More info on what Personal Data is Processed

Brussels Airport can collect various types of Personal Data of Data Subjects who visit the Websites and store these on its servers.

Personal Data that we Process

We can Process different categories of Personal Data, such as:

• Direct identification data (e.g. your first and last name)
• Contact details (e.g. your postal address, email address, telephone number, cell number);
• Information provided with helpdesk requests;
• Web behavioural information, such as information related to how Data Subjects use the Websites (e.g. browser type, domains, page views) collected through cookies and other automated technology (see our cookie policy, for more information);
• Electronic identification data, i.e. IP addresses (i.e. a unique set of numbers that identifies each device on the network (e.g. laptop, tablet, smartphone) that enables communication and exchange of information with other devices over an IP-based network, such as the Internet) in order to manage the Websites and to ensure that relevant information is sent to your computer;
• Location information (based on your IP address).

If you visit one of our Websites that allows you to register online and create an account, the following Personal Data may be collected:

• Direct identification data (e.g. your first and las name);
• Indirect identification data (e.g. your country, postal code, date of birth);
• Contact details (e.g. email address, cell number);
• Personal characteristics (e.g. sex, language, travel preferences);
• Your profile photo.

For each service/product, the web page explains transparently to you which Personal Data is collected, for which Purpose and how long your Personal Data is stored.

Purposes for which we Process these Personal Data

Brussels Airport (i) collects, (ii) uses and (iii) maintains the Personal Data provided by the Data Subject or which are collected by Brussels Airport for all Purposes that are necessary for the proper (technical) operation of the Websites and/or the creation of an account.

In general, Brussels Airport collects your Personal Data for an umbrella purpose: to offer each Data Subject who makes use of the Websites a safe, optimal and personal experience. Other Purposes for collecting and processing of your Personal Data through the Websites include:

• Providing access to and participation in the Websites and using the services and products offered through the Websites, including customer service;
• Diagnosing technical problems and managing technical support and the processing of questions related to the Websites;
• The commercialisation of the Websites;
• Direct marketing purposes, insofar as Brussels Airport has obtained the explicit consent of the Data Subject for this; 
• Operating, evaluating and improving the Website (including developing additional products and/or services, modifying and improving the current Websites, analysing our Websites, quality control activities and performing internal business operations such as accounting and auditing);
• Protecting against, identifying and preventing fraud and other unlawful activity, claims and other liabilities.

On the various social media channels on which Brussels Airport is active, and which are listed below, we provide offers, and also useful information, facts and the latest news about Brussels Airport. You can also easily contact us via one of our social media accounts, participate in discussions, react to posted content such as photos, ask questions or participate in any other way made possible by the social media channel used. For us, our social media accounts are an easy and quick way to maintain a close relationship with our passengers and the expected and/or desired experience while travelling, and to quickly address their concerns.

The social media channels we use include:

• Facebook;
• Twitter;
• Instagram;
• LinkedIn;
• Pinterest;
• Tumblr;
• Flickr;
• YouTube.

Personal Data that we Process

We can Process different categories of Personal Data, such as:

• Direct identification data (e.g. your first and last name);
• Indirect identification data (e.g. your country, postal code, date of birth);
• Electronic identification data (e.g. your IP address);
• Contact details (e.g. your email address);
• Personal characteristics (e.g. your sex, language, travel preferences);
• Photos and image recordings (e.g. your profile photo);
• Other categories of Personal Data that you communicate to us (via your social media).

We ask you not to post (sensitive) Personal Data of yourself or others on our social media channels in order to prevent possible misuse of such Personal Data, since these will then become publicly available.

We would prefer you, should you consider it absolutely necessary, to share such Personal Data via a private message or via email.

In the event that you share (sensitive) Personal Data on a page of a social media platform that is publicly accessible, Brussels Airport reserves the right to delete such Personal Data in order to protect you from possible misuse.

In general, we Process your Personal Data on the basis of your consent (to us and/or the relevant social media platform). You can withdraw your consent at any time by contacting us or the relevant social media platform. In other cases, we may Process your Personal Data in preparation, execution or termination of the agreement with you.

In addition, we may Process your Personal Data on the basis of our legitimate interests which, in specific cases, outweigh any possible harm to your rights. In that case, any possible prejudice to your rights is very limited, while the information for Brussels Airport is of crucial importance. Where we rely on these legal grounds for Processing, we shall limit the impact this may have on your privacy by minimising our use of it and providing adequate access and security safeguards to prevent unauthorised use.

