Privacy Policy

At Aena we undertake to guarantee the use of our customers’ personal data in a transparent and secure manner, as a result of which we proceed to inform you of this privacy policy, in accordance with the provisions of the current regulations on Personal Data Protection and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights.

1. Who is the Data Controller?

Aena S.M.E., S.A. (hereinafter, Aena)

Address: Peonías, 12. 28042, Madrid.

Tax ID number: A86212420

Contact Telephone No.: (+34) 91 321 10 00

Mercantile Register of Madrid, Volume 28806, Folio 211, Section 8, Page M-518648.

Data Protection Officer: dpd@aena.es

2. What personal data may we process?

The personal data that Aena may process either come directly from you or are generated as a result of your browsing and use of the website or app. More specifically, the data that we may process include your:

  • Identification and contact details (name, surname(s), ID card number, address, email address and phone number).
  • Data on economic and transactional information (data related to purchases, bookings, orders, returns and payment methods).
  • Information on your tastes and preferences based on your browsing and the purchases you make.
  • In the event that you use the parking service and belong to Aena Club, your car’s number plate will be stored by Aena Club in order to establish how long you have used the parking services for and charge you for them.
  • In the event that you have enabled location services (the setting option on your device), Aena will compile information on your Wi-Fi access points or any related to your latitude and longitude, in such a way that this information can help us to display your location and provide you with our services.
  • Some companies that appear on the Food to Fly, Aena Travel and Shop to Fly portals (hereinafter “Aena Marketplaces”) inform us of the products and/or services purchased by you that have been initiated on them.
  • The comments and valuations that you publish on the products and services on offer on the Aena Marketplace portal. Please bear in mind that they will be regarded as public and non-confidential and that any user browsing the portal will be permitted access to such information.

We inform you that all the data that we request or may request are necessary for the purposes outlined in this privacy policy and that, if you do not provide such data, we will not be able to contact you or reply to any requests that you may make. We therefore reserve the right not to reply to or process any request if you do not provide us with the above-mentioned data.

It is important for you to guarantee that the personal data you provide us with are accurate and we may regularly ask you to review and update them to ensure that they are as accurate and truthful as possible.

3. Why do we process your data? On what legal grounds do we process them?

Any potential personal data that you may provide us with and any that may be collected via the cookies on this website or app will be processed for the purposes indicated below:

