Bahrain Airport Company is committed to respecting your privacy and protecting your personal data. We recognise our obligation to keep sensitive information secure and have created this statement to share and explain how your personal data is handled and collected while visiting our website(s) and using our mobile application(s).
The legal basis for the processing of your personal data /mobile application is derived from Law No. (30) of 2018 with Respect to Personal Data Protection law.
Bahrain Airport Company (BAC) is the controller of processing the personal data collected about you via our platforms.
The company contact information:
Bahrain Airport Company – Building: 124, Road: 2403, Block 224, Muharraq, Kingdom of Bahrain
You can find out more about Bahrain Airport Company here.
1.1 Collection of Personal Data
The data collected falls under the following categories:
1.1.1 Name and contact data
We collect data that you provide directly to us by filling the “Contact Us” form. The data we collect includes your name, nationality, country of residence, and telephone number.
1.1.2 Technical data
While browsing our websites, we collect certain usage information such as the number and frequency of visitors to our websites. This information includes which webpage you just came from, which webpage you navigate to, what browser you are using, your device ID, and your IP address. This collective data helps us to conduct research on our users’ to better serve you by understanding how much our platforms are being used in addition to your interests and behaviour.
Our mobile website(s) and mobile application(s) could access mobile device location if you have enabled location services on your mobile device. We collect your device location data to enable us to provide the most suitable format and content. If you would like to restrict our collection of your location data, please adjust the settings on your device.
While using our mobile application(s), certain information will be gathered and stored about your usage of the mobile application(s). This information does not identify you personally. We collect and store information such as the number of times the application(s) have been opened or the interactions or actions completed in the application. We also receive aggregate data from the platforms that distribute our Apps to various app stores, such as the number of people who download the App, and mobile set-up information (e.g., device model, App version, country, language, and mobile carrier). We do not, however, receive information unique to you or your use of our App(s).
If you turn on push notifications in the mobile application(s), we store your mobile device ID to deliver those push notifications to your device. If, at any time, you wish to stop receiving push notifications then this may be done by going into “settings” on your device and turning off notifications for our mobile application(s).
1.2 Storage of Personal Data
When you fill the “Contact Us” form, the information is sent as an email to an account with restricted access. The information is also stored in the database on our hosting server for backup and reference purposes.
1.3 Retention of Personal Data
The data mentioned under section 4.1.1 are retained for five years. If you want your information to be removed from our database, please contact us through the communication channels mentioned above or by filling the “Contact Us” form. We will remove it anytime if there are concerns about your privacy.
1.4 Use of Personal Data
We will use this data for specific purposes, such as:
- Responding to queries
- Profiling and statistical analysis
We will retain your personal data as required for the effective delivery of our services while complying with legal obligations mandated by the law.
1.5 Selling or Sharing of Personal Data
Selling your personal information to third parties is against our policies and procedures. We do not share your personal information with third parties, however, an aggregated, anonymized data is periodically transmitted to third parties to provide analytics services.
Your data is hosted on Amazon Web Service and will be processed by Goggle Analytics tool with both service providers situated in a country that has established a personal data protection law.
We do not share personal information you have provided to us without your consent. In certain situations, we may be required to disclose personal data in response to legal requests by government authorities, including meeting national security or law enforcement requirements, in which:
- Doing so is appropriate to carry out your own request.
- We believe it is needed to enforce our legal agreements or that it is legally required.
- We believe it is needed to detect, prevent, or address fraud, security, or technical issues.
1.6 Information Security
The security of your personal information is important to us. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received.
To safeguard your personal data, the electronic storage and transmission of personal data will be secured with appropriate security technologies and controls including, but not limited to, storing personal data on secured servers, restricting access to personal data on a ‘need to know’ basis, encryption, etc.
We take reasonable steps to personally protect data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. But you should keep in mind that the use of the internet cannot be made entirely secure, and we are not able to fully guarantee the security and integrity of the data
1.7 Data subject Rights
Under the Personal Data Protection legislation, you have several rights in respect of the processing of your personal data by us as mentioned below. If you want to exercise your rights, please contact us through the communication channels mentioned above or by filling the “Contact Us” form.
1.7.1 Right to view Personal Data
You are entitled to request for the data that our platforms processes about you as well as certain information regarding the processing of your data, by contacting us through the communication channels mentioned above or through “Contact us” page. We will provide the information within fifteen working days of receipt of the request.
1.7.2 Right to Delete Personal Data
You are entitled to request to remove your personal information from our database if the data is inaccurate, incomplete, or outdated or if there are concerns about your privacy by contacting us through the communication channels mentioned above or by submitting a request using “Contact us” form. Please attach a proof of your identity to the request. We will remove your data within ten working days of receipt of the request.
1.7.3 Right to object
In certain cases, you are entitled to object to BAC legally on the way your personal data is being processed. You can learn more about your rights by reading the Personal Data Protection law 30 of 2018.
1.7.4 Right to submit a complaint
You have the right to lodge a complaint if you are dissatisfied with the way BAC is processing your personal data through any of the communication channels mentioned above or by filling the “Contact Us” form.