Privacy Policy
At Celairion GmbH, Eco-Plus-Park, 1. Strasse, Nr.5, 2460 Bruck an der Leitha, Austria, Tel: +43 2162 20810, E-Mail: service@celairion.aero, we respect your privacy and your personal data. We have therefore created this policy to describe what personal data we process, in what way, and for what purpose, how this data is protected and what rights you have as a data subject.
We comply with all the applicable provisions on the protection, processing and confidentiality of personal data as well as data security, in particular the Austrian Data Protection Act (DPA), the EU General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TCA).
This document was created on 17th October 2019 and shall be updated on a regular basis.
Reasons why we process your data and legal basis
Your personal data will be processed for the following purposes:
-
To administer and fulfil contracts that have been concluded with you or your company;
-
Accounting reasons;
-
Compliance with legal regulations applicable to us and the protection against unjustified claims;
-
For reasons in connection with a job application made by you;
-
To keep our records up to date;
-
To improve our services and the pricing thereof;
-
Sending information about our services, products, or our newsletter.
Your data is processed based on the legal grounds established in the GDPR, specifically when:
-
It is necessary to fulfil a contract you have signed with us.
-
You have given us your permission to use said data. You have the possibility to revoke your consent at any time.
-
It is necessary to fulfil a legal obligation that we have to comply with.
-
It is in our or a third party’s legitimate interest (unless your interest, or your fundamental rights and freedoms are outweighing our interest)
What data do we collect from you?
We collect data from our customers, our suppliers and job applicants from the following data categories:
Customers
-
Contact Details – names, telephone numbers and email addresses, company details including VAT numbers
-
Bank details if required for bank transactions
-
Details about aircrafts in order to complete our contract with you
Suppliers
-
Contact details of company and individuals including VAT numbers
-
Bank details for bank transactions
Applicants
-
Name and contact details
-
Education details
-
Employment history
-
Referee details
-
Immigration details
-
Nationality
-
A copy of your qualifications
-
A copy of your passport
-
Details about your current job, including pay, pension and benefits
-
Any other additional information you may choose to tell us
Referees
We collect contact information for referees, which are provided to us by candidates and staff.
-
Contact details – names, telephone numbers and email addresses
-
Information about their knowledge of an applicant, in so far as this will assist the applicant in gaining employment with us
To whom could my data be sent?
In order to fulfil the contract you have signed with us, or to consider your employment with us, we may need to send your information to other parties. These could include the following:
-
The respective Authority (e.g. Austro Control GmbH in Austria)
-
Our accountant
-
Other people within our organization
-
Our partners (Matomo), if you have chosen their services
-
Our research partners for research purposes
-
Should the requirement arise, with government departments such as the finance department
-
Should the need arise, with our lawyer
If these third parties are processors, they are committed to complying with the applicable data protection regulations towards us, and a data processing agreement pursuant to Art. 28 GDPR has been concluded with us.
We primarily use processors within the European Union. We only use processors outside the European Union if
(i) there is an adequacy decision by the European Commission for the relevant third country, or
(ii) we have agreed on appropriate safeguards with the processor (in particular, binding corporate rules approved by the competent supervisory authority or standard contractual clauses published by the European Commission).
How do we collect your personal data?
Mostly you will provide us with your own personal data. If we do not receive the data from you or from public registers, you will be informed of this within one month. In the course of this information, we will ask for your consent to data processing, which you can of course also object to. In this case, we will also inform you where we received your data from.
How long will we retain your information?
In general, we will delete or destroy your information as soon as it is no longer required, or as soon as the project for which the data has been processed has been completed. Alternatively, we may keep your data for one or more of the following reasons:
-
Job applicants: If we believe you are suitable for a position arising in the future, if you agree with that otherwise we will delete the data 7 months after your job application.
-
Staff members: We ask our staff members to provided us with an emergency number. Should they give us your information, we shall retain your details for the period of employment plus six months.
-
Suppliers: If we believe we shall be using your services in the future; or if we have an ongoing relationship, otherwise we will delete it.
-
Customers: If we have an ongoing relationship or if we believe there may be questions relating to the project in the future, otherwise we will delete it.
-
Ingoing and outgoing invoices will be deleted after seven years.
How will the data be destroyed?
Physical data will be shredded in house. Saved data will be deleted.
How do we keep your data safe?
We use technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction, and unauthorized access, in accordance with Article 32 of the GDPR. Our security measures are continuously improved in line with technological advancements.
General information about your rights
You can request information from us at any time, free of charge, regarding your personal data that we process. As a data subject, you also have the right to object, access, erasure, rectification, restriction, and portability of your personal data.
If we process your data based on our legitimate interests, you generally have the right to object if there are reasons arising from your particular situation that argue against such processing.
You may object to the processing of your data for direct marketing purposes at any time.
You can revoke any data protection consent you have given us at any time. The revocation does not affect the lawfulness of the processing carried out up to that point. Revoking your consent will result in us no longer processing your data for the aforementioned purposes from that point onward.
Please direct all enquiries to:
+43 699 127 966 52
Post: Celairion GmbH, Eco-Plus-Park, 1. Strasse, Nr. 5, A-2460 Bruck an der Leitha
For complaints, the competent supervisory authority is the Austrian Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna.