.muc-logo-shape-1 {fill: url(#muc-logo-gradient);} .muc-logo-shape-2 {fill: #b5b9bc;} Munich Airport logo Privacy policy Introduction Welcome to our website and thank you for your interest in privacy and data protection with regard to our services. We are pleased to provide you with information here on how your personal data are processed on our websites and in connection with the other services described in this Privacy Statement. Overview 1 Controllers and data protection officers 2 Data processing 2.1 Data processing policy 2.2 Recipients 2.3 Duration of storage 2.4 Scope of the Privacy Statement 3 Generally applicable information on data processing in relation to online services 3.1 Log files 3.2 Cookies and pixels 3.3 Survey tools 3.4 Integrated maps (Google Maps) 3.5 Integrated videos (YouTube) 3.6 Social media 4 Specific processing activities 4.1 Websites 4.2 Contact form 4.3 Newsletter 4.4 Personalization and user profiles 4.5 WLAN/Wifi 4.6 Photography, video and sound recordings 4.7 Passngr app website 4.8 Parking reservations 4.9 Automatic number plate detection at parking entrances 4.10 Bookings/reservations 4.11 Contests, prize draws, and campaigns in general 4.12 Advent calendar contest 4.13 MuniCon conference center 4.14 Aircraft noise complaints 4.15 InnovationPilot 4.16 Applicant portal 4.17 Airport Collaboration Portal 4.18 FMG und Wohnen 4.19 Processing damage events and claims 4.20 Star Alliance Biometrics 4.21 Privacy notice cctv 5 External booking requirements 5.1 Package travel arrangements 5.2 Flight bookings 5.3 Car rentals 6 Your rights 6.1 Information 6.2 Rectification 6.3 Right to restriction / blocking of processing 6.4 Erasure 6.5 Objection 6.6 Withdrawal 6.7 Data portability 6.8 Right to lodge a complaint with a supervisory authority 7 Data protection inquiries, asserting data protection rights 7.1 Data controller for purposes of data protection laws 7.2 Categories of personal data 7.3 Purposes for processing personal data 7.4 Legal grounds for the processing of personal data and legitimate interests 7.5 Recipients 7.6 Transfers to third countries 7.7 Duration of storage 7.8 Obligation to provide personal data 7.9 Source of the data 7.10 No automated decision making, no profiling 8 Changes to the Privacy Statement 9 Status 1 Controllers and data protection officers Unless another controller is expressly indicated for specific services, the controller for the purposes of all data processing covered in this Privacy Statement is: Flughafen München GmbH Nordallee 25 85356 Munich Germany Tel. +49 89 975 00 Email: info@munich-airport.de Contact details for Flughafen München GmbH, referred to below as "FMG" or "we" and their subsidiaries with data protection officers: Flughafen München GmbH Contact data Nordallee 25 85356 München Tel. +49 89 975 00 Email: info@munich-airport.de Data Protection Officer Flughafen München GmbH Nordallee 25 85356 München Email: datenschutzbeauftragter@munich-airport.de Managing Directors Jost Lammers Nathalie Leroy Jan-Henrik Andersson Head of IT Florian Lesch 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 2 Data processing 2.1 Data processing policy We process your personal data in accordance with applicable data protection laws – in particular the provisions of the General Data Protection Regulation (GDPR), the German Data Protection Act (Bun-desdatenschutzgesetz) and other applicable laws. We process personal data exclusively in accordance with the intended purposes. The main purpose is to operate Munich Airport including all ancillary business activities directly or indirectly supporting this purpose. The purposes related to specific services are concretely outlined in the corresponding descriptions. We process your personal data only when this is permitted or required under legal regulations or with your consent. You will find additional information on specific services in the descriptions below. Unless those descriptions specify another legal basis, the data processing is carried out in accordance with Art. 6 Par. 1 sentence 1 f) GDPR (balancing of interests based on our legitimate interest in operating Munich Airport, including all ancillary business activities directly or indirectly related to the purpose of business). 2.2 Recipients Personal data can be transmitted to the following recipients or categories of recipients: In-house recipients (e.g. specialist departments responsible for dedicated processing) Companies of the Flughafen München Group (Our company profile offers a current overview of the group structure) Cooperation partners with whom we perform our services. External contractors in accordance with Art. 28 EU GDPR, if they are explicitly mentioned in the individual processing operations. Business partners for whom we perform. Courts, authorities or other government bodies in the event of legal obligations. If there are other recipients, these will be mentioned separately in the individual processing activities. 2.3 Duration of storage Personal data are stored only as long as necessary for achieving the specified purposes or in accordance with the storage and archiving periods required by law. After the relevant purpose no longer applies or the expiry of these periods, the corresponding data will be deleted routinely in accordance with the statutory regulations. If possible, specific storage periods for the various services will be stated. 2.4 Scope of the Privacy Statement This Privacy Statement applies to the websites of Flughafen München GmbH and the subsidiaries specified above and for other services described in this Privacy Statement. 