Which personal data do we process? Eindhoven Airport has an obligation to check that only travellers departing on the same day have access to the area beyond security control. In this connection, Eindhoven Airport processes boarding pass data that are read at the security checkpoints (Self-Service Boarding Pass control). This concerns the following personal data:

• First and last name

• Flight number

• Booking reference

• Membership number (for Privium members)

• Unique code (for Fast Track customers)

Why do we process your personal data? Eindhoven Airport has a legal obligation to ensure the security of the airport. We therefore process the data in order to comply with a legal obligation.

How long do we retain your details? We retain your personal data for a short period to ensure proper system operation or to analyze problems. Your first and last name will be deleted after 24 hours. Your booking reference, Privium membership number, or unique Fast Track code will be deleted after one week, if applicable.

Who do we share your data with? A message is sometimes sent to airlines as soon as you have arrived at the security control. This message lets them know that you are at the airport. We do not share your details with other parties.

Who is the controller? Eindhoven Airport N.V.

Access for business visitors

Which personal data do we process? Eindhoven Airport processes the following personal data of business visitors to our office and our terminal:

• first and last name

• e-mail address

• telephone number

• company

• contact person at Eindhoven Airport

• time of appointment

• identity number/document number of valid identity document (when visiting protected and secured areas of the airport)

Why do we process your personal data? Eindhoven Airport processes this data to receive business visitors at our office and our terminal and for internal management and security purposes. Pursuant to the Dutch Working Conditions Act, Eindhoven Airport is obliged to keep visitor records in the event of an emergency in which the building must be vacated. We therefore process the data in order to comply with a legal obligation.

How long do we retain your details? Your data will be deleted no later than one day after your visit to Eindhoven Airport.

Who do we share your data with? We do not share your data with other parties, unless there is a need to do so owing to security reasons. In case of emergency, the visitor registration can, for example, be shared with emergency services.

Who is the controller? Eindhoven Airport N.V.