Personal Data Protection Policy (GDPR)
ATC France – ATC Careers
Last updated: 2025-12-20
ATC France ("ATC", "we", "us") is committed to protecting the privacy of candidates who use our platform to create their CV, connect with aviation professionals, and access career opportunities. We strictly apply the General Data Protection Regulation (GDPR), CNIL recommendations, and best practices in terms of security, transparency, and privacy protection.
1. Data Controller
The data controller for personal data is:
ATC France
Address: LE VINCI 2 PLACE ALEXANDRE FARNESE 84000 AVIGNON
Email: contact@aero-tc.com
2. Personal Data Collected
We only collect data that is necessary for CV creation, recruitment, and connecting candidates with aviation companies.
2.1. Identification Data
- First name, last name
- Date of birth
- Nationality
- Profile photo (optional)
- Internal identifier
2.2. Contact Details
- Email address
- Phone number
- Country and postal address (if provided)
2.3. Professional Data
- EASA licenses (Part-66: B1.3, B2, C…)
- Type ratings (TR)
- Authorizations and certifications
- Work experience
- Education and degrees
- Technical skills
- Automatically generated or imported CV
2.4. ATC Profile Data
- ATC score
- Badges (Carbon, Bronze, Silver, Gold, Diamond, Legend)
- Mentor/Coach level (if applicable)
2.5. Browsing Data
- Unique identifiers
- IP address
- Logs and activity records
- Cookies and analytics tools
2.6. Contractual Data (if applicable)
- Administrative documents
- Proof of identity (if required)
- Legal HR documents
No sensitive data is collected unless required by law or strictly necessary for a contractual purpose.
3. Purposes of Processing
Personal data is used for:
3.1. Primary Purposes
- Automatic creation of a professional CV
- Connecting candidates with aviation companies
- Presenting and sharing the CV with authorized recruiters
- Offering assignments or positions
- Verification of licenses, authorizations, and qualifications
- Organizing interviews and assessments
- Managing the candidate account
3.2. Secondary Purposes
- Improving platform quality
- Anonymous internal statistics
- Securing the platform (fraud, abuse)
- Administrative and pre-contractual management
- Compliance with legal obligations
3.3. Purposes Requiring Explicit Consent
- Sharing the CV with recruiters
- Promoting the candidate profile
- Sending targeted job opportunities
The candidate may withdraw their consent at any time.
4. Legal Bases
4.1. Performance of Pre-Contractual Measures (Art. 6(1)(b))
- CV creation
- Connecting candidates and companies
- Profile analysis
4.2. Explicit Consent (Art. 6(1)(a))
- Sharing the profile
- Promoting the candidate
- Targeted offers
4.3. Legitimate Interest (Art. 6(1)(f))
- Platform security
- Service improvement
- Internal management of ATC tools
4.4. Legal Obligation (Art. 6(1)(c))
- Regulatory archiving
- Obligations related to aviation assignments
5. Data Recipients
Data may be shared with:
5.1. Internal Recipients
- ATC Recruitment team
- ATC Careers team
- Administration & HR
- IT department (restricted access)
5.2. Authorized External Recipients
- Partner aviation companies
- Recruiters and technical managers
- International aviation organizations (if applicable)
5.3. Technical Processors
- Secure hosting providers
- CRM / ATS solutions
- Emailing and communication tools
- Analytics tools
All processors are contractually bound to comply with GDPR. No data is sold.
6. Transfers Outside the European Union
Due to the international nature of the aviation sector, some data may be transferred outside the EU. Such transfers are carried out exclusively:
- To countries covered by an adequacy decision,
- Or under Standard Contractual Clauses (SCCs),
- Or with the candidate’s explicit consent.
ATC implements strict measures:
- Encryption
- Access limitation
- Enhanced contractual safeguards
- Regular auditing and controls
7. Retention Periods
- Candidate account: 3 years of inactivity
- CV data: immediate deletion upon request
- HR data and assignment documents: 10 years
- Connection logs: 12 months
- Proof of consent: 5 years
The candidate may request complete deletion of their data at any time.
8. Data Security
ATC France implements enhanced security measures:
- Encryption of data at rest and in transit
- Strict internal access control
- Enhanced authentication for administrators
- Intrusion prevention systems
- Regular and secure backups
- Audit logs
- Internal confidentiality policy
- Periodic testing and audits
9. Candidate Rights
In accordance with Articles 15 to 22 of the GDPR, the candidate has:
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to object
- Right to restriction
- Right to data portability
- Right to withdraw consent
- Right to define post-mortem instructions
To exercise your rights: contact@aero-tc.com
Response time: 30 days.
10. Automatic CV Creation & Sharing with Recruiters
By using ATC Careers, the candidate agrees that:
- Their CV may be generated automatically
- ATC may structure and verify their professional information
- Their CV or profile (anonymized or not, depending on consent) may be shared only with aviation companies
- ATC may promote their profile to maximize their chances of being hired
The candidate may change or withdraw their consent by email.
11. Governance and Compliance
ATC France applies strict internal governance:
- Record of processing activities
- Record of processors
- Internal incident management policy
- Privacy by Design & Default
- Regular internal audits
- Systematic data minimization
- Documentation of proof of consent
12. Policy Updates
This Policy may be updated to remain compliant with legal or technical developments. Any update will be published on this page.
13. Contact
For any questions regarding personal data protection:
contact@aero-tc.com
ATC France – Compliance Department