Last Revised: August 29, 2022
Thank you for visiting CVGairport.com and its affiliated sites (collectively the “Site”). The CVG Airport Authority (the “Authority”), owner/operator of the Cincinnati/Northern Kentucky International Airport (“CVG”) strives to provide online resources in a safe, secure manner that respects your privacy when you visit our site.
We believe that greater protection of personal privacy on the web will not only protect users, but also increase user confidence and their participation in online activities. At CVGairport.com, we intend to give you as much control as possible over your personal information.
The Authority is the sole owner of information collected, which is administered and maintained by the Authority and/or its contractors.
The Authority collects personally identifying information from Users in a variety of ways. The Authority collects personally identifying information when Users visit the Site, sign onto the Wi-fi in the passenger facilities, register on the Site, place an order, fill out a form, respond to a survey, subscribe to the newsletter, and in connection with other activities, services, features or resources we make available on the Site and at the airport. The categories of personal information that may be collected include: name, email address, mailing address, date of birth, credit, debit, or other payment card information, and/or phone number.
The Authority may collect anonymous, de-identified, and pseudonymous information about Users whenever they interact with the Site, scan their boarding pass when going through security, or a User’s device interacts with technology at CVG. Anonymous, de-identified, and pseudonymous information may include the browser name, the type of device and technical browser information when navigating the Site, the means of connection to the Site, the operating system, and other information such as the time a boarding pass was scanned, flight information, and seat number.
The Authority collects and uses User personal information for the following purposes:
To comply with the law or other requirements. The Authority may release account and other personal information when it is believed that the release is appropriate to comply with the law; enforce or apply the Authority’s Legal Disclaimer and User Agreement or other agreements; or protect the rights, property, or safety of CVG, Users, or others. This includes exchanging
The Authority adopts reasonable data collection, storage, and processing practices from time to time to have adequate security. The Authority utilizes reasonable security measures to protect against unauthorized access, alteration, disclosure or destruction of User personal information, username, password, transaction information and data stored on the Site. If you believe that your interaction with the Site is no longer secure or would like to change or delete data that has been collected by the Site, please notify the Authority immediately in accordance with the “Contacting Us” section below.
The Authority does not sell, trade, or rent Users’ personally identifying information to others. The Authority may share generic aggregated demographic information not linked to any personally identifying information regarding visitors and Users with our business partners, trusted affiliates and advertisers for the purposes outlined in Section 4. The Authority may use third party service providers to help operate Authority business and the Site or administer activities on our behalf, such as sending out newsletters or surveys. The Authority may share anonymous information with these third parties for those limited purposes if a User has given permission to do so.
Users may find advertising or other content on the Site that link to the sites and services of partners, suppliers, advertisers, sponsors, licensors and other third parties. The Authority does not control the content or links that appear on these sites and is not responsible for the practices employed by websites linked to via the Site. In addition, these sites, or services, including their content and links, may be constantly changing. These sites and services may be governed by their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to the Site, is subject to that website’s own terms and policies.
Users who have provided the Authority with personally identifying information have the right to know what data the Authority has of theirs and what we are going to do with it. Users may request to have the Authority provide them with an electronic copy of their personally identifying information If a User desires an electronic copy of their personally identifying information, the User should notify the Authority by using the “Contacting Us” section below.
Users who have provided the Authority with personally identifying information have the right to delete that data. If a User desires to delete any personally identifying information collected by the Site, the User should notify the Authority using the “Contacting Us” section below.
Users who have provided the Authority with personally identifying information have the right to rectify that data. Users may request to have any personally identifying information corrected. If a User desires to correct any personally identifying information collected by the Site, the User should notify the Authority using the “Contacting Us” section below.
There may be situations where the Authority cannot grant a User’s request. For example, a User may ask the Authority to delete transaction data but the Authority is legally obligated to keep a record of that transaction to comply with law. The Authority may also decline to grant a request where doing so would undermine the Authority’s legitimate use of data for anti-fraud and security purposes, such as when a User requests deletion of an account that is being investigated for security concerns. Other reasons User privacy requests may be denied are if the requests jeopardize the privacy of others, are frivolous or vexatious, or are extremely impractical.
Protecting the privacy of children is especially important. For that reason, no part of the Site is structured to attract anyone under 13 years old. If the Authority learns that a child’s personal data was collected without appropriate authorization, it will be deleted as soon as possible.