Airo Catering Services Latvija SIA is the primary airline catering company based at Riga International Airport (RIX). Operating as a part of the global Gate Group network, it prepares and supplies in-flight meals, airport retail inventory, and train hospitality services.
Privacy policy
Privacy Policy
Preamble
This Privacy Notice describes the collection and use of your personal data
in the context of your usage of our websites according to the legal requirements.
Please note that the use of particular web content on our websites may involve further processing
of your personal data which will be described in complementary Privacy Notices that have to be
considered additionally.
1. Controller
Controller pursuant to Art. 4 paragraph 7 General Data Protection Regulation (‚GDPR‘) is
Airo Catering Services Latvija SIA
International Airport Riga
Marupes parish, LV-1053
Latvia
Phone: +371 67207201
E-Mail: dataprotection@airo.lv
Contact details of our Data Protection Team
You can reach our Data Protection Team:
via Mail at:
Data State Inspectorate
Blaumana Street 11/13-11,
Riga, LV-1011, Latvia
Phone. : 67 22 31 31
Fax : 67 22 35 56
E-mail : info@dvi.gov.lv
Why do we process your data (purpose of the processing) and what is the legal basis?
We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and Latvian National Law on Personal Data Processing.
We process personal data to fulfil contractual obligations pursuant to Art. 6(1), Subparagraph 1(b) GDPR. In particular this includes:
- Providing catering onboard
- sending catering order confirmations
We also process your data for the purposes of our legitimate interests pursuant to Art. 6(1), Subparagraph 1(f) GDPR
- for the purpose of preventing fraud, e.g. credit card fraud
- to enforce legal claims, including debt collection and defence in the event of legal disputes (for all onboard purchases over 70 EUR)
- for auditing purposes
- for advertising, provided that you have not objected to the use of your data
- To communicate with you, to the extent that an ongoing business relationship with you or your employer already exists, or if we desire to establish such a relationship (business contacts).
We process your data based on your consent pursuant to Art. 6(1), Subparagraph. 1(a) GDPR for specific purposes, especially:
- for personalised use of the website and personalised offers, including profiling
- to support processes relating to usage of the website, with reminder features and live chats
- for analytical purposes so that we can optimise our offer for you.
Any consent given can be withdrawn at any time. This also applies to the withdrawal of declarations of consent given to us before the GDPR came into force, in other words, prior to 25/05/2018. Withdrawal of consent has effect for the future only and does not affect the lawfulness of data processed up until the withdrawal.
How long are your data stored?
Your personal data is erased as soon as it is no longer required for the purposes stated. Your personal data are deleted as soon as they are no longer needed for the specified purposes. However, we must sometimes continue to store your data until the retention periods and deadlines set by the legislator or supervisory authorities. These generally amount to three to ten years. We may also retain your data until the statutory limitation periods have expired (usually three years, but up to 30 years in some cases), provided that this is necessary for the establishment, exercise or defence of legal claims. After that, the relevant data are routinely erased.
Who receives your data?
In the context of the data processing above and the respective legal bases given (contract performance, legitimate interests, consent or processing obligations under law), your data may be passed on to the following categories of recipients:
- AirBaltic, Smart Lynx airlines
- International airport Riga
- state agencies and bodies, e.g. based on entry requirements or police activities and investigations.
In the process, personal data may be transmitted to third countries or international organisations. For your protection and the protection of your personal data, appropriate safeguards are provided for such data transmissions as per and in accordance with legal requirements.
If these transmissions do not have a legal basis or are to a country for which the EU Commission has not issued an adequacy decision, we use EU standard contractual clauses.
The objective of these supplements is also to include the processing of business card information in the normal course of business.
Information on EU standard contractual clauses is available here on the European Union website.
Collection of personal data when you visit our website(s)
When visiting our website(s) without personally providing information to us, personal data is collected
by our web server collecting the data transmitted in connection with your access.
The data transmitted includes:
• IP-Address
• Name of the access provider
• Browser type, version of browser software and language of the browser
• Operating system
• Date and time of access
• Content of access
• Amount of data transferred
• Access status (successful transmission/error)
• Website(s) the access was forwarded to
• Website(s) accessed
In addition to the aforementioned data collection, our website(s) collect data in connection
with the usage of cookies (see Section 4. of this Privacy Notice).
Cookies
We use cookies on our website(s). Cookies are text files that are stored on a user’s computer system.
If a user accesses our website(s) a cookie file can be saved on the local operating system.
A cookie contains information that enables the identification of a user returning to our website(s).
Session cookies process information in so-called Session-IDs which serve towards identifying a person
during continuous access to our website(s). Session-IDs are deleted automatically when closing the browser.
Persistent cookies will remain in the cookie files of your browser after the browser has been closed.
Persistent cookies are deleted after a certain period of time has elapsed. The length of this period
varies amongst the different cookies used.
The use of cookies can be disabled by changing the security settings on your browser.
Further adjustments with regard to the cookie usage can be made in the security settings
of your browser to block certain cookies (e.g. cookies of third parties) or disable cookies altogether.
Detailed information concerning third-party cookies can be found in Section 5. of this Privacy Notice.
Inclusion of third-party services and cookies
1.1. Google Analytics
Our website(s) may use Google Analytics (‚GA‘), a web analysis service of Google Inc.
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“).
GA enables us to analyze the usage of our website(s) by cookie storage. On our behalf,
GA creates reports concerning the activities on our website(s) and provides us with the respective
information for statistical purposes and in order to optimize our website.
