow. If you leave your employment, your information may be retained for period of time in line with statutory requirements or established retention periods.

Under UK GDPR, you have the right to:

• Access your personal data by making a subject access request
• Rectification, erasure or restriction of your information where this is justified
• Object to the processing of your information where this is justified
• Data portability

To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:

By email: privacy@heathrow.com
By post to:

Privacy requests
Office of the DPO
Heathrow Airport Ltd
The Compass Centre
Nelson Road
Hounslow, Middlesex
TW6 2GW

From time to time, we may process personal data from EU residents. Whenever applicable, we have appointed an EU Representative to ensure that we continuously process your personal data in compliance with applicable laws and without undermining your statutory rights.

You can contact our EU Representative

By email: HeathrowEURepresentative@eversheds-sutherland.com 
Subject matter: 'EU Representative'

By post: You may also contact our EU Representative per post mail at:

Attn. EU Representative Heathrow Airport
Eversheds Sutherland Netherlands B.V.
Floor 2A
Fascinatio Boulevard 212 
3065 WB Rotterdam
The Netherlands

Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website regarding the complaints process.

We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.