Purposes for which we Process these Personal Data

Brussels Airport collects and uses your Personal Data in the context of social media for the following purposes:

• To answer questions and requests from you via social media in order to improve our customer service and process your request

In this case, we use your Personal Data for operational purposes. We use them, for example, to answer your question or request and to keep our services user-friendly. We can also use them to improve our services.

When we wish to Process your Personal Data for a Purpose other than that for which the Personal Data were obtained, we will contact you before further Processing those data.

• Organising online contests and campaigns via social media

Brussels Airport can organise contests and campaigns online on a regular basis. For more information on the Processing of your Personal Data for such Purposes, we refer to article 4.5 “Campaigns and (online) contests” of this privacy policy.

• Fan pages of Brussels Airport on social media

Brussels Airport has fan pages on various social media platforms. Depending on the specific situation, Brussels Airport can, together with the relevant media platform, acts as joint data controller, for example for the Processing of data for the compilation of page statistics. Page statistics are aggregated data that can give us greater insight into how people interact with our fan pages.

Please refer to the policy of the relevant social media platform if you have any further questions regarding the Processing of your Personal Data by the social media platform.

In the case of Facebook, page statistics may be based on Personal Data collected in connection with a visit by people to our page or interaction with our page and its contents. In doing so, Facebook assumes primary responsibility for Processing statistical data and complying with applicable obligations under applicable regulations regarding the Processing of statistical data. Only Facebook can make and implement decisions regarding the Processing of statistical data. Facebook decides at its own discretion how it fulfils its obligations. If you have any further questions about Facebook page statistics, please refer to Facebook's data policy: https://www.facebook.com/about/privacy.

• The use of social media profiles to sign up for the Brussels Airport wifi network and the virtual assistant on our Websites.

You may be able to log on to the Brussels Airport wifi network and the virtual assistant (chatbot) on our Websites, called BRUce, via login services of social media platforms. These services verify your identity and allow you the possibility of sharing certain Personal Data with us, such as your name and email address.

In that case, Brussels Airport will receive your Personal Data, which you have made available through the relevant social media channel. To manage your privacy settings on your social media platform profile page and specifically indicate what Personal Data you wish to share with us, please refer to the policy of the relevant social media platform.

In addition, we may use your data for the analysis, improvement and security of BRUce or other services.

You can download the Brussels Airport App free of charge from the application store available on your mobile device.

Personal Data that we Process

We can Process different categories of Personal Data, such as

• Location data
• Flight data

Purposes for which we Process these Personal Data

Brussels Airport (i) collects, (ii) uses and (iii) maintains the Personal Data provided by the Data Subject or which are collected by Brussels Airport for all Purposes that are necessary for the proper (technical) operation of the Brussels Airport App.

In general, Brussels Airport collects your Personal Data for an umbrella purpose: to offer each Data Subject who makes use of the Brussels Airport App a safe, optimal and personal experience. Other Purposes for collecting and processing of your Personal Data through the Brussels Airport App include:

• Provision of services

My flights. You can add all your scheduled flights to the Brussels Airport App to receive relevant information, such as the exact row number for check-in and baggage drop-off. If you agree to receive push notifications, we may send you notifications that are relevant to your additional scheduled flight.

Where is my car? If you come to Brussels Airport by car, you can use our "Where is my car?" function, which allows you to indicate which car park, on which level and at which number your car is parked. We shall store such information as a parking reminder in the Brussels Airport App so that you will never forget where you parked your car when you return.

• Location services

To and from Brussels Airport If you have given the Brussels Airport App your permission to use your location data and you are using the “to and from Brussels Airport” feature, Brussels Airport can Process your location data to calculate your travel time from your location to Brussels Airport or from Brussels Airport to a location of your choice. If you have not enabled the use of your location data, you can enter your location manually to calculate your travel time to and from the airport. In order to determine your location and to calculate your travel time, Brussels Airport may use an external service provider subject to the provisions of article 6. “Who has access to your Personal Data and how is your Personal Data protected when transferred outside the EEA?” of this privacy policy.

Brussels Airport will not Process your location data if you have not given your consent to do so. In the event that you have given your consent and wish to revoke it, you can always change your preferences in the (location) settings of your mobile device.

Personal Data that we Process

You can register for one of our online newsletters via our Websites or wifi registration portal by entering your email address. You will then be kept up to date with our latest news. We can also offer you the option to subscribe to our newsletter(s) through other channels, such as campaign registration forms and online contests. We shall, however, always ask you expressly for your consent to receive the newsletter.

Purposes for which we Process these Personal Data

We shall only use your email address to send you one of our newsletters to which you have consented. You can always unsubscribe from the newsletter(s) via the link at the bottom of each newsletter.

