DATA PROTECTION
The Sofinord Group, of which Aeria Airport Services is a subsidiary, aims to build a relationship of trust with its clients, partners, and employees. In this context, the Sofinord Group is committed to ensuring the highest level of protection for your Personal Data.
This policy reflects Aeria Airport Services’ commitment to comply with the French Data Protection Act of January 6, 1978, as well as the General Data Protection Regulation (GDPR: No. 2016-679). It provides information about the collection and processing of your personal data, as well as your rights.
Definitions
“Personal Data”: Personal data refers to any information relating to an identified or identifiable natural person. Because it concerns individuals, they must retain control over it. A natural person may be identified:
Directly (e.g., first and last name)
Indirectly (e.g., phone number, license plate number, identifier such as social security number, postal or email address, as well as voice or image)
“Processing”: Processing of personal data refers to any operation, or set of operations, performed on personal data, regardless of the method used (collection, recording, organization, storage, adaptation, modification, retrieval, consultation, use, communication by transmission or dissemination, or any other form of making available, combination).
“Data Controller”: The data controller is the legal or natural person who determines the purposes and means of a processing operation, i.e., the objective and how it is carried out.
“Purpose of Processing”: The purpose of processing is the main objective for which personal data is used. Data is collected for a specific, legitimate purpose and must not be processed later in a way incompatible with this initial purpose.
“We”: refers to the Sofinord Group entity responsible for carrying out personal data processing activities.
Who is the data controller of your data?
For personal data collected during navigation on the Site, the data controller is Aeria Airport Services, a subsidiary of the Sofinord Group.
As the data controller of the data we collect, we commit to complying with applicable legal provisions. This includes defining the purposes of data processing, providing prospects, clients, employees, candidates, or website users with complete information about the processing of their personal data, and maintaining a processing register in accordance with reality.
What data do we collect?
While browsing the site, we may collect the following data:
-
Information you provide by filling out contact forms or emailing us (name, first name, email address, and any other information you choose to share)
-
Information you provide when applying to Aeria Airport Services: name, first name, email address, CV, and any optional information you wish to provide
-
Cookies, if you accept them. Some cookies are mandatory for the proper functioning of the site; others are optional and require your consent. You can withdraw consent or adjust cookie preferences at any time by clicking the yellow icon at the bottom left of the website
-
Social networks: On our site, you can click icons to access our social media pages (e.g., Facebook, Instagram, Twitter, or LinkedIn). By following us, we may access the personal data you have chosen to make available on your profiles
-
IP addresses: An identifier used by some electronic devices to identify and communicate with each other on the Internet. We may use the IP address of your device to determine its approximate location and understand which geographic regions visit our site
-
Statistics: Our site may use Google Analytics to generate statistical reports on visitor numbers, visited pages, and visitor geographic regions. Information collected may include your IP address, the referring website, and device type. We do not use this information to identify visitors and do not share it with third parties
-
We do not sell any personal data collected.
Purpose of collected data
We may process your personal data for the following purposes:
Purpose, Legal basis, Data retention
Recruitment and hiring management, - Our legitimate interest in recruiting suitable profiles
- Your consent to submit your application
- Compliance with legal obligations
- Performance of contractual relationship if hired, - If hired: for the duration of the employment
- If not hired but considered for future recruitment: 2 years from submission
- If no recruitment is planned: only during the recruitment process
Responding to information, quote, or contact requests, - Our legitimate interest in responding to inquiries to provide the best service
- If applicable, performance of the contractual relationship, Maximum 3 years from last contact or data collection
Improving your website navigation, Our legitimate interest in providing the best service, Maximum 12 months after last contact or data collection
Your Rights
Under current regulations, you have the following rights regarding your personal data:
-
Right of access, correction, update, and completion of your personal data
-
Right to block or erase data if inaccurate, incomplete, ambiguous, outdated, or unlawfully processed
-
Right to withdraw consent at any time
-
Right to restrict processing
-
Right to object to processing
-
Right to data portability for automated processing based on consent or contract
-
Right to define the fate of your data after death and designate a third party to whom your data may be communicated
Upon being informed of a user’s death, and absent instructions, we commit to destroy their data unless retention is required for legal or evidentiary purposes.
To exercise your rights, request corrections, or obtain information about data usage, contact our DPO at dpo@ictseurope.com, specifying your request. Proof of identity may be requested.
Requests for deletion will comply with legal obligations regarding retention or archiving. You may also file a complaint with regulatory authorities, such as the CNIL.
Data Transfers Outside the EU
Generally, we do not transfer personal data outside the EU. If such transfers occur, we will inform you in advance and take all necessary measures to ensure adequate data protection.
Security
We commit to taking all necessary precautions to protect your data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. In case of an incident affecting data integrity or confidentiality, we will inform you promptly and communicate corrective measures.
Our site uses protected networks with standard security measures such as firewalls, pseudonymization, encryption, and passwords.
Incident Notification
No method of internet transmission or electronic storage is completely secure. If a security breach occurs, we will notify affected users to take appropriate measures, following national and EU legal requirements.
Governing Law and Jurisdiction
All disputes regarding website use are governed by French law. Unless prohibited by law, exclusive jurisdiction is given to the competent courts of Paris.
Policy Updates
This policy may be updated to reflect changes in regulations or in data processing practices on this site.
Contact
For questions regarding this policy, data processing, or to exercise your rights, contact the Sofinord Group Data Protection Officer at: dpo@ictseurope.com