CAE AIRCRAFT MOBILE PRIVACY STATEMENT

CAE Inc. and its affiliates (collectively “CAE”, “we” or “our”) take privacy seriously. We are committed to conducting business in a way that complies with applicable privacy and data protection laws and regulations in every country in which CAE operates.

This Aircraft Mobile Privacy Statement describes how we process Personal Information in connection with your use of the application. It also provides information about your rights and how you can contact us if you have questions about how we handle your Personal Information.

Please refer to the headings below to explore topics that are of interest to you.

  • About CAE
  • Scope of application
  • Types of Personal Information we collect and why
  • Who we collect your Personal Information from
  • What is our legal basis for collecting and processing your Personal Information
  • When automated decision-making and profiling is used
  • How we share or transfer your Personal Information
  • How we protect and secure your Personal Information
  • How long we keep your Personal Information
  • Your data protection rights
  • How to contact CAE
  • CAE’s designated representatives in the EU/EEA and the United Kingdom
  • Updates to this Privacy Statement

About CAE

At CAE, we equip people in critical roles with the expertise and solutions to create a safer world. As a technology company, we digitalize the physical world, deploying software-based simulation training and critical operations support solutions. Above all else, we empower pilots, cabin crew, maintenance technicians, airlines, business aviation operators, and defence and security forces to perform at their best every day and when the stakes are the highest. Around the globe, we’re everywhere customers need us to be with approximately 13,000 employees in more than 240 sites and training locations in over 40 countries. CAE represents more than 75 years of industry firsts—the highest-fidelity flight and mission simulators as well as training programs powered by digital technologies. We embed sustainability in everything we do. Today and tomorrow, we’ll make sure our customers are ready for the moments that matter.

Scope of application

This Aircraft Mobile Privacy Statement applies to our processing of your Personal Information in preparation for, while and after your use of the Aircraft Mobile application.

Depending on the purpose of the processing, CAE processes your Personal Information as an independent Data Controller or Business Owner. In relationships with B2B customers and where CAE supports the customer’s purposes, CAE is a processor on behalf of our B2B customers (third-party controller), who has licensed the application for the benefit of you - their employees.

This Aircraft Mobile Privacy Statement describes CAE’s privacy and data protection practices with respect to the collection, use, disclosure or otherwise processing of Personal Information about Aircraft Mobile application users ("you" or "your"). It also provides information about your rights and how you can contact us if you have questions about how we handle your Personal Information.

Because we are a company with a worldwide presence, we are subject to the varying requirements of applicable privacy and data protection laws within the jurisdictions where we operate.

Please do not use our application or provide us with any Personal Information if you do not agree with this Privacy Statement.

Types of Personal Information we collect and why

We may collect and process Personal Information when you register for an account with us and when you are using our application. We only collect and process Personal Information for specified purposes that are reasonable and appropriate.

We have described, in the table below, the main categories of Personal Information we collect throughout your usage of the Aircraft Mobile application and the business purposes (reasons) for which such information is processed.

Categories of Personal Information
Business purpose for processing
Contact information such as your crew name, crew rank, crew base
We process this information to communicate with you in the context of your application usage.
Identity and user-profile information such as your user ID, crew ID, airline name, user base information
We process this information for user identification.
Computer access and authentication information such as passwords, tokens, and access records
We process this information for the purposes of authorizing, granting, administering, monitoring, and terminating access to or use of the application.
Monitoring information, internet or network information such as electronic log files, unique device identifier mobile devices.
We process this information to ensure network and information security and to monitor and improve the performance of our services, applications and systems.
Photograph of you
We process this information in connection with your profile information to provide a personalized experience of the application.

Finally, CAE may process Personal Information to perform audits and defend legal claims. Such processing will be in accordance with applicable laws.

We do not knowingly collect Personal Information from anyone under the age of eighteen.

Further information regarding the legal basis relied upon to process your Personal Information can be found below.

Who we collect your Personal Information from

Most of the Personal Information we collect and process is provided by your employer when he submits this information to us for the account creation. Others are gathered from you directly when you use our application e.g. when we automatically collect information from you through logs.

What is our legal basis for collecting and processing your Personal Information

Subject to applicable data privacy laws and regulations, the processing of your Personal Information is generally conducted on the following legal grounds:

  • Contract performance: Your Personal Information will be processed to provide the services that your employer, who has licensed the application for your benefit, has contracted us to provide. This enables you to use our application in accordance with the terms of use.
  • Consent: The processing of your Personal Information for some application purposes is based on your consent. CAE will obtain consent from you, either implicit or explicit, as the case may maybe.    
  • Compliance with Legal or Regulatory Requirements: Your Personal Information may be processed when such processing is necessary to comply with applicable laws and regulations. For example, we consider that the processing of your Personal Information is required to fulfill our legal obligations pertaining comply with sanction law and regulations or any other laws or regulations that apply.

When automated decision-making and profiling is used

We do not currently use any automatic decision making or profiling in support of the application services.

