1. About Us

Fraport Brasil – Porto Alegre and Fraport Brasil – Fortaleza are subsidiaries of Fraport AG Frankfurt Airport Services Worldwide, one of the leading companies in the global airport market, offering a full range of integrated management and consulting services.

Fraport AG, the owner and operator of Frankfurt Airport—Germany’s largest airport—is a company with extensive experience in airport operations. Its portfolio includes 30 airports worldwide.

In an international bidding process, in which the Federal Government awarded four Brazilian airports to the private sector, Fraport AG won the concessions for the airports in Fortaleza and Porto Alegre for the next 30 and 25 years, respectively. Since then, Fraport Brasil – Fortaleza and Fraport Brasil – Porto Alegre have been established in the country with the goal of creating two modern, efficient, and customer-focused airports.

On November 27, 2025, Fraport Brasil won the AmpliAR Program auction to manage the Jericoacoara Regional Airport – Comandante Ariston Pessoa. The concession is part of the Federal Government’s initiative aimed at expanding, modernizing, and strengthening the infrastructure of Brazilian regional airports. The concession agreement was signed on March 10, 2026.

2. Meet our Data Protection Officer (“DPO”)

Our DPO is Mr. Paulo Eiras. You can contact him by email at fraportdpo@fraport-brasil.com.

3. Data Collected, Its Use (Processing), Protection, and Retention Period

At Fraport Brasil, we collect personal data, including images and biometric data (where applicable), from our employees, airport users (passengers or visitors), business partners (suppliers and customers), and website users, when necessary to comply with obligations to the regulatory agency for the airport and civil aviation sector (ANAC—National Civil Aviation Agency), as well as to comply with legal provisions and Fraport Brasil’s internal processes.

All personal data collected by Fraport Brasil in accordance with the LGPD and for specific purposes is stored on internal servers and, when necessary, on external servers that have been duly contracted, and is protected by the most robust security protocols to ensure its privacy and integrity. Fraport Brasil takes all necessary precautions and follows industry best practices to ensure that personal data is not improperly lost, misappropriated, accessed without authorization by any person, disclosed, altered, or destroyed.

Fraport Brasil and/or its affiliated companies retain personal data in their database for the duration of the contractual relationship and, when necessary to comply with a legal and/or regulatory obligation (such as in cases of legal proceedings), retain it for the specific periods set forth in applicable laws, as well as in their internal policies.

Personal data may also be deleted upon the data subject’s request, unless there is a legal basis justifying the retention of the data. In such cases, the data subject will be informed of the reason preventing the deletion.

For more details, see the table below:

Categories of individuals	Personal data	Use of data	Protection / Systems	Retention
Employees and/or Dependents	Name, email, phone number, ID number, Tax ID number, address, employment record, photo, driver’s license	To provide all access and permissions for system use, issue identification documents (ID cards), prepare all hiring and termination documents, and include individuals in Fraport Brasil’s internal processes and procedures.	Fraport Brasil servers, cloud services, and servers of specific service providers.	In accordance with Fraport Brasil’s internal policies and applicable laws.
Passengers	Image	To measure wait times in security check lines and monitor foot traffic and movement within the airport to ensure the physical and operational security of the premises.
Suppliers	Name, email, phone number, address, CPF, ID number, vehicle registration	Issuance of identification (badge), inclusion in internal systems and processes—including Fraport Brasil training—to enable service provision, compliance with internal standards for Health, Occupational Safety, Airport Operational Safety, and Security, processing of payments, and fulfillment of contracts.
Customers	Name, email, phone number, address, CPF, RG, registration number	Issuance of identification (ID badge), inclusion in Fraport Brasil’s internal systems and processes, billing and collection, sending communications of interest to the airport community, and contract execution.

4. Cameras

Fraport Brasil has cameras installed at its airports to control and monitor the flow of people. The images collected are stored and kept confidential to ensure the privacy of individuals whose images were captured by one of the many cameras installed on airport premises.

5. Legal Bases Used

At Fraport Brasil, the personal data listed above is collected in accordance with Article 7 of the LGDP, in the following cases (legal bases):
(i) Consent  (ii) Compliance with a Legal Obligation  (iii) Conducting Studies by a Research Organization  (iv) Performance of a Contract  (v) Protection of Health  (vi) Pursuit of Legitimate Interests  (vii) Credit Protection

6. What are your rights?

According to the LGPD, the data subject has the right to:

(i) Confirmation of the existence of processing;
(ii) Access to the data;
(iii) Correction of incomplete, inaccurate, or outdated data;
(iv) Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
(v) Data portability to another service or product provider, upon the user’s express request;
(vi) Deletion of data processed with the user’s consent;
(vii) Information regarding the public and private entities with which the data controller has shared data;
(viii) Information regarding the option to withhold consent and the consequences of such refusal; and
(ix) Withdrawal of consent.

To exercise the rights listed above, Fraport Brasil provides aPrivacy Channel at so that the data subject may submit requests in accordance with the LGPD; to do so, the data subject must provide the following information: full name, CPF number, a description of their relationship with Fraport Brasil and the time period during which it existed, as well as an indication of which airports managed by Fraport Brasil were involved in that relationship. Fraport Brasil will make every reasonable effort to respond to requests made by data subjects as quickly as possible. However, justifiable factors may delay or prevent a prompt response; in the event of a delay, Fraport Brasil will provide data subjects with the appropriate reasons.

Finally, data subjects should be aware that their request may be legally rejected, either for formal reasons (such as their inability to prove their identity) or legal reasons (such as a request to delete data that Fraport Brasil is legally entitled to retain), and in the event that these requests cannot be fulfilled, Fraport Brasil will provide the data subjects with reasonable justifications.

7. Changes to This Privacy Notice

Fraport Brasil reserves the right to modify, update, and/or supplement this Privacy Notice at any time. For this reason, we recommend that you review it frequently. Changes and clarifications will take effect immediately upon their publication on Fraport Brasil’s websites. Furthermore, whenever there are any modifications, updates, and/or additions, Fraport Brasil will indicate them within the text itself so that they can be easily noted and identified.