Important: Airlines are moving to Terminal 2. Check yours now. 1 of 3 My bookings Home Flights Parking Duty Free At the Airport More Privacy Notice Manchester Airport Plc Cookie Policy CCTV Policy The California Consumer Privacy Act Access your data Contact our DPO What is Personal Data? Personal data is information that relates to an individual. What identifies an individual could be as simple as a name or an identity number or could include other identifiers such as an IP address or a cookie identifier. Information must relate to an individual for it to be classified as personal data. The definition of personal data as explained by the Information Commissioner’s Office is: “Personal data only includes information relating to natural persons who: can be identified or who are identifiable, directly from the information in question; or who can be indirectly identified from that information in combination with other information. An individual is only entitled to their own personal data, and not to information relating to other people.” What is Privacy? Individuals have the fundamental right to privacy. Data Protection is just that. It is the fair and proper use of information about people. Data Protection also allows you as an individual to have mutual trust with an organisation. To understand fully, how, why and on what basis your personal data is processed. The UK data protection regime is set out in the DPA 2018 and the UK GDPR. The UK GDPR sets out seven key principles: Lawfulness, fairness, and transparency Purpose limitation Data minimisation Accuracy Storage limitation Integrity and confidentiality (security) Accountability These principles lie at the heart of MAG’s approach to processing your personal data. Introduction Data Protection Officer How we use your personal information General use of our websites and services Sharing information with third parties Security of your information Retention of your information Data subject rights Changes and updates to this privacy notice Contact MAG Data Protection Team Introduction At MAG Airport Limited and Manchester Airport, safeguarding and handling your personal information in a compliant way is important to us. We understand and respect the importance of guarding your privacy and are committed to protecting your personal information. This privacy notice covers the way we handle your personal information that we receive from both from yourself and from our trusted third parties, what your rights are and our contact details if you need some additional information or wish to make a complaint. From time to time, we will update this privacy notice as we undertake new personal data practices or adopt new privacy policies. We will always document when the privacy notice was last updated. Data Protection Officer MAG Airport Limited has appointed an internal data protection officer for you to contact if you have any questions or concerns about our data policies or practices. You can contact the data protection officer here: Charlotte Lewendon-Jones Head of Data Protection and Privacy Manchester Airport Limited Olympic House 3rd Floor Manchester Airport M90 1QX E: DPO@magairports.com How we use your personal information Customers: We collect your personal information to enable us to provide you with our goods and services. This includes, among others, information you provide when you use our websites and/or our services. The lawful basis to process your information for the use of our goods and/or our services is for the performance of a contract. The lawful basis to process your information for purposes such as marketing is consent. Pre-bookings Online purchases At the Airport My Account Customer feedback form Flight alerts Newsletter Special category data Candidates: We collect your personal information to enable us to create an account for you to gain access to our recruitment site. The lawful basis to process your information for recruitment purposes is legal obligation. Candidate information is retained for a period of six months if you are unsuccessful. Alternatively, you can click on ‘Delete Profile’ on the top right bar on the profile page of our job search website. This action will permanently delete the information we hold about you relating to your job search. If you are successful, your information will be retained for a period of six years after your employment at MAG has ended, after which your information will be deleted. Applying for careers on website Job application Corporate Social Responsibility: Social media Flight evaluation and community enquiries (including noise complaints) Education and employment Aerozone Community engagement Stakeholder communication General correspondence General use of our websites and services We will collect statistics about your use of our services, such as what sections of the website you visit. We may also collect information about how our website and services are performing. For example, each time you use our website we may automatically collect the following information: technical information, including the type of mobile device you use, a unique device identifier, mobile network information, your mobile operating system, the type of mobile browser you use, time zone setting, details of your use of our website including, but not limited to, traffic data, location data, weblogs and other communication data and the resources that you access. When you use our websites, we share your anonymized data with our trusted third parties. We use Google Analytics, Google Tag Manager, IGO, UserStory and Quantserv to track customer behaviour on our websites. Third party HotJar captures web sessions for us to understand customer behaviour. We also share anonymised data with Facebook and Google. The data shared cannot be viewed by a natural person. This is encrypted data which Facebook and Google may use to provide tailored services to you whilst you use their websites. For information of how Facebook and Google use your personal data, please visit their Privacy Notices. Sharing information with third parties We will not share your information with any third parties for the purposes of direct marketing. We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct. In some circumstances we are legally obliged to share information. For example, under a court order. We might also share information with regulatory bodies or statutory agencies for their own purposes to safeguard national security and prevent and detect crime. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information. Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit. Where we share your personal data with third parties, they will only use it in compliance with data protection legislation. These third parties may transfer your personal data overseas, but we will always ensure the disclosure is legitimate and proportionate for processing. We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries. For more information about our group of companies please click here to visit our corporate website. Security of your information Here at MAG the security of your information is of upmost importance. Our Cyber Security team works day to day to ensure that any chance of a data breach is minimised as much as possible. We ensure your data is protected from criminals by following the Confidentiality, Integrity and Availability framework. Confidentiality - All users are enrolled into our Role Based Access Control system, limiting access to information based on an users job role and business justification. Integrity - All data in transit and at rest is encrypted using the highest level of encryption and hashing algorithms, to ensure no un-authorised users can view or modify your data. Availability - All incidents and suspicious activity are monitored, 24 hours a day, 7 days a week by MAGs Cyber Operations Team. Used not only to monitor access to your data, but also to guarantee any problems causing internet down time is identified and remediated as fast as possible. In addition, our Cyber Security Team conducts rigorous security and compliance checks against any Third-Party companies that process your information. Ensuring your data is secure at all stages of processing and storage. ISO/IEC 27001 is an internationally recognized best practice framework for an information security management system (ISMS). MAG is ISO27001 certified with the ISMS currently defined as: The Information Security Management System shall protect the confidentiality, integrity and availability of Manchester Airport Limited's customer data held within the customer relationship management system (CRM) and processed by MAG's customer contact centre and customer feedback teams to deliver goods and services to our customers. Retention of your information MAG has a detailed Data Retention, Archive and Destruction Standard which sets the requirements to store and retain information in line with regulatory obligations and business requirements and to destroy the data securely when it is no longer required. Specific retention periods for information will be available on request. Data subject rights The General Data Protection Regulation gives you certain rights relating to the personal data that is processed by Manchester Airport. Find below the list of rights and what they mean. If you wish to exercise any of these rights (or make a complaint regarding data protection), please click here to complete the form. For a faster response please use our online form, alternatively you can email us – DPO@magairports.com. You will receive an acknowledgement within three working days of sending your request and a full response within twenty-eight days of receiving all the relevant information required to handle your request. Right of Access – You have the right to access all the personal information and supplementary information that we hold about you. This will allow you to be aware of and verify the lawfulness of us processing your information. We would respond to your subject access request within twenty-eight days. Right to Rectify – You have the right to request for your inaccurate personal information to be rectified or completed if it is incomplete. Right to Erasure – We automatically delete your information from our records when the retention period has lapsed. Prior to us automatically deleting your information, you have the right to request for your information to be deleted and have your personal information erased from our records, if there is no reason for us to hold your information. Right to Restrict Processing - You have the right to object to the processing of your information if it causes unwarranted and substantial damage or distress. If it does, you have the right to require us to stop (or not to begin) the processing in question. This right does not automatically trigger the right to erasure. You will have to request for your information to be fully deleted from our records if you wish to exercise your right to erasure. Right to Data Portability – You have the right to obtain and reuse your personal information which we hold. This compelling will allow you to move, copy or transfer personal information easily from one IT environment to another in a safe and secure way. Right to Object – You have the right to object to us using your personal information for direct marketing and profiling. This right can be exercised at any point in time, whether at the point where we collect your personal information, or after we already have already collected your personal information. If you want to object to us processing your personal information, please use our online form or contact the Data Protection Team at our address at the end of this notice. Alternatively, you can also exercise the right at any time by clicking ‘unsubscribe’ in any marketing email. Right to Lodge a Complaint – You have the right to lodge a complaint with the Information Commissioner’s Office here, if you feel that our processing of your personal information infringes on your rights per the requirements of the General Data Protection Regulation. We advise that you contact our Data Protection Officer initially to try and resolve your complaint before escalating your complaint to the supervisory authority. Right to Withdraw Consent – You have the right to withdraw your consent at any time. Your withdrawal of consent shall not affect the lawfulness of processing of your data before the withdrawal. You can withdraw consent by using our online form or by contacting the Data Protection Team at our address at the end of this notice, or alternatively, you can click ‘unsubscribe’ in any marketing email to withdraw consent in relation to marketing. Changes and updates to this privacy notice We may change our privacy notice at any time and without notice, so we recommend that you visit this page occasionally to check what has changed. This policy was last updated in June 2021 and will be reviewed again in June 2022. 2018 Version One of the Privacy Notice was published. 2021 Entire review of the Privacy Notice. Contact MAG Data Protection Team Our Data Protection and Privacy Team is located at our Head Office, Olympic House, Manchester Airport, Manchester, M90 1QX. You can contact us at DPO@magairports.com. Please be aware this email address is not monitored 24/7, you will receive a reply within standard working hours. If you wish to exercise any of your rights under the General Data Protection Regulation, please use our online form. You can also complain to the ICO if you are unhappy with how we have used your data. The ICO’s address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk Sign up for special offers and more! Manchester Airport would like to send you marketing emails and SMS regarding: Airport discounts Competitions Services and announcements Sign up We take your privacy seriously. Read our Privacy Notice to find out how we handle and process your personal information. By signing up, you agree to our Terms and Conditions. Know what you are looking for? Airport Transfers Train Taxis Coach Bus Tram Parking Meet and Greet Multi Storey JetParks Long Stay Mid Stay Short Stay At the Airport Security FastTrack Passport Control FastTrack Escape Lounges 1903 Lounge Click & Collect Plan your Trip Airport Transfers Book Flights Airport Hotels Car Hire Travel Insurance Luggage Services Passenger Guides Security Guides to Travelling FAQs Contact Us About MAG Who We Are Company Details Business Development Careers at MAG Information Community Media Centre Modern Slavery Act Follow us ©2021 Manchester Airport plc. All rights reserved. Terms and Conditions Accessibility Site Map Cookie Policy Privacy Notice Cookie Preferences We use necessary cookies on this website to make our site work. We'd also like to set optional cookies to help us improve your guest experience however we won't set optional cookies unless you enable them. Using this tool will set a cookie on your device to remember your preferences. Unfortunately, our Cookies do not contain chocolate chips. Whilst you cannot eat them and there is no special hidden jar, you can find out what is in them by viewingour Cookie Policy Accept All Cookies Cookies Settings