(EU Regulation 2016/679 on the protection of natural persons
with regard to the processing of personal data)
This Privacy Notice concerns the provision of employees’ personal data to the Athens International Airport S.A. (AIA) “i-learn” platform.
AIA acknowledges and respects the importance of your privacy and commits to safeguard the availability, integrity and confidentiality of personal data throughout the entire retention period. This Notice provides you with useful information on the purpose and the means that your personal data is collected and processed, in the context of employees’ participation in the “i-learn” platform. Moreover, this Notice describes your rights regarding such processing, in compliance with applicable data protection legislation.
1.Data Controllers:
-
“Athens International Airport S.A.” (AIA), as the Airport Operator with corporate seat at Administration Building (B17), Spata Attica, postal code 190 19, as defined in EU Regulation 2016/679 and holding all rights and obligations reserved for such capacity under the Law.
AIA’s i-learn platform authorized representatives may be contacted at: [email protected]
State Authorities, corporations, or other legal entities operating at the Airport hold the rights and obligations of the role of Data Controller, as defined in EU Regulation 2016/679, with regard to the processing of the personal data of their employees participating in the ”i-learn” platform.
2.AIA’s Data Protection Officer may be contacted:
- Through AIA’s website: https://www.aia.gr/privacy and dedicated email address: [email protected]
-
By correspondence at the following postal address:
Manager, Data Protection & Compliance Dept
Athens International Airport S.A.
Administration Building (B17)
190 19 Spata, Attica
3.Type of personal data processed:Identification data, Airport ID No., professional status/position, training records at AIA concerning individuals employed by companies and State Authorities operating within the Airport Community, as well as employer details.
4.Purpose and legal basis on which your data are being processed:Processing is necessary for compliance with AIA’s obligation as an airport operator, in accordance with the European Regulation 2014/139 "laying down requirements and administrative procedures related to aerodromes pursuant to Regulation (EC) No 216/2008 of the European Parliament and of the Council".
The processing enables AIA to facilitate training and to assess, certify, document and maintain training records for personnel involved in the operation, management, maintenance and administration of the Airport.
Employee personal data are enrolled on the “i-learn” platform by their employer’s assigned representative, in order to facilitate training and document training and skills records. Representatives have access only to the data of their own uploaded records.
5.Third party processing:
- Personal data may be shared with the Hellenic Civil Aviation Authority (HCAA), where required under applicable law, for the fulfilment of its supervisory responsibilities.
-
“Digitech”, formerly known as “WIDE Services e-Learning Solutions Architect”, is AIA’s contractor, responsible for the technical support of the private infrastructure (Microsoft Azure cloud,
https://azure.microsoft.com/en-us) and the operation of the i-learn platform.
Address: 46-48 El. Venizelou Ave. Kallithea, Athens 17676, and may be contacted at:
www.wideservices.gr and tel: (+30) 210 4223330.
6.Security of Processing:The Athens International Airport (AIA), as well as the companies acting as data processors, implement appropriate organisational and technical measures to ensure the reliability of system operations and the availability, confidentiality, and integrity of your personal data during their collection and processing, for the entire period of their retention. The data are stored within the European Economic Area (EEA).
7.Retention period: Personal data provided to AIA through the i-learn platform, (including training records) are retained for five (5) years during the trainee’s employment and for four (4) additional years after the end of the trainee’s employment, or for longer where required under the applicable regulatory framework.
Note: AIA may retain personal data for the duration of any period necessary to establish, exercise or defend any legal rights or at such longer retention period as may be required by applicable law.
8.Enforcement of data subject rights:
The personal data legislation in force provides to all data subjects the right to be informed about the lawful processing of their personal data. Moreover, all data subjects involved in the specific processing activity may exercise the rights to request to access, rectify, delete, transfer their data and moreover, to object and restrict such data processing.
Any such request may be made following communication with the respective Employer / authorized representative of each Company and State Authority operating in the Airport Community, who in turn will communicate it to AIA’s Data Protection Officer as appropriate. The exercise of any right may be subject to applicable regulatory restrictions.
Right to lodge a complaint with the competent Data Protection Authority at: www.dpa.gr
