Airbus Tianjin Campus Visitor Privacy Notice

Document issued on: May 1, 2026

Latest update: May 1, 2026

Introduction

Airbus (Tianjin) Final Assembly Co., Ltd. (" Airbus " or " we "), as the data processor for the Tianjin Campus Visitor management, appreciate your interest in us and your use of our Visitor Online.

Airbus is committed to protecting the privacy of individuals and to complying with applicable personal data protection laws and regulations. We want you to feel comfortable  using the Visitor Online Application.

However, the Website will include links to other websites or applications which are not necessarily covered by this Privacy Notice. In this event, we encourage you to carefully read the privacy policies of such websites.

This Privacy Notice will inform you of the types of personal data we process during visitor management , how we process your personal data, how you can control the processing of your personal data and how we protect your personal data.

We will process your personal data—including personal name, company name, contact details etc.—through the visitor management tools ‘ Visitor Online’, ‘Access Control system’, ‘Video Surveillance System’, and ‘export control screening system’. This data is processed for the purposes of visitor registration, campus security management, and export control compliance (collectively referred to as " Visitor Management ") .

What is personal data?

Personal data is data that can be used to identify a person either directly or indirectly. It includes information such as name, contact details, identification numbers, financial data, location data or online identifiers.

What is the processing of personal data?

The processing of personal data includes the collection, storage, use, processing, transmission, provision, disclosure, and deletion of personal data.

What personal data do we process?

We will limit the processing of personal data to the minimum extent necessary to fulfill visitor management purposes.

The personal data we process in relation to visitor management includes:

• Basic Personal Data: personal name, nationality, place of birth, date of birth, personal phone number,
• Personal Education Work Data: Place of work.
• Biometric Information: Facial imagery and gait imagery.
• Personal Location Information: Access control records (including entry times, exit times, and areas accessed).

During the visitor management process, we may process your following sensitive personal data

Web/System Name	Type of Personal Data
Video Surveillance System	Biometric Information: Facial imagery and gait imagery

The aforementioned information is necessary for the purposes of visitor identity verification, campus security management, and export control compliance. We will only process such information after obtaining your separate consent, and we will implement stringent security protection measures to ensure its safety.

We may collect your personal data through the following means:

• Collected directly through your access to our "Visitor Online " web client;
• Disclosed directly by you to Airbus;
• Captured by Airbus surveillance equipment (such as CCTV).

How do we handle children's personal data?

We consider anyone under the age of 14 to be a child. Regarding the collection of children's personal data, we will only process it as permitted by law, with the explicit consent of their parents or guardians, or when necessary to protect the child, in accordance with the provisions of the <Airbus China Children's Privacy Policy>. If we discover that we have collected a child's personal data without verifiable parental consent, we will endeavor to delete the data as soon as possible.

What are the purposes of processing your personal data?

By using the TJ Visitor Online Application, Airbus will process your personal data for the following purposes:

• Access control and protection of premises and facilities.
• Visitor management.

• To comply with legal obligations. We use your personal data to comply with applicable legal obligations, including responding to an authority or court order or discovery request or to comply with export control and sanctions requirements when applicable.
• To protect us and others. Where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of policies, terms, and other policies.

We will use your personal data for the above purposes only, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose (for preserving particular evidence or in the context of legal statutes of limitation for example). If we need to use your personal data for an unrelated purpose, we will notify you prior to this further personal data processing and provide you the relevant privacy notice.

What is the legal basis for processing your personal data?

Subject to the applicable law, we process your personal data under the following legal basis:

• As a result of  your consent

Where you have consented to our processing of your personal data for the provision of certain services as described in this Privacy Notice , you can withdraw your consent at any time by contacting us at dataprivacy.china@airbus.com . For further information on the right of withdrawal, please see below Section “How to exercise your rights and/or contact Airbus in respect of your personal data?”

• On the basis of Airbus's legal obligations

Airbus, as any other company, is subject to legal obligations and regulations. In some cases the processing of your personal data will be necessary for Airbus in order to fulfill legal obligations (such as export controls).

• Vital interests

Under specific circumstances of emergency medical care or need to process personal data for medical purposes and the individual is physically or legally incapable of giving consent to the processing, Airbus may process personal data for the purpose of vital interest of a relevant individual.

Who will receive your personal data?

