Protection of Privacy and Personal Data

CityJet DAC is committed to ensuring that your privacy is protected. CityJet DAC is the data controller of the personal data that is submitted by you

Data Controller

This Privacy Notice describes how we collect and use your personal data. It also describes the choices available to you regarding our use of your personal data and how you can access and update this personal data. CityJet Designated Activity Company together with its subsidiaries (“CityJet”, “we” or “us”) is committed to ensuring that your privacy is respected and your data is protected.

Any personal data provided to us will be treated in accordance with the Irish Data Protection Act 2018  (“The 2018 Act”) and the General Data Protection Regulation (GDPR) EU 2016/679 collectively referred to as “Data Protection Legislation”.

Collection of Personal Data

Personal data is any information that can identify you either directly or in combination with other information we may hold.
We collect personal data from you when you make an enquiry on our website, or via social media.

We also collect personal data during visits to the online CityJet Careers Portal, the application process, interview process, or offer stage.

Categories of Personal Data

We may collect and process the following categories of personal data about you:


In the event you submit a claim to CityJet DAC or engage with us on social media: Name, address, email address, telephone number, Bank account information.

For the purposes of Recruitment & Employment we may collect and process the following categories of personal data about you:

  • Personal Information such as name, address, email address, telephone number, date of birth, and CV, provided during the application process.
  • Employment history, education history, professional qualifications, work permit details provided during the application process.
  • Results of personality or ability assessments, notes of interviews or other assessments, information provided by your referees, decisions to offer employment, outcome of Background Checks and aviation security checks from the associated authorities (where applicable) criminal conviction and record checks.
  • Results of psychoactive substance testing
  • Proof of Identify including driving licence, passport, national identity card and appropriate work and travel visas (where applicable).
  • Bank account information and emergency contact details.

 

 

Collection of Sensitive Personal Data

Certain categories of personal data such as that about race, ethnicity, religion, health, trade union membership or criminal convictions are considered 'sensitive personal information' under Data Protection Legislation.

Personal details about your physical or mental health will only be requested when the collection of such sensitive personal data is deemed necessary, proportionate and in pursuance of our legitimate business interests.

You may be required to provide information on criminal convictions and other matters for aviation security checks to airport authorities. Where data is provided to airport authorities for such purposes, CityJet DAC is not the controller of this data.

By providing any sensitive personal data you explicitly agree and consent that we may collect and use it in accordance with this Policy.

Data Sharing and International Transfer

Your data may be shared with other companies in the CityJet Group. We will only share your personal data with third parties in the ways that are described in this Privacy Notice. We do not sell your personal data to third parties. We may provide your personal data to companies that provide services to help us with the operation of our airline business activities. These companies are authorised to use your personal data only as necessary to provide these services to us.

We may also disclose your personal data to: Airports, government authorities, law enforcement bodies, and other payment companies.

Your personal data may be accessed by and processed outside the European Economic Area (the European Economic Area being the European Union and Iceland, Liechtenstein and Norway, also referred to as the “EEA”) - including by staff operating outside the EEA who work for us or for one of our suppliers or agents (this includes for the purposes of the fulfilment of your booking and the provision of support services). Where your personal data are transferred outside of the EEA, we require that appropriate safeguards are in place.

We may also provide your personal data to companies that provide services to help us with our recruitment process including:

  • Software providers
  • Third party recruitment services contracted by CityJet DAC or any of our subsidiaries to assist us with the recruitment process
  • Third party service providers in order to conduct personality or ability assessments
  • Third party employee background screening companies who may check employment history, driving records and criminal records (if relevant to the position)
  • Requests from law enforcement or other government authorities on receipt of a valid request in order to fulfil a legal obligation
  • CityJet DAC or any of its subsidiaries do not transfer recruitment data outside the EU

Security of Your Personal Data

We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage to your personal data
Where we share your personal data with third parties, we require them to have appropriate technical and operational security measures in place to protect it in line with the Data Protection Act 2018 (Ireland) and the General Data Protection Regulation (GDPR) EU 2016/679

Data Retention

We will retain your data for as long as is necessary to fulfil the purpose it is being processed for including:

  • To comply with our legal obligations including (but not limited to) immigration and customs requirements and claims against CityJet DAC
  • To protect your vital interests or those of another person in the event of a medical emergency
  • In our legitimate interests as an airline for administration purposes
  • Personal data that you have consented to us using for marketing and promotional purposes

Data Retention- Recruitment
If you are successful in the recruitment process, your personal data will be retained by us as part of your employee records for the duration of your employment and up to a maximum of 7 years following cessation of your employment depending on the particular classification of data.

If you are unsuccessful in the recruitment process, we will retain your personal data for one year in the event any queries arise in relation to the recruitment process as follows:

  • Application details including your CV, training records, licences or other relevant qualifications
  • Background checks, outcome of personality & ability assessments

Automatic Decision Making- Recruitment Process

During the recruitment process you may be required to complete personality or ability assessments which may use algorithms and other technical means to determine applicant scores. However, the suitability of applicants is not based solely on the output of these tests

Your Rights as Data Subject

Right to be informed– you have the right to know exactly what data is being collected relating to you, why this data must be provided; how long this data will be stored; and for what purposes it will be used (legal basis).

Right of access – you have the right to request a copy of the personal data that we hold about you.

Right of rectification – you have a right to correct the personal data that we hold about you that is inaccurate or incomplete.

Right to be forgotten – in certain circumstances you can ask for the personal data we hold about you to be erased from our records.

Right to restriction of processing – where certain conditions apply to have a right to restrict the processing of personal data.

Right of portability – you have the right to have the personal data we hold about you transferred to another organisation.

Right to object – you have the right to object to certain types of processing.

Right in relation to automated decision making- you have the right to not to be subject to a decision based solely on automated processing. Processing is “automated” where it is carried out without human intervention and where it produces legal effects or significantly affects you.

Right to lodge a complaint -you have the right to lodge a complaint with the Data Protection commission if you consider that processing of your personal data is contrary to the GDPR Additionally, if CityJet DAC refuse your request under rights of access, we will provide you with a reason as to why. You have the right to complain as per our Complaints procedure below.

Personal Data Requests

Please complete this short form: https://www.cityjet.com/metacompliance

In order to verify your identity, you will be required to provide:

  • A photocopy of your passport or national identify card
  • Proof of address dated within the last 6 months

Complaints

If you wish to make a complaint about how your personal data is being processed by us (or third parties as described this Policy), or how your complaint has been handled, you have the right to lodge a complaint to:
Data Protection Officer, CityJet DAC, Imbus House, Dublin Airport, Co Dublin, Ireland
Email: dataprotection@cityjet.com
Or directly with the supervisory authority:
The Data Commissioner of Ireland. Full information is displayed here: https://forms.dataprotection.ie/contact


Updates to our Privacy Policy

We may make changes to the content of this policy from time to time and any changes will be published on this page.

 

Last updated 17 Nov 2022