A CONCESSIONÁRIA DO AEROPORTO DE SALVADOR S.A., headquartered at Praça Gago Coutinho, s/nº, Terminal Aeroporto Internacional Deputado Luís Eduardo Magalhães, Salvador/BA, CEP: 41.602-065, registered under CNPJ number 27.950.582/0001-23 ("Aeroporto de Salvador," "we," "our," and "us") respects and is committed to protecting the privacy and security of its users' personal data ("User" and "you").

Thus, Aeroporto de Salvador has developed this Privacy Policy ("Policy") to provide you with information on how the collection, use, retention, and sharing of such data will be carried out by us or on our behalf, ensuring that we comply with all principles, rules, and best practices related to your protection.

This Policy applies to any processing of personal data performed by Aeroporto de Salvador to enable the exercise of its business activities, including the fulfillment of legal and/or regulatory obligations, and the provision of websites or applications that reference or are linked to it.

BY USING OUR SERVICES, YOU DECLARE THAT YOU HAVE READ AND UNDERSTOOD THIS POLICY IN ITS ENTIRETY AND ARE AWARE THAT WE MAY PROCESS YOUR PERSONAL DATA AS DEFINED HERE AND IN ACCORDANCE WITH APPLICABLE LAWS.

What information is collected by us and for what purpose?

To ensure the maximum protection of your information, Aeroporto de Salvador ensures that personal data will only be collected and processed for legitimate, specific, and previously informed purposes.

In the situations mentioned in this section, the following categories of data may be collected:

To understand your objectives, meet your needs, improve and personalize your experience on the Aeroporto de Salvador website, in the context of our and your legitimate interests, your browsing data (e.g., cookies) and visited pages may be collected. To learn more, refer to our Cookie Policy. Please note that you can visit our site anonymously by configuring this feature in your browser. However, failure to provide such information may impair or prevent access to certain content and services.

To enable the registration and processing of your requests in our Ombudsman service, in compliance with legal, regulatory, and contractual obligations, we will request certain information in the form available on our website or other physical and digital service systems provided by us. For example, you may share with us your name, surname, phone number, address, email, and other data and documents shared by you through other free-fill fields.

To conduct passenger satisfaction surveys on-site, provide assistance to people with disabilities, those aged 60 or older, pregnant women, lactating women, individuals accompanied by an infant, people with reduced mobility, or any person with a specific condition that limits their autonomy as a passenger, as well as for the exercise of other activities required by law, regulations, and the concession agreement, we may request, access, and process your personal data, such as your name, surname, phone number, age, education level, flight details (date, time, airline, flight number, destination, etc.).

In addition to the purposes and data categories mentioned above, we may collect and process any other information provided by you or third parties in a legitimate manner via various means, such as our websites, apps, email, and physical means, whenever necessary (i) to fulfill legal or regulatory obligations, (ii) to enable the execution of contracts or preliminary steps to contracts of which you are a party, (iii) to facilitate the regular exercise of our rights in judicial, administrative, or arbitral proceedings, (iv) to meet our and/or your legitimate interests, such as adopting fraud prevention services, (v) due to a judicial order addressed to Aeroporto de Salvador, or (vi) to protect credit, facilitating risk management in operations related to the provision of our services, (vii) and in other cases permitted or required by applicable laws.

Do we share your personal information?

In an effort to preserve the integrity of your personal data under our control, as a rule, Aeroporto de Salvador does not sell, trade, lease, or transfer such information to third parties outside our economic group. Even within the same group, your data will only be transferred to our parent companies, affiliates, and subsidiaries when strictly necessary and in accordance with applicable law.

However, to make our services available and in situations where applicable laws authorize or require it, we may share and/or transfer your personal data to trusted third parties, including but not limited to:

• Suppliers and/or service providers, who support Aeroporto de Salvador in the operation of the website www.salvador-airport.com.br or assist us in providing other services offered by us, in compliance with our legal, regulatory, or contractual obligations, and in other situations authorized by applicable laws. These third parties are subject to confidentiality agreements and contractual and regulatory restrictions prohibiting the processing of your personal data in ways contrary to our instructions.

• Authorities and public bodies, to fulfill legal, regulatory, and contractual obligations applicable to Aeroporto de Salvador, such as the National Civil Aviation Agency (ANAC), the Brazilian Federal Revenue (RFB), and State (SEFAZ) and Municipal (SMF) Finance Departments.

