Cookies Policy

(Last updated: December 2025)

Purpose
This Cookies Policy explains how Athens International Airport S.A. (AIA, we, us, or our) uses cookies and similar technologies on our websites and digital platforms, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national legislation.

Data Controller
The controller responsible for the use of cookies and processing of personal data through our Website is Athens International Airport S.A. (AIA), Attiki Odos, Spata, Attica, 19019, Greece.

For any questions related to the processing of your personal data or the exercise of your rights, you may contact our Data Protection Officer (DPO) at [email protected].

What Are Cookies?
Cookies are small text files stored on your device (computer, smartphone or tablet) when you visit a website. They enable the website to recognize your device and remember your actions and preferences.

We also use pixels, also known as tags or web beacons, which are small invisible images embedded in web pages or emails that help us understand how users interact with our content and campaigns.

You can at any time change or withdraw your consent by visiting the Cookies Settings section on our website.

Where We Use Cookies
Cookies and similar technologies are used across AIA’s digital platforms (Websites):

  • www.aia.gr
  • AIA Interactive Communication Platform (AI Chatbot)
  • Corporate online platforms

Why We Use Cookies
We use cookies to:

  • enable core website functionality and improve your browsing experience
  • enhance security and prevent fraudulent activity
  • analyze website performance and usage to optimize our services
  • remember user preferences such as language and accessibility settings
  • provide personalized advertising and promotional content relevant to your interests

Types of Cookies
Cookies differ by duration and purpose.

By Duration

  • Session Cookies: Deleted automatically when you close your browser.
  • Persistent Cookies: Remain stored until expiry or manual deletion.

By Purpose

  • Essential Cookies – Required for the secure and correct operation of our websites and applications. They include authentication and session management cookies, load balancing and security tokens. These cookies do not store personal information and are always active.
  • Preferences Cookies – Allow the website to remember your selections and settings, such as preferred language, accessibility adjustments or whether certain banners or dialogs have been shown. They enhance usability and user experience across sessions.
  • Statistics Cookies – Collect aggregated, anonymized information about how visitors use our website. They help us understand how users interact with the site, identify errors, and improve functionality.
  • Marketing Cookies – Used to deliver relevant advertisements and promotions, measure the effectiveness of campaigns and limit ad repetition. These may include third-party cookies from platforms such as Google, YouTube or Facebook.

If a cookie is used for Marketing or Preference purposes, it is categorized as Marketing/Preferences. This allows us to apply the highest level of consent required for multi-purpose cookies.

Ownership of Cookies

  • First-Party Cookies: Set and controlled by AIA.
  • Third-Party Cookies: Set by external providers (e.g., Google, Facebook, YouTube) to support analytics, advertising or embedded content.

Third parties placing cookies on our Website act as independent data controllers for their processing activities.

Local Storage
We also use the browser’s Local Storage to enable certain functionalities (such as AI chatbot sessions). Non-personal session information is stored temporarily and may be retained for up to two months. Certain persistent identifiers or consent preferences may be stored for longer periods to maintain user settings, improve functionality, or demonstrate compliance with GDPR requirements. These persistent data items are not used for advertising or tracking purposes beyond what is necessary for service functionality.

Legal Basis for Processing

  • Strictly necessary cookies are processed based on Article 6(1)(f) GDPR (legitimate interests) or Article 6(1)(b) GDPR (performance of a contract).
  • All other cookies are used only with your explicit consent under Article 6(1)(a) GDPR.

Non-essential cookies are not activated until you have provided your explicit consent through our Cookies Settings panel. You may modify your choices at any time.

Managing Your Cookies Preferences
When visiting our website, you can select or reject non-essential cookies through our Cookies Banner. Your preferences are stored for 180 days, after which you will be asked to reconfirm them. Our Cookies consent management platform records your consent status and preferences (date, time and type of consent) to demonstrate compliance with GDPR requirements.

You can also manage cookies via your browser settings. Please note that disabling essential cookies may affect the proper functioning of the website.

Third-Party Recipients
Some cookies involve processing by third parties (e.g. Google, Meta, Microsoft). These parties may process data outside the EEA under appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs). You can learn more about how these providers process your data by reviewing their respective privacy or cookies policies.

Data Retention
Personal data collected through cookies is retained only for as long as necessary for the purposes stated and in accordance with the cookies’ expiry period shown in the table. Once the period expires, data is either deleted or anonymized.

Your Rights
You have the right to request access to your personal data, rectification, erasure (“right to be forgotten”), restriction of processing, data portability and to object to processing, in accordance with Articles 15–22 of the GDPR.

You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You may exercise these rights by contacting our DPO at [email protected]

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr

Updates to This Policy
We may amend this Policy from time to time. Any updates will be published on this page with a revised “Last updated” date.