Last updated: 25th May 2018

This section of our website is designed to help you understand what we do with information about people, referred to as “personal data”.

In summary, we use personal data:

  • to help keep the airport and the people who travel through it and work in it safe
  • to comply with our obligations under the law and the terms of our airport operator’s licence
  • to operate the other facilities and services that the airport offers, like parking
  • to promote the airport, and the facilities, services and shopping available in the airport campus
  • to operate our online services, our apps and our myGatwick membership programme

Because that is a wide range of activities, we’ve divided this privacy information into a number of different sections, reflecting the different ways you might interact with us, in order to help you get to the information you want quickly.

The data controller of your information is Gatwick Airport Limited (company number 01991018) of 5th Floor, Destinations Place, Gatwick Airport, Gatwick, West Sussex RH6 0NP, United Kingdom.  If you have any questions or concerns about the information on this page, or about what we do with personal data, you should email us at dpo@gatwickairport.com, or to write to us at the above address, for the attention of the data protection officer.

The passenger journey – including movement around the airport, check-in, baggage and security

To get you through the airport and onto your flight safely we process certain personal data in partnership with the airlines and the authorities. In summary, we use personal data:

You can click on a link above to view more information, including what personal data we process for that purpose, our legal basis for processing it and who we share it with.

How is personal data used to ensure that passenger hold baggage is in the correct place?

When you check-in baggage (whether via bag drop or check in desk) Gatwick Airport will allocate an identifier to your bag, and link your bag to your boarding card with that identifier. We do so to (a) ensure that your bag is loaded onto the correct aircraft; and (b) the aircraft does not take off with your bag on-board where you have not boarded the flight.

If you are taking part in our self-boarding trial, we will achieve the second purpose by comparing two biometric (facial recognition) images, one taken at the bag drop location and the other at the self-service boarding gate.

  • What personal data is used, and where is it obtained from?
    We obtain your name, title, date of birth, gender, passport number and flight details from the barcode included on your boarding card (issued by the airline you are flying with).

    We will create a record of your bag(s) and link it/them to you.

    If you are taking part in our self-boarding trial, we will also process biometric data, namely two images taken by facial recognition cameras, one taken at the bag drop location and the other at the self-service boarding gate.

  • What is Gatwick Airport’s legal basis?
    Our legal basis for ensuring your bag is loaded onto the correct aircraft is our legitimate interest of providing a service to the airline which has contracted us to do so, and in ensuring that your bag is loaded onto your flight.

    Our legal basis for ensuring the aircraft does not take off with your bag on-board where you have not boarded the flight is compliance with legal obligations imposed on the airlines by the Department of Transport and Civil Aviation Authority.

    Where you are taking part in a self-boarding trial requiring us to process biometric data, our legal basis for processing the biometric data is your explicit consent.

  • Is personal data shared with anyone to achieve this purpose?
    Your bag’s status/location will be shared with the airline and their contractors.

    The airline already holds the other personal data, as we receive it from them via the barcode on your boarding card.

    All of this personal data may be shared with the companies that operate Gatwick Airport’s baggage management system(s) so that they can perform their task, and with our IT contractors providing the technology.

  • How long does Gatwick Airport keep personal data for this purpose?
    We keep passenger records for 30 days, and biometric data for 24 hours.

How is personal data used to ensure adequate segregation of departing domestic passengers in accordance with UK Border Force requirements?

Facial recognition cameras are placed at the eGates before security and on reconciliation points shortly before you board a domestic flight. This ensures the person boarding the plane is the same person that passed through security, and did not come directly from an international flight without passing through the UK border.

  • What personal data is used, and where is it obtained from?
    We collect two biometric images for all domestic passengers. The first is collected at the eGates as you enter security, and the second when your boarding card is scanned shortly before you board the plane.

    The first image is linked to your passenger details via the barcode on your boarding card, and matched with the second image.

    Where the images do not match, Gatwick Airport security staff will collect additional information to log the incident and process you manually, and in some circumstances will escalate the issue to UK Border Force.

  • What is Gatwick Airport’s legal basis?
    Our legal basis is compliance with legal obligations imposed on us by UK Border Force.

    Our legal basis for processing a special category of personal data (biometrics) is that the processing is in furtherance of the substantial public interest in helping to secure the border of the United Kingdom (a function conferred on us by law).

  • Is personal data shared with anyone to achieve this purpose?
    We may be required to share your information with your airline and the authorities, including UK Border Force, CAA and DfT.

    All of this personal data may be shared with the companies that operate Gatwick Airport’s baggage management system(s) so that they can perform their task including, and our IT service providers.

  • How long does Gatwick Airport keep personal data for this purpose?
    We keep passenger records for 30 days, and biometric data for 24 hours.

How is personal data used to ensure that the airport is meeting the national immigration and security wait time obligations under UK law and Home Office and CAA regulations?

We use facial recognition cameras to monitor how long it takes randomly selected passengers to pass through the immigration hall on arrival and the airport security area on departure. This is in order to help the UK Border Force meet its obligations on immigration wait times and help us to meet our legal obligations relating to security wait times.

  • What personal data is used, and where is it obtained from?
    We collect two biometric images for randomly selected passengers arriving at the immigration hall. The first image is collected upon entering the hall and the second on the immigration desk or eGate.

    We collect two biometric images for randomly selected departing passengers, the first at the security eGates, and the second in the baggage reclaim area.

  • What is Gatwick Airport’s legal basis?
    Our legal basis for doing this is compliance with legal obligations imposed on UK Border Force by the Home Office and on us by the Civil Aviation Authority.

    Our legal basis for processing a special category of personal data (biometrics) is that the processing is in the substantial public interest (a function conferred on us by law).

  • Is personal data shared with anyone to achieve this purpose?
    Biometric images will not be shared, but aggregated statistics derived from them may be shared with UK Border Force, airlines and the Civil Aviation Authority for the purposes of performance monitoring.

    We also share this personal data with our IT service providers, for instance the supplier of the biometric system.

  • How long does Gatwick Airport keep personal data for this purpose?
    We keep biometric data for two hours.

How is personal data used to monitor and report on security incidents?

Gatwick Airport security personnel record the details of security related incidents, for instance someone being where they shouldn’t be or an assault, and the persons they concern.

  • What personal data is used, and where is it obtained from?
    We will collect details of any persons involved, for instance their names, characteristics and contact details – we will obtain this from the individuals concerned and or witnesses of the incident.

    Details of the incident may include special categories of personal data, for instance where a crime has been committed or because a person has suffered physical or mental harm as a result.

  • What is Gatwick Airport’s legal basis?
    Our legal basis is to comply with legal obligations imposed on us by the Civil Aviation Authority.

    Where we process special categories of personal data our legal basis is that the processing is in the substantial public interest (a function conferred on us by law).

  • Is personal data shared with anyone to achieve this purpose?
    Incident reports may be shared with the Civil Aviation Authority, law enforcement, security services or other public authorities.

    We also share this personal data with our IT service providers, for instance our email and document storage providers.

  • How long does Gatwick Airport keep personal data for this purpose?
    We will retain this personal data for 30 days.

How is personal data used to prevent dangerous substances entering departure lounges?

If we detect traces of potentially dangerous substances when you or your personal belongings are swabbed at security, Gatwick Airport security staff will ask you a number of screening questions to determine whether there is a potential threat.

  • What personal data is used, and where is it obtained from?
    We will collect your name, passport number, date of birth, nationality, flight details, contact details and the answers you give to screen questions.

  • What is Gatwick Airport’s legal basis?
    Our legal basis is to comply with legal obligations imposed on us by the Civil Aviation Authority.

    Where we process special categories of personal data our legal basis is that the processing is in the substantial public interest (a function conferred on us by law).

  • Is personal data shared with anyone to achieve this purpose?
    This information may be shared with the Civil Aviation Authority, law enforcement, security services or other public authorities.

    We also share this personal data with our IT service providers, for instance our email and document storage providers.

  • How long does Gatwick Airport keep personal data for this purpose?
    We will retain this personal data for up to six months.

How is personal data used to assist passengers with reduced mobility?

Where you have requested assistance travelling through the airport or boarding the plane, whether from your airline or at one of the kiosks in the airport, we will collect certain personal data to allow us to provide this assistance to you.

Please note however that we provide this as a service to your airline. You should therefore read your airline’s privacy policy for more information on what personal data is processed, why and how to exercise your rights in respect of this data.

How is personal data used to monitor the flow of people and to detect potential incidents?

Gatwick Airport monitors the location of Wi-Fi enabled devices to monitor the flow of people and to detect potential incidents.

