Introduction

Airbus SAS and its affiliates ( “Airbus”, “we” or “us”) appreciate your interest in our products, services and business lines and your use of our websites, portals and “apps” (“Websites”). Your privacy is important to us and we want you to feel comfortable using our Websites. The protection of your privacy and Personal Data is an important concern to which we pay special attention throughout our business processes. Personal Data collected during use of our Websites is processed by us according to the legal regulations valid for the countries in which the Websites are maintained. In addition, our Binding Corporate Rules Airbus BCR’s protect customer and partner data throughout the entire organization. However, the Websites will include links to other websites or applications which are not necessarily covered by this Privacy Policy. Airbus is therefore not liable for the privacy policies, procedures and practices of such websites or applications and we encourage you to carefully read/review their privacy policies, procedures and practices.

Airbus is committed to protecting the rights of individuals in line with the Canada’s federal and provincial privacy laws (“Canadian Privacy Laws”), the General Data Protection Regulation EU2016/679 (“GDPR”) as well as each applicable national Personal Data protection laws and regulations (collectively “Data Protection Laws and Regulations”).

This Privacy Policy will inform you of the Personal Data we collect when you access/use the Websites; how we use and disclose your data; how you can control the use and disclosure of your data; and how we protect your Personal Data.

What is Personal Data?

Personal Data is information that can be used to identify a person either directly or indirectly (“Personal Data”). A “personal identifier” is a piece of information that can identify an individual. This definition covers a wide range of personal identifiers to constitute Personal Data, including name, address, email address, identification number, location data or online identifier. Please note that the term Personal Data used in this Privacy Policy is equivalent to the term “personal information” under Canadian PrivacyLaws.

Which sources and what Personal Data do we use?

When you use the Websites, Airbus will collect, use and process any Personal Data you provide us (e.g. your name, date of birth, company name etc.) and any information generated as a result of using the Websites, such as IP address, the date and length of visit to the site, the pages you view etc.

What are the purposes of the processing of your Personal Data?

By using the Websites, Airbus will collect and process your Personal Data in accordance with this Privacy Policy. Your Personal Data may be used for the following purposes (the “Purposes”):

1) Website Browsers / Administration
We use your Personal Data for administrative purposes, including to help us better understand how our customers access and use our Websites and applications; to provide reports to prospective partners, service providers, regulators, and others; to implement and maintain security, anti-piracy, fraud prevention, and other services designed to protect our customers, partners and us; and to enforce our policies, directives and processes.

2) Marketing
To the extent permitted by law, we may use your Personal Data for marketing and promotional purposes, including communications through email or equivalent electronic means. For example, we use your Personal Data, such as your email address, to send news and newsletters, special offers, promotions and competitions, or to otherwise contact you about services or information we think will interest you.

3) Communication
We use your Personal Data to communicate with you, including responding to requests for assistance. We can communicate with you in a variety of ways, including email and via your social media accounts if you have agreed, and/or text message.

4) Customer service
We use your Personal Data for customer service purposes, including providing services to you, for technical support or other similar purposes and to establish and maintain customer accounts.

5) Research and development
We use your Personal Data for research and development purposes, including improving our Websites, applications, services, and customer experience and for other research and analytical purposes dedicated to improving our products, services, businesses, operations and processes.

6) Legal compliance
We use your Personal Data to comply with applicable legal obligations, including responding to an authority or court order or discovery request.

7) To protect us and others
Where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of policies, terms, and other policies.

What is the basis for processing of your Personal Data Under the GDPR?

Under the GDPR, we need a lawful basis for collecting and/or processing your data. We generally rely on a number of grounds (reasons) for our business processing. We process your Personal Data in accordance with the provisions set out in the GDPR and the relevant applicable Data Protection Laws and Regulations. The legal basis for processing your Personal Data are:

1) To comply with contractual obligations.
When you subscribe to a particular service through the Websites, the purposes of processing your Personal Data are primarily determined by that service and we will process your information so that we can provide that service to you.

2) As a result of your consent.
When you have consented to the processing of your Personal Data by us for certain services through the Websites, you can withdraw consent at any time by following the instructions provided in the application process or by contacting us at dataprotection@airbus.com. For further information on the right of withdrawal, please see below Section “Am I obliged to provide my Personal Data?”

3) Within the scope of a legitimate interest.
Under the GDPR, on occasion we may not need your consent to use your data, given our legitimate interest to do so but we must inform you that we do this; examples of this are:

  • For the analysis and optimization of the Websites.
  • For ensuring IT security and the IT operation of Airbus.
  • For prevention and investigation of criminal acts.

