© 2022 Signature Flight Support, Inc.
BBA Aviation plc (BBA) is committed to protecting the privacy and security of your personal information. This notice explains how and why we process your personal data when you apply to work for us (whether as an employee, worker, contractor, trainee, apprentice and/or work experience student) or make enquiries about any job vacancy we may have.
BBA is the ultimate parent company of the BBA Aviation plc group (“BBA Group”). The members of the BBA Group serve its customers and partners in different sectors of the aviation market. Signature is the world’s largest fixed based operation (FBO) network for Business & General Aviation (B&GA) travellers. Onitc is a leading provider of high-quality OEM-licensed aviation parts and maintenance, repair and overhaul (MRO) services, and our Engine Repair & Overhaul business is a leading independent engine service provider to global B&GA operators, the rotorcraft market and regional airline fleets. Click here for a list of active BBA Group entities and their contact details.
For the purpose of this notice, the controller will be the BBA Group entity that you are applying for the role with (the controller is also referred to in this notice as “we”, “our” and “us”).
This notice makes you aware of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will usually be retained for.
We may provide you with additional privacy notices where we believe it is appropriate to do so. It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions, so that you are fully aware of how and why we are using your data. This privacy notice supplements these other notices and is not intended to override them.
We collect different types of personal data about you when you apply for a role with us, communicate with us or otherwise engage with us. We also obtain personal data from other sources, and create some personal data ourselves.
We cannot identify you personally as a user of its website unless you are logged in to any account with us and save for dealing with any cyber security incident investigation, will not try to identify you from any online identifiers like your IP address.
The relationship we have with you will dictate what, if any, personal data we collect about you and why we use it. This policy explains use of your personal data by or on behalf of us when acting as the responsible Controller as explained above. We will sometimes obtain personal data from other sources, such as from other third parties or publicly available online sources or official records.
Detailed information about the sources of your personal information are set out below:
We are required by law to always have a permitted reason or justification (called a “lawful basis”) for processing your personal data. You can read more about what we process your data for, and the lawful bases on which we rely for such processing, in the table below.
For some processing activities, we consider that more than one lawful basis may be relevant depending on the circumstances. Use on the basis of “contract” means to perform a contract with you or to take steps at your request prior to entering a contract with you. Use on the basis of “legal obligation” means to comply with a legal obligation to which we are subject. Use on the basis of our legitimate interests means we have a fair, proportionate and overriding lawful business reason to use your details. This will primarily be where by using the information, we learn about you or develop our relationship, so we can work together more closely and better, or make sound business decisions involving or affecting you.
We may convert your personal data into statistical or aggregated form, or de-identify it, to better protect your privacy, or so that you are not identified or identifiable from it. Anonymised data cannot be linked back to you. We may use it to conduct research and analysis, including to produce statistical research and reports.
Your personal data will not be sold or licensed outside the BBA Aviation Group for marketing purposes.
Automated decision making refers to a decision which is taken solely on the basis of automated processing of your personal data. This means processing using, for example, software code or an algorithm, which does not require human intervention.
As part of the recruitment process we occasionally use automated decision-making to confirm that you meet the minimum requirements for the role. Where automated decision-making prevents you from continuing with your application, you may request a review of the decision in accordance with your statutory rights under the relevant data protection legislation by contacting us before the published closing date using the links below:
BBA Aviation & Signature – email@example.com Ontic – firstname.lastname@example.org H+S – email@example.com
We take our security obligations seriously and we take specific steps (as required by applicable data protection laws) to protect your personal data from unlawful or unauthorised processing and accidental loss, destruction or damage.
All our staff and third-party service providers who have access to confidential information (including personal information) are subject to confidentiality obligations.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. You are responsible for keeping any passwords you use to access our platforms safe.
The BBA Group includes companies and operations around the world. Therefore, we may share your personal data with other entities in the BBA Group for our general recruitment analysis and workforce management purposes.
Access rights between the BBA Group companies are limited and granted only on a need to know basis, depending on job functions and roles.
Where any BBA Group companies process your personal data on our behalf (as our processor), we will make sure that they have appropriate security standards in place to protect your personal data. In addition, we will enter into a written contract imposing appropriate security standards on them and, if your personal data is transferred to a BBA Group company outside the EEA, we will put in place appropriate safeguards to ensure the protection of such data.
From time to time we may ask third parties to carry out certain business functions for us. These third parties will process your personal data on our behalf (as our processor). We will disclose your personal data to these parties so that they can perform those functions. Before we disclose your personal data to other people, we will make sure that they have appropriate security standards in place to make sure your personal data is protected and we will enter into a written contract imposing appropriate security standards on them. Examples of these third-party service providers include service providers and/or sub-contractors, such as HR and marketing service providers, background checking agencies, drug and alcohol testing providers, IT support, back up and server hosting providers.
In certain circumstances, we will also disclose your personal data to third parties who will receive it as controllers of your personal data in their own right for the purposes set out above, in particular:
We have set out below a list of the categories of recipients with whom we are likely to share your personal data:
If you are based in the European Union or you are applying for a position with an BBA entity based in the European Union and disclosures of personal data referred to above require us to transfer your personal data from within the European Economic Area (“EEA”) to a destination outside the EEA, we will only make that transfer if:
Personal data shared between the BBA Group will be subject to the contractual obligations imposed by EU standard contract clauses. A copy of the European Commission approved standard contractual clauses are available here.
If you would like to see a copy of any of the other relevant safeguards used by us to protect the transfer of your personal data, please contact firstname.lastname@example.org.
How long we keep your personal information
If you are our employee we will keep your personal data during the period of your employment and then, after your employment with us ends, for as long as is necessary in connection with both our and your legal rights and obligations. This may mean that we keep some types of personal data for longer than others.
We will only retain your personal data for a limited period of time. This will depend on a number of factors, including:
If BBA use your personal data as a Controller and UK or European Union law applies to that use:
You have certain legal rights, which are summarised in the table below, in relation to any personal data held by BBA about you. Your ability to exercise these rights will naturally be limited where we incidentally use limited business-related personal data in business records and business communications which we need to retain.
Where our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. If you do decide to withdraw your consent we will stop processing your personal data for that purpose, unless there is another lawful basis we can rely on – in which case, we will let you know. Your withdrawal of your consent won’t impact any of our processing up to that point.
Where our processing of your personal data is necessary for our legitimate interests, you can object to this processing at any time. If you do this, we will need to show either a compelling reason why our processing should continue, which overrides your interests, rights and freedoms or that the processing is necessary for us to establish, exercise or defend a legal claim.
You can exercise these rights at any time by contacting us at email@example.com.
If any of the personal information you give us changes, or something is incorrect (e.g. your contact details) please inform us without delay by contacting us at firstname.lastname@example.org.
If you have any concerns about how we process your personal data, please send an email with the details of your concerns to email@example.com so we can try to resolve it.
If you are based in the European Union or you are applying for a position with an BBA entity based in the European Union or the UK, you are also entitled to lodge a complaint with the data protection supervisory authority in your country of residence or the country in which an alleged infringement of data protection law has occurred within the EU – for contact details see here.
If Signature uses your personal data and UK or European Union law does not apply to that use (such as where you are in the US and contract with us in the US):
You may have rights that differ from the rights set out above.
Date this privacy notice was last updated: 24 May 2019