GDRP Compliance Statement & Data Protection

At Airporteo Tourism W.L.L., your privacy is not just a legal obligation — it’s a core part of how we operate. As a Qatar-registered company providing premium airport services to international travelers, we are fully committed to safeguarding the personal data of our customers, partners, and website visitors in accordance with the most rigorous global data protection laws.

This includes full alignment with:

• Qatar’s Law No. (13) of 2016 Concerning the Protection of Personal Data (commonly referred to as the Personal Data Privacy Protection Law or PDPPL),
• The Qatar Financial Centre (QFC) Data Protection Regulations 2021 (where applicable),
• The European Union General Data Protection Regulation (GDPR),
• And other major data protection frameworks such as CCPA (California) and LGPD (Brazil), as required by the residence of the data subject.

Our Compliance Framework
Qatar Data Protection Law (PDPPL)
Qatar was the first Gulf country to implement a comprehensive personal data law with the issuance of Law No. (13) of 2016. This law mandates that:

• Personal data must be processed with transparency, honesty, and respect for human dignity;
• Individuals have the right to access, rectify, and erase their data;
• Sensitive personal data (e.g., health, religion, political beliefs) requires extra safeguards;
• Organizations must notify authorities and affected individuals in case of a data breach.

This law is further supported by regulatory guidelines issued by Qatar’s National Cyber Security Agency (NCSA), which help align local compliance with global standards like GDPR.

Read more from the NCSA

General Data Protection Regulation (GDPR) – EU & EEA Customers
We fully comply with the EU GDPR when handling personal data of individuals residing in the European Union or the European Economic Area. This includes:

• Obtaining clear and informed consent for processing;
• Maintaining data minimization, accuracy, and purpose limitation;
• Implementing secure data transfers and appropriate technical safeguards;
• Offering full rights of access, rectification, deletion, portability, and objection.

Cross-Border Data Transfers
Airporteo operates globally and may process data across jurisdictions. All cross-border transfers of personal data are assessed for legal risk and permitted only where:

• Adequate levels of protection exist;
• Data subjects have given informed consent; or
• Contracts and safeguards ensure compliance with the PDPPL, QFC, or GDPR obligations.

Your Rights as a Data Subject
No matter your country of residence, you may have the right to:

• Access your personal data;
• Request correction or deletion;
• Object to or restrict processing;
• Withdraw previously given consent;
• File a complaint with your national data protection authority or Qatar’s Data Protection Office.

To make a data request, contact us at info@airporteo.com

Data Breach Notification & Security
We employ industry-standard security technologies and procedures to protect your data. In the unlikely event of a data breach, we are committed to notifying both regulators and affected individuals within 72 hours, as required by Qatar and international law.

Final Notes
Airporteo reviews and updates its privacy practices regularly to stay aligned with evolving laws and best practices. Our commitment is proactive, not just reactive — ensuring you can travel confidently, knowing your personal information is in safe hands.

Thank you for trusting Airporteo.
Your privacy is our responsibility, and our promise.