Privacy Policy for The Shannon Airport Group

Privacy Notice

Welcome to the Website Privacy Notice for ‘The Shannon Airport Group’.


The Shannon Airport Group which incorporates Shannon Group PLC, Shannon Airport Authority DAC (‘Shannon Airport’) and Shannon Commercial Enterprises DAC (“SCE”) are committed to protecting and respecting your privacy in accordance with all applicable data protection laws.  This Privacy Notice applies to all domains and websites owned or managed by us (i.e., shannonairport.ie, snnairportgroup.ie, and the Shannon Airport passenger App). 


Any external links to other websites are clearly identifiable as such, and we will not be responsible for the content or the privacy policies of these third-party websites. For details of other processing activities including the day-to-day processing of personal data by us ‘The Shannon Airport Group’ you can request a copy of our Data Protection Policy by contacting our DPO at dpo@snnairportgroup.ie.

The aim of this Privacy Notice is to tell you how we collect and use personal data about you when you visit our websites. It also explains what rights you have where we process your personal data.

Contact Us

If you have any questions about this Privacy Notice or would like to contact us about any other matter, please use the following contact details:

The Shannon Airport Group, Shannon Airport, Shannon, Co Clare, Ireland, V14 EE06. Our company registration number is 548847. 


Email info@snnairportgroup.ie for Shannon Airport and properties@snnairportgroup.ie for Shannon Commercial Enterprises.


For data protection related queries email our Data Protection Officer at dpo@snnairportgroup.ie
If you are not satisfied with how we process your personal data, you have the right to complain to the Irish Data Protection Commission (www.dataprotection.ie). We would, however, appreciate the chance to deal with your concerns before you approach the Data Protection Commission, so please contact us in the first instance.

Data Controller

We are committed to protecting and respecting your privacy and will do so in a safe and secure manner. We promise to process your personal data in adherence with the EU General Data Protection Regulation 2016/679, the Data Protection Acts 1988 – 2018 and related data protection legislation such as the Irish ePrivacy Regulations S.I. 336/2011.

Types of personal data we collect

We routinely collect the following personal data via our airport and property websites:

Our websites do not target children. We do not knowingly process personal data of children via our website or social media channels unless it is provided by you on their behalf, or on behalf of someone else (for example passengers) and you have the required parental or guardian’s permission to share such data with us.

Use of Cookies


We use essential and basic aggregated site performance cookies to better understand how you browse our website and to ensure we provide visitors with interesting and useful content. We collect your consent to use non-essential cookies and similar technologies. For more information click here for our Cookie Notice.

To find out more about these and how to update your cookie preferences, please click on the orange cookie icon. You can see this in the bottom left hand side of each page on our website. Alternatively click on Cookie Settings in the navigation bar at the bottom of this website.

How we collect personal data

We collect personal data in a variety of ways such as where you visit our website. 

Links to Third-Party Websites

Our websites include links to third party websites such as flyshannon.ie, hotels and golf links located close to the Airport and tourism websites. Our sites may also contain links to video clips which are hosted on You Tube and our social media channels. Once you click on these links this Privacy Notice no longer applies and you are advised to read the Privacy Policy of the website you are visiting.

How we use your personal data

The following table lists the reasons (i.e., purposes) for processing your personal data. We are required under data protection law to have a lawful basis to process your personal data. The lawful bases are listed here.

 

Purpose

Lawful Basis

To answer your query, respond to a complaint or process customer feedback.

Legitimate interest

To provide a service or relevant business information such as latest news and annual reports from The Shannon Airport Group

Legitimate interest

To send marketing emails as requested by you.  Provide relevant information as requested by you.

Consent

To process your booking for a car park space or lounge booking as requested by you.

Contract

To provide information on how to book passenger assistance.

Legitimate interest

To improve our website and ensure we provide users with relevant and useful content.

Legitimate interest

To share contact details and links to third-party websites where they are of interest.

Legitimate interest

To provide information about our passenger Airport App and how to download it.

Legitimate interest

Where we use ‘legitimate interest’ as a lawful basis for processing, we will have carried out the relevant assessment that confirms that the processing is necessary and that a balancing test has been conducted to confirm that our business interests in processing the data does not override your interests or your fundamental rights and freedoms. 


In addition to this where we use ‘legitimate interest’ as a lawful basis to process your personal data you will always have the opportunity to ‘object’ to the processing such as where your details will be removed from our marketing database (business marketing database processed by Shannon Commercial Enterprises), and you will no longer receive marketing emails from us.

Sharing information with third parties

There are various circumstances where we may be required to share personal data with third parties. We will only share your personal data with third parties where we either have obtained your consent or where it is necessary to comply with a legal obligation or to provide services to you.


In these circumstances, we take steps to ensure that any third parties who handle your personal data comply with data protection legislation and protect your information to the same extent that we do. Where we share your data with our service providers, we will only disclose the personal data which is necessary for them to provide the service they are undertaking on our behalf.


