The Shannon Airport Group incorporates Shannon Group plc, Shannon Airport Authority DAC (‘Shannon Airport’) and Shannon Commercial Enterprises DAC (“SCE”)
This Privacy Notice applies to all domains and websites owned by The Shannon Airport Group. Any external links to other websites are clearly identifiable as such, and we will not be responsible for the content or the privacy policies of these third party websites.
The purpose of this Privacy Notice is to outline how we collect, process and share personal data. This Privacy Notice will outline the types of personal data we process about you and the legal basis we rely on to do so.
The Shannon Airport Group is committed to protecting and respecting your privacy. We wish to be transparent on how we collect, store and share your personal data and to ensure that you understand your rights under the GDPR.
In this statement, we outline:
- The types of data we collect
- How we use your data
- Your rights in relation to the data we hold about you
- How to contact us if you have any questions on your data or you have any complaints.
Legislation
All personal data we gather will be “processed” in accordance with all applicable data protection laws and principles, including the EU General Data Protection Regulation 2018 (“GDPR”) and the Data Protection Act 2018.
Queries and Complaints
If you require further information about the way your personal data will be used, or if you are unhappy with the way we have handled your personal data, and wish to contact us, please submit your concerns by email to The Shannon Airport Group Data Protection Officer at dataprotection@snnairportgroup.ie
We can also be contacted by post at:
Data Protection Officer
The Shannon Airport Group,
Shannon Airport,
Co. Clare,
V14 EE06,
Ireland.
If you are unsatisfied with our use of your personal data or our response to any requests by you to exercise any of your rights, then you have the right to complain to the Data Protection Commission. See below contact details;
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Email: info@dataprotection.ie
Phone: +353 57 868 4800 / +353 761 104 800
Information Collected
The table below outlines the categories and types of data we collect along with the source of data. The types of data we collect may change over time; the following table is an indicative list to help you understand the types of data we collect.
| Data Category |
Data Type |
Source of Data |
| Recruitment Data |
Curriculum Vitae, Trade Union Membership, Identification, Garda Vetting. |
Potential Employees, Employees, Recruiters. |
| Employment Data |
Leave Entitlements, Pay Details, Sick Notes, Payroll, Training Certificates. |
Employees |
| Vehicle Data |
Car Registration. |
Car Park Users |
| Payment Data |
Bank Account Numbers, Card Details. |
Data Subject |
| Contact Details |
Name, Number, Email Address, IP Address. |
Data Subject |
| Accident Data |
Details of Injuries. |
Data Subject |
| CCTV Data |
Imagery, Sound, Video. |
Data Subject |
| Identification Data |
Passport, ID Cards. |
Data Subject |
Purpose for which we hold your information
The following section provides more details on the purposes for which we process your personal data and the legal basis by which we do this.
| Data Category |
Reason for processing |
Legal basis for processing |
| Recruitment Data |
Used by The Shannon Airport Group to assess your suitability for the role being applied throughout the recruitment process. |
Processing is necessary for the performance of a contract or as a precondition for entering a contract |
| Employment Data |
To ensure employees receive their statutory leave entitlements.
To ensure employees are paid for work done.
To ensure Airport-based staff have completed their National Civil Aviation Security mandated safety training. |
To comply with employment legislation
Processing is necessary for the performance of a contract
To comply with a legal obligation under the National Civil Aviation Security Programme. |
| Vehicle Data |
To allow customers to pre-book parking spaces at Shannon Airport. |
Processing is necessary for the performance of a contract. |
| Payment Data |
To allow customers to purchase goods from our e-commerce website and shopping facilities.
To process direct debits for lease agreements. |
Processing is necessary for the performance of a contract. |
| Contact Details |
To share marketing and promotional emails with you.
|
Consent of the data subject |
| Accident Data |
To maintain a log of all incidents involving equipment or facilities across the Airport Campus. |
To comply with a legal obligation under the National Civil Aviation Security Programme. |
| CCTV Data |
To ensure the safety and security of staff and property on the Airport Campus. |
Legitimate Interests |
| Identification Data |
To verify the identity of boarding pass holders.
To provide employees working on the Airport Campus with access cards and ID. |
To comply with a legal obligation under the National Civil Aviation Security Programme. |
Sharing information with third parties
There are various circumstances where we may be required to share personal data with third parties. We will only share your personal data with third parties where we have obtained your consent, where it is necessary to comply with a legal obligation or to provide services to you.
In these circumstances, we take steps to ensure that any third parties who handle your personal data comply with data protection legislation and protect your information to the same extent that we do. We will only disclose the personal data which is necessary for them to provide the service they are undertaking on our behalf.
On occasion, we may transmit your personal data outside the European Economic Area. In such circumstances, we will ensure that the transfer complies with our data protection obligations and we will ensure that the transfer agreement is based on an approved transfer mechanism, such as the EU Standard Contractual Clauses.
Marketing
For marketing purposes, we may contact you in relation to special offers, competitions, products and services from The Shannon Airport Group via email, post, SMS or phone.
Where we rely on consent for marketing purposes, consent will always be provided in the form of a clear opt-in. You have the right to withdraw your consent at any time using the unsubscribe link on emails/ text messages, alternatively you can contact us using the contact details listed in this Privacy Notice to opt-out of future marketing communications from The Shannon Airport Group.