  • What personal data is used, and where is it obtained from?
    Gatwick Airport strives not to collect personal data for this purpose. All MAC addresses (a number unique to a device) are anonymised and are not paired with other data which could reveal your identity to us.

  • What is Gatwick Airport’s legal basis?
    In the unlikely event that Gatwick Airport does collect personal data, it does so on the basis of its legitimate interest in understanding the flow of people around the airport and in detecting potential incidents as soon as possible (which may be indicated by irregularities in the movement of people, for instance congregation or people moving away from an area).

  • Is personal data shared with anyone to achieve this purpose?
    MAC addresses are anonymised before sharing with anyone.

  • How long does Gatwick Airport keep personal data for this purpose?
    The anonymised data is retained for up to two years. Un-anonymised MAC addresses are not stored.

Security & CCTV – in and around the terminal buildings and car parks

How is my personal data used for security purposes?

  • What personal data is used, and where is it obtained from?
    Any of the personal data referenced in this privacy statement may be used by Gatwick security personnel or the authorities in order to ensure the security and safety of the airport and everyone that travels through or works in it.

  • What is Gatwick Airport’s legal basis?
    Where we use personal data for security purposes, our legal basis for doing so in order to comply with legal obligations imposed on us by the Department for Transport, Civil Aviation Authority and/or the securities services.

  • Is personal data shared with anyone to achieve this purpose?
    Personal data may be shared with the Department for Transport, Civil Aviation Authority and/or the securities services for security purposes.

    We also share this personal data with our IT service providers.

  • How long does Gatwick Airport keep personal data for this purpose?
    We will not retain personal data specifically for this purpose. We will only use personal data for this purpose where we already hold it for another purpose.

How is CCTV used around the airport?

Because we are an airport, we have a large number of CCTV cameras around the airport campus, in all of staff, passenger only and public areas (including our car parks).

CCTV is used to ensure the security of Gatwick Airport and the safety of all persons that travel through and work in it, including crime prevention and incident investigation.

  • What personal data is used, and where is it obtained from?
    We collect CCTV images from all of the cameras around the airport.

    Occasionally these will be linked to specific individuals by name, for instance where CCTV images are downloaded in relation to a security or health and safety incident, or where we need to in order to facilitate an access request.

    Where you make an access request in relation to CCTV, we will record additional information, for instance records of the CCTV images you viewed and when you viewed them.

  • What is Gatwick Airport’s legal basis?
    Our legal basis is that this processing is in the public interest under a vested authority from the Department of Transport.

    To the extent the use of CCTV involves the processing of special categories of personal data, our legal basis is that the processing is in the substantial public interest (a function conferred on us by law). 
  • Is personal data shared with anyone to achieve this purpose?
    CCTV images and the identify of those persons in them (to the extent we know them) may be shared with the Civil Aviation Authority, law enforcement, security services or other public authorities for instance in connection with specific incidents or security reviews.

    CCTV images are hosted and managed by an external provider.
  • How long does Gatwick Airport keep personal data for this purpose?
    We retain CCTV images for 30 days, unless they are downloaded from our CCTV system within that timeframe, for instance in connection with an incident, access request or to share with relevant authorities.

CCTV images downloaded from the system in connection with an incident will be retained until the investigation and any related claims have been closed.

Wi-Fi at Gatwick Airport

The free Wi-Fi at Gatwick Airport is operated by “Boingo”, and offered directly to you by them.

For more information on how Boingo processes personal data, please see its privacy policy, which is available when you sign up for your Wi-Fi access.

Parking, GatwickConnects & Premium products

When you book parking at a Gatwick Airport car park, book a connection through GatwickConnects or book premium products online, for instance “Premium Security”, we will process personal data:

You can click on a link above to view more information, including what personal data we process for that purpose, our legal basis for processing it and who we share it with.

How is personal data used to process and administer your booking?

Where you book parking, a flight through GatwickConnects or a premium product, we use personal data to process and administer your booking, including: to reserve your parking/product, to send you booking confirmation, to send you service information such as expiry reminders or traffic information, to ensure your car is ready for collection (e.g. if your flight is early or late), to store you preferences for future bookings and for our internal accounting and business administration purposes.