Subject to applicable law, we may disclose your personal data to the following recipient(s) on a need to know basis:

• Airbus and its affiliates.
• Authorised persons working for or on behalf of Airbus, including our agents, service providers and advisers providing a variety of products and services, such as IT maintenance and support.
• Airbus business partners in connection with Airbus activities (e.g. Auditors).
• Other authorised third parties in connection with any merger, reorganization, a sale of some or all Airbus assets, or a financing or acquisition of all or a portion of our business by another company.
• Disclosure to law enforcement or authorities or other legal processes to comply with applicable law.

Is any of your personal data transferred overseas?

Your personal data is typically processed within the People's Republic of China .

However, due to the needs of global collaborative management  of the Group's systems and the operation and maintenance of equipment and facilities, the following information may be transferred overseas or may be accessed from outside the country/region.

System Name	Type of Personal Data
Access Control System	Basic Personal Data: personal name, place of work; Personal Location Information: access control records (including entry times, exit times, and areas accessed).
Video Surveillance System	Biometric Information: facial imagery and gait imagery.
Export control screening system	Basic Personal Data: personal name, nationality, place of birth, date of birth, personal phone number; Personal Education and Work Data: place of work.

Before conducting the cross-border transfers mentioned above, we will individually notify you about the overseas recipient's information, seek your specific consent, and always take the required data protection steps to ensure all transfers are handled responsibly:

• We will only transfer personal data to countries that provide an adequate level of protection, or where appropriate safeguards have been implemented to protect your privacy rights.
• Transfers to service providers and other third parties will be protected by contractual commitments or other legally acceptable mechanisms to ensure that an adequate level of protection is provided.
• Any requests for personal data we receive from law enforcement or regulatory authorities will be carefully vetted before any personal data is disclosed.

If you have any questions  regarding transfers, please contact ( dataprivacy.china@airbus.com ) for more details.

How long will your personal data be retained?

We will retain your personal data only for the minimum period necessary to achieve the purposes of visitor management. The specific retention periods for different types of personal data are as follows:

Type of Personal Data	Storage System	Retention
Name, place of work	Access control system / Export control screening system	3 years
Biometric Information (Facial imagery, gait imagery)	Video Surveillance System	3 months
Nationality, place of birth, date of birth	Export control screening system	3 years
Name, place of work, nationality, place of birth, date of birth, personal phone number	Visitor Online	1 year

In some circumstances, we may retain your personal data for a longer period of time than is needed for those purposes such as where we are required to do so in accordance with legal, regulatory, tax or accounting requirements.

What about the security of your personal data?

We take the security of your personal data very seriously. We employ security measures such as access control, system log tracking, and data encryption to protect the personal data under our control from accidental or intentional manipulation, loss, destruction, and unauthorized access. Our security procedures are continuously enhanced as new technologies emerge.

What are your rights?

You can contact us via dataprivacy.china@airbus.com  at any time to exercise the following personal data protection rights:

• Right to access:  You have the right to obtain confirmation as to whether or not your personal data is being processed by Airbus and if so, what specific personal data is being processed.
• Right to correct personal data:   You have the right to rectify or request to have rectified any inaccurate personal data concerning you.
• Right to erasure:   In some cases, for instance, when the personal data is no longer necessary in relation to the purposes for which they were collected, you have the right for your personal data to be erased.
• Right to data portability:  You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and/or transmit those personal data to another data controller.
• The right to withdraw consent: Where the processing of your personal data is based on your consent, you may withdraw your consent at any time by contacting us via the details provided in the section  "How to exercise your rights and/or contact Airbus in respect of your personal data".Please note, however, that if you withdraw your consent, you may be unable to access or use certain information, features, or services as described in the section  “Are you obligated to provide your personal data?”

How to exercise your rights and/or contact Airbus in respect of your personal data?

Should you wish to exercise your rights, or if you have any dissatisfaction or inquiries regarding the processing of your personal data, please contact Airbus Data Protection Officer at the following email address: dataprivacy.china@airbus.com.

Are you obligated to provide your personal data?

Please note that if you are unable to provide the personal data required for the Airbus visitor management, we will be unable to process your entry. In this case, you will not be able to complete your visit.

Do we use automated decision-making or conduct profiling?

In principle, we do not use solely automated decision-making processes, nor do we conduct automated processes aimed at evaluating certain personal characteristics (i.e., profiling). Should we need to use such processes, we will notify you in advance and obtain your separate consent.

How  to ask for assistance from the competent authorities?

If you remain unsatisfied, then you have the right to apply directly to a Data Protection Supervisory Authority.

