Introduction
Airbus SAS and its affiliates (also known as, “Airbus”, or “we” or “us”) appreciate your interest in our products, services and business lines. Your privacy is important to us and we want you to feel comfortable using our services. The protection of your privacy and Personal Data is an important concern to which we pay special attention throughout our business processes. Personal Data collected is processed by us according to the legal regulations valid for the countries in which your data is processed. In addition, our Binding Corporate Rules Airbus BCRs protect customer and partner data throughout the entire organisation.
Airbus is committed to protecting the rights of individuals in line with the General Data Protection Regulation (reference EU2016/679) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data (hereinafter referred as: ‘GDPR’) as well as each applicable national Personal Data protection laws and regulations (collectively referred as “Data Protection Laws and Regulations”).
Information Notice index
This Information Notice will inform you of the Personal Data we collect when you access/use Airbus Investor Relations and Financial Communication services; how we use and disclose your data; how you can control the use and disclosure of your data; and how we protect your Personal Data.
What is Personal Data?
Personal Data is information that can be used to identify a person either directly or indirectly (hereinafter referred as: ‘Personal Data’). A ‘personal identifier’ is a piece of information that can identify an individual. This definition covers a wide range of personal identifiers to constitute Personal Data.
The Personal Data Airbus Investor Relations and Financial Communication explicitly collects and uses are the following:
| Data of the civil register | Name First name Birth date |
| Contact details | Email and postal address Telephone number |
| Professional life | whether or not you are an employee of Airbus or one of its subsidiaries |
| Registered shareholder information | number of shares registered (for registered shareholders only) |
| Activity data | Logs of your activities on our website, while using our call center and other services |
Which sources and what Personal Data do we use?
Airbus will collect, use and process any Personal Data you provide us or by using any other of our services (e.g. attendance to events hosted by us).
Some of the data may have been or will be provided by our partners e.g. BNP Paribas Securities Services for specific data related to registered shareholders, Seitosei regarding users of the call center and newsletter services, and other agents and service providers e.g. for website services, events, etc.
What are the purposes of the processing of your Personal Data?
Please note that we will collect and process your Personal Data in accordance with this Notice.
We collect your personal information in order to inform on Airbus, its financials, its products and other areas of interest for shareholders and other interested parties. Information includes regular updates on major events like publication of financial results, our newsletter to shareholders, investors and financial markets, invitations for events, surveys, dedicated campaigns and other elements related to Airbus business, securities and performance.
We use your Personal Data to communicate with you, including responding to requests for assistance. We can communicate with you in a variety of ways, including communications through email or equivalent electronic means.
We use your Personal Data to comply with applicable legal obligations, including responding to an authority or court order or discovery request.
Where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of policies, procedures and other policies.
What is the basis for processing of your Personal Data?
As a responsible company, we need a lawful basis for collecting and/or processing your data. We generally rely on a number of grounds (reasons) for our business processing.
We process your Personal Data in accordance with the provisions set out in the GDPR and the relevant applicable Data Protection Laws and Regulations.
The legal basis for processing your Personal Data are:
1. Within the scope of a legitimate interest.
On occasion we may not need your consent to use your data, given our legitimate interest to do so but we must inform you that we do this. The grounds we identified are the following:
2. As a result of your consent.
When you have consented to the processing of your Personal Data by us for certain services (such as registration to the Newsletter and the recourse to the call center), you can withdraw consent at any time by following the instructions provided in the application process or by contacting us at ir@airbus.com. For further information on the right of withdrawal, please see below Section “Am I obliged to provide my Personal Data?”
3. On the basis of Airbus’ legal obligations.
Airbus, as any other company, is subject to legal obligations and regulations. In some cases the processing of your Personal Data will be necessary for Airbus in other to fulfil these obligations.
With regards to the protection of your Personal Data, please note that we only retain the data we need and strictly in a proportionate manner to achieve the aforementioned purposes.
Who will receive your Personal Data?
Will your Personal Data be transferred to a third country/region outside the European Economic Area (EEA)?