  • What personal data is used, and where is it obtained from?
    We use your name, address, mobile phone number, email address, flight details and payment card details.
  • What is Gatwick Airport’s legal basis?
    Our legal basis for processing is that this processing is necessary for us to perform our contract with you. Without this personal data, we would not be able to offer you parking or the premium products.
  • Is personal data shared with anyone to achieve this purpose?
    Where you have booked a car parking service operated by a third party, for instance “Car&Away”, we will share your booking details with that third party so that they can perform their service.

    We will also share your personal data with the third party technology providers we have engaged to operate parts of our eCommerce website and/or parking systems, but only if they need to have it in order to do their jobs for us. Examples include the companies that host our systems, our payment providers and car park operators.
  • How long does Gatwick Airport keep personal data for this purpose?
    We keep this personal data for six years.

How is personal data used to provide the service, for example to give you access to the car park, and to record your arrival and departure?

When you arrive at the car park entrance, automatic number plate recognition cameras will take a picture of your car. Depending on lighting, window tinting and other conditions, that picture can incidentally include a picture of one or more of its occupants.

We use this picture to recognise your vehicle registration so we can grant you access to the car park and record the condition of your car on your arrival.

We use the same technology, for the same purposes, when you exit the car park.

  • What personal data is used, and where is it obtained from?
    We only use the photos taken by our automatic number plate recognition cameras.
  • What is Gatwick Airport’s legal basis?
    To the extent we use these photos to allow you to enter and exit the car park, our legal basis is that the processing is necessary to perform our contract with you, without which we would not be able to offer you parking services.

    To the extent we use these photos to record the condition of your car, our legal basis is our legitimate interest in bringing or defending legal claims.
  • Is personal data shared with anyone to achieve this purpose?
    We will share your personal data with the third party technology providers we have engaged to operate the car parks and automatic number plate recognition systems on our behalf, but only if they need to have it in order to do their jobs for us.

    We may also share personal data collected by our automatic number plate recognition systems with the security services, DVLA or other relevant authorities for security purposes and detection and/or investigation of crime.
  • How long does Gatwick Airport keep personal data for this purpose?
    We retain the automatic number plate recognition photos for no more than six months, unless we need them in connection with a claim that has been, or we believe will be, made.

Shopping in the airport

Gatwick Airport does not process personal information in relation to your shopping experience at the airport.

Where a shop within the airport scans your boarding card, they are doing so to determine whether tax is payable on the transaction, and this does not involve sharing of data by or with Gatwick Airport, as the relevant personal data is contained within the barcode itself, which is issued by your airline.

For more information on how the shops within Gatwick Airport process personal data, please see their respective privacy policies.

The Gatwick Airport Website

When you interact with our website, we may process personal data:

You can click on a link above to view more information, including what personal data we process for that purpose, our legal basis for processing it and who we share it with.

How does Gatwick Airport use personal data when I sign up to the myGatwick programme?

MyGatwick provides a convenient portal to access Gatwick Airport offers and flight notification services. When you sign up to myGatwick, we will process your personal data:

The information below explains how personal data is used to give you access to the MyGatwick members portal.

  • What personal data is used, and where is it obtained from?
    We use your name, email address and password to provide you with a myGatwick user account.

    We collect this personal data directly from you.
  • What is Gatwick Airport’s legal basis?

    Our legal basis is that this process is necessary for us to perform our contract with you for access to the myGatwick portal.

    Without this personal data, we would not be able to provide you with access.
  • Is personal data shared with anyone to achieve this purpose?
    This personal data is shared with our IT service providers, including the company that hosts our website.

How does Gatwick Airport use personal data to action feedback sent to it via its website?

We will use this personal data in the same way as we use any other feedback received from the public. For more information please see “How does Gatwick Airport use personal data to manage passenger/visitor feedback?” under “customer services and community engagement” below.

How does Gatwick Airport use personal data to send flight notifications?

The Gatwick Airport website allows you to set up email notifications about your flight.

  • What personal data is used, and where is it obtained from?
    We will use your name, email address and flight details.

    We collect this information directly from you.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is that this process is necessary for us to perform our contract with you for provision of the flight notification service.

    Without this information, we would not be able to provide this service to you.

  •  Is personal data shared with anyone to achieve this purpose?
    This personal data is shared with our IT service providers, including the company that hosts our website and the company that provides us email delivery services.
  • How long does Gatwick Airport keep personal data for this purpose?
    We keep this personal data for one hour after your flight has landed or taken off.

How does Gatwick Airport use personal data to action safety incident reports you send us?