In addition to the situations described above, Aeroporto de Salvador may also share your personal information when necessary for (i) the compliance with judicial orders, legal, regulatory, and/or contractual obligations, or our policies, (ii) the exercise of our rights in judicial, administrative, or arbitral proceedings, (iii) to meet our, your, or third parties’ legitimate interests, (iv) for credit protection, and (v) in other cases where applicable laws authorize or require.

Will your personal data be transferred abroad?

Aeroporto de Salvador is part of one of the largest multinational groups in the airport market, with a physical presence in twelve countries and serving about eleven million passengers worldwide, according to 2019 data. For this reason, when you use our services, your personal data may be processed anywhere we are located, within the limits of the applicable legislation, provided that the country guarantees adequate protection of your data or other legitimate protection measures are adopted.

Additionally, your personal data may be stored in cloud systems or other similar technologies and infrastructures, with servers typically located in Brazil or abroad, such as in the United States of America or Chile.

Given that the availability of our services may be impaired without such international transfers, you acknowledge that such cross-border data flows may occur, as outlined in this Policy and within the limits of applicable laws.

In any case, Aeroporto de Salvador clarifies that it will only carry out such international transfers after adopting all necessary safeguards established by law, including the use of standard contractual clauses and/or global corporate policies.

How long do we store your personal information?

Aeroporto de Salvador will store the personal data it collects for the strictly necessary period to fulfill the purposes disclosed to you, in accordance with applicable laws, opting, whenever possible and reasonable, for data anonymization from the outset of the processing activities, especially when such activities involve sensitive personal data.

Your personal data may also be retained when necessary to comply with legal or regulatory obligations and/or to exercise our rights in judicial, administrative, or arbitral proceedings, in accordance with the terms and periods set forth in applicable laws.

How do we protect your personal information?

Aeroporto de Salvador implements a set of technical and administrative security measures, adopted from the design stage and as a standard, to protect your personal data from unauthorized access and accidental or unlawful destruction, loss, alteration, communication, or any form of inappropriate or unlawful processing, in full compliance with applicable laws. Moreover, it is part of our internal policy to continuously seek new measures to ensure that only the personal data necessary for each specific purpose are processed and that such processing occurs securely.

Among the security measures already implemented are the control and tracking of user access to our internal systems, regular database backups, and the protection of our systems and servers through the use of specific software, such as antivirus and firewalls.

In addition, we ensure the trustworthiness of all employees who need access to your personal data to provide our services, including through proper training and confidentiality agreements.

Unfortunately, despite Aeroporto de Salvador's best efforts to protect its systems and databases, no security measure is entirely foolproof. Therefore, we ask for your assistance in enhancing the protection of your personal data, including using antivirus software, firewalls, keeping your browser and operating system updated, and avoiding accessing suspicious sites or downloading files from unknown sources.

What rights do you have regarding your personal information under our control?

According to Article 18 of Federal Law No. 13,709 of August 14, 2018 (General Data Protection Law), you have several rights concerning your personal data, including, but not limited to, confirmation of the existence of processing, access, correction, anonymization, blocking, deletion, portability, information, and withdrawal of consent.

To exercise these and other rights under the applicable privacy and personal data protection laws, you may contact us at any time via the email provided at the end of this Policy.

Updates to our Privacy Policy

Aeroporto de Salvador is committed to staying up-to-date on privacy and data protection issues and adopting the standards, regulations, guidelines, and best practices established by national authorities. Therefore, we reserve the right to modify this Policy at any time.

If Aeroporto de Salvador decides to modify this Policy, this site will be updated. If relevant changes and/or updates are made or if applicable legislation so requires, you will be notified through our communication channels, such as email or an announcement on our official website.

Last update: September 21, 2021.

How to contact us

Any questions, suggestions, complaints, or requests to exercise rights related to privacy and data protection can be submitted through the Privacy Portal, which is available at the following contact addresses:

Email:
dpo.salvador@vinci-airports.com.br

Mailing Address:
Aeroporto Internacional de Salvador, 2nd floor, Praça Gago Coutinho, s/nº, São Cristóvão, Salvador/ BA, CEP 41.602-065.

Requests for information, data correction, and consent withdrawal can be accessed at:

Privacy Portal