Airbus Privacy Information Notice

related to SpaceRISE website

Introduction

SpaceRISE stands for Space Consortium for a Resilient, Interconnected and Secure Europe. It comprises a group of space and telecom companies currently responding to the tender for Europe’s space-based Secure Connectivity system, IRIS².

Airbus Defence and Space, as owner of this website, is committed to protecting the privacy of individuals and to complying with applicable personal data protection laws and regulations. We want you to feel comfortable using our Websites.

However, the Website will include links to other websites or applications which are not necessarily covered by this Privacy Notice. In this event, we encourage you to carefully read the privacy policies of such websites.

This Privacy Notice will inform you of the personal data we collect when you access the website; how we use and disclose your personal data; how you can control the use and disclosure of your personal data; and how we protect your personal data.

What is personal data?

Personal data is information that can be used to identify a person either directly or indirectly. It includes information such as name, contact details, identification numbers, financial data, location data or online identifiers.

Which sources and what personal data do we use?

The personal data we process in relation to the SpaceRISE website are as follows:

• Identification data : name, first name
• Professional data : email address

We may collect this personal data directly from you by fulfilling a form.

What are the purposes of the processing of your personal data?

By using the Website, Airbus Defence and Space will process your personal data for the following purposes:

•  In order to contact you following your contact request
• To keep you informed of the latest news from the SPACERISE consortium
• To comply with legal obligations. We use your personal data to comply with applicable regulatory duties and legal obligations, including responding to an authority or court order or discovery request or to comply with export control and sanctions requirements when applicable.
• To protect us and others. Where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of policies, terms, and other policies.

We will use your personal data for the above Purposes only, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose (for preserving particular evidence or in the context of legal statutes of limitation for example). If we need to use your personal data for an unrelated purpose, we will notify you prior this further personal data processing and provide you the relevant privacy information notice.

What is the legal basis for the processing of your personal data?

Subject to the applicable law, we process your personal data under the following legal basis:

• legitimate interest (cookies in particular)
• consent for registration to receive information emails
• the legal obligation

Who will receive your personal data?

Subject to applicable law, we may disclose your personal data to the following recipient(s) on a need to know basis:

• Airbus Defence and Space SAS, T-Systems International GmbH, Eutelsat SA, Hisdesat Servicios Estrategicos S.A., Hispasat S.A., OHB System AG, Orange SA, SES ASTRA, Telespazio S.p.A., Thales Alenia Space France SAS and Thales SIX GTS France SAS, and their affiliates,
• Authorised persons working for or on behalf of Airbus, including our agents, service providers and advisers providing the variety of products and services we need such as:
• Law enforcement or authorities or other legal process to comply with applicable law

Is any of your personal data transferred overseas?

Except for Airbus Affiliates operating outside the European Economic Area or the UK, your personal data will generally be processed in the European Economic Area and/or in the UK.

If you have any questions regarding transfers, please contact us (dataprotection@airbus.com) for further details.

How long will your personal data be retained?

We retain your personal data as long as reasonably necessary for the purposes for which it was collected. For sending the latest SPACERISE news and newsletter, we retain for 1 (one) year from the date of collection. In some circumstances, we may retain your personal data for longer period of time than is needed for those purposes such as where we are required to do so in accordance with legal, regulatory, tax or accounting requirements.

What about the security of your personal data?

We use technical and organizational security measures in order to protect the personal data we have under our control against accidental or intentional manipulation, loss, destruction and against access by unauthorised persons. Our security procedures are continually enhanced as new technology becomes available.

What are your rights?

At any time you may exercise your personal data protection rights as listed below by contacting us at dataprotection@airbus.com:

• Right to access/obtain a report detailing the information held about you: You have the right to obtain confirmation as to whether or not your personal data is being processed by Airbus and if so, what specific personal data is being processed.
• Right to correct personal data: You have the right to rectify or request to have rectified any inaccurate personal data concerning you.
• Right to erasure:  In some cases, for instance, when the personal data is no longer necessary in relation to the purposes for which they were collected, you have the right for your personal data to be erased.
• Right to restrict the processing of your personal data: You have the right to restrict the processing of your personal data, for instance when the processing is unlawful and you oppose the erasure of your personal data. In such cases, your personal data will only be processed with your consent or for the exercise or defense of legal claims.
• Right to object: In some cases required by law, you may ask us to stop processing your personal data.

How to exercise your rights and/or contact Airbus in respect of your personal data?

If you want to exercise your rights or you are unhappy with the way in which your personal data has been processed or should you have any questions regarding the processing of your personal data, you may refer in the first instance to the Airbus Data Protection Officer, who is available, at the following email address: dataprotection@airbus.com, or the postal address: Airbus Defence and Space France, 31 Rue des Cosmonautes, 31400 Toulouse, France.

In case of doubt of your identity, we may ask you to justify it by enclosing a copy of any identity document.

How to ask for assistance from the competent authorities?

If you remain unsatisfied, then you have the right to apply directly to a Data Protection Supervisory Authority. Listed below are the four main countries where Airbus operates and the relevant Supervisory Authority

FRANCE: CNIL: Supervisory Authority France

GERMANY: Each German federal state has its own Data Protection Authority that can be found under the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html (see tab “Aufsichtsbehörden für den nicht-öffentlichen Bereich“, i.e. Data Protection Authorities for the private sector)

SPAIN: AEPD. Supervisory Authority Spain 

UK: ICO: Supervisory Authority UK

Modification of the Privacy Information Notice

This Privacy Information Notice was last updated on 7 December 2023.

Airbus will update this Privacy Notice from time to time in order to reflect the changes in our practices and services and also to remain compliant to Data Protection Laws and Regulations. We will inform you of any substantial modification in how we process your personal data.