Anonymized data only (e.g. anonymized IP addresses, the date and time the page was viewed,
the length of your stay or the page from which you came to our website) is stored and used on
our server using Google Analytics technology. This information does not enable identification
of visitors to this website. IP addresses are anonymized before they are stored. This means that
Google will anonymize your IP address while the data is still within member states of the European Union
or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases
will the full IP address be transmitted to a Google server in the US and anonymized there.
The IP address which is transmitted by your browser will not be brought into contact
with other data stored by Google.
You can deactivate GA with the following browser-plugin
provided by Google: http://tools.google.com/dlpage/gaoptout?hl=de
1.2. Google Marketing/Re-Marketing-Services/Google Adsense
Our website(s) may use the online advertisement service Google AdSense (‘GAS’).
This service allows us to integrate advertisements of third parties according to potential user interests.
In general, these advertisements will be labeled as Google advertisements. In this context, statistical
information about the user may be collected and transmitted to third parties
(available at https://support.google.com/dfp_sb/answer/94149).
You can deactivate the service by using the opt-out mechanism
provided by Google: http://www.google.com/ads/preferences
Further information concerning the usage of your personal data for advertising purposes,
settings, and opt-out options can be found at https://policies.google.com/privacy/partners?hl=en
(‘How Google uses data when you use our partners’ sites or apps’),
https://policies.google.com/technologies/ads?hl=en (‘Advertising’),
https://adssettings.google.com (‘Advertising Preferences’).
1.3. Google-Maps
Our website(s) may use the online cartographic service Google Maps (‘GM’).
The implementation of a map section may include the collection of personal data by Google.
The form and extent of data collection in this context is determined by Google and may include
the transmission of an IP address and a connection to a Google user account. If you do want
to restrict the connection to a Google user account we advise you to log out before using the
respective service. Further information concerning GM can be found at:
https://www.google.com/intl/en_US/help/terms_maps.html
1.4. Google-Tage Manager / Google AJAX Search API
Our website(s) may use the Google Tag Manager and the Google AJAX Search API in
order to administrate and browse our website(s). The form and extent of data collection
in this context is determined by Google.
Contact possibility via E-Mail/contact form/use of comment functions
If you make use of the possibility to contact us via E-Mail or a provided contact form,
the provided information (your E-Mail address, possibly your name and telephone number)
will be saved by us in order to process your request. The personal data collected in this
context will be deleted if the storage is no longer necessary for this purpose.
Alternatively, we may restrict access to the stored data if legal retention periods apply.
If you contact us via E-Mail a secure transfer can only be guaranteed in case of encrypted
communication. A transmission of confidential data shall be sent by postal mail.
The usage of comment functions on our website(s) includes the processing of the information
provided by you and may include the processing of your IP address in this context.
Social-Media-Plugins
Our website(s) may use social media plugins. We make use of the so-called two-click-solution,
which means that initially no user data is transferred to the plugin providers when accessing our website(s).
By clicking on the button of a social media plugin you are activating the plugin which may lead
to a data transfer to the plugin provider and eventually the connection to an existing user profile.
The plugin provider may be seated outside the European Union (e.g. USA) which may lead to
a data transfer in a third country. To prevent/minimize data transfer in this context we advise you
to delete cookies prior to activating the plugins. We do not determine the data collection in this
context and advise you to take note of the applicable privacy notices of the respective plugin providers.
Data transfer to third parties
In general data transfer to third parties is only conducted in the cases mentioned in this Privacy Notice.
In addition, data transfer to third parties may occur if:
• we have received your explicit consent (Art. 6 paragraph 1 sentence 1 a) GDPR);
• the processing is necessary in connection with legal claims except if the respective interests
are not overridden by the interests or fundamental rights and freedoms of the data subject
(Art. 6 paragraph 1 sentence 1 f) GDPR);
• the processing is necessary for compliance with a legal obligation
(Art. 6 paragraph 1 sentence 1 c) GDPR);
• the processing is necessary for the performance of a contract with the data subject
or the performance of steps at the request of the data subject prior to entering into a contract
(Art. 6 paragraph 1 sentence 1 b) GDPR)
What are your data protection rights?
Airo Catering Services Latvija is committed to ensuring fair and transparent processing. That is why it is important to us that data subjects can not only exercise their right to object but also the following rights where the respective legal requirements are satisfied:
- Right to information, Art. 15 of the GDPR
- Right to correction, Art. 16 of the GDPR
- Right to deletion (“Right to be forgotten”), Art. 17 of the GDPR
- Right to limit processing, Art. 18 of the GDPR
- Right to data transmissibility, Art. 20 of the GDPR
- Right to object, Art. 21 of the GDPR
To exercise your right, please email
dataprotection@airo.lv
Please provide the following details so that we can identify you:
- Name
- Postal address
- E-mail address and optionally: customer number or booking code or ticket number
If you send us a copy of your ID, please black out all other information apart from your first and last name and address.
In order to be able to process your request, as well as for identification purposes, please note that we will use your personal data in accordance with Art. 6 para. 1 (c) of the GDPR.
Data security
Personal data processed by us are protected against loss, falsification and unauthorized
third-party access by adequate technical and organizational measures.
In order to provide a secure transmission of data between your browser and our systems,
we generally use Secure Socket Layer (‘SSL’) encryption technology to encrypt communication
between your browser and our web server. URLs of websites using an SSL-encryption start with https://.
Update of the Privacy Notice and contact to our Data Protection Officer
Our Privacy Notice may be updated according to changes to our website(s).
You can find the current version of our Privacy Notice on our websites.
For further questions and suggestions in relation to data protection, you may contact our
Data Protection Officer via the contact details provided in this Privacy Notice.