How we share or transfer your Personal Information

Because we are a global business, we may process your Personal Information within the CAE group of companies (including our controlled subsidiaries and joint ventures) which are in different geographic locations. Also, some functionalities require the transfer of specific Personal Information. Your information may be shared internally and transferred externally if the conditions below are met.

Within CAE

Your Personal Information may be shared internally with certain members of the application and technical support team, customer services team and other individuals who have a “need to know” your information for their official duties.

Given that some CAE employees who need access to your Personal Information may not be based in the same country as you, any such transfers within the CAE group of companies will be covered by an intra-group agreement which gives specific contractual protections to ensure that your Personal Information receives an adequate and consistent level of protection wherever it is shared or transferred within CAE.

Third-party service providers, insurers and professional advisors

We may also transfer your Personal Information to third-parties who process information on our behalf, such as IT service providers that store data on our behalf. If this is necessary for our exercise or defense of legal claims, we may also share your Personal Information with our insurers or professional advisors. Any such transfer is based on appropriate contracts to protect your Personal Information in compliance with applicable laws.

Public authorities

We may also share your Personal Information to the extent that we are required by law, with certain public authorities such as law enforcement or professional or regulatory authorities.

International data transfers

Given that some parties we share your Personal Information with may not be in the same jurisdiction as you, all such transfers are subject to the following conditions:

  • we will transfer Personal Information to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights; or
  • transfers to service providers and other third parties we will be (1) subject to a Privacy Impact Assessment, Vendor Security Risk Assessment or other risk assessment designed to mitigate risks and (2) protected by contractual commitments (such as the European Commission-approved Standard Contractual Clauses) or other legally acceptable mechanisms that ensure an adequate level of protection.

Any requests for information we receive from foreign law enforcement or regulators will be carefully checked before Personal Information is disclosed.

Except as otherwise mentioned herein, CAE will not transfer, sell or disclose your Personal Information to any third-party without your consent.

How we protect and secure your Personal Information

CAE is committed to ensuring that your Personal Information is processed securely and accessible only by authorized persons. We have internal policies and controls in place to prevent your Personal Information from being lost, accidentally destroyed, misused, unintentionally disclosed, or accessed other than by our employees or third parties contracted by CAE. We also provide mandatory training to CAE employees to raise awareness of our policies and procedures designed to manage information security threats. CAE has in place cybersecurity and privacy incident response plans.

Nonetheless, some third parties may try to access our systems or intercept transmissions or communications unlawfully. CAE continuously uses reasonable measures in line with recognized security standards to protect your Personal Information, but we cannot absolutely guarantee that unlawful actions will not occur.

How long we keep your Personal Information

The longer that Personal Information is retained, the higher the likelihood is of accidental disclosure, loss, theft and/or information growing stale (rendering it inaccurate). At CAE, your Personal Information is retained for no longer than necessary to support the business purpose for which it was collected or to comply with applicable laws. Afterwards all Personal Information will be deleted or anonymized as applicable. CAE periodically reviews the need for certain Personal Information processed in line with our contractual obligations.

Your data protection rights

Under certain circumstances and in accordance with applicable privacy and data protection laws, you may have the right to require us to:

  • provide you with further details on the use we make of your information;
  • provide you with a copy of information that we hold about you;
  • update any inaccuracies in the Personal Information we hold;
  • delete any Personal Information that we no longer have a lawful ground to use;
  • where processing is based on consent, to withdraw your consent so that we stop that particular processing;
  • object to any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights; and
  • restrict how we use your information whilst a complaint is being investigated.

If you believe that the processing of your Personal Information is not compliant with applicable privacy and data protection laws or if CAE does not respond to your requests in a timely or adequate manner and in compliance with applicable laws, you have the right to lodge a complaint with the data protection authority or court. We ask that you attempt to resolve any issues with us before lodging a complaint with any data protection authority. Please refer to “How to contact CAE” for more details.

How to contact CAE

If you have any questions about this Aircraft Mobile Privacy Statement or if you have questions or enquiries about how we handle your Personal Information, please contact us at:

CAE Inc.

Attention: Global Ethics, Compliance and Privacy Office

8585 Cote-de-Liesse

Saint-Laurent, Québec

H4T 1G6 Canada

Telephone: 1-(514) 341-6780 (Extension 3824)

Email: [email protected]

CAE’s designated representatives in the EU/EEA and the United Kingdom

EU/EEA representative

In the event that Personal Information is processed by a CAE entity which is not established in the European Economic Area (EEA) covered by the EU General Data Protection Regulation, our EU/EEA representative is:

CAE GmbH

Steinfurt 11

52222 Stolberg

Germany

UK representative

In the event that Personal Information is processed by a CAE entity which is not established in the United Kingdom is covered by the UK General Data Protection Regulation and the Data Protection Act 2018, our UK representative is:

CAE STS Ltd.

Innovation Drive, West Sussex

Burgess Hill RH15 9TW United Kingdom

Updates to this Privacy Statement

The laws and regulations governing Personal Information are frequently changing. CAE may update and amend this Privacy Statement from time to time.

This Privacy Statement was last updated on February 17, 2025.