Voltar

Privacy Notice

PRIVACY NOTICE

The Guarulhos Airport Concessionaire values privacy and the protection of personal data. For the Concessionaire, it is important that data subjects are aware of the processing of personal data carried out by it.

Thus, this Privacy Notice describes how we can treat personal data, whether due to the activities carried out by the Concessionaire, as a result of access to our website and/or to our facilities. Whatever the hypothesis, the privacy and protection of personal data will be safeguarded in the course of any data processing carried out.

Data holders must read this document carefully, in order to ensure that they are fully aware of the way in which personal data is processed by the Concessionaire.

The purpose of this Privacy Notice is to bring maximum transparency and ensure that the data subject can clearly understand why, how, when and by whom their personal data is processed by this Concessionaire.

HOW WE COLLECT PERSONAL DATA

The Concessionaire may collect personal data when the holder:

  • Access the Concessionaire's website;
  • Get in touch with the official channels of the Dealership;
  • Contact the Dealer's Lost and Found,
  • Use the VIP Room service,
  • Contact the Customer Service and Ombudsman Center or the Cargo Service Center (CAC) of the Concessionaire;
  • Visit the Concessionaire's website and access the content therein;
  • Visit our facilities physically. In this case, images may be collected through our closed circuit surveillance and monitoring cameras;
  • Use the parking service;
  • Apply for professional vacancies or register your resume for future job opportunities at the Dealership;
  • It sends its own data through any message, in any of the Concessionaire's communication channels.

WHAT PERSONAL DATA MAY BE PROCESSED

Considering the hypotheses mentioned above, the following may be treated:

  • Personal data contained in professional and academic CVs;
  • Personal data contained in the boarding pass, such as, but not limited to: name, RG, CPF, passport, telephone, emergency contact, ticket category, type of luggage, airline, seat, flight information, origin and travel destination;
  • Personal data related to the billing, payment, reimbursement process and other procedures involving the financial part of the data subject's relationship with the Concessionaire, including credit card, account and bank branch data, as well as information related to financial and credit status ;
  • Demographic data of visitation on the Concessionaire's website;
  • Personal data related to possible medical care provided by the companies responsible for such care on the Concessionaire's premises;
  • Personal data related to access control to the Concessionaire's premises;
  • Personal data such as name, function, e-mail and telephone numbers, if the data subject chooses to identify himself when making a complaint in the Concessionaire's complaint channel;
  • Personal data in resumes and personal documents forwarded by the data subject, if applying for any job opportunity at the Concessionaire;
  • Personal data of legal representatives of companies, in case of shipment, receipt and storage of cargo;
  • Personal data for scheduling cargo delivery;
  • Personal data for issuing duplicate collection documents, such as DAI, DAE or DAPE;
  • Personal data for cargo tracking;
  • Personal data contained in messages or calls with the Concessionaire, through which the data subject himself has shared this information with us;
  • Data collected due to contact with the Customer Service Center and Ombudsman or the Cargo Service Center (CAC) of the Concessionaire, such as, but not limited to: name and telephone number;
  • Personal data collected for recording and monitoring occurrences within the aerodrome;
  • Personal data collected for registration and monitoring of medical care performed within the Concessionaire's premises;
  • Personal data provided due to the parking service;
  • Personal data contained in documentation necessary for your access to our facilities in the airport accreditation process;
  • Your image, through our internal surveillance camera system

FINALIDAD DEL TRATAMIENTO DE DATOS PERSONALES

The processing of personal data by the Concessionaire occurs only for legitimate, specific and determined purposes, which may occur in the following cases:

  • Identification and access to the Concessionaire's websites;
  • Identification and access to the Concessionaire's premises;
  • Enable boarding and disembarking in a safe and organized manner;
  • Perform any collection of the boarding fee;
  • Perform services and carry out the necessary handling of financial issues, payments and collections;
  • Perform the service when the data subject contacts us, either through the service channels, ombudsman or any other possible means of communication;
  • Evaluate the visitation of the Concessionaire's website, analyzing demographic data and better understanding the profile of visitors;
  • Control the entry of people to the Concessionaire's premises;
  • Assess and make decisions involving the possibility of fraud, crimes and illegal activities on the Concessionaire's premises;
  • Assess, investigate and make decisions regarding the complaints made through the Concessionaire's complaints channel, request additional information, when necessary or even allow the data subject to follow the progress of their complaints and requests;
  • Register participation in the Concessionaire's selection processes;
  • Carry out the selection process of candidates and evaluate their performance according to the established parameters;
  • Evaluate the profile of the data subject in the event of a possible application for a job at the Concessionaire and maintenance of their professional and academic curriculum for possible future opportunities;
  • Carry out the delivery, shipment and/or receipt of cargo, enabling monitoring through tracking and compliance with legal and regulatory obligations for the import and export of cargo;
  • Comply with a legal or regulatory obligation and submit any necessary data to authorities or representatives capable of supervising compliance with any obligation;
  • Use personal data for any regular exercise of rights in administrative, judicial or arbitration proceedings;
  • Service solutions performed by the Customer Service Center and Ombudsman or the Cargo Service Center (CAC) of the Concessionaire;
  • Register occurrences at the aerodrome;
  • Registration and monitoring of medical care within the Concessionaire's premises;
  • Ensure security on the Concessionaire's premises, as well as security on its websites, applications and internal systems;
  • Ensure proper monitoring on the Concessionaire's premises through closed circuit surveillance cameras; It is
  • Improvements, adjustments or implementations on websites, applications and internal systems of the Concessionaire.

THE CUSTODY PERIOD

The Concessionaire will maintain the processing of personal data (including storage, which is a kind of data processing) for the period necessary to achieve the legitimate purposes for which the treatment is intended, and these purposes may involve, for example, the fulfillment of an obligation, legal, the fulfillment of legitimate interests of the Concessionaire, the regular exercise of rights in an administrative or judicial process, among others.

DATA SECURITY

The Concessionaire adopts appropriate, proportionate and reasonable information security measures, in order to guarantee the protection of personal data eventually processed by it.

The Concessionaire employs strong controls so that any suppliers, partners or third parties, who need to process personal data, guarantee the adoption of appropriate, proportionate and reasonable information security measures, in order to guarantee the protection of said personal data.

THIRD PARTY WEBSITES AND SERVICES

Services

On the premises of the Concessionaire there are several products and services offered by partner companies, such as Wi-Fi, Hotels, VIP Rooms, Food Services, Shops, Banks, Exchange Bureaus, Luggage Storage, Luggage Protection, among others.

The terms of this Privacy Notice do not apply to such services and products. Thus, if the data subject wants to use or acquire products or services of this kind, he must check the Terms and Conditions of Use and Privacy Policy specific to the product or service he wants to acquire or use.

Websites

The Concessionaire's website has links to other websites, which may contain useful information/tools for the data subject. This Privacy Notice does not apply to third party websites. If the data subject visits another website from the website www.gru.com.br, he should be aware that he will be subject to the conditions of treatment of third-party websites. Thus, the Concessionaire is not responsible for the Privacy Notice or content of third-party websites.

COOKIES AND CONCESSIONAIRE WEBSITES

The concessionaire may process personal data arising from activities involving advertisements and online advertising. Information related to this process includes the IP (Internet Protocol) address, ISP (Internet Service Provider), the browser used when visiting our website (such as Internet Explorer or Firefox), the time of the respective visit and which pages were visited within our website.

The Concessionaire may use cookies to store information, among them, the personal preferences of the data holders when visiting its website.

In addition, the Concessionaire uses third-party advertising on its website, and some of these advertisements may use technologies, such as cookies and/or web beacons when they replicate the website content, which will cause the aforementioned advertisements to also receive personal data. such as IP address, ISP, browser, among others.

This function is generally used for geotargeting, where advertising from São Paulo is shown only to readers from São Paulo, for example, or to present advertising targeted to a user profile, for example, showing advertising for a restaurant to a user who visits cooking websites regularly.

The data subject has the power to disable some cookies in the options provided by his browser or by making changes to the Antivirus program tools. In addition, in some situations, the data subject can contact the Concessionaire through the contact of its data controller, informed in this document, and request the disabling of the cookies that are under its control. It is worth noting that this procedure may change the way the user interacts with the website.

SHARING PERSONAL DATA

For the performance of some of the treatment purposes to which the personal data are related, the Concessionaire may share the personal information provided with third parties, whether they are outsourced service providers, partners, authorities, government agencies, among others.

Below are some of the situations in which the sharing of personal data may occur:

  • Personal data is shared with partners that have tools installed on the Concessionaire's website, for the purpose of analyzing website visitation and dealings involving targeted online advertising;
  • Personal data are shared with competent authorities, for compliance with inspections involving compliance with legal or regulatory obligations;
  • Data and images from the closed circuit of internal cameras are shared with public authorities such as the Federal Police, Federal Revenue Service, Federal Highway Police, Civil Police, Military Police, Anvisa, among others.
  • Personal data is shared with partner companies, when necessary for the use of services offered by the Concessionaire;
  • Personal data is shared, when necessary, with a customer service provider;
  • Personal data are shared with legal service providers, whenever necessary for the regular exercise of the Concessionaire's rights in administrative, arbitration or judicial proceedings, as well as when necessary to deal with advisory demands or contractual negotiations;
  • Personal data is shared with financial institutions and service providers for sending and receiving documents and communication, when necessary;
  • Personal data is shared with cloud hosting service providers; It is
  • Personal data is shared with a provider of information technology support services, for adjustments, implements and development in our systems, servers and websites.

CONTACT AND SERVICE TO THE RIGHTS OF THE DATA HOLDERS

With regard to the processing of personal data, the data subject may contact the Concessionaire whenever he deems it necessary through the channels mentioned below and, in particular, in the following situations:

  • If you understand that your data has been used in a manner incompatible with this Privacy Notice or contrary to data protection regulations;
  • If you want to exercise the rights provided for in the LGPD (General Data Protection Law), law No. 13,709, of August 14, 2018. especially those provided for in art. 18 of this law, without prejudice to the others, including: (i) confirmation of the existence of data processing; (ii) access to data; (iii) correction of incomplete, inaccurate or outdated data; (iv) anonymization, blocking or deletion of data that is unnecessary, excessive or treated in violation of the LGPD; (v) data portability to another service or product provider, upon express request; (vi) deletion of data processed with your consent; (vii) revocation of previously provided consent; and (viii) information from public and private entities with which the controller carried out shared use of data; It is
  • If you have questions or suggestions related to the provisions of this Privacy Notice or any other topic involving privacy and protection of personal data.

To contact the Concessionaire in this regard, the data subject should consider the following channel:

Data supervisor: Andressa Rodrigues Gimenes

E-mail: dpo@gru.com.br

LEGISLATION AND JURISDICTION OF ELECTION

This PRIVACY NOTICE will be interpreted by the legislation of the Federative Republic of Brazil, regardless of conflicts with state, municipal or other countries laws or regulations.

The Forum of Guarulhos/SP is elected to resolve any doubts arising from this instrument.