POLICY STATEMENTS
Bahrain Airport Company is committed to respecting your privacy and protecting your personal data. We recognize our obligation to keep sensitive information secure and have created this statement to share and explain how your personal data is handled and collected while visiting our website(s) and using our mobile application(s).
The legal basis for the processing of your personal data /mobile application is derived from Law No. (30) of 2018 with respect to the Personal Data Protection law.
In this privacy policy statement, the words "we", "our" and "us" refers to Bahrain Airport Company, and “you” and “your” refers to the user of the Website(s) and the mobile application(s).
This Privacy policy applies to Bahrain Airport Company website(s), mobile application(s), and mobile website(s) (collectively referred to as the “Platforms”).
Bahrain Airport Company (BAC) is the data controller of processing the personal data collected about you via our platforms.
The company contact information:
Bahrain Airport Company – Building: 124, Road: 2403, Block 224, Muharraq, Kingdom of Bahrain
You can find out more about Bahrain Airport Company here.
The primary point of contact for all issues arising from this Privacy Policy is our Risk and Compliance Director, who can be contacted on the following communication channels:
Email: information.security@bac.bh
Telephone: +973 17353490
Post mail: P.O. Box 24924, Kingdom of Bahrain, referencing “Privacy Policy”, attention to Director Risk and Compliance.
If you have any questions, concerns, or complaints regarding our compliance with this Privacy Policy, we encourage you to first contact our Risk and Compliance Director. We will investigate and attempt to resolve complaints and disputes as quickly as possible, and in any event, within the timescales mentioned in the below statements.
1.1 Collection of Personal Data
The data collected falls under the following categories:
1.1.1 Name and contact data
We collect data that you provide directly to us by filling out the “Contact Us” form. The data we collect includes your name, nationality, country of residence, and telephone number.
1.1.2 Technical data
While browsing our websites, we collect certain usage information such as the number and frequency of visitors to our websites. This information includes which webpage you just came from, which webpage you navigate to, what browser you are using, your device ID, and your IP address. This collective data helps us to conduct research on our users to better serve you by understanding how much our platforms are being used in addition to your interests and behavior.
Our mobile application(s) could access mobile device locations if you have enabled location services on your mobile device. We collect your device location data to enable us to provide the most suitable format and content. If you would like to restrict our collection of your location data, please adjust the settings on your device.
While using our mobile application(s), certain information will be gathered and stored about your usage of the mobile application(s). This information does not identify you personally. We collect and store information such as the number of times the application(s) has been opened or the interactions or actions completed in the application. We also receive aggregate data from the platforms that distribute our Apps to various app stores, such as the number of people who download the App, and mobile set-up information (e.g., device model, App version, country, language, and mobile carrier). We do not, however, receive information unique to you or your use of our App(s).
If you turn on push notifications in the mobile application(s), we store your mobile device ID to deliver those push notifications to your device. If at any time, you wish to stop receiving push notifications then this may be done by going into “settings” on your device and turning off notifications for our mobile application(s).
1.2 Storage of Personal Data
When you fill out the “Contact Us” form, the information is sent as an email to an account with restricted access. The information is also stored in the database on our hosting server for backup and reference purposes.
1.3 Retention of Personal Data
The data mentioned under section 4.1.1 are retained for five years. If you want your information to be removed from our database, please contact us through the communication channels mentioned above or by filling out the “Contact Us” form. We will remove it anytime if there are concerns about your privacy.
1.4 Use of Personal Data
We will use this data for specific purposes, such as:
- Responding to queries
- Profiling and statistical analysis
We will retain your personal data as required for the effective delivery of our services while complying with legal obligations mandated by the law.
1.5 Selling or Sharing of Personal Data
Selling your personal information to third parties is against our policies and procedures. We do not share your personal information with third parties, however, aggregated, anonymized data is periodically transmitted to third parties to provide analytics services.
Your data is hosted on Amazon Web Service and will be processed by Google Analytics tool with both service providers situated in a country that has established a personal data protection law.
We do not share personal information you have provided to us without your consent. In certain situations, we may be required to disclose personal data in response to legal requests by government authorities, including meeting national security or law enforcement requirements, in which:
- Doing so is appropriate to carry out your own request.
- We believe it is needed to enforce our legal agreements or that it is legally required.
- We believe it is needed to detect, prevent, or address fraud, security, or technical issues.
1.6 Information Security
The security of your personal information is important to us. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received.
To safeguard your personal data, the electronic storage and transmission of personal data will be secured with appropriate security technologies and controls including, but not limited to, storing personal data on secured servers, restricting access to personal data on a ‘need to know basis, encryption, etc.
We take reasonable steps to personally protect data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. But you should keep in mind that the use of the internet cannot be made entirely secure, and we are not able to fully guarantee the security and integrity of the data
If you have any questions about the security of your personal information, you can contact us through the communication channels mentioned above or by filling out the “Contact Us” form.
1.7 Data Subject Rights
Under the Personal Data Protection legislation, you have several rights in respect of the processing of your personal data by us as mentioned below. If you want to exercise your rights, please contact us through the communication channels mentioned above or by filling out the “Contact Us” form.
1.7.1 Right to view Personal Data
You are entitled to request to remove your personal information from our database if the data is inaccurate, incomplete, or outdated or if there are concerns about your privacy by contacting us through the communication channels mentioned above or by submitting a request using the “Contact us” form. Please attach proof of your identity to the request. We will remove your data within ten working days of receipt of the request.
1.7.2 Right to Delete Personal Data
You are entitled to request to remove your personal information from our database if the data is inaccurate, incomplete, or outdated or if there are concerns about your privacy by contacting us through the communication channels mentioned above or by submitting a request using “Contact us” form. Please attach a proof of your identity to the request. We will remove your data within ten working days of receipt of the request.
1.7.3 Right to object
In certain cases, you are entitled to object to BAC legally on the way your personal data is being processed. You can learn more about your rights by reading the Personal Data Protection law 30 of 2018.
1.7.4 Right to submit a complaint
You have the right to lodge a complaint if you are dissatisfied with the way BAC is processing your personal data through any of the communication channels mentioned above or by filling out the “Contact Us” form.
1.8 Changes to the Privacy Policy
We may amend this Privacy Policy occasionally to reflect any changes to the way in which we process your Personal Data or changing legal requirements. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is used.
If we make major changes in the way we collect or use information, we will post an announcement on our platforms. You undertake the responsibility to frequently review the privacy policy to be aware of any updates.