4) On the basis of Airbus’ legal obligations or in the public interest.
Airbus, as any other company, is subject to legal obligations and regulations. In some cases the processing of your Personal Data will be necessary for Airbus in other to fulfil these obligations. 

Who will receive your Personal Data?

  • Authorized persons working for or on behalf of Airbus;
  • Airbus Group SE and affiliates of Airbus, on a need-to-know basis for the Purposes as outlined in this Privacy Policy;
  • Our agents, service providers and advisers (e.g. Third party service providers and advisers providing the variety of products and services we need such as IT maintenance and support, procurement services, compliance and security services, etc.);
  • Other authorized third parties party in the event of a reorganization or sale or a change in ownership of, or a grant of a security interest in, all or a part of Airbus;
  • Law enforcement or government authorities where necessary to comply with applicable law.

Will your Personal Data be transferred to a third country outside the European Economic Area (EEA)?

Airbus processes your Personal Data mostly in the EEA. On occasion Personal Data is transferred to Airbus SE or affiliates of Airbus, on a need-to-know basis, including entities outside the EEA. This transfer is subject to appropriate safeguards, and through the legal framework of our Binding Corporate Rules, that can be found on our website www.airbus.com or viewed here Airbus BCR’s or through alternative contractual frameworks where a third party is engaged to help us providing web-services to you.

Which countries will Airbus transfer Personal Data to?

Our Binding Corporate Rules allow us to transfer Personal Data within our international organization, and they include a list of countries (below) which are structured to allow us to transfer Personal Data to the countries where we have a presence, including Canada.  For Airbus, France and Germany are where most of our processing of personal information takes place and below is a list of countries where Airbus operates:

Algeria, Australia, Belgium, Brazil, Canada, Chile, China, Czech republic, Denmark, Egypt, Finland, France, French Guyana, Germany, Greece, Hong Kong, Hungary, India, Indonesia, Ireland, Italy, Japan, Kazakhstan, Libya, Malaysia, Mexico, Morocco, Netherlands, New Zealand, Norway, Oman, Philippines, Poland, Qatar, Romania, Russia, Saudi Arabia, Singapore, Slovakia, South Africa, South Korea, Spain, Sweden, Taiwan, Tanzania, Thailand, Tunisia, Turkey, United Kingdom, United States of America, Uruguay, United Arab Emirates, Vietnam.

For how long will your Personal Data be stored?

We process and store your Personal Data as long as it is required to meet our contractual and statutory obligations. If your Personal Data is no longer required for the performance of the contractual or statutory obligations, these will be erased on a regular basis unless further processing is necessary, for instance, for preserving particular evidence under the applicable Data Protection Laws and Regulations, or in the context of legal statutes of limitation.

Security

We use technical and organizational security measures in order to protect the data we have under our control against accidental or intentional manipulation, loss, destruction and against access by unauthorized persons. Our security procedures are continually enhanced as new technology becomes available. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while the Websites strives to protect your personal information, we cannot warrant the security of any information you transmit to us, and you do so at your own risk. Once the Websites receives your transmission, we make commercially reasonable efforts to ensure its security on our systems.

What are your rights and how to exercise them?

Under Canadian Privacy laws, on written request and subject to proof of identity, you may access the Personal Data that we hold, used or communicated and ask that any necessary corrections be made, where applicable, as authorized or required by law. However, to make sure that the Personal Data we maintain about you is accurate and up to date, please inform us immediately of any change in your Personal Information.

Under the GDPR, you may at any time exercise your data protection rights:

  • Right to access/obtain a report detailing the information held about you: You have the right to obtain confirmation as to whether or not your Personal Data is being processed by Airbus and if so, what specific data is being processed.
  • Right to correct Personal Data: You have the right to change any inaccurate Personal Data concerning you.
  • Right to be forgotten: In some cases, for instance, when the Personal Data is no longer necessary in relation to the Purposes for which they were collected, you have the right for your Personal Data to be erased.
  • Right to stop the processing of your data: You have the right to restrict the processing of your Personal Data by Airbus, for instance when the processing is unlawful and you oppose the erasure of your Personal Data. In such cases, your Personal Data will only be processed with your consent or for the exercise or defense of legal claims.
  • Right to data portability: Under some circumstances provided by law, you have the right to receive the Personal Data concerning you in a structured, commonly used and machine-readable format and/or transmit those Personal Data to another data controller.
  • Right to object and to withdraw consent: please see below section “Am I obliged to provide by Personal Data?”