3 Generally applicable information on data processing in relation to online services + 3.1 Log files + 3.2 Cookies and pixels + 3.3 Survey tools + 3.4 Integrated maps (Google Maps) + 3.5 Integrated videos (YouTube) + 3.6 Social media 4 Specific processing activities Specific processing activities by FMG and its subsidiaries are described in greater detail in the following chapters. + 4.1 Websites + 4.2 Contact form + 4.3 Newsletter + 4.4 Personalization and user profiles + 4.5 WLAN/Wifi + 4.6 Photography, video and sound recordings + 4.7 Passngr app website + 4.8 Parking reservations + 4.9 Automatic number plate detection at parking entrances + 4.10 Bookings/reservations + 4.11 Contests, prize draws, and campaigns in general + 4.12 Advent calendar contest + 4.13 MuniCon conference center + 4.14 Aircraft noise complaints + 4.15 InnovationPilot + 4.16 Applicant portal + 4.17 Airport Collaboration Portal + 4.18 FMG und Wohnen + 4.19 Processing damage events and claims + 4.20 Star Alliance Biometrics + 4.21 Privacy notice cctv 5 External booking requirements On our website you will be redirected to the external booking platforms described below. The bookings are processed independently of Flughafen München GmbH. The privacy policy of the provider in question will apply. 5.1 Package travel arrangements The booking process "Package holidays" is operated by travianet GmbH, a company in the FTI Group, with headquarters in Deggendorf, Germany. The process is subject to the privacy policy of travianet GmbH. 5.2 Flight bookings The booking process "Flights" is operated by fly GmbH, a company in the FTI Group, with headquarters in Munich, Germany. The process is subject to the privacy policy of fly GmbH. 5.3 Car rentals The booking process "Car rentals" is operated by TravelJigsaw Limited with headquarters in London, UK. The trade name of the rental car booking platform is Rentalcars.com. The process is subject to the terms of the privacy policy of Rentalcars.com. 6 Your rights Under data protection laws, data subjects have various rights with regard to their personal data, in particular a right to information on the personal data in question, the rectification and erasure of data, the restriction of processing, objection to processing, data portability and the right to withdraw consent at any time. Unless otherwise indicated in the various processing steps, you can exercise your rights by contacting datenschutzanfrage@munich-airport.de. Further information on the processing of your personal data when asserting your rights or other data protection inquiries can be found in Individual processing activities in the appropriate section. 6.1 Information The data subject has the right pursuant to Art. 15 GDPR to obtain information from the controller on the processing of his/her personal data by the controller. Please note that this right may be restricted under certain circumstances in accordance with statutory regulations (in particular Section 34 of the German Data Protection Act (BDSG)). 6.2 Rectification The data subject has the right pursuant to Art. 16 GDPR to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Depending on the purposes of the pro-cessing, the data subject has the right to have incomplete personal data completed. 6.3 Right to restriction / blocking of processing The data subject has the right pursuant to Art. 18 GDPR to obtain from the controller restriction of processing of personal data pertaining to him/her. By way of clarification, please note: To ensure that a data block can be complied with at all times, it is generally necessary to keep certain personal data of the data subject in a restricted data file. 6.4 Erasure The data subject has the right, pursuant to the criteria set out in Art. 17 GDPR, to obtain from the controller the erasure of personal data pertaining to him/her. 6.5 Objection The data subject has the right, pursuant to the criteria set out in Art. 21 GDPR, to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds warranting protection for the processing which override your interests, rights and freedoms or which serve to establish, exercise or defend against legal claims. 6.6 Withdrawal The data subject has the right to withdraw his/her consent with future effect at any time. The withdrawal of consent shall not affect the lawfulness of processing of personal data based on consent granted prior to the withdrawal. 6.7 Data portability The data subject has the right, pursuant to Art. 20 GDPR, to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and to transmit the data to another controller or to have the data transmitted directly from one controller to another. 6.8 Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if they believe that the processing of personal data relating to them violates the law. The supervisory authority in the state of Bavaria responsible for the non-public area of the airport is the Bavarian State Office for Data Protection Supervision, Ansbach. 7 Data protection inquiries, asserting data protection rights If you contact us with a data protection inquiry, assert rights to information or other rights of data subjects under data protection laws with regard to the Munich Airport Group or submit other comments or notifications with regard to data protection, it is necessary to process your personal data. + 7.1 Data controller for purposes of data protection laws + 7.2 Categories of personal data + 7.3 Purposes for processing personal data + 7.4 Legal grounds for the processing of personal data and legitimate interests + 7.5 Recipients + 7.6 Transfers to third countries + 7.7 Duration of storage + 7.8 Obligation to provide personal data + 7.9 Source of the data + 7.10 No automated decision making, no profiling 8 Changes to the Privacy Statement We reserve the right to amend this Privacy Statement to ensure that it is always in compliance with the current legal requirements or to implement changes in our services in the Privacy Statement, e.g. when introducing new services. For your next visit to our website the new Privacy Statement will then apply. 9 Status August 2021 Share page & visit network Additional information Accessible travel Airport maps Careers Facilities & services FAQs Important telephone numbers Newsroom Media Center Contact We look forward to your feedback. Your direct contact Legal notice Terms & conditions Privacy policy © 2021 Flughafen München GmbH