top of page

Data Protection Policy 

SECTION 1- IAAC Cambodia COMMITS TO THE PROTECTION OF YOUR PERSONAL DATA

IAAC Cambodia (“we”, “our”, IAAC, International Airport Advertising Corporation) is committed to protect your personal data and your privacy. We encourage you to carefully read this Data Protection Policy (“Policy”), which informs you of our data protection and privacy practices and the way your personal data are processed by IAAC Cambodia when acting as a data controller regarding our products and services considering the General Data Protection Regulation requirements.

 

IAAC Cambodia strongly supports the fundamental rights to privacy and data protection as well as compliance with national and international privacy laws. IAAC commits to maintain confidential any personal data and to strictly limit any disclosure in accordance with applicable local laws and regulations.

 

This Policy is only applicable to the processing activities carried out by IAAC (International Airport Advertising) entities indicated in Schedule I as independent data controllers for the collection, processing, use, transmission, transfer and storage of personal data unless a national legislation imposes to some of them specific data protection rules. IAAC Cambodia has developed an internal platform and connected systems for the processing activities included in point 3 in this Policy for which IAAC Cambodia acts as data controller. The IAAC Cambodia  entity processing your personal data will depend on the country you are located in – please consult Schedule I to understand which IAAC Cambodia Entity is the data controller of your personal data, and what are the means of contacting and exercising your rights recognised by applicable data protection laws.

 

This Policy shall apply following the General Data Protection Regulation territorial scope principle.

​

​

SECTION 2- HOW DO WE PROCESS YOUR PERSONAL DATA?

IAAC Cambodia respects the rights of each individual to have his or her privacy and personal data protected, following at all times the principles below when processing your personal data:

  • Processing your personal data fairly, lawfully and in a transparent manner;

  • Collecting your personal data for specified, legitimate purposes and not processing further in ways incompatible with those purposes;

  • Collecting your personal data which is relevant to and not excessive for the purposes for which it is collected and used. We may render personal data anonymous when feasible and appropriate, depending on the nature of the data and the risks associated with the intended uses;

  • Maintaining your personal data accurate, and where necessary, kept up-to-date. We will take reasonable steps to rectify or delete data that is inaccurate or incomplete;

  • Keeping your personal data only as long as it is necessary for the purposes for which it was collected and processed;

  • Processing your personal data in accordance with the individual’s legal rights;

  • Taking appropriate technical and organizational security measures to keep your data safe and prevent unauthorized access, unlawful processing, and unauthorized or accidental loss, destruction, or damage to personal data;

  • Processing your personal data only if it is lawful in accordance with a legal basis, including if you have unambiguously given your consent to such process.

 

​

SECTION 3- WHAT PURPOSES WILL WE PROCESS YOUR PERSONAL DATA FOR?

IAAC Cambodia will collect or may have access to your personal data to complete following operations. These purposes include the processing of personal data and the processing activities related to aggregated or anonymized information (such as analytical information, campaign impacts, aggregated audiences…):

Generation of insights and aggregated reports. On the basis of your personal data, we may extract some aggregated patterns. For example, that the age group between 25 and 35 years old is more likely to be interested in technology and travel. 

​

Matching and combination of personal data. For the generation of insights, we may match the data collected from you on a website with data that a particular brand or make (our advertising client) holds about you as their customer.

​

Creation of user profile on the basis of its preferences and behaviour. We can create your profile on the basis of the data received and our insights as we understand it, taking into account your online behaviour: websites visited, articles of interest or products acquired.

​

Elaboration of audiences and segments including user profile. We can build an audience with similar interests to be able to impact it with products and services of our advertising clients.

 

Targeted advertising on the basis of user profile. We can show you specific, tailored ads of products and services we whing you may be interested in, bearing in mind your user profile and preferences.

 

Measurement of ad performance. We can access statistical information concerning ad performance, such as number of clicks or location thereof on a country level.

 

Addressing of data subject rights. Lastly, we shall use your personal data to honour your data subject rights requests, such as access, rectification or erasure rights, recognized by applicable data protection regulation.

​

​

SECTION 4- WHAT DATA IS COLLECTED?