To this effect, please contact Airbus in writing either by e-mail at the following address: dataprotection@airbus.com or by writing to the addresses below, enclosing a copy of a document evidencing your identity.

 Airbus SAS, Head of Data Protection, HAP, 2 rond-point Emile Dewoitine 31700 Blagnac cedex. France

Am I obliged to provide my Personal Data?

You may at any time object to the processing of your Personal Data or where your consent is required, withdraw such consent by contacting us at dataprotection@airbus.com; However, please note that if you withdraw your consent, you may not be able to access and use certain information, features or services of the Websites.

To what extent will decision-making be automated?

As a matter of principle, we do not use fully automated decision-making processes. In the event that we should use such processes in individual cases, we will if prescribed by law, specifically inform you of this and of your rights in this respect.

Will profiling take place?

As a matter of principle, your Personal Data will not be processed automatically with the objective of evaluating certain personal aspects (profiling). In the event that we should process your Personal Data with the objective of conducting profiling, we will, if prescribed by law, specifically inform you of this and of your rights in this respect.

How can I contact Airbus in respect of my Personal Data?

If you are unhappy with the way in which your Personal Data has been processed or should you have questions regarding the processing of your Personal Data, you may refer in the first instance to the Airbus Data Protection Officer, who is available for enquiries or complaints, at the following email address: dataprotection@airbus.com or you can write to the address below:

Airbus SAS, Head of Data Protection, HAP, 2 rond-point Emile Dewoitine 31700 Blagnac cedex. France

Can I ask for assistance to the competent authorities?

If you remain unsatisfied, then you have the right to apply directly to a Data Protection Supervisory Authority. Listed below are the most relevant Supervisory Authority where Airbus operates:

CANADA:       Office of the Privacy Commissioner of Canada: Supervisory Authority Canada or the Commission d’accès à l’information au Québec, Canada any other competent provincial Canadian authority as the case may be,

FRANCE:        CNIL: Supervisory Authority France

GERMANY:      Datenschutz-hamburg: Supervisory Authority for Airbus Operations GmbH or lda Bayern: Supervisoy Authority for Airbus Companies in Bavaria, Germany or any other competent regional German authority as the case may be,

SPAIN:          AGPD.Supervisory Authority Spain

UK:                ICO: Supervisory Authority UK

Cookies

What Are Cookies?

Cookies are small files that may be downloaded on your device when you access and use our Websites. They allow the Websites to recognize your device and store information about your preferences or past actions. We use cookies to record the preferences of our users, to enable us to optimize the design of our Websites. They ease navigation, and increase the user-friendliness of websites and applications. Cookies also help us to identify the most popular sections of our Websites. This enables us to provide content that is more accurately suited to your needs, and, in doing so, improve our service. Cookies can be used to determine whether there has been any contact between us and your device in the past. Personal details can be saved in cookies, provided that you have consented. For example, cookies may be used to facilitate secure online access so that you do not need to enter your user ID and password again.

Which Cookies do We Use?

This website uses only strictly necessary cookies for functional purposes which are not subject to consent.

How Can You Disable or Delete Cookies?

If you choose not to accept cookies, you can still access and use our Websites. Most browsers automatically accept cookies. You can prevent cookies from being stored on your device by setting your browser to not accept cookies. The exact instructions for this can be found in the manual for your browser. You can delete cookies already on your device at any time. However, if you choose not to accept cookies that are strictly necessary for the provision of our services provided by our Websites, it may result in a reduced availability of such services.

For the purpose of statistical analysis, we use analytics tools such as Adobe Analytics, or Google Analytics. You may object at any time to the collection and analysis of statistical data regarding your access to and use of our Websites by contacting us using the “contact us” function within our Websites.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.

Interpretation of the Privacy Policy

Any interpretation associated with this Privacy Policy will be made by our Data Protection Officer. This Privacy Policy includes examples but is not intended to be restricted in its application to such examples, therefore where the word ‘including’ is used, it shall mean ‘including without limitation’.

This Privacy Policy does not create or confer upon any individual any rights, or impose upon Airbus any rights or obligations outside of, or in addition to, any rights or obligations imposed by Data Protection Laws and Regulations, as applicable. Should there be, in a specific case, any inconsistency between this Privacy Policy and Data Protection Laws and Regulations, as applicable, this Privacy Policy shall be interpreted, in respect of that case, to give effect to, and comply with, such privacy laws.

Modification of the Privacy Policy

Airbus will update this Privacy Policy from time to time in order to reflect the changes in our practices and services and also to remain compliant to Data Protection Laws and Regulations. We will inform you of any substantial modification in how we process your Personal Data.

Page updated: December 2022