E PARKING WEBSITE PRIVACY NOTICE

Athens International Airport S.A. (AIA) acknowledges the importance of privacy of your personal data.

This Privacy Notice sets out the principles followed by AIA in processing your personal data through the services provided by this Website, in compliance with applicable data protection regulatory framework and AIA’s Privacy Policy.

1. Website Layout – Structure of www.secure-parking.aia.gr

The "e-parking" platform www.secure-parking.aia.gr (the “Website”) is an e-commerce platform for the public; a gateway to the official airport parking services, loyalty program and bookings/prepayments of parking spaces that Athens Airport provides to passengers, visitors and tourists.

We must point out that third-party websites, that you may visit by following links provided on our Website, are outside of our sphere of control and are governed by different terms of use and different Privacy Policies for the management of personal data. For these policies, our Company does not take any responsibility.

2. Data Controller:

Athens International Airport S.A. (AIA)
Administration Building (B17)
P.C. 19019, Spata Attica
Greece

Holds all rights and obligations reserved for such capacity under the European General Data Protection Regulation (GDPR 2016/679) and the Greek Law 2019/4624, for processing personal data through the Website.

3. AIA’s Data Protection Officer

Manager, Data Protection and Compliance
Athens International Airport S.A. (AIA)
Administration Building (B17)
P.C. 19019, Spata Attica
Greece
Email address: privacy@aia.gr

4. Categories of Data Processing

Information about you is collected in the following ways:

• When navigating through our Website, your browser collects cookies and similar technologies, as demonstrated in our Cookies Policy.
• When filling in your personal and / or payment details in step 3 of the booking process (https://bit.ly/2Vq7voH) to book a parking space in the airport parking lots, that is, to enter into a contract with the AIA, to provide you with the service you request.
• When using our Website to subscribe to newsletter in order to receive targeted offers and promotions.
• When filling your personal details to register to the Park€Win loyalty program https://secure-parking.aia.gr/athenscustreg/athens/NewRegistration.aspx so as to earn points upon every booking and redeem points when you can.
• When login to your Park€Win account so as to earn points upon every booking and / or redeem points or edit/update your personal details.
• When you insert the details of your booking (booking reference) to edit/ cancel an upcoming booking or view the history of past bookings.

5. Categories of personal data collected

Depending on the purpose of your visit and the service you wish to receive from our Website, the type of personal data we collect may include name, surname, credit card details, email address, telephone number, vehicle license plate, as well as additional information, such as Attiki Odos transceiver number (e-PASS), airline and flight no.

6. Website Security

Every effort is made to protect your information, while accessing our Website. We use appropriate technical, organizational and administrative measures to protect any personal information we process about our visitors, our customers and their end users. AIA utilises a valid trusted certificate that is used to encrypt the communication exchanged between your device and the hosting server. Αll information is encrypted prior to being transmitted over the Internet, through HTTP over TLS (Transport Layer Security). However, please note that no Internet transmission can ever be guaranteed 100% secure, and so we encourage you to take care when disclosing personal information online and to use readily available tools, such as Internet firewalls, anti-virus and anti-spyware software, and similar technologies to protect yourself online.

Any payment transaction is encrypted using SSL technology and is processed by a trusted merchant (third party). We record your personalized preferences and we apply double opt in mechanism with confirmation e-mail messages, where applicable.

You are responsible for keeping passwords that are provided to you or you have chosen yourself, so to access certain restricted portions of our Website. Passwords are secret and are provided to you solely, we therefore kindly ask you to not share your password with anyone else. AIA will not contact you directly or indirectly asking for your password.

7. Data Retention

The data retention limits are set by our respective corporate policy and depend on the purpose of service you wish to obtain from our Site and its respective modules and is clearly demonstrated therein:

• Data provided in the "e-Parking” is retained for a maximum of five (5) years from the booking exit date.
• Email addresses provided for subscription purposes to our newsletters are kept until an unsubscribe request has been sent by you.
• Consumer Booking Access Period via the software “My Account” from the booking exit date is retained for 52 weeks.

8. Third Party Processing

Personal data are also processed by our affiliated companies, which are committed to comply with the GDPR while, for the purposes of IT hosting and maintenance, information is located within the European Economic Area. In particular:

• "E-parking" data are processed by the website developer, Chauntry Ltd, New Century House, Cordwallis Street, Maidenhead, Berkshire SL6 7BE, UK (enquire@chauntry.com).
• The parking operator, Cityzen Parking and Services S.A., Kifissias Ave 294 & Tzouna 1, 145 63 Kifissia (privacy@cityzen.com.gr).
• The parking management system, is developed, provided and supported by DESIGNA, Verkehrsleittechnik GmbH, Faluner Weg 3, 24109 Kiel, GERMANY (stefan.timm@designa.com),
• "DOPE STUDIO", Mesogeion 451, 153 43, Ag. Paraskevi, Attica (hello@wearedope.com) is the developer of the consent management application.
• Grammedia LTD (ContactPigeon), Leof. Pentelis Str. 74, Chalandri 15234 (help@contactpigeon.com) undertakes the email marketing campaigns on our behalf and Mindshare Media Company, 350 Kifisias & Chr.Lada Chalandri GR 15233, runs our digital advertising campaigns.

9. Data Sharing

We share your personal data with competent authorities and companies within Airport Community, following your consent and in relevance with the scope of each processing activity.

10. Your rights to access and manage your personal data

Personal data legislation in force gives you the right to ensure that your personal data is being processed lawfully. You may exercise your rights to access, rectify, delete, transfer your data, restrict or object the data processing by communicating your request to AIA’s Data Protection Officer as indicated above under point (3). More information on the data subject rights are presented in our Privacy Policy.

11. Complaint to competent Data Protection Authority

You may exercise your right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr), if you consider that AIA’s processing of your personal data infringes the applicable legislation. Furthermore, you have the right to judicial remedy, in case you believe that your rights under the GDPR have been infringed as a result of AIA’s data processing.

12. Revisions of Website Privacy Notice

This Website Privacy Notice may be subject to future amendment. The applicable version will be always presented on our Website.