  • As a registered member of Aena Club (full customer):
    • Management of your membership of Aena Club and your subscription. Processing based on the contractual relationship established by virtue of acceptance of the Club’s Terms and Conditions.
    • The sending of information on the latest benefits of Aena’s services and how to gain access to them to members. To this effect, Aena will send you correspondence about its VIP services, parking facilities and other airport management services, as well as information on them, provided that you remain a member of the Club and that you have not objected to receiving the above.
      • We inform you that article 21.2 of the LSSICE (Law on Information Society Services and Electronic Commerce) enables us to do so, provided that we offer you the option of objecting to this processing by means of a simple and cost-free procedure. In this regard, Aena provides you with an easily accessible way of objecting to this correspondence by ticking the corresponding box at the moment you sign up, in each message that we send you and via the channels provided for said purpose in this policy. We inform you that the functioning of the service may be reduced if you object to this processing, as we will not be able to inform you of the benefits available to you as a member of the Club.
      • Aena Club is a service that Aena offers the collective of users registered as members thereof, the main and inherent purposes of which are to inform you of discounts, deals, offers, news and the benefits of certain services provided by Aena to which you may have access as a member of the club and to send you accurate and updated information on them which is related to your status as a member. However, any request to unsubscribe from the above correspondence will mean that we will not be able to inform you of the discounts, deals, offers, news and benefits that are applicable at any given time to the services offered through the Club. Consequently, if you do not wish to receive this correspondence containing information on these benefits, you may request to unsubscribe from it at any time via the channels provided for said purpose in this policy.
    • Sending out of quality and satisfaction surveys. Aena sends out these kinds of surveys on its services in order to ascertain its customers’ degree of satisfaction with them upon the basis of Aena’s legitimate interest in knowing their opinions, bearing them in mind in order to improve the quality of the services.
      • In this respect, we have proceeded to perform an internal analysis to weigh up your right to data protection and our interest in conducting this kind of survey so as to improve the user experience and the service itself, concluding that there is a reasonable expectation on your part with regard to this processing, during which no specially protected data are processed and no automated decisions are made.
      • You can object or request additional information on this processing by using the channels provided for said purpose in this policy or by sending an email to dpd@aena.es.
    • Sending of other electronic commercial correspondence. This electronic correspondence is sent by Aena without assigning your data to third parties. It may include special offers and discount coupons offered by airport shops or third-party companies with which Aena collaborates in the following sectors: cars and vehicle rentals, leisure, travel agencies, tourism, transport, airlines, catering, textiles, fashion, beauty and cosmetics, finance and insurance, the press and magazines, gambling and betting.
      • This processing is based on your consent, which you may revoke at any given time via the channels provided for said purpose in this policy.
    • Login management and subsequent monitoring of the products and/or services that the Club member acquires on the website, via the app and in the Aena Marketplace. In the event that you gain access to our web portals, the app and/or Marketplaces, your Aena Club membership data will be processed to allow you to log into the service and permit us to manage, process and monitor the products and/or services that you purchase. This processing is based on the performance of the contract by virtue of your acceptance of the terms and conditions of service.
    • Management of the environmental badge. In the event that you, as a member of Aena Club, book a parking space, a public consultation will be performed via the Statistical Portal of the DGT (General Traffic Directorate) to check the environmental badge associated with the vehicle’s number plate. This processing will be carried out in order to offer benefits and discounts to users with less polluting vehicles upon the basis of Aena’s legitimate interest in promoting environmental protection.
      • In this respect, we have proceeded to perform an internal analysis to weigh up your right to data protection and our interest in viewing the DGT’s statistics so as to improve the user experience, concluding that there is a reasonable expectation on your part with regard to this processing, during which no specially protected data are processed and no automated decisions are made.
      • You can object or request additional information on this processing by using the channels provided for said purpose in this policy or by sending an email to dpd@aena.es.
    • Customer profiling and segmentation. In the event that members associate their payments made via our mobile application with their status as members of Aena Club, Aena will process the information that is collected to create commercial profiles of them as members of Aena Club and segment the customers that form part of the Club in order to send them personalised commercial offers and improve their experience as users of our mobile application.
      • This processing is based on your consent, which may be revoked at any given time via the channels provided for said purpose in this policy.
      • This processing may involve profiling and decision-making with regard to the profile that is generated. More information in section 5. What do we mean in this policy by profiling and decision-making with regard to the profile that is created?
    • Management of number plate payments. The data on the vehicles’ number plates and the data on the credit cards provided by users in their Aena Club customer profiles will be processed in order to charge the parking fees. This processing is based on the performance of the contract by virtue of their acceptance of the terms and conditions of this service. For further information, view the Terms and Conditions of the Number Plate Payment Service.
    • We will process your data to perform an anonymisation process upon the basis of our legitimate interest, thus obtaining aggregate and anonymised data for further statistical uses and other legitimate business purposes.
      • In this respect, we have proceeded to perform an internal analysis to weigh up your right to data protection and our interest in performing these kinds of processes for statistical purposes, concluding that there is a reasonable expectation (deletion of all the data allowing your identification through deletion or aggregation processes or the replacement of such data by others that cannot be associated with a natural person), during which no specially protected data are processed and no automated decisions are made.
      • You can object or request additional information on this processing by using the channels provided for said purpose in this policy or by sending an email to dpd@aena.es.
  • When making a purchase or booking any of our services: (parking, VIP services, Aena Marketplaces) on our web portals or via our app, either as a member of Aena Club (full user) or as a guest (by registering an email address).
    • Upon completion of the purchase or booking process, the data you have provided will be processed for the purpose of managing and monitoring the products and/or services that you purchase or book on our website or via the app, processing which is based on the performance of the contract by virtue of acceptance of the specific terms and conditions of each of the services indicated above.
    • Sending out of quality and satisfaction surveys. Aena sends out these kinds of surveys on its services in order to ascertain its customers’ degree of satisfaction with them upon the basis of Aena’s legitimate interest in knowing their opinions, bearing them in mind in order to improve the quality of the services.
      • In this respect, we have proceeded to perform an internal analysis to weigh up your right to data protection and our interest in conducting this kind of survey so as to improve the user experience and the service itself, concluding that there is a reasonable expectation on your part with regard to this processing, during which no specially protected data are processed and no automated decisions are made.
      • You can object or request additional information on this processing by using the channels provided for said purpose in this policy or by sending an email to dpd@aena.es.
    • We will process your data to perform an anonymisation process upon the basis of our legitimate interest, thus obtaining aggregate and anonymised data for further statistical uses and other legitimate business purposes.
      • In this respect, we have proceeded to perform an internal analysis to weigh up your right to data protection and our interest in performing these kinds of processes for statistical purposes, concluding that there is a reasonable expectation (deletion of all the data allowing your identification through deletion or aggregation processes or the replacement of such data by others that cannot be associated with a natural person), during which no specially protected data are processed and no automated decisions are made.
      • You can object or request additional information on this processing by using the channels provided for said purpose in this policy or by sending an email to dpd@aena.es.
    • Sending of information on the products and services that you subscribe to. To this effect, Aena will send you correspondence about the service(s) you have subscribed to (VIP services, parking facilities and other airport management services) and information on them, provided that you have not objected to receiving the above.
      • We inform you that article 21.2 of the LSSICE (Law on Information Society Services and Electronic Commerce) enables us to do so, provided that we offer you the option of objecting to this processing by means of a simple and cost-free procedure. In this regard, Aena provides you with an easily accessible way of objecting to this correspondence by ticking the corresponding box at the moment you sign up, in each message that we send you and via the channels provided for said purpose in this policy.
    • Sending of electronic commercial correspondence to inform you of other products and/or services related to Aena’s airport management other than those you have already subscribed to. This electronic correspondence is sent by Aena without assigning your data to third parties and it refers to Aena products and services other than those you subscribe to.
      • This processing is based on your consent, which you may revoke at any given time via the channels provided for said purpose in this policy.
    • Sending of other electronic commercial correspondence. This electronic correspondence is sent by Aena without assigning your data to third parties. It may include special offers and discount coupons offered by airport shops or third-party companies with which Aena collaborates in the following sectors: cars and vehicle rentals, leisure, travel agencies, tourism, transport, airlines, catering, textiles, fashion, beauty and cosmetics, finance and insurance, the press and magazines, gambling and betting.
      • This processing is based on your consent, which you may revoke at any given time via the channels provided for said purpose in this policy.
    • Customer profiling and segmentation. Aena will process the information it collects in order to create commercial profiles and/or segment its customers in order to send them personalised commercial offers and improve their experience as users of our mobile application.
      • This processing is based on your consent, which may be revoked at any given time via the channels provided for said purpose in this policy.
      • This processing may involve profiling and decision-making with regard to the profile that is generated. More information in section 5. What do we mean in this policy by profiling and decision-making with regard to the profile that is created?
    • For the provision of the Aena Marketplace service (Food to Fly) by means of the geolocation of your data in order to locate you at the airport and provide you with the services on offer.
      • This processing is based on your consent, which may be revoked at any given time via the channels provided for said purpose in this policy.

