Introduction
Airbus S.A.S. and its Affiliates (1) (also known as, “Airbus”, or “we” or “us”) is committed to protecting the rights of individuals in line with the General Data Protection Regulation (reference EU 2016/679) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data (hereinafter referred to as : ‘GDPR’) as well as each applicable national Personal Data protection laws and regulations (collectively referred as “Data Protection Laws and Regulations”).
The protection of your privacy and Personal Data is an important concern to which we pay special attention throughout our business processes and we want you to feel comfortable working with Airbus and/or using our websites, portals and “apps” (“Website(s)”). Personal Data collected in the course of your business relationship with Airbus and/or during use of our Websites is processed by us according to the legal regulations valid for the countries in which Airbus is leading its business activities and/or the Websites is maintained. However, your business relationship with Airbus and/or the Website might include links to other websites or applications which are not necessarily covered by this Privacy Notice. In this event, we encourage you to carefully read the relevant privacy policies.
Unless a specific privacy information notice is set up for a processing as defined here below, this Privacy Notice will inform you of the Personal Data we collect in the course of Airbus business activities; how we use and disclose your Personal Data; how you can control the use and disclosure of your Personal Data.
What is Personal Data?
Personal Data is information that can be used to identify a person either directly or indirectly (hereinafter referred to as ‘Personal Data’). A ‘personal identifier’ is a piece of information that can identify an individual. This definition covers a wide range of personal identifiers which constitutes Personal Data, including name, address, email address, identification number, location data or online identifier.
Special category of Personal Data is any Personal Data which relates to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning health, sex life or sexual orientation and includes genetic data, and biometric data where processed to uniquely identify an individual (hereinafter referred as : ‘Special Category Personal Data’).
Which sources and what Personal Data do we use?
In the course of the contractual or client relationship between you or your organisation and Airbus and/or access and use of Airbus Website(s), we will collect, use and process Personal Data you provide when relevant, such as the following categories of data:
We may collect this Personal Data cumulatively:
What are the purposes of the processing of your Personal Data?
By working with Airbus and/or using the Website(s), Airbus may process your Personal Data for the following purposes (hereinafter referred as the “Purposes”) such as :
Website Browsers / Administration.
Marketing.
Communication.
Performance of Airbus business activities and Customer services.
Research and development.
Security and Health & Safety
Legal compliance.
To protect us and others.
We will use your Personal Data for the above Purposes only, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose (for preserving particular evidence under the applicable Data Protection Laws and Regulations, or in the context of legal statutes of limitation for example). If we need to use your Personal Data for an unrelated purpose, we will notify you prior to this further Personal Data processing and provide you with the relevant privacy information notice.
What is the legal basis for processing of your Personal Data?
We process your Personal Data in accordance with the provisions set out in the applicable Data Protection Laws and Regulations. The legal basis for processing your Personal Data are:
To comply with contractual obligations.
When you subscribe to a particular service through the Website, the purposes of processing your Personal Data are primarily determined by that service and we will process your information so that we can provide that service to you.
As a result of your consent.
When you have consented to the processing of your Personal Data by us for certain services through the Website, you can withdraw consent at any time by following the instructions provided in the application process or by contacting us at dataprotection@airbus.com. For further information on the right of withdrawal, please see below Section “How to exercise your rights and/or contact Airbus in respect of your Personal Data?”
Within the scope of a legitimate interest.
On the basis of Airbus’ legal obligations or in the public interest.
Airbus, as any other company, is subject to legal obligations and regulations. In some cases the processing of your Personal Data will be necessary for Airbus in order to fulfil these obligations.
Who will receive your Personal Data?
We may disclose your Personal Data to the following recipient(s) on a strict need to know basis and for the Purposes as outlined in this Privacy Notice:
Which countries and/or regions may Airbus transfer your Personal Data to?
Airbus processes your Personal Data mostly in the EEA. On occasion Personal Data might be transferred outside of the EEA to recipient(s) (including Affiliates) as defined in the section “Who will receive your Personal Data?” that are subject to appropriate safeguards through the legal framework of our Binding Corporate Rules (“BCR”) for transfer to Airbus Affiliates that can be found on our website www.airbus.com or viewed here Airbus BCR's or – through standard contractual clauses or an adequacy decision.
Our Binding Corporate Rules allow us to transfer Personal Data within our international organisation for Airbus daily business activity and internal organisation, and they include a list of countries (see below) which are structured to allow us to transfer Personal Data to Airbus affiliates located in those countries onr a need to know basis. For Airbus, EEA (e.g. France and Germany) is where most of our processing of Personal Data takes place. Below is a list of countries/territories where Airbus Affiliates are located, having signed the BCR and which might have access to your Personal Data where it is relevant.
Australia, Belgium, Brazil, Canada, Chile, China, Denmark, Finland, France, Germany, Hong Kong, Hungary, India, Indonesia, Ireland, Italy, Japan, Kazakhstan, Malaysia, Mexico, Morocco, Netherlands, New Zealand, Oman, Philippines, Poland, Qatar, Romania, Russia, Saudi Arabia, Singapore, Slovakia, South Africa, South Korea, Spain, Switzerland, Taïwan, Thailand, Tunisia, Turkey, United Kingdom, United Arab Emirates, Uruguay, United States of America.
How long will your Personal Data be stored?
We process and store your Personal Data as long as it is required to meet our contractual and statutory obligations. The retention period of your Personal Data is determined by applicable Laws and Regulations and/or by our procedures or processes adopted in accordance with applicable Laws and Regulations.
What about the security of your Personal Data?
We use technical and organisational security measures in order to protect the Personal Data we have under our control against accidental or intentional manipulation, loss, destruction and against access by unauthorised persons.
Our security procedures are continually enhanced as new technology becomes available by relevant Airbus departments
What are your rights?
Under some circumstances provided by law, you may at any time exercise your Personal Data protection rights as listed below by contacting us at the contact details mentioned in section “How to exercise your rights and/or contact Airbus in respect of your Personal Data?”:
How to exercise your rights and/or contact Airbus in respect of your Personal Data?
If you want to exercise your rights or if you are unhappy with the way in which your Personal Data has been processed or should you have questions regarding the processing of your Personal Data, you may refer in the first instance to the Airbus Data Protection Officer, who is available, at the following email address: dataprotection@airbus.com or you can write to the address below: Airbus SAS, Head of Data Protection, 2 rond-point Emile Dewoitine 31700 Blagnac cedex. France.
In case of doubt of your identity, we may ask you to justify it by enclosing a copy of any identity document.
Is your Personal Data the basis for automated decision-making, including profiling?
As a matter of principle, we do not use fully automated decision-making processes including profiling. In the event that we should use such processes in individual cases, we will, specifically inform you in advance of this and of your rights in this respect as required by law.
How to ask for assistance to the competent authorities?
If you remain unsatisfied, then you have the right to apply directly to a Data Protection Supervisory Authority. Listed below are the four main European countries where Airbus operates and the relevant Supervisory Authority.
FRANCE: CNIL: Supervisory Authority France
GERMANY: each federal state has its own Data Protection Authority that can be found under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
SPAIN: AEPD: Supervisory Authority Spain
UK: ICO: Supervisory Authority UK
Cookies
WHAT ARE COOKIES?
Cookies are small files or amounts of information that may be stored to, accessed and removed from your device when you access Airbus Websites.
They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
In particular, cookies allows us to recognise your device and store information about your preferences or past actions. We may use cookies:
(i) to record the preferences of our users,
(ii) to enable us to optimise the design of our Websites,
(iii) to ease navigation, and increase the user-friendliness of our Websites,
(iv) to analyse the usage our Website and/or to identify the most popular sections of[our Websites,
(v) to provide content that is more accurately suited to your needs, and, in doing so, improve our Websites. cookies can be used to determine whether there has been any contact between us and your device in the past,
(vi) to facilitate secure online access so that you do not need to enter your user ID and password again when you access our Websites.
WHICH COOKIES DO WE USE?