CHINA： Cyberspace Administration of China

Cookies Policy

Airbus uses Cookies and other trackers on its websites, as described in our Cookies Policy .

Modification of the Privacy Notice

Airbus may update this Privacy Notice from time to time to reflect changes in our business practices and services, and to ensure ongoing compliance with data protection laws and regulations. Should there be any material changes to the way we process your personal data, we will notify you promptly and re-obtain your consent.

---

空客天津园区访客隐私声明

签发文件日期：2026.5.1

最新更新：2026.5.1

介绍

空中客车（天津）总装有限公司（“ 空中客车 ”或“ 我们 ”）作为天津园区访客管理的数据处理者，感谢您使用我们的“Visitor Online”网站以及对我们的关注。

空中客车致力于保护您的个人隐私，并严格遵守相关的个人信息保护法律法规。我们希望您能安心使用我们的“Visitor Online”网站。

然而，本网站可能包含指向其他网站或应用程序的链接，这些网站或应用程序可能不受本隐私声明的约束。在这种情况下，我们建议您仔细阅读此类网站的隐私政策。

本隐私声明将向您说明：我们在进行访客管理时处理的个人信息类型；我们如何处理您的个人信息；您如何控制个人信息的处理；以及我们如何保护您的个人信息。

我们将通过“Visitor Online”“Access Control system”“Video Surveillance System”“Export Control Screening System”访客管理工具处理您的个人信息，包括姓名、公司名称、联系方式等，用于访客登记、园区安保管理及出口管制合规管理（合称为“ 访客管理 ”）目的。

什么是个人信息？

个人信息是可用于直接或间接识别个人身份的信息。它包括姓名、联系方式、身份证号码、财务数据、行踪轨迹或在线标识符等信息。

什么是个人信息处理？

个人信息的处理包括个人信息的收集、存储、使用、加工、传输、提供、公开、删除等。

我们处理哪些个人信息？

我们将仅处理为实现访客管理目的所必需的最小范围个人信息。

我们在访客管理过程中处理的个人信息包括：

• 个人基本信息：个人姓名、国籍、出生地、出生日期、个人电话号码
• 个人教育工作信息：工作单位
• 生物识别信息：面部影像、步态影像
• 个人位置信息：门禁刷卡记录（进入时间、离开时间、活动范围）

在访客管理过程中，我们可能处理您的如下敏感个人信息：

网站/系统名称	个人信息类型
Video Surveillance System	生物识别信息（面部影像、步态影像）

上述信息对于实现访客身份核验、园区安全管理及出口管制合规具有必要性。我们将在取得您的单独同意后处理该等信息，并采取严格的安全保护措施。

我们可能会通过如下途径收集您的个人信息，如：

• 通过您访问我们的“Visitor Online”网站客户端直接收集；
• 由您直接向空中客车披露；
• 由空中客车的监控设备（如CCTV）采集。

我们如何处理儿童的个人信息？

我们将不满14周岁的未成年人视为儿童。我们将仅在取得儿童监护人单独同意、或基于其他合法理由的情况下，根据《 空客中国儿童隐私保护声明 》中的规定，处理儿童的个人信息。若我们在日常运营中发现，在未预先获得儿童监护人同意或基于其他合法理由之情形下无意收集了未成年人的个人信息，一经核实，我们将立即采取删除或匿名化处理措施。

处理您的个人信息的目的是什么？

空中客车将出于以下目的处理您的个人信息：

• 场所和设施的访问控制及保护 ；
• 访客管理 ；
• 遵守法律义务。为了履行我们应尽的法律义务，我们会在必要时使用您的个人信息，包括响应政府部门和执法机构的要求，以及遵守出口管制和制裁要求；
• 保护我们和他人权益。当我们认为有必要就非法活动、疑似欺诈、对任何人的人身安全构成潜在威胁，或违反政策、条款和其他规定的行为进行调查、阻止或采取行动时会使用您的个人信息。

原则上我们仅会将您的个人信息用于上述目的，但如果新的使用目的与原始目的相兼容（例如，为了保存特定证据或遵守法律诉讼时效）我们也将使用您的个人信息。如果我们需要将您的个人信息用于其他目的，我们将在进一步处理个人信息之前通知您，并向您提供相关的隐私声明。

处理您的个人信息的法律依据是什么？

根据适用法律，我们根据以下法律依据处理您的个人信息：

• 基于您的同意  

当您同意我们通过隐私声明处理您的个人信息以提供某些服务时，您可以随时通过   dataprivacy.china@airbus.com  联系我们撤回您的同意。有关撤回权的更多信息，请参阅下文 “如何行使您的权利和/或就您的个人信息联系空中客车？”

• 根据空中客车的法律义务

空中客车同其他公司一样，均受到法律法规的约束。在某些情况下，空客需要处理您的个人信息以履行这些法律义务（如出口管制）。

• 重大利益

在紧急医疗救治的特定情况下，或因医疗目的需要处理个人信息，且相关个人因身体或法律原因无法对个人信息处理表示同意时，空中客车可以为维护相关个人的重大利益之目的处理个人信息。

谁会收到您的个人信息？

根据适用法律，我们可能会根据需要向以下接收者披露您的个人信息：

• 空中客车及其关联公司；
• 为空中客车工作或代表空中客车工作的授权人员，包括我们的代理商、服务提供商和顾问，他们为我们提供各种所需产品和服务，例如IT维护与支持；
• 与空中客车业务活动相关的空中客车商业合作伙伴，例如审计公司；
• 与任何合并、重组、出售部分或全部空中客车资产、或由其他公司对我们全部或部分业务进行融资或收购相关的其他授权第三方；
• 为遵守适用法律而向执法部门、当局或其他法律程序披露。

您的个人信息是否会被转移到海外？

您的个人信息通常会在中华人民共和国境内进行处理。

但由于集团系统全球协同管理和设备设施运维需要，以下信息将可能被传输至境外或可能被境外访问：

系统名称	个人信息类别
Access Control System	个人基本信息：个人姓名、工作单位 个人位置信息：门禁刷卡记录（进入时间、离开时间、活动范围）
Video Surveillance System	生物识别信息：面部影像、步态影像
Export control screening system	个人基本信息：个人姓名、国籍、出生地、出生日期、个人电话号码 个人教育工作信息：工作单位

在进行上述跨境传输前，我们将单独向您告知境外接收方信息、取得您的单独同意、并始终采取必要的数据保护措施确保任何信息传输都得到谨慎管理：

• 我们仅会将个人信息传输到能提供足够法律保护的国家，或已采取适当措施保护您的隐私权的国家；
• 向服务提供商和其他第三方的转移将受到合同承诺或其他法律上可接受的机制的保护，以确保提供足够的保护；
• 我们从执法部门或监管机构收到的任何个人信息信息请求都会在披露个人信息之前进行仔细检查。

如果您对转移有任何疑问，请联系（ dataprivacy.china@airbus.com ）获取更多详细信息。

您的个人信息将被保留多久？

我们将在实现访客管理目的所必需的最短期限内保留您的个人信息。不同类型个人信息的具体保留期限如下：

个人信息类型	存储系统	保留期限
姓名、工作单位	Access control system/  Export control screening system	3年
生物识别信息（面部影像、步态影像）	Video Surveillance System	3个月
国籍、出生地、出生日期	Export control screening system	3年
姓名、工作单位、 国籍、出生地、出生日期、电话	Visitor Online	1年

在某些特殊情况下，我们会将您的个人信息保留更长时间，例如基于法律法规的要求。

您的个人信息安全吗？

我们非常重视您个人信息的安全。我们采取权限管控、系统日志跟踪、数据加密等技术的安全措施，以保护我们控制的个人信息免遭意外或故意操纵、丢失、破坏以及未经授权的人员访问。我们的安全程序会随着新技术的不断出现而增强。

您拥有哪些权利？

您可随时通过联系 dataprivacy.china@airbus.com ，来行使下列个人信息保护权利：

• 访问权 ：您有权确认您的个人信息是否正在由空中客车公司处理，如是，您有权了解具体正在处理哪些个人信息。
• 更正权：   您有权更正或要求更正与您有关的任何不准确的个人信息。
• 删除权 ：在某些情况下，例如当您的个人信息不再用于其收集目的时，您有权要求删除您的个人信息。
• 复制权： 您有权以结构化、常用且可读的格式接收有关您的个人信息和/或将这些个人信息传输给其他数据处理者。
• 撤回同意的权利 ：在基于您的同意而处理您的个人信息的情况下，您可以随时通过 “如何行使您的权利和/或就您的个人信息联系空中客车” 章节中提供的联系方式联系我们，以撤回您的同意。但请注意，如果您撤回同意，您可能无法访问和使用“ 您有义务提供您的个人信息吗？ ”一节中所述的某些信息、功能或服务。