The Gatwick Airport website allows anyone to log a safety incident report, although its most often used for people that work on the Gatwick Airport campus.

  • What personal data is used, and where is it obtained from?
    We will collect your name, company, incident details and any images you upload as part of the notification.

    If you provide it to us, we will also use your email address, for instance to contact you for further information.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is that the processing is necessary in order to comply with our legal obligations in connection with security and health and safety. 
  • Is personal data shared with anyone to achieve this purpose?
    This personal data is shared with our IT service providers, including the company that hosts our website.
  • How long does Gatwick Airport keep personal data for this purpose?
    We keep this personal data until the matter has been concluded.

How does Gatwick Airport use personal data to process “reserve and collect” requests you make via its website?

The Gatwick Airport website allows you to reserve goods from certain shops on the airport campus for collection on your date of departure or arrival.

  • What personal data is used, and where is it obtained from?
    We will collect your name, contact details and flight details.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is that the processing is necessary in order to perform our contract with you for the reserve and collect service.  Without this information we would not be able to provide the service to you.
  • Is personal data shared with anyone to achieve this purpose?
    Details of your order will be passed to the relevant shop.

    This personal data is also shared with our IT service providers, including the company that hosts our website and our email delivery service.
  • How long does Gatwick Airport keep personal data for this purpose?
    We keep this personal data for 90 days after the date of collection.

How does Gatwick Airport use personal data to sign you up to newsletter and enter competitions at your request?

Where you sign up to a newsletter via our website, we will process your personal data as set out in “How does Gatwick Airport use personal data to keep the community up-to-date on developments at the airport” under “customer services and community engagement” (for the community newsletter) or as set out in “Marketing and newsletters” (for our main newsletter).

Where you enter a competition via our website, we will process your personal data as set out below.

  • What personal data is used, and where is it obtained from?
    We collect your name, email address and other contact details.
  • What is Gatwick Airport’s legal basis?
    Where you enter a competition our legal basis is that the processing is necessary in order to perform our contract with you. Without this processing we would not be able to enter you into the competition.
  • Is personal data shared with anyone to achieve this purpose?
    This personal data is shared with our IT service providers, including the company that hosts our website and our email delivery service.

Marketing and newsletters

Unless you have opted-out of marketing and newsletters at the time we collected your personal data, we will use personal data to:

You can click on a link above to view more information, including what personal data we process for that purpose, our legal basis for processing it and who we share it with.

How does Gatwick Airport use personal data to market products and services and to send newsletters?

  • What personal data is used, and where is it obtained from?
    We use your email address to send you marketing and newsletters, and your name to address it to you.

    Where provided, we may use your telephone number for marketing calls.

    We collect this information directly from you.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is our legitimate interest of promoting products and services available in and around Gatwick Airport.

    Where we collect this personal data from you which we intend to use for sending market purposes and/or to send newsletters, we will always offer you the opportunity to opt-out of marketing.

    We also allow you to unsubscribe at any point by following the instructions contained in each marketing email and newsletter we send. 
  • Is personal data shared with anyone to achieve this purpose?
    We only share this personal data with our IT service providers, for instance the companies that host our marketing database and operate our email delivery system.

How does Gatwick Airport use personal data to tailor the marketing and newsletters we send, based on what we think you are mostly likely to be interested in?

Where you have not opted-out or unsubscribed from marketing emails and newsletters, we will use personal data to tailor marketing and newsletters to what we think you are most likely interested in.

For instance, if we know you are departing on a certain date, we might tell you about a particular promotion we have in place on that date.

  • What personal data is used, and where is it obtained from?
    This personal data may contain your personal interests, car registration number, order history, airline, flight number, flight operator, flight departure information, flight arrival information, date of flight and home address.

    We collect this personal data from you during other interactions we have with you.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is our legitimate interest of optimising our marketing spend by showing you content that is most likely to be of interest to you, and your legitimate interest of receiving relevant marketing. 
  • Is personal data shared with anyone to achieve this purpose?
    We only share this personal data with our IT service providers, for instance the companies that host our marketing database and operate our email delivery system.

How does Gatwick Airport use personal data to remember you, in case you opt back in to marketing and/or newsletters at a later date?

  • What personal data is used, and where is it obtained from?
    We use your name, contact details, personal interests, car registration number, order history and previous flight details, all as obtained from you during our course of dealings with you.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is our legitimate interest in optimising sales by remembering the details of previous recipients of marketing and/or newsletters in case they re-engage with us. 
  • Is personal data shared with anyone to achieve this purpose?
    We only share this personal data with our IT service providers, for instance the companies that host our marketing database and operate our email delivery system.
  • How long does Gatwick Airport keep personal data for this purpose?
    We will retain this personal data for 24 months after the last activity on your account.

Customer services & community engagement – including complaints, tours of the airport and community engagement projects

Gatwick Airport processes personal data to ensure passengers have a positive experience, and to administer community engagement projects. We use personal data to:

You can click on a link above to view more information, including what personal data we process for that purpose, our legal basis for processing it and who we share it with.

How does Gatwick Airport use personal data to manage passenger/visitor feedback?

When you give us feedback, whether by phone, email, letter or in person, we will keep a record of it.

  • What personal data is used, and where is it obtained from?
    We will retain your name and contact details, the details of your complaint or feedback and records of what we have done about it.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is our legitimate interest of ensuring we take on and/or address customer feedback received, or where the matter is a complaint, to defend potential legal claims.

    Where we keep records of what we have done about it that involves a financial transaction, we keep those records to comply with legal obligations imposed on us by HMRC.
  • Is personal data shared with anyone to achieve this purpose?
    We do not generally share this personal data with external recipients, but may occasionally share it with our external advisors for the purposes of obtaining advice.

    We also share this personal data with our IT service providers, for instance the companies that host our website and CRM system.
  • How long does Gatwick Airport keep personal data for this purpose?
    We will keep this personal data for three years from the date of your complaint or feedback or, if earlier, until the matter is closed.

How does Gatwick Airport use personal data to keep the community up-to-date on developments at the airport?

Gatwick Airport has a community newsletter, “AirMail”, which it sends to subscribers quarterly.

  • What personal data is used, and where is it obtained from?
    We use your name, address, and email address, which we collect via the subscription form on our website.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is that this processing is necessary in order to perform our contract with you.

    Without this processing, we would not be able to send you the community newsletter. 
  • Is personal data shared with anyone to achieve this purpose?
    We only share this personal data with our IT service providers, for instance the companies that host our marketing database and operate our email delivery system.

How does Gatwick Airport use personal data to administer pre-organised tours around the airport?

Gatwick Airport offers tours to schools and other organisations in the local area.

  • What personal data is used, and where is it obtained from?
    Before the day of the tour, Gatwick Airport requires copies of identification to be sent for each visitor, for instance passport or driving licence.

    Details from your ID document will be included on your temporary security pass on the day of your visit, for instance your name and passport or driving licence number.

    This will be collected via the tour organiser or directly from the individual.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is that this processing is necessary to comply with legal obligations imposed on us by the Civil Aviation Authority and the Department of Transport relating to security of the airport.
  • Is personal data shared with anyone to achieve this purpose?
    We share this personal data with our IT service providers, for instance the companies that host our database and operate our email delivery system
  • How long does Gatwick Airport keep personal data for this purpose?
    We keep this personal data for up to six months after the date of your tour.

How does Gatwick Airport use personal data to address noise complaints?

Gatwick Airport keeps records of noise complaints it receives to respond to that complaint, for noise planning purposes and to identify and remedy regular issues (for instance that certain flights are consistently causing noise complaints).

  • What personal data is used, and where is it obtained from?
    We collect your name, contact details, location and other details regarding your noise complaint.

    We obtain this personal data directly from you.
  • What is Gatwick Airport’s legal basis?
    Our legal basis is that this processing is necessary to comply with legal obligations imposed on us by the Civil Aviation Authority and Department of Transport. 
  • Is personal data shared with anyone to achieve this purpose?
    We may share this information with the Civil Aviation Authority and/or the Department of Transport for reporting purposes.

    We may also share this personal data with our external advisors to the extent we need to in order to obtain advise from them, for instance on remediation plans.

    We also share this personal data with our IT service providers, for instance the companies that host our database and operate our email delivery system
  • How long does Gatwick Airport keep personal data for this purpose?
    This personal data is retained for seven years.

Health and safety

Where an incident occurs in or around Gatwick which does cause, or could have caused, injury to a person, we keep records of that incident in order to (a) to help us ensure that similar incidents do not happen in the future; and (b) to bring or defend legal claims.