Cookies contain Personal Data. The table below aims to inform you about the type and purpose of each cookies, the issuer (Airbus or third party) and the type of Personal Data processed inside, and that we may use on our Websites:
NAME OF COOKIES |
PURPOSE |
RETENTION PERIOD |
ISSUER | MANDATORY |
_fbq | Facebook social networking features | 3 Months | Facebook.com | OPTIONAL |
lang | Linkedin social networking features | Session | .ads.linkedin.com | OPTIONAL |
_gid | Google Universal Analytics | 1 Day | .airbus.com | OPTIONAL |
incap_ses_* | Incapsula WAF features | Session | .airbus.com | MANDATORY |
visid_incap_* | Incapsula WAF features | Session | .airbus.com | MANDATORY |
_ga | Google Universal Analytics | 1 Year | .airbus.com | OPTIONAL |
lidc | Linkedin social networking features | 1 Day | .linkedin.com | OPTIONAL |
UserMatchHistory | Linkedin social networking features | 1 Month | .linkedin.com | OPTIONAL |
AMCV_* | Adobe cloud features | 2 Years | .adobe.org | MANDATORY |
lissc | Linkedin social networking features | 1 Year | .linkedin.com | OPTIONAL |
lang | Linkedin social networking features | Session | .linkedin.com | OPTIONAL |
_ga | Google Universal Analytics | 1 Year | .linkedin.com | OPTIONAL |
bcookie | Linkedin social networking features | 2 Years | .linkedin.com | OPTIONAL |
__cfduid | Cedexis DNS features | 4 Years | .ptcfc.com | PERFORMANCE |
everest_g_v2 | Adobe cloud features | 2 Years | everesttech.net | MANDATORY |
personalization_id | Twitter social networking features | 2 Years | twitter.com | OPTIONAL |
demdex | Adobe cloud features | 6 Months | demdex.net | OPTIONAL |
fr | Facebook social networking features | 3 Months | Facebook.com | OPTIONAL |
IDE | Google Universal Analytics | 1 Year | doubleclick.net | OPTIONAL |
dpm | Adobe cloud features | 6 Months | dpm.demdex.net | MANDATORY |
_dc_gtm_* | Google Tag Manager | 1 hour | .airbus.com | MANDATORY |
HOW CAN YOU DISABLE OR DELETE COOKIES?
When the cookies we use are strictly necessary for technical reasons, they are marked as “mandatory” on the table above. Those cookies do not require consent from you. However, if you choose not to accept cookies that are strictly necessary for the provision of our services provided by our Website, it may result in a reduced availability of such services.
For the Cookies that require a consent from you (“non mandatory cookies”), please be informed that you can consent and withrdaw this consent at any time. You can also manage and control the non mandatory cookies we use, and delete them directly on our Websites through the cookies settings interface.
In addition, You can prevent non mandatory cookies from being stored on your device by setting your browser to not accept cookies. The exact instructions for this can be found in the manual for your browser. You can also delete cookies already on your device at any time through your browser’s settings. Find out how to manage Cookies on popular browsers:
To find information relating to other browsers, please visit the browser developer's website.
For the purpose of statistical analysis, we use analytics tools relying on specific cookies. You may object at any time to the collection and analysis of statistical data regarding your access to and use of our Websites through the cookies settings interface mentioned above.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.
SOCIAL MEDIA COOKIES
Airbus is active on some social media platforms, including Facebook, Instagram, Twitter, YouTube or LinkedIn communities strengthens our online presence and visibility.
Airbus Websites do not set cookies when displaying links to our social media channels when you browse our Websites.
You can watch Airbus content, which we upload (embed) also to social media platform pages. These platforms have its own cookie and privacy policies over which Airbus has no control. A message will alert you that you need to accept such social media platform’s cookies policies when you are redirected to such websites.
Similarly, by clicking on the rest of the social media platforms button on our website, you will be redirected to the LinkedIn site, which has its own cookie and privacy policies over which we have no control.
For more information about the use of your Personal Data cookies while visiting our Websites, please read our privacy notice.
Modification of the Privacy Notice
Airbus will update this Privacy Notice from time to time in order to reflect the changes in our practices and services and also to remain compliant to Data Protection Laws and Regulations. We will inform you of any substantial modification in how we process your Personal Data.
This Privacy Information Notice was last updated in November 2020.
(1) For sake of clarity, the term “Affiliate(s)” means for the purpose of this Privacy Notice, any legal entity where Airbus SE as parent company owns directly or indirectly 50% or more of the shares and/or voting rights and/or the right to appoint the majority of the Directors of the Board.