At Swissport ("Swissport") we take the privacy of your personal data very seriously. We process your personal data in accordance with applicable data protection regulations (in particular, where applicable, with the requirements of the European Union's General Data Protection Regulation [GDPR]) for the purposes set out below.

Personal data, in the context of the data protection information presented here, includes all data relating to your person. This refers, in particular, to contractual data, including contact information, your data and details of communication with you ("personal data").

Swissport is responsible for processing your personal data in accordance with applicable regulation.

• to request confirmation from us as to whether your personal information is being processed; if this is the case, you are entitled to obtain details about such Personal Data, e.g. purposes of data processing, categories of data concerned and other details as specified in Art. 15 of the GDPR.
• to request that we correct your data; if it is deemed to be incorrect, inapplicable and/or incomplete. Such rectification of data also covers duties of completion through explanation or notification.
• to request that we delete your Personal Data without delay if the personal data are no longer necessary in relation to the purposes for which they were collected or processed or one of the other reasons specified in Art. 17 of the GDPR applies. Unfortunately, we may not delete data that is subject to a legal retention period. If you prefer that we never collect data from you or never contact you again in the future, we shall store such relevant contact details in a secured blacklist.
• to revoke any consent given by you with future effect and without any negative consequences for you.
• to request from us that processing be restricted if one of the prerequisites listed in Art. 18 of the GDPR applies.
• to object at any time to the processing of Personal Data relevant to you on grounds relating to your particular situation in the events mentioned in Art. 21 of the GDPR. We shall no longer process Personal Data in the event of an objection, unless we can demonstrate compelling legitimate grounds to do so, which override your interests, rights and freedoms, or where such processing is required for the establishment, exercise or defence of legal claims (Art. 21 of the GDPR).
• to request, where you are entitled to receive your Personal Data from us based on Art. 20 of the GDPR, that the data be issued in a commonly used electronic and machine-readable format. This also applies to the direct issuance (if possible) of such data to another responsible party specified by you (Art. 20 of the GDPR). You may contact:
  • our data protection officer: [email protected] or by post (see information on the controller), or
  • to assert claims vis-à-vis the supervisory authority in the member state of your place of stay, your place of work or the location where the alleged violation took place.

Swissport process your personal data shall be processed only to the extent necessary and for some legitimate interests. After the respective purpose has been fulfilled, your data shall be deleted under observance of the statutory periods of retention. We do not use the personal data provided by you to make automated decisions relevant to you.

The legal basis for processing your personal data includes in particular the following provisions of the General Data Protection Regulation of the European Union (GDPR):

• Art. 6 (1)(a) on the basis of consent given by you whereby, in principle, none is required in order to conclude a contract or proceed with an existing contract (e.g. if information is provided by you without necessity);
• Art. 6 (1)(b) to establish, execute and end a contractual relationship;
• Art. 6 (1)(c) to fulfil a legal obligation;
• Art. 6 (1)(f) to preserve a legitimate interest.

Our legitimate interests in this regard include e.g. the:

• Safeguarding of compliance with safety regulations, requirements, industry standards and contractual obligations, including fulfilment of security checks and access control of visitors;
• Establishment, exercise or defence of legal claims;
• Leveraging optimization potentials within the group by using shared tools and services.
• Avoidance of prejudice and/or liability of the company through corresponding measures.

The following personal data is processed:

• Employee data: name, date of birth, CV, nationality/work permit, etc. for onboarding and offboarding management;
• Private contact data: address, telephone number, email (for the purpose of making contact);
• Identification/payment details: employees' identity card details, place of birth, civil status, bank account data in case you file requests for expense settlement;
• Health data: e.g. in the context of statutory obligations as an employer, such as e.g. fulfilment of duties in the protection of the severely handicapped;
• Data in the context of staff screening: e.g. clearance certificate, reliability check;
• Other data in personnel management: ownership of driving licence;
• Cookies. 

Recipients within the company or group based on “need to know” and external providers on “need to know”: in case we have a joint controllership with other companies of the group, you can request the basic contents of a respective agreement governing the responsibilities for data subjects right at any time at the contact provided in this document.