In this document you will find information of interest to you regarding how ITP Aero treats your personal data and the rights that assist you
1. Identification and contact details of the Data Controller
ITP Aero is a multinational company dedicated to the aeronautical industry whose headquarters are located at Parque Tecnológico Edificio 300, 48170 Zamudio (Vizcaya).
You can contact ITP Aero through the following channels:
- In person or by post to the headquarters whose address has been mentioned above.
- To contact ITP Aero Spain, India and globally, please contact us via this email: dataprivacy@itpaero.com
- To contact ITP Aero UK please contact via this email: data-protection-uk@itpaero.com
- To contact ITP Aero Mexico, please contact us via this email: privacidaddedatosmex@itpaero.com
2. PERSONAL DATA PROCESSING ESTABLISHED BY ITP AERO
As detailed at the beginning of this policy, our intention is to provide you with information about how we treat your personal data.
At ITP Aero, we will only process your personal data in a manner that is compatible with and relevant to the purpose for which it was collected or authorized.
Furthermore, ITP Aero will always process your data for specific, explicit and legitimate purposes, taking into account the principle of data minimisation, and will collect and process the data that is necessary and relevant for the purposes listed below, with the legitimacy that will be specified in each case.
ITP Aero will process your personal data for each of the following purposes and in accordance with the following legal bases:
2. 1 Candidates
In relation to our selection process and when you apply for a job with us, we will process: your identification data, such as name, surname, date of birth, age, gender, nationality, photograph, identity document, among others; your contact information such as your email, postal address and telephone number; employment data, such as your CV, position above, references, among others. This information will be used to consider your suitability and eligibility for employment and our basis of legitimacy will mainly be the execution of pre-contractual measures; In certain countries such as the UK, it is also possible that criminal record certificates may be required to comply with certain laws. These candidate data may be shared with other entities of the ITP Aero group based on our legitimate interest to ensure proper administration and evaluation of candidates within the organization, including the need to facilitate internal collaboration and the exchange of information relevant to the selection process in the countries where said position applies.
2.2. Consultations
To respond to the queries you send us by filling out the web form, we may process your name, surname, email address, as well as the personal data you add in your comments.
2.3. Commercial Communications
To provide information about ITP Aero products and services, including the sending of commercial communications, promotions or offers by email or any other equivalent means, either to respond to your direct request or based on the conditions defined by the electronic commerce legislation for the sending of such commercial communications. The interested party may, in any case, contact our contact email to exercise their rights through the means enabled in said communications to unsubscribe at any time from said communications.
2.4. Security cameras
For security reasons and to preserve the safety of people, property and facilities, we may process your image through our video surveillance cameras in our facilities, based on this public interest and to comply with our legal obligations. All recordings will be kept for a maximum of 30 days, in accordance with the applicable legal retention periods, unless necessary to comply with legal obligations. Data will not be transferred to third parties, except at the request of State Forces and Bodies, Courts, Tribunals or in response to other required legal obligations.
2.5. Access Control
In the case of access to our facilities, for security reasons and to preserve the safety of people, property and facilities, we will record your identification data, nationality, image or reason for the visit, all based on the aforementioned legitimate interest and to comply with our legal obligations.
The data provided will be kept for a period of 30 days unless the data is required by State Forces and Bodies, Courts, Tribunals or based on any law or judicial provision.
2.6. Data collected in meetings through communication systems
During the development of meetings using videoconferencing systems, chats or telephone conferences, your data may be collected after informing the participants and requesting their consent. In these cases, ITP Aero may process your image and voice and/or transcript of the conversations in order to monitor said meetings, make minutes of them or summaries.
3. Recipients OF YOUR PERSONAL DATA
As regards the recipients of personal data, we inform you that ITP Aero adopts the necessary measures to ensure compliance with the principles of data protection and privacy with the third parties with which it collaborates.
The transfer of personal data to third parties is carried out under appropriate data protection measures and on a valid legal basis. ITP Aero ensures that the third parties with whom it shares personal data comply with current data protection regulations and laws, and that they implement the relevant protection and security measures to guarantee the privacy and security of personal data.
In order to meet the objectives set out in this Privacy Notice, in some cases it is necessary for third parties to provide us with support in the services we offer. Depending on their nature, among these third parties we can find the following categories:
- Public authorities, regulators or government bodies, which will be recipients of the data in those cases where it is necessary to do so by law, local regulations or requirements such as , for example, tax obligations.