Brussels Airport regularly organises campaigns at the airport and/or (online) contests in which you can participate. Depending on the type of campaign and/or (online) contest, we may collect different types of Personal Data and store them on our servers.

Personal Data that we Process

Such Personal Data include:

• Direct identification data (e.g. your first and last name)
• Indirect identification data (e.g. your date of birth);
• Contact details (e.g. your postal address, email address, telephone number);
• Personal characteristics (e.g. your sex, language, country);
• (Profile) photo and video images;
• Electronic identification data (MAC address).

Purposes for which we Process these Personal Data

We shall only Process your Personal Data in order to determine the winner of the (online) contest and/or to provide you with material from a campaign at Brussels Airport, such as a photo taken in the context of a particular campaign. We can, however, give you the opportunity to expressly consent and indicate that you would like to receive further information about other (online) contests and/or campaigns organised by Brussels Airport. If so, we shall only retain your name and other relevant contact information, including all relevant information to enable customised communication, e.g. a proper salutation based on your gender or communication in your native language.

If you participate in an (online) contest, your name may be publicly announced on the relevant web page to indicate that you are the winner of such a contest. In the event that the winner of an (online) contest is published via social media, you may also be tagged in the winner's announcement with your publicly available username from the relevant social media channel.

When an event or campaign is organised at the airport, you may also be filmed or photographed when participating in such an event or campaign if you have given your prior and explicit consent. These photos and video images can be used for (external) communication of the event or campaign and can be published on our social media channels and/or our Websites. In the event that you appear in such (external) communication, or if you are photographed or filmed at the airport and you do not wish to appear in (external) communication, you can, pursuant to this privacy policy, ask for your photo and/or video image to be deleted.

We can collaborate with external parties, such as airlines, that make it possible to (co)organise a certain contest and/or campaign at Brussels Airport. We do not authorise these third parties to use or disclose your Personal Data, unless this is strictly necessary to perform services under our supervision or to comply with applicable legislation. We guarantee that your Personal Data will only be disclosed to such third parties to the extent necessary for them to perform their specific function. Such external parties shall in any event be subject to the provisions set out in article 6. “Who has access to your Personal Data and how is your Personal Data protected when transferred outside the EEA?” of this privacy policy.

In addition, we (or, as the case may be, our partners) may also Process your Personal Data in relation to your attendance at Brussels Airport. Details of these additional Processing activities are set out below.

1. Statutory obligations and duties of general interest

Protection of civil aviation. Brussels Airport carries out preventive security checks on passengers and luggage in the terminal. This is done in accordance with international and European legislation on civil aviation and the related safety and security aspects, including: (i) Regulation 300/2008 on common rules in the field of civil aviation security; (ii) Commission Implementing Decision of 16 November 2015 laying down detailed measures for the implementation of common rules in the field of civil aviation security, as mentioned in Article 18(a) of Regulation 300/2008; (iii) Commission Implementing Regulation 2015/1998 laying down detailed measures for the implementation of the common basic standards on aviation security; (iv) Belgian Act of 27 June 1937 on the regulation of aviation; (v) Belgian Royal Decree of 4 May 1999 on the regulation of the training and certification conditions of auxiliary agents and agents of the airport inspection; (vi) Belgian Royal Decree of 4 May 1999 on the regulation of the training and certification conditions of inspectors and deputy chief inspectors of the airport inspectorate; as may be amended from time to time.

Brussels Airport has decided to outsource this task to specialised security companies. Should your Personal Data be Processed, this will be done in the interests of civil aviation safety. The data on your boarding pass will be processed at the controlled access gates, i.e. the automatic boarding pass control, to give you legitimate access to the security restricted area of the airport. Access controls are also carried out on employees at Brussels Airport, whose badges are checked in order to gain access to the security restricted area of the airport.

Camera images. Your safety at Brussels Airport as well as that of our staff is very important to us. That is why we make use of surveillance cameras. We shall Process camera images for security Purposes (see legal grounds above), to improve (security) procedures, to manage traffic flows at the airport, to resolve incidents and manage claims (for damages), to manage goods and the operational process of Brussels Airport and for access control.

We shall not store the camera images for more than 30 days unless an incident has occurred that can be resolved using the relevant camera images, in which case the images will not be stored for longer than is necessary to resolve the incidents. To the extent necessary to comply with legal obligations, government agencies, such as the police and courts, may receive camera images that may contain your Personal Data.

In addition, Brussels Airport uses optical sensors that process images for a very short period of time (fraction of a second) and then the images are blurred so only (anonymous) silhouettes are shown. This density measurement is necessary for crowd control in the airport as part of security and passenger safety. It concerns crowd monitoring for the purpose of protecting a target-rich environment and ensuring (fire) safety in order to provide rapid evacuation at all times. Subsequently, based on past crowd density counting, we can manage bottlenecks and control passenger flows.

Passengers with reduced mobility. Brussels Airport is required by law to provide services for passengers with reduced mobility at the airport. Brussels Airport may subcontract this service to third parties but remains responsible for the Processing of your Personal Data. The legal basis is Regulation 1107/2006 concerning the rights of disabled persons and persons with reduced mobility when travelling by air.

If you have mobility problems and are travelling within Brussels Airport, you can ask for special assistance to help you move around the airport. You must request this service at least 48 hours prior to your scheduled time of departure via your airline or travel agent, who will provide the relevant Personal Data directly to one of our external care providers to take you to the gate in a wheelchair. In order to provide you with appropriate assistance, our external care provider shall Process your first and last name, date of birth, flight number, contact details and physical data, to the extent that this is necessary to provide you with appropriate assistance.

Medical services. Brussels Airport is required by law to set up a permanent service for urgent medical interventions, this on the basis of the Belgian Royal Decree of 21 June 2004 on the granting of the operating license for Brussels Airport.

If you have had to use the medical services of Brussels Airport, your medical data will only be used for the provision of medical services and will only be Processed by medical service providers, under their responsibility. Brussels Airport only receives reports from these medical service providers in light of incidents with regards to safety at the airport.

2. Optimisation of business processes and systems

In order to optimise Brussels Airport's business processes, such as the luggage process and the passenger process, and to optimise your travel experience at our airport, we may Process your Personal Data. If wifi and Bluetooth are enabled on your mobile device, we will track your passenger journey at our airport for statistical and analytical Purposes, and also for crowd management. If you do not want this, you must turn off your wifi and Bluetooth on your mobile devices.

Brussels Airport uses infrared cameras and sensors to trace wifi and Bluetooth signals to measure the number of passengers at certain locations within a certain time frame. This enables us to provide you with information about expected peaks, queues and waiting times at the airport. We only Process the unique Media Access Control (MAC) address of your mobile and wireless device(s), which does not contain a link to individual user data.

When a person passes a sensor, the active MAC address is linked between the various sensors installed at the airport to provide the origin and destination data, and also the travel time. The infra-red cameras do not make any images, but only measure the density of the crowd at a certain place and time.

The sensors use encryption techniques such as one-way dash, SSL encryption and re-hashing to ensure your privacy. For more information about the security measures that are taken to safeguard your privacy and the way in which your Personal Data is Processed, please refer to the privacy guarantee of our partner Veovo Ltd (BlipTrack): https://veovo.com/.

3. Provision of services and products

Customer Care. If you have a question, remark or complaint to raise with our Customer Care service, it is possible that we Process your Personal Data in order to help you further. We may pass on your Personal Data to third parties in order to answer your requests. We will always limit the amount of Personal Data Processed to what is necessary to provide you with an appropriate response to your inquiry.

Welcome Center. If you make use of our services at the information desk, it is possible that we Process your Personal Data in order to be able to help you further. We will always limit the amount of Personal Data Processed to what is necessary to provide you with the requested service.

Lost and found. If you lose something at our airport, you can make use of our “lost and found” service. You will then be asked to fill in a contact form, requesting your first and last name, email address, telephone number, as well as a description of the lost item. At the time of collection, you will be requested to fill in an acknowledgement of receipt. We may pass on your Personal Data to third parties in order to answer your question. This receipt will request name, email and ID number of the person collecting the item. We will never store your Personal Data for longer than necessary.

4. Market and/or satisfaction surveys

When you are at the airport, one of our external business partners may contact you to carry out a market and/or satisfaction survey, upon your explicit consent. Such external market research agencies will Process your Personal Data on our behalf and we have complete control over what happens to your Personal Data.

Depending on the type of market research, we may process Personal Data such as your age, postal code, gender, nationality, country of origin, destination, reason of travelling, commercial behaviour and/or the means of transport used to get to the airport. We will Process such Personal Data for statistical Purposes only, in particular the evaluation of our services in the context of forecasting.

To develop and manage our contractual and/or commercial relationships, we will process the contact details of (employees of) our current or future suppliers and partners.

The collection of these data (first and last name, address, email, telephone number, position in the company) is necessary for the conclusion and performance of our contracts and the maintenance of our business relations.

In order to improve our services, we collect analytical data.

We will only keep the data as long as necessary for these purposes, which in general corresponds to the duration of the relationship or contract and for the legal obligations thereafter.