CAE FLIGHT EXPLORER PRIVACY STATEMENT

 CAE Inc. and its affiliates (collectively “CAE”, “we” or “our”) take privacy seriously. We are committed to conducting business in a way that complies with applicable privacy and data protection laws and regulations in every country in which CAE operates. 

This Flight Explorer Privacy Statement describes how we process Personal Data in connection with your use of the application or web-service. It also provides information about your rights and how you can contact us if you have questions about how we handle your Personal Data. 

Please refer to the headings below to explore topics that are of interest to you. 

  • About CAE 
  • Scope of application or web-service 
  • Types of Personal Data we collect and why 
  • Who we collect your Personal Data from 
  • What is our legal basis for collecting and processing your Personal Data 
  • When automated decision-making and profiling is used 
  • How we share or transfer your Personal Data 
  • How we protect and secure your Personal Data 
  • How long we keep your Personal Data 
  • Your data protection rights 
  • How to contact CAE 
  • CAE’s designated representatives in the EU/EEA and the United Kingdom 
  • Updates to this Privacy Statement 

About CAE 

At CAE, we equip people in critical roles with the expertise and solutions to create a safer world. As a technology company, we digitalize the physical world, deploying software-based simulation training and critical operations support solutions. Above all else, we empower pilots, cabin crew, maintenance technicians, airlines, business aviation operators, and defense and security forces to perform at their best every day and when the stakes are the highest. Around the globe, we’re everywhere customers need us to be with approximately 13,000 employees in more than 240 sites and training locations in over 40 countries. CAE represents more than 75 years of industry firsts -the highest - fidelity flight and mission simulators as well as training programs powered by digital technologies. We embed sustainability in everything we do. Today and tomorrow, we’ll make sure our customers are ready for the moments that matter. 

Scope of application or web-service 

This Flight Explorer Privacy Statement applies to our processing of your Personal Data in preparation for, while and after your use of the Flight Explorer application or web-service. 

Depending on the purpose of the processing, CAE processes your Personal Data as an independent Data Controller or Business Owner. In relationships with B2B customers and where CAE supports the customer’s purposes, CAE is a processor on behalf of our B2B customers (third-party controller), who has licensed the application or web-service for the benefit of you - their employees. 

This Flight Explorer Privacy Statement describes CAE’s privacy and data protection practices with respect to the collection, use, disclosure or otherwise processing of Personal Data about Flight Explorer users ("you" or "your"). It also provides information about your rights and how you can contact us if you have questions about how we handle your Personal Data. 

Because we are a company with a worldwide presence, we are subject to the varying requirements of applicable privacy and data protection laws within the jurisdictions where we operate. 

Please do not use our application or web-service or provide us with any Personal Data if you do not agree with this Privacy Statement. 

Types of Personal Data we collect and why 

We may collect and process Personal Data when you register for an account with us and when you are using our application or web-service. We only collect and process Personal Data for specified purposes that are reasonable and appropriate. 

We have described, in the table below, the main categories of Personal Data we collect throughout your usage of the Flight Explorer application or web-service and the business purposes (reasons) for which such information is processed. 

Categories of Personal Data Business purpose for processing
Contact information such as your name, position or title, email address and telephone number We process this information to communicate with you in the context of your application or web-service usage.
Identity and user-profile information such as your user ID We process this information for user identification.
Computer access and authentication information such as user ID, password, and access records We process this information for the purposes of authorizing, granting, administering, monitoring, and terminating access to or use of the application or web-service.
Monitoring information, internet, or network information such as electronic log files. We process this information to ensure network and information security and to monitor and improve the performance of our services, applications, and systems.

Finally, CAE may process Personal Data to perform audits and defend legal claims. Such processing will be in accordance with applicable laws. 

We do not knowingly collect Personal Data by the Flightr Explorer application or web-service from anyone under the age of eighteen. 

Further information regarding the legal basis relied upon to process your Personal Data can be found below. 

Who we collect your Personal Data from 

Most of the Personal Data we collect, and process is provided by your employer when he submits this information to us for the account creation. Others are gathered from you directly when you use our application or web-service e.g. when we automatically collect information from you through logs. 

What is our legal basis for collecting and processing your Personal Data 

Subject to applicable data privacy laws and regulations, the processing of your Personal Data is generally conducted on the following legal grounds: 

(1) Contract performance: Your Personal Data will be processed to provide the services that your employer, who has licensed the application or web-service for your benefit, has contracted us to provide. This enables you to use our application or web-service in accordance with the terms of use. 

(2) Compliance with Legal or Regulatory Requirements: Your Personal Data may be processed when such processing is necessary to comply with applicable laws and regulations. For example, we consider that the processing of your Personal Data is required to fulfill our legal obligations pertaining comply with sanction law and regulations or any other laws or regulations that apply. 

When automated decision-making and profiling is used 

We do not use any automatic decision making or profiling in support of the application or web-services. 

How we share or transfer your Personal Data 

Because we are a global business, we may process your Personal Data within the CAE group of companies (including our controlled subsidiaries and joint ventures) which are in different geographic locations. Also, some functionalities require the transfer of specific Personal Data. Your information may be shared internally and transferred externally if the conditions below are met. 

Within CAE 

Your Personal Data may be shared internally with certain members of the technical support team, customer services team and other individuals who have a “need to know” your information for their official duties. 

Given that some CAE employees who need access to your Personal Data may not be based in the same country as you, any such transfers within the CAE group of companies will be covered by an intra-group agreement which gives specific contractual protections to ensure that your Personal Data receives an adequate and consistent level of protection wherever it is shared or transferred within CAE. 

Third-party service providers, insurers and professional advisors 

We may also transfer your Personal Data to third-parties who process information on our behalf, such as IT service providers that store data on our behalf. If this is necessary for our exercise or defense of legal claims, we may also share your Personal Data with our insurers or professional advisors. Any such transfer is based on appropriate contracts to protect your Personal Data in compliance with applicable laws. 

Public authorities 

We may also share your Personal Data to the extent that we are required by law, with certain public authorities such as law enforcement or professional or regulatory authorities. 

International data transfers 

Given that some parties we share your Personal Data with may not be in the same jurisdiction as you, all such transfers are subject to the following conditions: 

  • we will transfer Personal Data to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights; or 
  • transfers to service providers and other third parties we will be (1) subject to a Privacy Impact Assessment, Vendor Security Risk Assessment or other risk assessment designed to mitigate risks and (2) protected by contractual commitments (such as the European Commission-approved Standard Contractual Clauses) or other legally acceptable mechanisms that ensure an adequate level of protection. 

Any requests for information we receive from foreign law enforcement or regulators will be carefully checked before Personal Data is disclosed. 

Except as otherwise mentioned herein, CAE will not transfer, sell or disclose your Personal Data to any third-party without your consent. 

How we protect and secure your Personal Data 

CAE is committed to ensuring that your Personal Data is processed securely and accessible only by authorized persons. We have internal policies and controls in place to prevent your Personal Data from being lost, accidentally destroyed, misused, unintentionally disclosed, or accessed other than by our employees or third parties contracted by CAE. We also provide mandatory training to CAE employees to raise awareness of our policies and procedures designed to manage information security threats. CAE has in place cybersecurity and privacy incident response plans. 

Nonetheless, some third parties may try to access our systems or intercept transmissions or communications unlawfully. CAE continuously uses reasonable measures in line with recognized security standards to protect your Personal Data, but we cannot absolutely guarantee that unlawful actions will not occur. 

How long we keep your Personal Data 

The longer that Personal Data is retained, the higher the likelihood is of accidental disclosure, loss, theft and/or information growing stale (rendering it inaccurate). At CAE, your Personal Data is retained for no longer than necessary to support the business purpose for which it was collected or to comply with applicable laws. Afterwards all Personal Data will be deleted or anonymized as applicable. CAE periodically reviews the need for certain Personal Data processed in line with our contractual obligations. 

Your data protection rights 

Under certain circumstances and in accordance with applicable privacy and data protection laws, you may have the right to request us to: 

  • provide you with further details on the use we make of your Personal Data; 
  • provide you with a copy of Personal Data that we hold about you; 
  • update any inaccuracies in the Personal Data we hold; 
  • delete any Personal Data that we no longer have a lawful ground to use; 
  • where processing is based on consent, to withdraw your consent so that we stop that particular processing; 
  • object to any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights; and 
  • restrict how we use your Personal Data whilst a complaint is being investigated. 

If you believe that the processing of your Personal Data is not compliant with applicable privacy and data protection laws or if CAE does not respond to your requests in a timely or adequate manner and in compliance with applicable laws, you have the right to lodge a complaint with the data protection authority or court. We ask that you attempt to resolve any issues with us before lodging a complaint with any data protection authority. Please refer to “How to contact CAE” for more details. 

How to contact CAE 

If you have any questions about this Flight Explorer Privacy Statement or if you have questions or enquiries about how we handle your Personal Data, please contact us at: 

CAE Inc. 
Attention: Global Ethics, Compliance and Privacy Office 
8585 Cote-de-Liesse 
Saint-Laurent, Québec 
H4T 1G6 Canada 
Telephone: 1-(514) 341-6780 (Extension 3824) 
Email: [email protected]

CAE’s designated representatives in the EU/EEA and the United Kingdom 

EU/EEA representative 

If Personal Data is processed by a CAE entity which is not established in the European Economic Area (EEA) covered by the EU General Data Protection Regulation, our EU/EEA representative is: 

CAE GmbH 
Steinfurt 11 
52222 Stolberg 
Germany 

UK representative 

If Personal Data is processed by a CAE entity which is not established in the United Kingdom is covered by the UK General Data Protection Regulation and the Data Protection Act 2018, our UK representative is: 

CAE STS Ltd. 
Innovation Drive, West Sussex 
Burgess Hill RH15 9TW United Kingdom 

Updates to this Privacy Statement 

The laws and regulations governing Personal Data are frequently changing. CAE may update and amend this Privacy Statement from time to time. 

This Privacy Statement was last updated on February 26, 2025.