  • What personal data is used, and where is it obtained from?
    We may collect your name, contact details, date of birth, gender, details of the incident that you were involved in and details of any injuries sustained.
  • What is Gatwick Airport’s legal basis?
    Our legal basis to help us ensure that similar incidents do not re-occur is that the processing is necessary for us to comply with our legal obligations in relation to health and safety (medical records are not retained for this purpose).

    Our legal basis for the purpose of bringing or defending legal claims is our legitimate interest in doing so, and where the records contain special categories of data, that the process is necessary to bring or defend legal claims.
  • Is personal data shared with anyone to achieve this purpose?
    We share this personal data with our IT service providers, for instance the suppliers of our incident tracking system, companies that host our database and operate our email delivery system.
  • How long does Gatwick Airport keep personal data for this purpose?
    We retain this personal data for a period of seven years.

Who we share personal data with

Internally, Gatwick Airport only grants access to personal data to those people that need access to that data to carry out their role.

Externally, Gatwick Airport may share personal data with third parties for specific purposes, as set out in the sections above. It may also from time to time share personal data with the following categories of recipients:

  • its service providers, for instance:
    • the companies that manage our IT infrastructure
    • companies that provide us with cloud based IT systems, such as our CRM system and
    • its external advisors, for instance IT consultants, accountants and lawyers.
  • Where we share personal data with service providers we will always ensure that the service provider is committed contractually to only use personal data in compliance with Gatwick Airport’s instructions and data protection law;
  • its regulators, law enforcement, intelligence services and other government authorities, where they require us to do so and
  • potential buyers of or investors in our business where necessary in connection with a due diligence exercise.

Transfers of personal data outside of the European Economic Area

Gatwick Airport generally stores and processes personal data inside the European Economic Area.

However, in some circumstances its service providers may transfer personal data outside the European Economic Area.

Where they do so, Gatwick Airport requires its service providers to do so in compliance with data protection law, typically requiring them to enter into standard contractual clauses approved by the European Union as providing equivalent protection to what would be in place had the personal data remained in the European Economic Area.

We can provide more information on the non-EEA countries to which we transfer your personal data this on request.

Your rights and how to exercise them

The law gives you certain rights in respect of the information that we hold about you.  Below is a short overview of those rights.

  • Access
    With some exceptions designed to protect the rights of others or in respect of airport security, you have the right to a copy of the personal data that we hold about you. We may make a reasonable charge for additional copies of that data beyond the first copy, based on our administrative costs. Where the data is data that you have given to us, you have the right to receive your copy of it in a common electronic format, and to provide copies of it to other people if you wish.
  • Correction
    You have the right to have the personal data we hold about you corrected if it is factually inaccurate. This right does not extend to matters of opinion, such as decisions which our security staff may make about your fitness to fly.
  • Deletion
    In some limited circumstances, you have the right to have personal data that we hold about you erased (the right to be forgotten”). This right is not generally available where we still have a valid legal reason to keep the data (for example, for security reasons or because we are obliged to do so by law).
  • Objection
    You have the right to object to our processing of your personal data where we rely on “legitimate interests” as our legal basis for processing, but we may be able to continue processing if our interest outweighs your objection.
  • Opting out of marketing
    You have the right to require us to stop using your personal data to send you marketing information. If you want us to stop sending you marketing information, the quickest and most efficient way is to use the provided “unsubscribe” links in our communications (although you can contact us direct if you prefer).
  • Temporary Restriction
    You also have the right in some circumstances to request that temporary restrictions are placed on how we process your personal data. For example if you contest its accuracy or where we are processing it on the basis of our legitimate interest and you contest our assessment that our interest overrides your rights.
  • Withdrawing Consent
    If we are processing your personal data on the basis of your consent, you have the right to withdraw that consent at any time, in which case we will stop that processing unless we have another legal basis on which to continue.

The easiest method of exercising your rights as set out above is to:

  • email our data protection officer on dpo@gatwickairport.com or
  • write to us at 5th Floor, Destinations Place, Gatwick Airport, Gatwick, West Sussex RH6 0NP, United Kingdom, marked for the attention of the data protection officer.

Please note that in order to protect your privacy, we may ask you to prove your identity before we take any steps in response to a request you have made.

Whilst we would always ask that you contact us first, you also have the right to lodge a complaint about our handling of your personal data with the Information Commissioner’s Office.  You can contact them on 0303 123 1113.