IAAC Cambodia will only collect and process your personal data pursuant to prior appropriate notice and your validly-given consent, when it is required. Your consent -and, therefore, choice regarding the collection and usage of your personal data by IAAC Cambodia – shall always be freely given, specific, and informed by a positive act; you will be able to withdraw it at any time by means established in section 9 of this Policy.

 

In a general way, Personal data means any information relating to an identified or identifiable natural person (‘Data subject’). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

The types of personal data we collect from you may include:

Personal characteristics data and demographic information: marital status, gender, age range, nationality, income, language etc.

​

Behaviour data: data about user interests (app usage etc.); purchase data; lifestyle, memberships, licenses, authorisations.

​

Navigation behaviour: browsing history, user journey on the site; search queries; session time; site behaviour (contextual and thematic preferences to certain topics and pages,

interactions such as downloads, transitions to other pages through clicking on advertisements and links); events (scrolling, clicking, highlights, media views).

 

Online and advertising identifiers: IP address; cookie ID, pixel, and all types of online identifiers enabling the use of Data Subjects´ data, internet browser o device type for the

purpose of targeting advertising, audience segmentation, analytics or and similar purposes.

​

Technical information: user-agent string identifying the browser and device type; user’s location; user’s time zone; detected language of the user’s system; device type

(desktop/mobile, brand, model, operating system).

​

​

SECTION 5- WHAT WE DO WITH YOUR PERSONAL DATA?

Regarding the platform and connected systems used by IAAC Cambodia as data controller, we will:

  • not sell or rent it to a third party without your permission;

  • implement appropriate technical and organisational measures to protect your personal data from loss, misuse and unauthorized access, disclosure, alteration and destruction;

  • not process the personal data except:

    • on the basis of your consent;

    • in an aggregated or otherwise anonymised format;

    • as required by law, for example, in response to a subpoena or search warrant;

    • to outside auditors who have agreed to keep the data confidential;

    • as necessary to protect the rights, safety or property of IAAC Cambodia, its users, or others. This may include (for example) exchanging information with outside auditors who are subject to duty of confidentiality, other organizations or public authorities for identification, fraud protection and/or risk reduction.

​

 

SECTION 6- LAWFUL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA

For the purposes and the data indicated under sections 3 and 4 respectively, IAAC Cambodia relies on your informed consent for the processing of your personal data, which can be withdrawn at any time by means established in section 9 of this Policy. Therefore, the data shall be processed as long as you keep consenting to the processing activity.

If you provide us with personal data about another person, you confirm that they have appointed you to act for them, to consent to the processing of their personal data and that you have informed them of our identity and the purposes (as set out in this Policy) for which their personal data will be processed.

 

 

SECTION 7- THIRD PARTIES AND PROVIDERS

IAAC Cambodia uses external providers which could access to the information included in this policy. These third parties provide services such as hosting, technical connections in our applications or help us to process your personal data regarding the purposes declared in this policy.  

​

​

SECTION 8- YOUR DATA PROTECTION RIGHTS

  • Right of access: As data subject, you may inquire as to the nature of the personal data IAAC Cambodia owns about you. You will be provided access to your personal data regardless of the location of the data processing and storage.

  • Right to rectification: If your personal data is inaccurate or incomplete, you may request that the data be amended.

  • Right to object: You have the right to object at any time to the processing of your personal data by IAAC Cambodia, in case we process your data on the basis of our or third-party legitimate interests, or where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

  • Right to erasure: You can ask for the deletion of your personal data when it is allowed by applicable data protection laws and regulations.

  • Right to restriction of processing: You have the right to require a restriction of the processing of your personal data when it is authorized by applicable data protection laws and regulations.

  • Right to data portability: If you meet the conditions settled by the applicable data protection laws and regulation, you have the right to receive a subset of your personal data and to transmit them from IAAC Cambodia to another data controller. You can also require the direct transmission from IAAC Cambodia to another controller when it is technically feasible.

  • Right to lodge a complaint: You have the right to lodge complaint with the competent supervisory authority.

 

All requests for aforementioned rights, and any questions regarding this Data Protection Policy, may be sent to the general IAAC Cambodia address:

IAAC Cambodia

Level 4, Tower 51, Sangkat Boeung Keng Kang 1,

Khan Chamkarmon, Phnom Penh, Cambodia

Swati.Gupta@AirportAdvertising.com

 

.

bottom of page