Privacy notice

1. Who are we?

Fraport Brasil - Porto Alegre and Fraport Brasil - Fortaleza are subsidiaries of Fraport AG Frankfurt Airport Services Worldwide, one of the leading companies in the global airport market, which offers a full range of integrated management and consulting services.

Fraport AG, owner and operator of Frankfurt Airport, Germany's largest airport, is a highly experienced company in airport operations. Its portfolio includes 30 airports around the world.

In an international bidding process, in which the Federal Government awarded four Brazilian airports to the private sector, Fraport AG won the concession for Fortaleza and Porto Alegre airports for the next 30 and 25 years, respectively. Since then, Fraport Brasil - Fortaleza and Fraport Brasil - Porto Alegre have been established in the country with the aim of creating two modern, efficient and customer-focused airports

2. Meet our Data Protection Officer ("DPO")

Our DPO is Mr. Paulo Eiras. You can contact him by e-mail: fraportdpo@fraport-brasil.com.

3. Data Collected, its Use (Processing), Protection and Retention Period

At Fraport Brasil, we collect personal data, including images and biometric data (when applicable) from our employees, airport users (passengers or visitors), business partners (suppliers and customers) and website users, when necessary to fulfill obligations to the regulatory agency of the airport and civil aviation sector (ANAC - National Civil Aviation Agency), as well as to comply with legal provisions and Fraport Brasil's internal processes.

All personal data collected by Fraport Brasil under the terms of the LGPD and for the specific purposes are kept on duly contracted internal and possibly external servers and have the most robust security protocols to guarantee their privacy and inviolability. Fraport Brasil takes every precaution and follows industry best practices to ensure that personal data is not improperly lost, misused, improperly accessed by any person, disclosed, altered or destroyed.

Fraport Brasil and/or its related companies keep personal data in their database during the course of the contractual relationship and, when necessary to comply with a legal and/or regulatory obligation (such as in the case of legal proceedings), they keep it for the specific periods determined in specific legislation, as well as in their internal policies.

Personal data may also be deleted upon request for deletion by the data subject, unless there is any legal hypothesis justifying the storage of the data. In this case, the data subject will be informed of the reason why the data cannot be deleted.

For more details, see the table below

Categories of individuals	Personal data	Processing use	Protection / Systems	Retention
Employees and/or Dependents	Name, e-mail, telephone, ID, CPF, Address, Work Permit, Image, Driver's License	To provide all access and permissions to use systems, issue identification documents (credentials), prepare all admission and dismissal documents, as well as for inclusion in Fraport Brasil's internal processes and procedures.	Fraport Brasil Servers, Clouds and Servers of specific service providers.	In accordance with Fraport Brasil's internal policies and specific legislation.
Passengers	Image	Measuring time in the inspection queue, monitoring circulation and movement at the airport to ensure the security and operational safety of the premises.
Suppliers	Name, e-mail, telephone, address, CPF, RG, registration number	Issuance of identification (credentials), inclusion in internal systems and processes, including Fraport Brasil training, for the provision of services, compliance with internal Health, Occupational Safety, Airport Operational Safety and Security standards, payment, execution of contracts.
Clients	Name, e-mail, telephone, address, CPF, RG, registration number	Issuing identification (credentials), inclusion in Fraport Brasil's internal systems and processes, billing and collection, sending communications of interest to the airport community, execution of contracts.

4. Cameras

Fraport Brasil has cameras installed in its airports to control and monitor the flow of people. The images collected are stored and kept confidential in order to guarantee the privacy of the individuals whose image was captured by one of the various cameras installed on the airport premises.

5. Legal bases used

At Fraport Brasil, the personal data indicated above is collected on the basis of Art. 7 of the LGDP, in the following cases (legal bases):
(i) Consent(ii) Fulfillment of Legal Obligation (iii) Conduct of Studies by Research Body (iv) Performance of Contract (v) Protection of Health (vi) Serving Legitimate Interests (vii) Credit Protection

6. What are your rights?

According to the LGPD, the holder of personal data has the right to:

(i) Confirmation of the existence of processing;
(ii) Access to data;
(iii) Correction of incomplete, inaccurate or outdated data;
(iv) Anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
(v) Portability of data to another service or product provider, upon express request by the user;
(vi) Deletion of data processed with the user's consent;
(vii) Information on public and private entities with which the controller has shared data;
(viii) Information on the possibility of not providing consent and the consequences of refusing to do so; and
(ix) Revocation of consent.

In order to exercise the rights indicated above, Fraport Brasil provides a Privacy Channel (click here) so that the holder of personal data can make requests under the terms of the LGPD. To do so, the holder must provide the following information: full name, CPF, clarify the relationship with Fraport Brasil and for what period, as well as indicate with which of the airports managed by Fraport Brasil the relationship was established. Fraport Brasil will make every reasonable effort to respond to requests made by personal data subjects in the shortest possible time. However, justifiable factors may delay or prevent its rapid response, and in the event of a delay, Fraport Brasil will provide the data subjects with the appropriate reasons.

Finally, personal data subjects should be aware that their request may be legally rejected, either for formal reasons (such as their inability to prove their identity) or for legal reasons (such as the request to delete data whose maintenance is a free exercise of rights by Fraport Brasil), and it is certain that, in the event that it is impossible to fulfill these requests, Fraport Brasil will provide the personal data subjects with reasonable justifications

7. Changes to this Privacy Notice

Fraport Brasil reserves the right to modify, update and/or supplement this Privacy Notice at any time. For this reason, it is recommended that you access it frequently. Changes and clarifications will take effect immediately after their publication on Fraport Brasil's websites. In addition, whenever there is any modification, update and/or complementation, Fraport Brasil will notify you in the text itself, so that you can be easily aware of it and identify it