At Highland Aviation we all understand that we have a responsibility to protect and respect your privacy and look after your personal information. General Data Protection Regulation (GDPR) comes into effect on 25th of May 2018 and changes the rules on what we can do with your personal information and how we hold it. This Privacy Notice explains what personal information we hold, how we use your personal information and how we store your personal information securely. We must advise that this policy is subject to change, so please check our website on a regular basis for any further changes.
Who are we?
Highland Aviation operates from Inverness Airport provide a number of services to the public including;
Private Aircraft Handling
Engineering Services and Support
We also provide services to Highlands and Islands Airports Limited (HIAL) in the collection of landing and parking charges for private aircraft.
We are a Registered company in Scotland [SC357935] with our offices at: Unit 101, Inverness Airport, UK, IV2 7JB.
How the law protects you
Data protection laws state that we are only able to hold or use your personal information if we have valid reasons to do so. The reasons we hold your personal information include, but not limited to;
Performance of a contract (Handling services, Flight training, Engineering services, Air tours).
Your consent or to contact you.
How do we collect personal data from you?
We receive information about you in a number of ways;
When you use our website to purchase items or complete forms on our website.
If you contact us by phone, email or otherwise in respect of any of our products and services or during the purchasing of any such product.
When you undertake a flight with us.
If you visit Inverness airport and pay landing / parking fees or receive handling services.
If your aircraft is being maintained by us.
If you provide us with personal information through a third party (for example when purchasing a gift voucher through another seller), you warrant that you have granted express consent to the third party for the disclosure and use of your personal information.
What type of data do we collect from you?
The personal information that we may collect from you includes;
Additionally if you are flying with us we may also require:
Your date of birth
Next of Kin details
If we are providing customs services as a handling agent :
We use information about you in the following ways:
To process orders that you have submitted to us
To provide you with products and services
To comply with our contractual obligations we have with you
To help us identify you and any accounts you hold with us
To enable us to review, develop and improve our services to you
To administer accounts, process payments and keep track of billing and payments
To detect fraud and to make sure what you have told us is correct
To review job applications
To notify you about changes to our services
To provide you with information about products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes
We will keep your personal data for the duration of the period you are a customer. We shall retain your data only for as long as necessary in accordance with applicable laws.
On the closure of your account, we may keep your data for up to 7 years after you have cancelled your services with us or finished a training course. We may not be able to delete your data before this time due to our legal and/or accountancy obligations. We may also keep it for research or statistical purposes. We assure you that your personal information shall only be used for these purposes stated herein, has never been and will never be sold or shared without your express permission.
Who has access to your personal data?
We work closely with a number of third parties (including government bodies, local authorities and fraud protection services) and we may receive information from them about you.
We may also pass your personal information to third parties for the provision of services on our behalf (for example processing your payment). However, we will only ever share information about you that is absolutely necessary to provide the service and we have specific contracts in place, which ensure your personal data is secure and will not be used for any marketing purposes.
Your data may be shared with third party government bodies as requested and by lawful request, this list may change from time to time but is currently limited to;
Civil Aviation Authority (CAA)
European Aviation Safety Authority (EASA)
Highlands and Islands Airports Limited (HIAL)
Border Force / local authorities (Customs)
For the avoidance of doubt, we do not and never shall sell your personal data to third parties for marketing or advertising purposes.
In preventing the use or processing of your personal information, it may delay or prevent us from fulfilling our contractual obligations to you. It may also mean that we shall be unable to provide our services or process the cancellation of your service.
You have the right to object to our use of your personal data, or ask us to delete, remove or stop using it if there is no need for us to keep it. This is known as your right to be forgotten. There are legal and accountancy reasons why we will need to keep your data, but please do inform us if you think we are retaining or using your personal data incorrectly.
As a member of Highland Aviation you can view, edit or delete your personal information through the members login.
We will not contact you for marketing purposes unless you have given us your prior consent. You can change your marketing preferences at any time by visiting the website and entering your email address here [link pending] or through the members login.
Accessing and updating your data
You must maintain the accuracy of your information and ensure all your details, including but not limited to, name, address, title, phone number, e-mail address, next of kin are kept up to date at all times. You must do this by updating your personal details within your members login.
You have the right to access the information we hold about you. Please email your requests to firstname.lastname@example.org so that we can obtain this information for you.
Where we store your personal data
We follow accepted ISO standards to store and protect the personal information we collect, including the use of encryption if appropriate.
All information you provide to us is filed securely in our offices or stored on our secured servers within the European Economic Area (EEA). Any backup data is encrypted and stored securly.
As the transmission of information via the internet is not completely secure, we cannot guarantee the security of your data transmitted to our site and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Any sensitive data (payment details for example) are encrypted and protected.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping the password confidential. We ask you not to share a password with anyone.
We agree to take reasonable measures to protect your data in accordance with applicable laws and in accordance with our General Terms of sale: http://www.highlandaviation.com/shop/terms.asp.
In the event of a data breach, we shall ensure that our obligations under applicable data protection laws are complied with where necessary.
Please e-mail any suggestions, questions or comments you have about privacy to us at email@example.com
Your right to make a complaint
You have the right to make a complaint about how we process your personal information to the Information Commissioner:
https://ico.org.uk/concerns/ Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF