PRIVACY INFORMATION NOTICE

Introduction

Airbus Defence and Space SAS and its Affiliates (also known as, “Airbus”, or “we” or “us”) appreciate(s) your interest in our products, services and business lines and your use of the Secure Communications Website.

Secure Communications Website aims at presenting our activities, product and services, consisting in connecting any user in a reliable, trusted and secure environment by developing multi-bearer communication networks & services.

Your privacy is important to us and we want you to feel comfortable navigating our Website. Airbus is committed to protecting the rights of individuals in line with the General Data Protection Regulation (reference EU2016/679) on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data (hereinafter referred as : “GDPR”) as well as each applicable national Personal Data protection laws and regulations . The protection of your privacy and Personal Data is an important concern to which we pay special attention throughout our [business] processes.

However, the Website will include links to other websites or applications which are not necessarily covered by this Privacy Notice. In this event, we encourage you to carefully read the privacy policies of such websites.

This Privacy Notice will inform you of the Personal Data we collect when you access/use the Website; how we use and disclose your Personal Data; how you can control the use and disclosure of your Personal Data; and how we protect your Personal Data.

Which sources and what Personal Data do we use?

Personal Data is information that can be used to identify a person either directly or indirectly (hereinafter referred as “Personal Data”). This definition covers a wide range of data enabling the identification of an individual.
The Personal Data we process under this Privacy Notice are as follows:

We may collect the IT data /Digital activity data directly from you via your navigation to our Website and, for the other Personal Data, by filling the form on the “Contact us” page. Please note that some fields in this form are optional (those not marked with an asterisk). Their indication allows us to respond more efficiently to your request/comment.

What are the purposes of the processing of your Personal Data?

Airbus will collect and process your Personal Data for the following purposes (hereinafter referred as: the ‘Purposes’):

We will use your Personal Data for the above Purposes only, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose (for preserving particular evidence under the applicable Data Protection Laws and Regulations, or in the context of legal statutes of limitation for example). If we need to use your Personal Data for an unrelated purpose, we will notify you prior this further Personal Data processing and provide you the relevant privacy information notice.

What is the legal basis for processing of your Personal Data?

As a responsible company, we need a lawful basis for collecting and/or processing your Personal Data in accordance with the provisions set out in the GDPR and the relevant applicable Data Protection Laws and Regulations. The legal basis for processing your Personal Data under this Privacy Notice is:

Within the scope of a legitimate interest.

On occasion taking into account the minimum privacy impact for you, the processing of your personal data might be necessary for the following legitimate interest:

Who will receive your Personal Data?

We may disclose your Personal Data to the following recipient(s) on a strict need to know basis and for the Purposes as outlined in this Privacy Notice:

Which countries and/or regions will Airbus transfer your Personal Data to?

Airbus processes your Personal Data mostly in the EEA. On occasion Personal Data is transferred to the relevant recipients as described in Section “Who will receive your Personal Data?” on a need-to-know basis, including entities outside the EEA.

This transfer is subject to appropriate safeguards, within Airbus through the legal framework of our Binding Corporate Rules (“BCR”), that can be found on our website www.airbus.com or viewed here Airbus BCR's or through alternative contractual frameworks or relevant adequacy decision where the relevant data recipients as defined in Section “Who will receive your Personal Data?” is engaged to help us by providing web-services to you.

Our Binding Corporate Rules allow us to transfer Personal Data within our international organization, and they include a list of countries (below) which are structured to allow us to transfer Personal Data to the countries where we have a presence.  Below is a list of countries where Airbus operates:

Algeria, Australia, Belgium, Brazil, Canada, Chile, China, Czech republic, Denmark, Egypt, Finland, France, French Guyana, Germany, Greece, Hong Kong, Hungary, India, Indonesia, Ireland, Italy, Japan, Kazakhstan, Libya, Malaysia, Mexico, Morocco, Netherlands, New Zealand, Norway, Oman, Philippines, Poland, Qatar, Romania, Russia, Saudi Arabia, Singapore, Slovakia, South Africa, South Korea, Spain, Sweden, Taiwan, Tanzania, Thailand, Tunisia, Turkey, United Kingdom, United States of America, Uruguay, United Arab Emirates, Vietnam.

How long will your Personal Data be stored?