如何行使您的权利和/或就您的个人信息联系空中客车？

如果您想行使您的权利，或者您对您的个人信息的处理方式不满意，亦或是您对您的个人信息的处理有任何疑问，您可以首先通过以下电子邮件地址联系空中客车数据保护官： dataprivacy.china@airbus.com 。

您有义务提供您的个人信息吗？

请注意，如您未能提供空中客车访客管理所要求的个人信息，我们将无法为您办理访客手续，在此情况下您将无法进行本次到访。

我们是否使用自动化决策或进行分析？

原则上，我们不使用完全自动化的决策流程，也不进行旨在评估某些个人特征的自动化流程（即用户画像分析）。如我们确实需要使用此类流程，我们将提前向您告知您并获得您的单独同意。

如何向主管部门寻求协助？

如果您仍然不满意，您有权直接向数据保护监管机构提出申请。

• 中国： 国家互联网信息办公室

Cookies政策

空中客车公司在其网站上使用 Cookie 和其他追踪器，详见 Cookies政策 。

隐私声明的修改

空中客车将不时更新本《隐私声明》，以反映我们业务实践和服务的变化，并确保持续遵守数据保护法律法规。若我们在处理您的个人信息的方式上发生重大变更，我们将及时向您告知并重新获得您的同意。

---

Rules for Processing Sensitive Personal Data

Document issued on: 2026.5.1

Latest update on: 2026.5.1

Special Notice:  

These Rules for Processing Sensitive personal data (hereinafter referred to as " these Rules ") is an integral part of the Airbus Tianjin Campus Visitor Privacy Notice. It applies to the processing of your sensitive personal data by Airbus (Tianjin) Final Assembly Co., Ltd. (" Airbus " or " we ") for the purposes of visitor registration, campus security management, and export control compliance management (collectively, " Visitor Management ") at the Airbus Tianjin Campus.

To protect your rights and interests, please read all content herein carefully before checking the box to agree to these Rules, paying particular attention to terms highlighted in bold. Please make a cautious decision on whether to select "Agree" after ensuring you fully understand these Rules. By checking "Agree," you indicate that you have consented to and authorized Airbus to process your sensitive personal data in accordance with these Rules. We will not process your sensitive personal data until we have obtained your separate consent.

I. Processing Principles

We adhere to the principles of legality, propriety, and necessity , and will only process sensitive personal data that is directly related to the Visitor Management of the Airbus Tianjin Campus.

II. Purposes, Types, and Processing Methods

For the purposes of Visitor Management, we need to collect the following sensitive personal data from you:

Business purpose	Web/App Name	Types of Sensitive Persona Data	Processing Methods	Usage
Airbus Tianjin Campus Visitor Management: Visitor registration, campus security management, and export control compliance management; visitor registration, security management, and export control screening.	Video Surveillance System	Biometric Information (Facial imagery and gait imagery)	Collection, Storage, Transmission, Deletion	Safety and security of sites, facilities, and personnel

III. Storage Location and Period

1. Storage location: The sensitive personal data acquired and processed will be stored within the territory of the People's Republic of China. Should cross-border transfer be strictly necessary, we will act in accordance with relevant legal requirements and obtain your separate authorized consent.

2. Storage period: We will retain your sensitive personal data for the minimum period necessary to fulfill the purposes described in these Rules, except where otherwise provided by laws and regulations. Upon the expiry of the retention period, we will delete or anonymize your information in accordance with the law.

Web/App Name	Types of Sensitive Persona Data	Storage period
Video Surveillance System	Biometric Information (Facial imagery and gait imagery)	the data will be retained for three (3) months from the date of collection

IV.Your Rights

In our activities involving the processing of your sensitive personal data, you enjoy the following rights:

1. Access, Copying, and Portability:  You have the right to access, copy, and transfer the sensitive Personal Data held by Airbus (except where otherwise provided by laws and regulations).
2. Rectification and Supplementation:  Should you find that the sensitive personal data we process is inaccurate or incomplete, you have the right to request that we make corrections or additions.
3. Right to Erasure:  Upon the expiry of the retention period or the fulfillment of processing purposes—and provided there is no legal requirement for mandatory retention—you have the right to request the deletion of your sensitive personal data.
4. Right to Withdraw Consent:  You have the right to withdraw your consent to these Rules at any time. Please note, however, that the withdrawal of consent may affect personal data processing activities previously conducted based on your consent and may result in your inability to continue using products or services associated with the authorization.

V. Risk Disclosure

1. Biometric information (Facial Imagery, Gait Imagery) are categorized as your sensitive personal data. Any leakage or illegal use of such information may lead to the infringement of personal dignity or pose a threat to the safety of your person and property.
2. We commit to maintaining strict confidentiality of your personal data and will implement measures such as data encryption and access control in accordance with national laws and regulations to ensure the security of your personal data.

VI. How to contact us

Should you have any questions, comments, suggestions about this privacy notice, or wish to exercise your personal data rights, please contact us through the following means:

• Contact Department: Airbus China Data Governance Team
• Contact Email: dataprivacy.china@airbus.com

We will process and respond to your request promptly.

---

敏感个人信息处理规则

签发文件日期：2026.5.1

最新更新：2026.5.1

特别提示：

本《敏感个人信息处理规则》（以下简称“ 本规则 ”）是空客天津园区访客隐私声明的重要组成部分，适用于空中客车（天津）总装有限公司 （“ 空中客车 ”或“ 我们 ”） 出于空客天津园区访客登记、园区安保管理及出口管制合规管理（合称为“ 访客管理 ”）目的处理您的敏感个人信息的情形。

为了维护您的权益， 请在勾选同意本规则前，仔细阅读本规则中的所有内容，特别是以加粗形式标注的条款，应重点阅读。在确认充分了解本规则后慎重决定是否勾选“同意”。勾选“同意” 本规则，即表示您已同意并授权空中客车根据本规则处理您的敏感个人信息。在取得您的单独同意前，我们将不会处理您的敏感个人信息。

一、 处理原则

我们遵循 合法、正当、必要 的原则，仅处理与空客天津园区访客管理直接相关的敏感个人信息。

二、目的、类型及处理方式

为出于访客管理目的，我们需要收集您的如下敏感个人信息。

业务目的	网站/系统名称	敏感个人信息类型	处理方式	用途
空客天津园区访客管理：访客登记、园区安保管理及出口管制合规管理 访客登记、安保管理与出口管制核查	Video Surveillance System	生物识别信息（面部影像、步态影像）	收集、存储、传输、删除	场所、设施和人员的安全保护

三、存储地点与存储期限

• 存储地点 ：本次获取和处理的敏感个人信息将存储在中华人民共和国境内。如确需向境外传输，我们将按照相关法律规定并经您单独授权同意。
• 存储期限 ：我们将在实现本规则所述目的所需的最短期限内保留您的敏感个人信息，但法律法规另有规定的除外。 一旦存储期限届满，我们将 依法删除或进行匿名化处理 。

网站/系统名称	敏感个人信息类型	存储期限
Video Surveillance System	生物识别信息（面部影像、步态影像）	会自收集之日起，保留3个月

四、 您的权利

在我们处理您敏感个人信息的活动中，您享有如下权利：

• 访问、复制和转移：  您有权查阅、复制和转移本空中客车持有的您如上敏感个人信息（法律法规另有规定的除外）。
• 更正和补充：  当您发现我们处理的您敏感信息不准确或不完整时，您有权要求我们进行更正或补充。
• 删除权： 在存储期限届满或处理目的已实现、且没有法律强制留存要求时，您有权要求我们删除您的敏感个人信息。
• 撤回同意的权利： 您有权 随时撤回您对本规则的同意 。 但请注意，撤回同意将可能影响此前基于您的同意已开展的个人信息处理活动，导致您无法继续使用与授权相关的产品或服务。

五、 风险提示

• 生物识别信息（面部影像、步态影像）为您的敏感个人信息。一旦泄露或非法使用，可能导致人格尊严受到侵害或人身财产安全受到危害等。
• 我们承诺对您的个人信息严格保密，并按国家法律法规规定，采用数据 加密、访问控制等保护个人信息安全的措施。

六、 联系我们

如果您对本规则有任何疑问、意见、建议，或希望行使您的权利，请通过以下方式联系我们：

• 联系部门：  空中客车中国数据治理团队
• 联系邮箱：  dataprivacy.china@airbus.com

我们将及时对您的请求进行处理和答复。

---

Rules for Cross-border Transfer of Personal Data

Document issued on: 2026.5.1

Latest update on: 2026.5.1

Special Notice:

These <Rules for Cross-border Transfer of Personal Data> (hereinafter referred to as " these Rules ") are an integral part of the Airbus Tianjin Campus Visitor Privacy Notice. They apply to the cross-border transfer  of your  personal data by Airbus (Tianjin) Final Assembly Co., Ltd. ( "Airbus"  or "we" ) for the purposes of visitor registration, campus security management, and export control compliance management (collectively, " Visitor Management ") at the Airbus Tianjin Campus.