Where we rely on Legitimate Interest (to develop and grow our business) to communicate with you for marketing purposes we will always provide you with an option to opt-out at the point of data collection and within each communication thereafter. Additionally, you can use the contact details listed in this Privacy Notice to opt-out of receiving future marketing communications.
Data Subject Rights
As a data subject, you will have the following rights in relation to the processing of your personal data. However, these rights are not absolute, and restrictions may apply in certain situations.
Rights to access
You have the right to know what personal data we hold on you, why we hold the data, and how we are processing your personal data.
When submitting a request, please provide us with as much information as possible to help us understand the information you wish to access (i.e. date range, subject of the request).
Please note that an access request is free of charge, however, where we determine a request to be unjustified or excessive, we may charge you a reasonable fee.
Rights to rectification
You have a right to request that the personal data held in relation to you is up to date and accurate.
Where information is inaccurate or incomplete, we encourage you to contact us to have this information rectified. Upon receipt of your request, we will ensure that the personal data is rectified and up to date as is reasonably possible.
Right to erasure ("Right to be Forgotten")
You have the right to seek erasure of personal data relating to you in the following circumstances:
- The personal data is no longer required for the purposes for which it was obtained.
- Where the use of the data is only lawful on the basis of consent, you withdraw consent to the processing and no other lawful basis exists.
- The personal data is being used unlawfully.
- You object to the use of your personal data and there are no overriding legitimate grounds for the use of the data.
- Your personal data requires deletion in line with legal requirements.
However, we will be unable to fulfil an erasure request if the personal data is required for any of the below activities:
- Exercising the right of freedom of expression and information.
- Compliance with a legal obligation, such as the performance of a contract or compliance with certain legislation.
- For the performance of a task carried out in public interest.
- For public health reasons.
- Archiving, research, or statistical purposes in the public interest.
- The establishment, exercise or defence of legal claims.
Please note that where the legal basis of our processing of personal data is on the basis of a legal obligation, some processing in relation to your data may not be subject to the right to erasure. To determine your request for erasure, we will carry out an assessment of the justification for retaining your personal data where a legal requirement applies and contact you if we are unable to fulfil your request.
Please be aware that in some circumstances we may need to retain some information to ensure that all of your preferences are properly respected. For example, we cannot erase all information about you where you have also asked us not to send you marketing material. Otherwise, we would delete your preference not to receive marketing material.
Right to restriction of processing
You have the right to restrict the extent for which your personal data is being used by us in circumstances where:
- You believe the personal data is not accurate (restriction period will exist until we update your information).
- The processing of the personal data is unlawful, but you wish to restrict the use of the data rather than erase it.
- Where the personal data is no longer required by us, but you require the retention of the data for the establishment, exercise, or defence of a legal claim.
- You have a pending objection to the future use of your personal data.
When the use of your data has been restricted, your personal data will only be further used: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of other people; or for reasons of important to public interest.
Right to portability
You have the right to the provision of all personal data that you have provided to The Shannon Airport Group in a structured, commonly used machine-readable format where:
- Processing is completed on the basis of a contract;
- Processing is completed based on consent;
- Processing is carried out by automated means.
We may refuse such a request if the data being requested may adversely affect the rights and freedoms of others.
Right to object
You have the right to object to the further use of your personal data where:
- The lawful basis for the use of your personal data by us is reliant on the basis of our legitimate interests;
- Where personal data is being processed for the purposes of direct marketing or profiling related to direct marketing.
If you wish to object to the processing of your personal data, please contact us with your request. We will then stop the processing of personal data unless it is required for legal proceedings.
Right to object to automated processing, including profiling
You have the right not to be subject to a decision based solely on automated processing or profiling, where such decisions would have a legal effect or significant impact on you.
Currently, we do not employ any systems which use automated decision making or profiling on data.
Where we (or one of our third-party processors) use profiling, which produces legal effects for you or otherwise significantly affect you, you will have the right to object to such processing.
Where do I send requests?
Please send all your requests to dataprotection@snnairportgroup.ie with as much detail as possible regarding your requirements to allow us to deal with your request efficiently. To answer your request, we may ask you to provide identification for verification purposes. All the above requests will be forwarded on should there be a third party involved as we have indicated in the processing of your personal data.
How long will a request take to complete?
- Upon receipt of a request, we will have 30 days to provide an answer with an extension of two further months if required. If we require more time to deal with your request, we will notify you of the delay and the reasons for it within 30 days of the receipt of your request. If we refuse your request, we will also notify you within 30 days of the receipt of the request accompanied by the reasons for the refusal.
- You are entitled to contact the Data Protection Commission if we refuse your request.
How much does it cost to submit a request?
We will not charge a fee for any requests, provided we do not consider them to be unjustified or excessive. If we do consider requests to be unjustified or excessive, we may charge a reasonable fee (also for multiple copies) or refuse the request.
Changes to our Privacy Notice
We review this Privacy Notice regularly and reserve the right to make changes at any time to take account of changes in our business, legal requirements, and the manner in which we process personal data. This Privacy Notice was last updated on 30th November 2022.