This privacy notice tells you what to expect when Heathrow Airport Ltd (Heathrow) collects personal information about you, in this case, static or moving imagery via CCTV or surveillance systems as you pass through the airport. Heathrow is committed to protecting your personal information, safety and security when you use Heathrow services. We are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the General Data Protection Regulation (GDPR).
When you use Heathrow Airport we may collect static or moving imagery via CCTV or surveillance systems. Heathrow collects imagery via CCTV cameras and surveillance devices located throughout the airport, in both landside (public) and airside (restricted access) locations.
Heathrow may use CCTV/surveillance imagery for a number of purposes including but not limited to the following:
The lawful justification for collecting and using CCTV/surveillance imagery is that there are legitimate interests to do so. CCTV and surveillance imagery may be handled and used by the following recipients to maintain a safe, secure and efficient airport operation:
Some of Heathrow's CCTV/surveillance camera infrastructure is shared with third parties such as the Police, UK Border Force and local authorities. They may take control of cameras and use them for security or crime prevention activities, for example. These arrangements are covered by information sharing agreements and Heathrow is not responsible for the cameras when in the control of the third party.
We will keep your information within Heathrow and our trusted third parties except where disclosure is required by law, for example to government bodies, law enforcement agencies or in response to a subject access request. Your information may very occasionally be processed outside of the UK for the purposes of system maintenance and support or for the purposes of international security and crime prevention.
Under normal circumstances your information could be retained for up to 30 calendar days after which point it will be deleted. Imagery required for investigative or evidential purposes may be retained beyond 30 days and is securely disposed of upon completion/conclusion of the purpose for which it has been retained.
Imagery is retained in a secure environment and is only accessible by authorised personnel who have a legitimate reason to do so.
Under the General Data Protection Regulation, you will have the right to, where appropriate:
To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:
Data Protectiion Officer
Heathrow Airport Ltd
The Compass Centre
Or email: firstname.lastname@example.org
Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website at https://ico.org.uk/concerns/ regarding the complaints process.
We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.