Information notice regarding the processing of personal data of candidates applying to Vallair
This information notice (hereinafter referred to as “the Notice”) informs you of the processing of your personal data that Vallair, registered with the Luxembourg Trade and Companies Register under number B274498 (“Vallair Group SA”), established at 6B, route de Trèves, 2633 Senningerberg, Luxembourg, collects and processes your personal data during the selection process in accordance with the European General Data Protection Regulation 2016/679 of the 27 April 2016 (hereinafter referred to as “GDPR”).
The notice applies to any person submitting an application to Vallair, whether this application is spontaneous or in response to a job offer/internship/student job issued by Vallair.
1. Categories of data: what personal data is processed?
Personal data is information relating to an identified or identifiable natural person. An identifiable natural person is a natural person who can be identified, directly or indirectly, by reference to an identifier (name, identification number, address, etc.) (Art. 4 GDPR). Your personal data (hereinafter “Your Data”) that is collected and processed by Vallair is the information gathered during the recruitment process. Information may also be collected from third parties such as recruitment sites. This information includes the different types of data in the following list:
- The candidate’s identification data, such as the candidate’s contact details (surname, first name, address, date and place of birth, nationality, telephone number, marital status, photo, gender, etc.)
- Data related to the selection of the candidate (CV, copies of diplomas, letters exchanged with Vallair, written tests, etc.)
2. For what purposes is Your Data processed?
Your Data is processed by Vallair for the following purposes:
- Identification of the candidate
- Selection of the candidate
Your Data is necessary for the selection process within Vallair.
3. Data transfer: To whom is Your Data transmitted?
Your Data is processed internally by duly authorised persons, within the limits of their respective responsibilities.
Where applicable, and in order to achieve the aforementioned purposes, Vallair may be required, to the strict extent necessary and subject to the existence of contractual guarantees to ensure the security and confidentiality of the data, to transfer Your Data to:
- Its subcontractors carry out data processing in its name and on its behalf, such as a recruitment platform for the collection and storage of applications.
4. How long is Your Data stored?
Vallair keeps Your Data for as long as it needs to comply with the legal and regulatory provisions that apply to it or for as long as it needs to guarantee the execution of the purposes for which it was collected. After the end of the selection process, and unless an employment relationship is established between You and Vallair, Vallair retains Your Data for a period not exceeding 1 year from the notification of the refusal decision.
5. Security: How is Your Data protected?
Your Data is processed by Vallair, in its capacity as data controller, in compliance with the applicable data protection legislation. Vallair undertakes to implement technical and organisational security measures to ensure the protection of personal data against risks related to the use of information systems.
6. What are your rights in relation to Your Data?
Under the European General Data Protection Regulation, you have the right to access your data, the right to rectify in the event of an error and, subject to justifying the overriding legitimate reasons provided for in the GDPR, the right to limit processing and the right to object to the collection of Your Data. However, in the latter two cases, the exercise of this right does not nullify the previous validity of the processing.
You also have a right to erasure of Your Data, which is nevertheless strictly governed by the provisions of Article 17 of the GDPR. It can only be applied if the personal data are no longer necessary in relation to the purposes for which they were collected, or if the data is subject to unlawful processing.
Please note that the law authorises Vallair to retain and continue to process certain personal data, even when you have exercised your rights of opposition or erasure, for legitimate and compelling reasons such as compliance with applicable law and in particular the amended law of 26 October 2010 on the reorganisation of Vallair.
To exercise your rights, you can contact Vallair’s Data Protection Officer (dpo@vallair.aero).
You also have the right to lodge a complaint regarding the processing of Your Data with the National Commission for Data Protection (CNPD), 1 Avenue du Rock’n’Roll, L4361 ESCH/ALZETTE or with the competent supervisory authority of your state of residence or the place of the alleged infringement.