To protect your rights and interests, please read all content herein carefully before checking the box to agree to these Rules, paying particular attention to terms highlighted in bold. Please make a cautious decision on whether to select "Agree" after ensuring you fully understand these Rules. By checking "Agree," you indicate that you have consented to and authorized Airbus to conduct cross-border transfers of your  personal data in accordance with these Rules. We will not transfer your  personal data cross-border until we have obtained your separate consent.

I. Necessity of Cross-border Transfer

We adhere to the principles of legality, propriety, and necessity , and will only provide your personal data to overseas recipients to the minimum extent necessary to achieve the purposes of Visitor Management at the Airbus Tianjin Campus.

The cross-border transfer under these Rules is essential for achieving integrated global visitor management, system O&M, and security management of the Group. Without such cross-border transfer, the relevant systems will not be able to operate normally.

II. Purposes, Categories, and Processing Methods

Your personal data is generally processed within the territory of the People's Republic of China.

However, due to the requirements for global collaborative management of the Group's systems and the operation and maintenance (O&M) of equipment and facilities, the following information may be transferred overseas or may be accessed from outside the country/region:

Business Purpose	Web/App Name	Type of Personal Data	Overseas Recipient	Transfer Purpose	Method of Cross-border Transfer
Airbus Tianjin Campus Visitor Management : Visitor Registration, Security Management, and Export Control Screening	Access Control System	Basic Personal Data: Name, Company Personal Location Data: Access control records (Entry time, exit time, activity scope/areas)	Airbus Operations S.L	System Remote Operation and Maintenance Support	Overseas Remote Access, regular Automatic Backup and Synchronization, Encrypted Storage
	Video Surveillance System	Biometric Information: Facial imagery, Gait imagery	France Toulouse Airbus	System Remote Operation and Maintenance Support	Overseas Remote Access
	Export Control screening system	Basic Personal Data: Name,Nationality, Place of birth, Date of birth, Personal phone number Personal Education and Work Information:Company	France Toulouse Airbus	Global Collaborative Management of Group Systems	Overseas Storage

III. Impacts and Risk Disclosure

Cross-border transfer may involve the following risks: data may be subject to the laws of different jurisdictions, and there are potential risks of data leakage or unauthorized access. We will implement measures such as encryption and access control to ensure data security.

IV. Your Rights

In our activities involving the provision of your personal data to overseas recipients, you enjoy the following rights:

• Access, Copying, and Portability:  You have the right to access, copy, and transfer your aforementioned personal data held by Airbus (except where otherwise provided by laws and regulations).
• Rectification and Supplementation:  Should you find that the personal data we provide overseas is inaccurate or incomplete, you have the right to request that we make corrections or additions.
• Right to Erasure:  Upon the expiry of the retention period or the fulfillment of processing purposes—and provided there is no legal requirement for mandatory retention—you have the right to request the deletion of your personal data.
• Right to Withdraw Consent:  You have the right to withdraw your consent to these Rules at any time. Please note, however, that the withdrawal of consent may affect personal data processing activities previously conducted based on your consent and may result in your inability to continue using products or services associated with the authorization.

V. Special Provisions

1. Cross-border data flow refers to the provision of personal data and other data by a data processor to an overseas recipient. In general, it is understood as "the act of transferring data from one jurisdiction to another" or "the processing of machine-readable data stored in computers across borders." Cross-border data flow primarily includes two scenarios:

(1) The physical transmission or transfer of data across borders;

(2) Cases where data remains within the country but can be accessed or processed by overseas entities (" Overseas Remote Access ").

2. In instances involving the transfer of your personal data outside the territory of the People's Republic of China, we will strictly fulfill our notification obligations and obtain your separate consent in accordance with legal requirements.

VI. How to contact us  

Should you have any questions, comments, suggestions about this privacy notice, or wish to exercise your personal data rights, please contact us through the following means:

• Contact Department: Airbus China Data Governance Team
• Contact Email: dataprivacy.china@airbus.com

We will process and respond to your request promptly.

---