- Service providers and companies that provide services to ITP Aero and that may have access to the personal data necessary to provide such services, such as access management or security providers.
- State security forces and bodies, which may require access to personal data in the performance of their duties and responsibilities.
- Entities of the ITP Aero group, Group Members, associated companies and collaborators, who may have access to the personal data necessary to carry out joint activities, always with an adequate basis of legitimacy.
- Financial institutions, which may require access to personal data to process transactions, payments and other financial services.
4. SECURITY MEASURES AND GUARANTEES
ITP Aero undertakes to implement the necessary technical and organisational security measures to ensure the security of your personal data and prevent its alteration, loss and unauthorised processing and/or access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed, whether arising from human action or from the physical or natural environment, in accordance with the provisions of applicable regulations.
5. TRANSFER OF YOUR DATA
ITP Aero is a multinational company that operates in different countries and has developed global data security practices designed to ensure that your personal information is adequately protected. Please note that personal information may be transferred, accessed and stored in different countries as long as it is necessary for the uses and disclosures mentioned above in this policy.
International transfers of personal data may therefore occur when your data is sent or accessed from a country outside the European Economic Area (EEA). However, in order to transfer personal data to a country outside the EEA, it is necessary to implement measures that guarantee a level of security equivalent to that of the EEA, since some countries do not have regulations that ensure compliance similar to that of the EEA.
ITP Aero has implemented appropriate safeguards for transfers of personal information originating in the European Economic Area (“EEA”) to ITP Aero affiliates, third parties or suppliers located outside the EEA.
Therefore, if such transfers become necessary in the course of our activities, we will ensure that appropriate safeguards, such as standard contractual clauses, adequacy decisions or other legal mechanisms, are in place to protect your personal data in compliance with the relevant EEA data protection laws.
For ITP Aero subsidiaries located outside the EEA, we ensure compliance with applicable local data protection and privacy regulations. These subsidiaries operate in accordance with the legal requirements of the country in which they are located, ensuring that the processing of personal data is carried out in a secure and lawful manner.
6. RETENTION OF YOUR PERSONAL DATA
Personal data provided by the user will be kept for the time strictly necessary to fulfill the purposes for which they were collected, unless the law requires or permits a longer retention period.
Personal data will be deleted or anonymized when they are no longer necessary or relevant for the purposes for which they were collected and are not subject to any legal retention obligation, and ITP Aero will always take into account the principle of limitation of the retention period.
7. EXERCISE OF YOUR RIGHTS
We inform you that you may exercise the following rights:
- Right to access your personal data to know which are being processed;
- Right to rectification of any inaccurate personal data;
- Right to delete/cancel your personal data, where possible;
- Right to request the limitation of the processing of your personal data when the accuracy, legality or necessity of the processing of the data is doubtful, in which case, we may retain the data for the exercise or defense of claims.
- Right to object to the processing of your personal data, when the legal basis that enables us to process it is legitimate interest. ITP Aero will stop processing your data unless it has a compelling legitimate interest or for the formulation, exercise or defence of claims.
- Right to the portability of your data, when the legal basis that enables us to process them as indicated is your consent.
These rights may be exercised free of charge by the interested party, and where applicable, by his or her representative, by means of a written request addressed to the contact addresses indicated above.
In addition to the above rights, the interested party shall have the right to withdraw the consent given at any time without such withdrawal of consent affecting the lawfulness of the processing prior to its withdrawal. ITP Aero may continue to process the data of the interested party to the extent permitted by applicable law.
ITP Aero reminds the interested party that they have the right to file a complaint with the competent Control Authority of the country in which they are located.
8. LINKS TO OTHER WEBSITES
This website may include hyperlinks to other sites that are not operated or controlled by ITP Aero. Therefore, ITP Aero does not guarantee, nor is it responsible for, the legality, reliability, usefulness, veracity and timeliness of the content of such websites or their privacy practices. Please, before providing your personal information to these websites outside of ITP Aero, keep in mind that their compliance with data protection may differ from ours.
9. PRIVACY POLICY UPDATE
This Privacy Policy may be updated, so you should review this policy periodically and, if possible, each time you access the Website in order to be adequately informed about the type of information collected and its treatment. You can find the Privacy Policy at the bottom of the Website.
The Privacy Policy was last updated on February 26th, 2025.