Airbus processes your Personal Data mostly in the EEA. On occasion Personal Data is transferred to Airbus SE or affiliates of Airbus, on a need-to-know basis, including entities outside the EEA. This transfer is subject to appropriate safeguards, and through the legal framework of our Binding Corporate Rules, that can be found on our website www.airbus.com or viewed here Airbus BCRs or through alternative contractual frameworks where a third party is engaged to help us perform the processing.
Which countries/regions may Airbus transfer Personal Data to?
Our Binding Corporate Rules allow us to transfer Personal Data within our international organisation, and they include a list of countries/regions (below) which are structured to allow us to transfer Personal Data to the countries/regions where we have a presence. For Airbus, France and Germany are where most of our processing of personal information takes place and below is a list of countries/regions where Airbus operates.
Algeria, Australia, Belgium, Brazil, Canada, Chile, China, Czech republic, Denmark, Egypt, Finland, France, French Guyana, Germany, Greece, Hong Kong, Hungary, India, Indonesia, Ireland, Italy, Japan, Kazakhstan, Libya, Malaysia, Mexico, Morocco, Netherlands, New Zealand, Norway, Oman, Philippines, Poland, Qatar, Romania, Russia, Saudi Arabia, Singapore, Slovakia, South Africa, South Korea, Spain, Sweden, Taiwan, Tanzania, Thailand, Tunisia, Turkey, United Kingdom, United States of America, Uruguay, United Arab Emirates, Vietnam.
For how long will your Personal Data be stored?
We process and store your Personal Data as long as it is required to meet our contractual and statutory obligations. If your Personal Data is no longer required for the performance of the contractual or statutory obligations, these will be erased on a regular basis unless further processing is necessary, for instance, for preserving particular evidence under the applicable Data Protection Laws and Regulations, or in the context of legal statutes of limitation.
Please note that your contact details will be stored for 2 full years following the end of the calendar year in which you unsubscribed.
Security
We use technical and organisational security measures in order to protect the data we have under our control against accidental or intentional manipulation, loss, destruction and against access by unauthorised persons.
Our security procedures are continually enhanced as new technology becomes available.
What are your rights and how to exercise them?
You may at any time exercise your data protection rights:
To this effect, please contact Airbus in writing either by e-mail at the following address: dataprotection@airbus.com or by writing to the address below, enclosing a copy of a document evidencing your identity.
Airbus SAS, Head of Data Protection, HAP, 2 rond-point Emile Dewoitine 31700 Blagnac cedex. France
Am I obliged to provide my Personal Data?
You may at any time object to the processing of your Personal Data or where your consent is required, withdraw such consent by contacting us at ir@airbus.com; However, please note that if you withdraw your consent, you may not be able to access and use certain information, features or services of the Website.
To what extent will decision-making be automated?
As a matter of principle, we do not use fully automated decision-making processes. In the event that we should use such processes in individual cases, we will if prescribed by law, specifically inform you of this and of your rights in this respect.
Will profiling take place?
As a matter of principle, your Personal Data will not be processed automatically with the objective of evaluating certain personal aspects (profiling). In the event that we should process your Personal Data with the objective of conducting profiling, we will, if prescribed by law, specifically inform you of this and of your rights in this respect.
How can I contact Airbus in respect of my Personal Data?
If you are unhappy with the way in which your Personal Data has been processed or should you have questions regarding the processing of your Personal Data, you may refer in the first instance to the Airbus Data Protection Officer, who is available for enquiries or complaints, at the following email address: dataprotection@airbus.com or you can write to the address below:
Airbus SAS, Head of Data Protection, HAP, 2 rond-point Emile Dewoitine 31700 Blagnac cedex. France
Can I ask for assistance to the competent authorities?
If you remain unsatisfied, then you have the right to apply directly to a Data Protection Supervisory Authority. Listed below are the four main European countries where Airbus operates and the relevant Supervisory Authority.
or
LDA Bayern: Supervisoy Authority for Airbus Companies in Bavaria, Germany
or
any other competent regional German authority as the case may be
Modification of the Information Notice
Airbus will update this Information Notice from time to time in order to reflect the changes in our practices and services and also to remain compliant to Data Protection Laws and Regulations. We will inform you of any substantial modification in how we process your Personal Data.