Who We Are
This privacy notice explains how your personal data is handled during the Master Plan consultation process. Belfast City Airport (BCA) is the Data Controller for all personal data submitted via the consultation website.
Our Data Processors
To deliver and manage this consultation, BCA has appointed the following Data Processors:
- Simply Zesty and Tibus – responsible for hosting the consultation website and managing its content management system (CMS). These processors may access personal data submitted through the website to ensure its functionality and security.
- Lighthouse NI and Brown O’Connor – engaged to conduct analytics on the consultation responses. These processors may access and analyse personal data to support reporting and insights.
All processors act under contract and are required to comply with applicable data protection laws, including the UK GDPR.
What Personal Data We Collect
We may collect:
- Identity data (e.g. name)
- Consultation responses (e.g. feedback, comments)
- Full Postcode (for response validation)
Why We Collect Your Data
Your data is collected to:
- Facilitate public engagement in the Master Plan consultation process
- Analyse feedback to inform decision-making
- Ensure transparency and accountability in consultation reporting
Lawful Basis for Processing
We process your data under the lawful basis of legitimate interest, ensuring that your rights and freedoms are not overridden.
Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
The retention period specified for the specific nature of the Master Plan consultation, is 6 months.
Secure Data Storage
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
International Data Transfers
We do not transfer your personal data outside the European Economic Area (EEA).
Your Rights
Under data protection law, you have the right to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Withdraw consent (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk
Contact Us
For any queries or to exercise your rights, please contact our Data Protection Officer at: [email protected]