The personal data of minors under fourteen (14) years of age will be collected and processed upon the basis of the permission and consent granted by their parents, guardians or legal representatives and sent electronically to ocpd@aena.es. Therefore, if you are under 14 years of age, please refrain from providing personal data if you have not received the consent of your parents, guardians or legal representatives. Aena cannot be held liable for the actions of a minor who is under fourteen (14) years of age or incapable. Aena may process the data of persons over fourteen (14) years of age with their consent, except in cases in which the Law requires the assistance of the holders of the parental authority or guardianship.

4. Who are your data shared with?

In the event of requesting a service for the International Airport of the Region of Murcia, your data will be assigned to Aena Sociedad Concesionaria del Aeropuerto Internacional de la Región de Murcia S.M.E., S.A., the subsidiary of Aena which manages the airport, for the provision of the service.

This assignment is made upon the basis of it being necessary for the performance of the contract.

Your data will be assigned to your bank for the payment of the services you have subscribed to, and, as appropriate, your company or firm, in cases in which said entity is the contractor of the service that you receive.

These assignments are made upon the basis of them being necessary for the performance of the contract.

Your data may be assigned to the companies of the Aena Marketplace in order to proceed with the management of the service and/or product you have subscribed to.

These assignments are made upon the basis of them being necessary for the performance of the contract entered into between you and Aena or between you and said companies.

Similarly, Aena may assign your data to third parties to which it is obliged to transmit information, including public authorities, in order to comply with the requirements of said authorities and the applicable regulations, as appropriate.

These assignments are made upon the basis of compliance with legal obligations.

Some companies participating in the Marketplace inform us of the products and/or services purchased by you, provided that they are initiated in the Marketplace.

These assignments are made upon the basis of the performance of the contract you enter into with this company when you make your purchase or subscribe to a service with it.

No further assignments or international transfers of data are envisaged unless there is a legal obligation in this respect.

5. What do we mean by profiling and decision-making with regard to the profile that is created?

Provided that Aena is legitimised to send you commercial correspondence based on your tastes and preferences, we will use your interactions on the website and the contracting of products and/or services to tailor our advertising to your preferences. Aena will process the information it collects in order to create commercial profiles and/or segment its customers in order to send them personalised commercial offers and improve their experience as users of our services.

You are also entitled not to be subject to decisions based on automated processing (including profiling), and you may exercise your right at any given time by following the instructions set out in point 7 “How can you exercise your data protection rights” of this policy.

6. How long will we retain your personal data for?

Your data will be retained throughout the period in which you maintain a relationship with Aena as a member of Aena Club, do not withdraw the consent you have granted and do not exercise your rights, as well as during the corresponding legal terms in order to deal with any potential claims and liabilities arising from the processing.

Personal data subject to processing based upon your consent will be retained to comply with the corresponding purposes until you revoke your consent.

Without detriment to the above, your data will also be kept duly blocked for as long as liabilities may arise from the execution of our contractual or pre-contractual relationship, as well as for the fulfilment of other legal obligations incumbent upon Aena. In this respect, Aena guarantees that it will not process the data unless they are necessary for the formulation, exercise or defence of claims or when they have to be provided to the Public Administration, Judges and Courts during the period of limitation of its legal rights or obligations.

The processing related to this subsequent retention is based upon the fulfilment of legal obligations, in particular the obligation laid down in the regulations on personal data protection.

7. What are your rights with respect to your personal data?

All data subjects are entitled to obtain confirmation as to whether or not their personal data are being processed. Similarly, the General Data Protection Regulation stipulates the following rights of data subjects:

  • To access their data
  • To request rectification or erasure of their data
  • To request a limitation on the processing of their data
  • The right to the portability of their data
  • The right to oppose the processing of their data
  • Not to be subject to automated decisions (profiling)

Your requests will be replied to as soon as possible and, in any event, within a period of one month following receipt of your request. Said period may be extended by another two months if necessary, taking into account the complexity and number of the requests. In any event, Aena will inform the data subject of the extension within the first month following the request.

Data subjects are entitled to exercise their recognised rights and to withdraw the consent they have granted at any time, without this affecting the management of the services they have subscribed to, by the following authorised means:

  • Via the “unsubscribe” link provided at the bottom of the correspondence received,
  • By logging into the portal or app and going to “My account” to manage their consent (if the user is registered as a member of Aena Club), or
  • Sending an email to ocpd@aena.es (indicating the right to be exercised in the subject line and, as appropriate, the data processing in question), writing to Calle Peonías, n.º 12, 28042-Madrid or visiting the Telematic Services Portal (https://serviciostelematicos.aena.es).

In the event of any queries, you can contact our Data Protection Officer at dpd@aena.es.

Data subjects are entitled to submit a claim to the Spanish Data Protection Agency (AEPD) as the supervisory and control authority in matters of data protection in Spanish territory (www.aepd.es).

8. Modifications of this Privacy Policy

Aena reserves the right to amend this Privacy Policy. Aena may modify these terms and conditions, informing its members thereof, a requirement that the parties expressly agree will be deemed to have been fulfilled following the publication of the variations on www.aena.es or through Aena Club or any other Aena communication channel.