We may share aggregated or de-identified information with third parties for research, marketing, analytics and other purposes, provided such information does not identify you and you cannot be re-identified.

Service Providers and Data Processors working on our behalf

We may share your personal data with external providers to support the efficient running of our business. For example, we use web developers to develop and manage our websites, we use website analytic tools to provide us with aggregated data so we can improve the way our websites work for you. We also use database management service providers to process your contact details and send you email communication when you sign up to receive marketing messages including special offers and newsletters. In such cases we have appropriate contractual arrangements in place covering these processing activities.

Other third parties

In the event of a sale or acquisition, we may share personal data with the other party as long as that party uses personal information for the same purposes you originally gave it to us for. 

International Data Transfers

There may be circumstances where we are required to transfer or process personal data outside of the EEA and where we do, we will ensure there is a suitable transfer mechanism in place such as an adequacy agreement (e.g., EU – UK Adequacy Agreement, EU – US Data Privacy Framework) or a standard contractual clause (SCC), as approved by the EU Commission. Where we use an SCC, we will ensure that the appropriate Transfer Impact Assessment (TIA) is completed.

Marketing

For marketing purposes, we may contact you in relation to special offers, competitions, products and services via email, post, SMS, or phone.

Where we rely on consent for marketing purposes, consent will always be provided in the form of a clear ‘opt-in’. You have the right to withdraw your consent at any time using the unsubscribe link on emails/ text messages, alternatively you can contact us at marketing@shannonairport.ie to opt-out of future marketing communications from us.


Where we rely on Legitimate Interest (to develop and grow our business) to communicate with you for marketing purposes we will always provide you with an option to ‘opt-out’ at the point of data collection and within each communication thereafter. Alternatively, you can email us at marketing@shannonairport.ie to ‘opt-out’ of receiving future marketing communications.

Social Media

We operate social media pages on LinkedIn, X (formerly Twitter), Facebook, Instagram, Pinterest, Tic Tok, Google and You Tube.  This notice includes how we use personal data collected from those pages.  However, it does not cover how these providers will use your information.  You are advised to check the Privacy Policies of these social media sites to find out how they process your personal data.

Data Subject Rights

As a data subject, you have the following rights in relation to the processing of your personal data. However, these rights are not absolute, and restrictions may apply in certain situations.

There are some restrictions to these rights, details of which are included in our Data Protection Policy and Subject Access Request Policy. Article 23 of the GDPR allows for data subject rights to be restricted in certain circumstances.

Where do I send a data subject rights request to?

Please send your request to our Data Protection Officer at dpo@snnairportgroup.ie. Include as much detail as possible to allow us to deal with your request efficiently. To answer your request, we may ask you to provide identification for verification purposes.

How long will a request take to complete?

Upon receipt of a verified request, we have 30 days to complete your request. In exceptional circumstances we may be able to avail of an additional two months. If we require additional time to deal with your request, we will notify you of the delay and the reasons for it within 30 days of the receipt of your request. If we refuse your request, we will also notify you within 30 days of the receipt of the request accompanied by the reasons for the refusal.


You are entitled to contact the Data Protection Commission if we refuse your request. 

How much does it cost to submit a request?

We will not charge a fee for any requests, provided we do not consider them to be unjustified or excessive. If we do consider requests to be unjustified or excessive, we may charge a reasonable fee (also for multiple copies) or refuse the request.

How long we keep your data for?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements. How long, may also vary depending on our relationship with you. We routinely update our email subscriber lists. If you would like more information about this, please let us know.

 

How secure is your data?

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. Where the third-party is a data processor we will ensure a data processing agreement is in place.

 

Other types of data processing

A more detailed explanation of our day-to-day processing is available in our Data Protection Policy. When you visit any of our buildings or premises such as when you visit Shannon Airport or where you work in a Shannon Commercial Enterprise owned building it is important to be aware that you may be subject to other types of data processing such as CCTV. We use CCTV video monitoring for the purpose of safety, security, crime prevention and detection and incident investigations. We take a strict approach to processing via CCTV as is detailed in our CCTV Data Protection Policy and related Data Protection Impact Assessment (DPIA).


When you visit Shannon Airport your data may also be processed by other data controllers such as the US Customs and Border Protection preclearance (USCBP) when travelling to the US, the Irish Tax and Customs Service (Revenue) where you have something to declare and the Irish Naturalisation and Immigration Service (INIS) of the Department of Justice and Equality where you are travelling from an non-EU country. Such processing is not controlled by us, and you are advised to check the Privacy Policies of these organisations should you require more information.

Governing Law & Jurisdiction

This notice and all issues regarding this website are governed exclusively by Irish law and are subject to the exclusive jurisdiction of the Irish courts.

 

Changes to our Privacy Notice

We review this Privacy Notice regularly and reserve the right to make changes at any time to take account of changes in our business, legal requirements, and the manner in which we process personal data. This Privacy Notice was last updated in January 2025.