In the case of using the BER Biometrics services, personal data are processed to enable you to gain access to the BER Runway and use additional products such as lounges or the self-service kiosks exclusively by using your face on-site at the airport.
The controller in respect of the personal data processing at the airport (creation of photos or digital templates from the photo generated on-site at the respective service point and forwarding such information to Airsphere as well as subsequent boarding pass data processing) is
Flughafen Berlin Brandenburg GmbH (FBB),
represented by the Management,
D-12521 Berlin
E-mail: runway@berlin-airport.de
The controller in respect of personal data processing for template matching (profile provision in the smartdepart app, creation of digital templates of profile pictures in the app or the on-site picture forwarded by FBB, template matching when used at the airport and forwarding boarding pass data to the airport) is
Airsphere GmbH
Am Technologiepark 8
D-82229 Seefeld
E-mail: info@airsphere.de
Passengers save their photo and, where applicable, additional profile data in the smartdepart app from Airsphere and load the boarding pass onto the app before each flight. Smartdepart saves images as encrypted templates in the app. Once the passenger has granted their consent to use the information stored in the app for the BER Biometrics service at the airport, the template and boarding pass data are activated for comparison by Airsphere and processed centrally by Airsphere.
At the airport, a photo or a digital template of the passenger’s image generated on-site is created at the respective service point and forwarded to Airsphere in encrypted form. Airsphere creates a template from the forwarded image or uses the forwarded template for comparison with the templates available from the app. If the templates are compared favourably, the boarding pass data stored for this purpose is then forwarded to the airport and the service point is activated for the passenger.
The legal basis for data processing is your consent in accordance with Article 6(1), Point a), GDPR (General Data Protection Regulation), which you have granted as part of the app reservation process.
You may revoke your consent to the data processing at any time with effect for the future. To that end, please use the corresponding cancellation function in the Smartdepart app. Deleting your order or your profile will result in the deletion of the data for the BER Biometrics service and the associated data processing. Withdrawing your consent does not affect the lawfulness of the processing of your data prior to the withdrawal. As a matter of principle, you can register again at any time.
Furthermore, you shall be given the opportunity to consent to the use of your data for advertising purposes. By way of your consent, you can receive a wide range of information about other services from FBB and its subsidiaries or offers from third parties relating to BER Airport. The legal basis for data processing for advertising purposes is your consent in accordance with Article 6(1), Sentence 1, Point a), GDPR.
You may revoke your consent to the data processing for advertising purposes at any time with effect for the future. To that end, either use the link provided in the advertising or send us an e-mail to commercial@berlin-airport.de or a message to the contact details provided in 1). Withdrawing your consent does not affect the lawfulness of the processing of your data prior to the withdrawal. As a matter of principle, you can register again at any time.
Your personal data shall not be forwarded to third parties without your express consent, unless this is necessary to render services or execute the contract.
Insofar as you use the BER Biometrics service point by chance without registering via the app and irrespective of the notices at the airport, the data processing shall be based on Article 6(1), Sentence 1, Point f), GDPR.
FBB has, insofar, a legitimate interest in providing functional, contactless service points for passengers at the airport. FBB takes the utmost care and provides extensive information and barriers to prevent accidental use of the service point. In the event that a picture of you has nevertheless have been taken, FBB shall delete it without delay once it has been sent to Airsphere. Airsphere deletes such information from its database without delay following an invalid template comparison. In this respect, data subjects’ interests are comprehensively protected and there is no recognisable increased risk of data misuse or data loss. Signage and barriers already prevent accidental data creation and take the principle of data minimisation into account. The deletion without delay of image data by both controllers and data processing in German data centres under the control of Airsphere protect data subjects’ interests and outweigh FBB’s legitimate data processing interests.
Insofar as we process your personal data to protect legitimate interests in accordance with Article 6(1), Sentence 1, Point f), GDPR, you have the right to object to such processing of your personal data at any time (Article 21(1), GDPR) insofar as corresponding legal reasons apply. Objections can be directed to FBB by letter or telephone or via the aforementioned e-mail address. When exercising your objection, we ask you to set out the special reasons for lodging such a legal claim.
We use the contractors Airsphere GmbH (Am Technologiepark 8, D-82229 Seefeld) and Materna IPS GmbH (Vosskuhle 37, 44141 D-Dortmund) for the processes at the airport.
All digital templates or images of passengers generated at the airport are deleted without delay once they are sent to Airsphere. Airsphere deletes the received app information and the templates for template matching at the latest on the day following the matching of data. Your boarding pass information shall be forwarded to FBB for airport services and your airline for flight processing. FBB deletes boarding pass information after 90 days. Airsphere GmbH, Am Technologiepark 8, D-82229 Seefeld, is solely responsible for data processing in the smartdepart app in the capacity of service provider.