We process and store your Personal Data as long as needed to process your request/ comment in case you filled the “Contact us” form, in accordance with the GDPR or any local data protection laws requirements or as long as it is required to meet our contractual and local legal obligations.

What about the security of your Personal Data?

We use technical and organizational security measures in order to protect the Personal Data we have under our control against accidental or intentional manipulation, loss, destruction and against access by unauthorised persons. Our security procedures are continually enhanced as new technology becomes available.

What are your rights and how to exercise them and/or contact Airbus in respect of your Personal Data?

Under some circumstances provided by law, you may at any time exercise your data protection rights as listed below:

If you want to exercise your rights or you are unhappy with the way in which your Personal Data has been processed or should you have any questions regarding the processing of your Personal Data, you may refer in the first instance to the Airbus Data Protection Officer, who is available, at the following email address: dataprotection@airbus.com or you can write to the address below:
Airbus SAS, Head of Data Protection, HAP, 2 rond-point Emile Dewoitine 31700 Blagnac cedex. France
In case of doubt of your identity, we may ask you to justify it by enclosing a copy of any identity document.

Are you obliged to provide your Personal Data?

Under certain circumstances, when some Personal Data is necessary to enter into a contract or to comply with legal obligation, any failure to provide the requested Personal Data may conduct us not being able to fulfil our contractual/legal obligations or to achieve the expected results.

Are your Personal Data the basis for automated decision-making, including profiling?

As a matter of principle, we do not use fully automated decision-making processes, including profiling. In the event that we should use such processes, we will inform you in advance however, you can always change your cookies preferences from your web browser settings.

How to ask for assistance to the competent authorities?

If you remain unsatisfied, then you have the right to apply directly to a Data Protection Supervisory Authority. Listed below are the four main European countries where Airbus operates and the relevant Supervisory Authority

FRANCE:   CNIL: Supervisory Authority France

GERMANY:   Datenschutz-hamburg: Supervisory Authority for Airbus Operations GmbH
or
lda Bayern: Supervisoy Authority for Airbus Companies in Bavaria, Germany or
any other competent regional German authority as the case may be,

SPAIN:   AGPD.Supervisory Authority Spain

UK:   ICO - Supervisory Authority UK

Cookies Policy

WHAT ARE COOKIES?
Cookies are small files that may be downloaded on your device when you access and use the Secure Communications Website. They allow the Secure Communications Website to recognise your device and store information about your preferences or past actions. We use cookies to record the preferences of our users, to enable us to optimise the design of the Secure Communications Website. They ease navigation, and increase the user-friendliness of websites. Cookies also help us to identify the most popular sections of the Secure Communications Website. This enables us to provide content that is more accurately suited to your needs, and, in doing so, improve our services. Cookies can be used to determine whether there has been any contact between us and your device in the past. Only the cookie on your device is identified.

WHICH COOKIES DO WE USE?
Please find below a table with specific information for each cookie that we may use on the Secure Communications Website:

NAME OF COOKIES PURPOSE RETENTION PERIOD
XSRF-TOKEN Security / Anonymous Duration of the browser session
_ga Google cookies for tracking / Anonymous Duration of the browser session
_gid Google cookies for tracking / Anonymous Duration of the browser session
laravel_cookie_consent Cookies Acceptance / Anonymous  Duration of the browser session
securecommunications_session Navigation – Context infos / Anonymous Duration of the browser session

HOW CAN YOU DISABLE OR DELETE COOKIES?
If you choose not to accept cookies, you can still access and use the Secure Communications Website. Most browsers automatically accept cookies. You can prevent cookies from being stored on your device by setting your browser to not accept cookies. The exact instructions for this can be found in the manual for your browser. You can delete cookies already on your device at any time. However, if you choose not to accept cookies that are strictly necessary for the provision of our services provided by the Secure Communications Website, it may result in a reduced availability of such services.

For the purpose of statistical analysis, we use analytics tools such as Adobe Analytics, or Google Analytics. You may object at any time to the collection and analysis of statistical data regarding your access to and use of our Website by contacting us using the “contact us” function within the Secure Communications Website.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.

Modification of the Privacy Notice

Airbus will update this Privacy Notice from time to time in order to reflect the changes in our practices and services and also to remain compliant to Data Protection Laws and Regulations. We will inform you of any substantial modification in how we process your Personal Data.