Safran Aircraft Engines (www.safran-group.com) offers a service based on the OEM (Original Equipment Manufacturer) expertise and experience, SFCO2, designed to help airlines to reduce their operating costs by improving the operational efficiency of their fleet and thus reduce fuel consumption and CO2 emissions.

The purpose of this information notice is to inform users of the platform of the personal data processing carried out by the company.

I. Definitions

• Personal Data: any information relating to an identified or identifiable natural person; an "identifiable natural person" is deemed to be a natural person who can be identified, directly or indirectly.

• Data Subject: a natural person whose Personal Data is processed by Safran Aircraft Engines

• User: any person having an account in the SFCO2 application.

II. Purpose of processing and legal basis

1° Purpose of the processing

Within the framework of the provision of this platform, several processing operations of Personal Data are implemented and have the following purpose

• To provide airlines with operational recommendations or "best practices" in order to reduce their fuel consumption and improve the operational efficiency of their fleets

• Better understand the behavior of their aircraft and act accordingly

• User account management

• Collecting customer journeys on the SFCO2 application to improve the service offered

2° Legal basis of the processing

The implementation of the processing is necessary for the purposes of the legitimate interests pursued by Safran Aircraft Engines to enable it to provide a contracted service to airlines.

III. Personal data processed

The following categories of Personal Data are processed:

• Identification and/or personal data: name, first name

• Connection data: IP address, technical cookies, analytics, login

• Data of professional life :
  • Customer: e-mail address communicated by the airline, name of the airline, position in the company, pilot's number/trigram
  • Safran: email address

• Other categories: Flight data for calculation of fuel economy best practices

This Data is collected directly from the airline and for Safran employees / providers, the Data is entered manually by the administrators.

IV. Retention and deletion of personal data

User accounts will be suspended after 90 days of inactivity after a 15 day notice. After 6 months of inactivity, the account is either kept suspended for a pilot user or deleted.

Other Data will be retained for the duration of the contractual relationship with the customer and then deleted.

Login Data is kept for 12 months.

V. Recipients of Personal Data

Personal Data is accessible by persons who need it to perform their duties, including system administrators, Safran technical/functional administrator teams and service business experts, as well as authorized IT service providers who are subject to personal data protection and information system security clauses.

VI. Security and confidentiality

Safran Aircraft Engines has put in place appropriate security and confidentiality measures to protect personal data against loss, alteration or disclosure to unauthorized third parties. These procedures are state of the art and updated regularly.

As part of Safran Aircraft Engines' legitimate interest in securing its information system by ensuring traceability, connection logs are also processed and kept for 1 year; they are only accessible by administrators and the IT security team.

VII. Users' responsibility for the content posted and/or published

Users are responsible for the content they publish and the actions they take: no anonymous content is possible.

The content posted or published (message, link, etc.) must comply with the applicable regulations on the protection of Personal Data and respect for privacy. Therefore, it is not allowed to disclose the image or personal details of a person without his prior written consent.

The contributions will be strictly professional in nature and may not deal with personal matters such as politics, religion or the morals of a person. They shall not contain any offensive or defamatory character.

VIII. Rights of Data Subjects

The Data Subjects have rights regarding their Personal Data.

• Right of access: each Data Subject may obtain confirmation as to whether or not his or her Personal Data are processed by Safran Aircraft Engines, and may request a copy of the Personal Data.

• Right of rectification: each Data Subject may request the modification of Personal Data concerning him or her that is inaccurate or obsolete

• Right of deletion: in certain cases, a Data Subject may request the deletion of Personal Data concerning him or her when it is no longer necessary for one of the purposes mentioned above.

• Right of limitation: each Data Subject may request the temporary freezing of the use of his/her Personal Data when he/she disputes the accuracy of the same or when he/she objects to the processing.

• Right of portability: each Data Subject may request a copy of his or her Personal Data in an intelligible and commonly structured manner for transfer to another company

• Right to object: in certain cases listed by the regulation, a Data Subject may ask Safran Aircraft Engines to no longer process his/her Personal Data

The above rights are not absolute. They may be limited due to legal obligations to which Safran Aircraft Engines may be subject or in case of interest strictly necessary to achieve its objectives. Data Subjects may exercise these rights by contacting the Data Protection Officer at dpo.sae@safrangroup.com. In the event of no response or an unsatisfactory response, Data Subjects may file a complaint with a personal data control authority (in France: www.cnil.fr).