Page 29 - GOLDAIR HANDLING APOLOGISMOS 2018
P. 29

REPORT 2018
 1.8        GDPR MILESTONES



 Customer and passenger                                                        During 2018,


 personal data protection                                              Goldair Handling did not receive
                                                                         any complaints or reports
 5                                                                     of the privacy of its customers
                                                                           related to the violation
                                                                        or the violation of the privacy
 The personal data managed by the Company (customer - airlines and   Data Protection
 passengers) during the provision of ground handling services are   Committee  3  of its customer - airlines’ passengers.
 utilised exclusively to provide services for airlines and passengers,
 and for internal analysis, in absolute compliance with EU regulation
 2016/679 (GDPR). During 2018, a Data Protection Officer (DPO) was   Beginning
 appointed within the Company, while the Policy and Regulation on   of Action Plan
               Implementation
 Protection of Personal Data entered into effect, underscoring the
 commitment to their protection.
 4

 Excerpt from the Data Protection Policy
 Goldair Handling  attaches great importance to the protection of   Development
 personal data and is committed to conducting its business in   of GDPR Policy
 accordance with all applicable Data Protection Laws and Regulations,   and Regulation    1
 such as EU 2016/679 General Data Protection Regulation (GDPR).   on Protection
 The aim of Goldair Handling is to process the personal data lawfully,   of Personal    DPO
 fairly and in a transparent manner in relation to individuals. Moreover,   2019  Data  appointed
 the data are being handled in a way that ensures appropriate security,
 using suitable technical and organisational measures, in regard to
 data minimisation, accuracy, archiving, removal, etc.
 The Company’s Management recognises and respects the data
 subject rights as presented in this Policy:
   1. Right of information/update
   2. Right of access                        2
   3. Right to rectification
   4. Right to erasure
   5. Right to restriction of processing     Data Mapping
                                             and analysis
   6. Right to data portability              of Data Protection
   7. Right to object
                                             Impact Assessment
   8. Rights against automated individual decision-making
   and profiling
   9. Right of withdrawal of consent
 In the event of a breach of security leading to the unlawful or
 unauthorised disclosure of, or access to, personal data, the Company
 ensures the prompt assessment of the risk to people’s rights and
 freedoms and appropriate report of this breach to the relevant                  2018
 Authority.
 Goldair Handling commits to act with responsibility towards
 individuals and their personal data by adapting or creating corporate
 procedures in accordance with the applicable laws and regulations.
 Moreover, the Company commits to provide training and support for
 employees who handle personal data, so that they can act confidently
 and consistently.
 This Policy applies to all Goldair Handling personnel and stakeholders,
 such as customers, subcontractors, suppliers, etc.


 28                                                                                                        29
   24   25   26   27   28   29   30   31   32   33   34