Document issued on: December 1, 2025

Latest update: December 1, 2025

Introduce

Airbus (Tianjin) Final Assembly Co., Ltd. (also known as "Airbus" or "we"), as the primary data processor for the TJ Visitor Online Application website,appreciate your interest in our products, services and business lines and your use of our “apps” (“Websites”)

Airbus is committed to protecting the privacy of individuals and to complying with applicable personal data protection laws and regulations. We want you to feel comfortable using the TJ Visitor Online Application.

However, the Website will include links to other websites or applications which are not necessarily covered by this Privacy Notice. In this event, we encourage you to carefully read the privacy policies of such websites.

This Privacy Notice will inform you of the personal data we collect when you visit the TJ Visitor Online Application; how we use and disclose your personal data; how you can control the use and disclosure of your personal data; and how we protect your personal data.

What is personal data?

Personal data is information that can be used to identify a person either directly or indirectly. It includes information such as name, contact details, identification numbers, financial data, location data or online identifiers.

Which sources and what personal data do we use?

The personal data we process in relation to TJ Visitor Online are as follows:

• Basic Personal Data: personal name, nationality, place of birth, date of birth, email address, personal phone number, license plate number, video images, body posture, etc.
• Personal Education Work Data: Employer and Job Title.
• Personal identification Data: ID card number, passport number.

We may collect your personal data through the following means:

• Collected directly by accessing our website.
• Indirectly obtained from the personal data you have provided to Airbus business units.
• Automatically captured by devices operated by relevant company departments.

What are the purposes of processing your personal data?

By using the TJ Visitor Online Application, Airbus will process your personal data for the following purposes:

• Access control and protection of premises and facilities.
• Visitor management.
• To comply with legal obligations. We use your personal data to comply with applicable legal obligations, including responding to an authority or court order or discovery request or to comply with export control and sanctions requirements when applicable.
• To protect us and others. Where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of policies, terms, and other policies.

We will use your personal data for the above purposes only, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose (for preserving particular evidence or in the context of legal statutes of limitation for example). If we need to use your personal data for an unrelated purpose, we will notify you prior to this further personal data processing and provide you the relevant privacy information notice.

What is the legal basis for processing your personal data?

Subject to the applicable law, we process your personal data under the following legal basis:

• As a result of your consent.
  have consented to the processing of your personal data by us for certain services through the TJ Visitor Online Application, you can withdraw your consent at any time by contacting us at dataprivacy.china@airbus.com. For further information on the right of withdrawal, please see below Section “How to exercise your rights and/or contact Airbus in respect of your personal data?”
• On the basis of Airbus's legal obligations
  Airbus, as any other company, is subject to legal obligations and regulations. In some cases the processing of your personal data will be necessary for Airbus in order to fulfill legal obligations such as export controls
• Vital interestsUnder specific circumstances of emergency medical care or need to process personal data for medical purposes and the individual is physically or legally incapable of giving consent to the processing, Airbus may process personal data for the purpose of vital interest of a relevant individual.

Who will receive your personal data?

Subject to applicable law, we may disclose your personal data to the following recipient(s) on a need to know basis:

• Airbus and its affiliates
• Authorised persons working for or on behalf of Airbus, including our agents, service providers and advisers providing the variety of products and services
• Airbus business partners in connection with Airbus activities (e.g. Auditors)
• Other authorised third parties in connection with any merger, reorganization, a sale of some or all Airbus assets, or a financing or acquisition of all or a portion of our business by another company.
• Law enforcement or authorities or other legal process to comply with applicable law

Is any of your personal data transferred overseas?

Your personal data is typically processed within the People's Republic of China (including Hong Kong, Macau, and Taiwan). Before sharing or processing your personal data with any third party located outside the People's Republic of China, we will notify you in advance and obtain your consent, and complete the corresponding cross-border compliance procedures in accordance with relevant laws and regulations. We always take measures to ensure that any information transfer is carefully managed.

If you have any questions regarding transfers, please contact (dataprivacy.china@airbus.com) for more details.

How long will your personal data be retained?

We retain your personal data as long as reasonably necessary for the purposes for which it was collected. For TJ Visitor Online Application, we retain your data for one year from the date of collection. In some circumstances, we may retain your personal data for a longer period of time than is needed for those purposes such as where we are required to do so in accordance with legal, regulatory, tax or accounting requirements.

What about the security of your personal data?

We take the security of your personal data very seriously. We employ security measures such as access control, system log tracking, and data encryption to protect the personal data under our control from accidental or intentional manipulation, loss, destruction, and unauthorized access. Our security procedures are continuously enhanced as new technologies emerge.

What are your rights?

You can contact us via dataprivacy.china@airbus.com at any time to exercise the following personal data protection rights:

• Right to access/obtain a report detailing the information held about you: You have the right to obtain confirmation as to whether or not your personal data is being processed by Airbus and if so, what specific personal data is being processed.
• Right to correct personal data: You have the right to rectify or request to have rectified any inaccurate personal data concerning you.
• Right to erasure: In some cases, for instance, when the personal data is no longer necessary in relation to the purposes for which they were collected, you have the right for your personal data to be erased.
• Right to restrict the processing of your personal data: You have the right to restrict the processing of your personal data, for instance when the processing is unlawful and you oppose the erasure of your personal data. In such cases, your personal data will only be processed with your consent or for the exercise or defense of legal claims.
• Right to data portability: You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and/or transmit those personal data to another data controller.
• The right to withdraw consent: You may withdraw your authorization at any time.You can find contact information in the section "How to exercise your rights and/or contact Airbus in respect of your personal data". Contact us to withdraw this consent. However, please note that if you withdraw your consent, you may not be able to access and use related information, features, or services, which could prevent you from continuing to authorize on-site access to the service. See details below "Are you obligated to provide your personal data?".

How to exercise your rights and/or contact Airbus in respect of your personal data?

Should you wish to exercise your rights, or if you have any dissatisfaction or inquiries regarding the processing of your personal information, please contact Airbus Data Protection Officer at the following email address:dataprivacy.china@airbus.com.

Are you obligated to provide your personal data?

Please note that if you are unable to provide the personal information required for the visitor registration check, we will be unable to process your entry. In this case, you will not be able to complete your visit.

Do we use automated decision-making or conduct profiling?

In principle, we do not use fully automated decision-making processes nor conduct automated processes with the objective of evaluating certain personal aspects (profiling). In the event that we should use such processes, we will advise you in advance.

How to ask for assistance from the competent authorities?

If you remain unsatisfied, then you have the right to apply directly to a Data Protection Supervisory Authority. Listed below are the four main countries where Airbus operates and the relevant Supervisory Authority

FRANCE:	CNIL: Supervisory Authority France
GERMANY:	Each German federal state has its own Data Protection Authority that can be found under the following link: https://www.bfdi.bund.de (see tab “Aufsichtsbehörden für den nicht-öffentlichen Bereich“, i.e. Data Protection Authorities for the private sector)
SPAIN:	AEPD.Supervisory Authority Spain
UK:	ICO: Supervisory Authority UK
CHINA:	CAC：Cyberspace Administration of China

Cookies Policy

Airbus uses Cookies and other trackers on its websites, as described in our Cookies Policy。

Modification of the Privacy Notice

Airbus will update this Privacy Notice from time to time in order to reflect the changes in our practices and services and also to remain compliant to Data Protection Laws and Regulations. We will inform you of any substantial modification in how we process your personal data.

How do we handle children's personal data?

Our TJ Visitor Online Application is primarily for adults; children should not submit their personal data. We consider anyone under the age of 14 to be a child. Regarding the collection of children's personal data, we will only process it as permitted by law, with the explicit consent of their parents or guardians, or when necessary to protect the child. If we discover that we have collected a child's personal data without verifiable parental consent, we will endeavor to delete the data as soon as possible.

签发文件日期：2025.12.1

最新更新：2025.12.1

介绍

空中客车（天津）总装有限公司（也称为“空中客车”或“我们”）作为TJ Visitor Online Application网站主要的数据处理者感谢您使用我们的网站以及对我们的产品、服务和业务线的关注。

空中客车致力于保护您的个人隐私，并严格遵守相关的个人信息保护法律法规。我们希望您在使用TJ Visitor Online Application时感到安心。

然而，本网站可能包含指向其他网站或应用程序的链接，这些网站或应用程序可能不受本隐私声明的约束。在这种情况下，我们建议您仔细阅读此类网站的隐私政策。

本隐私声明将告知您当您访问TJ Visitor Online Application时我们收集哪些个人信息；我们如何使用和披露您的个人信息；您如何控制您个人信息的使用和披露；以及我们如何保护您的个人信息。

什么是个人信息？

个人信息是可用于直接或间接识别个人身份的信息。它包括姓名、联系方式、身份证号码、财务数据、行踪轨迹或在线标识符等信息。

我们使用哪些个人信息、数据来源是什么？

我们在TJ Visitor Online Application中处理的个人信息如下：

• 个人基本资料：个人姓名、国籍、出生地、出生日期、电子邮件地址、个人电话号码、车牌号、视频影像、体态等
• 个人教育工作信息：工作单位及岗位名称
• 个人身份信息：身份证号码，护照号码

我们可能会通过如下途径收集您的个人信息：

• 通过访问我们的网站客户端直接收集；
• 从您已向空客业务部门提供的个人信息间接获取；
• 由空客相关部门的设备主动采集。

处理您的个人信息的目的是什么？

通过使用TJ Visitor Online Application，空中客车将出于以下目的处理您的个人信息：

• 场所和设施的访问控制及保护；
• 访客管理；
• 遵守法律义务。为了履行我们应尽的法律义务，我们会在必要时使用您的个人信息，包括响应政府部门和执法机构的要求，以及遵守出口管制和制裁要求；
• 保护我们和他人权益。当我们认为有必要就非法活动、疑似欺诈、对任何人的人身安全构成潜在威胁，或违反政策、条款和其他规定的行为进行调查、阻止或采取行动时会使用您的个人信息。

原则上我们仅会将您的个人信息用于上述目的，但如果新的使用目的与原始目的相兼容（例如，为了保存特定证据或遵守法律诉讼时效）我们也将使用您的个人信息。如果我们需要将您的个人信息用于其他目的，我们将在进一步处理个人信息之前通知您，并向您提供相关的隐私信息声明。

处理您的个人信息的法律依据是什么？

根据适用法律，我们根据以下法律依据处理您的个人信息：

• 基于您的同意
  当您同意我们通过 TJ Visitor Online Application 隐私声明处理您的个人信息以提供某些服务时，您可以随时通过 dataprivacy.china@airbus.com 联系我们撤回您的同意。有关撤回权的更多信息，请参阅下文“如何行使您的权利和/或就您的个人信息联系空中客车？”
• 根据空客的法律义务
  空客同其他公司一样，均受到法律法规的约束。在某些情况下，空客需要处理您的个人信息以履行例如出口管制等这些法律义务。
• 切身利益在紧急医疗或需要为医疗目的处理个人信息且个人在身体上或法律上无法同意处理的特定情况下，空客可能会为相关个人的重大利益而处理个人信息。

谁会收到您的个人信息？

根据适用法律，我们可能会根据需要向以下接收者披露您的个人信息：

• 空中客车及其附属公司
• 为空中客车工作或代表空中客车工作的授权人员，包括我们的代理商、服务提供商和顾问，提供我们所需的各种产品和服务
• 与空中客车活动相关的空中客车业务合作伙伴（如审计公司）
• 与任何合并、重组、出售部分或全部空中客车资产或其他公司对我们全部或部分业务进行融资或收购有关的其他授权第三方
• 执法部门或当局或其他法律程序遵守适用法律

您的个人信息是否会被转移到海外？

您的个人信息通常会在中华人民共和国境内（包含港澳台）进行处理。在与位于中华人民共和国以外的第三方共享或处理个人信息前，我们将根据相关法律法规的要求提前告知并获取您的同意并完成相应的跨境合规程序，始终采取措施确保任何信息传输都得到谨慎管理。如果您对转移有任何疑问，请联系（dataprivacy.china@airbus.com）获取更多详细信息。

您的个人信息将被保留多久？

我们仅在为收集人数据的合理必要期限内保留您的个人信息。对于TJ Visitor Online Application，我们会自收集之日起，将您的数据保留1年。在某些情况下，我们会将您的个人信息保留更长时间，例如基于法律法规的要求。

您的个人信息安全吗？

我们非常重视您个人信息的安全。我们采取权限管控、系统日志跟踪、数据加密等技术的安全措施，以保护我们控制的个人信息免遭意外或故意操纵、丢失、破坏以及未经授权的人员访问。我们的安全程序会随着新技术的不断出现而增强。

您的权利是什么？

您可随时通过联系dataprivacy.china@airbus.com，来行使下列个人信息保护权利：

• 有权访问/获取有关您的详细资料报告：您有权确认您的个人信息是否正在由空中客车公司处理，如果是，则处理哪些具体的个人信息。
• 更正个人资料的权利：您有权纠正或要求纠正与您有关的任何不准确的个人信息。
• 删除权：在某些情况下，例如，当您的个人信息对于其收集的目的而言不再是必要信息时，您有权删除您的个人信息。
• 限制处理您的个人信息的权利：您有权限制对您个人信息的处理，例如，当处理不合法且您反对删除您的个人信息时。在这种情况下，您的个人信息仅在您同意或为行使或辩护合法权利时才会被处理。
• 获取个人信息副本的权利：您有权以结构化、常用和可读的格式接收有关您的个人信息和/或将这些个人信息传输给另一个数据控制者。
• 撤回同意的权利：您可以随时收回您的授权同意，您可以在“如何行使您的权利和/或就您的个人信息联系空中客车”章节中找到联系方式来联系我们撤回此类同意。但请注意，如果您撤回同意，您可能无法访问和使用相关信息、功能或服务导致您无法继续授权现场访问服务，详见“您有义务提供您的个人信息吗？”。

如何行使您的权利和/或就您的个人信息联系空中客车？

如果您想行使您的权利，或者您对您的个人信息的处理方式不满意，亦或是您对您的个人信息的处理有任何疑问，您可以首先通过以下电子邮件地址联系空中客车数据保护官：dataprivacy.china@airbus.com。

您有义务提供您的个人信息吗？

请您注意，如您未能提供到访登记检查服务所要求的个人信息，我们将无法为您办理入场手续，在此情况下您将无法完成本次到访。

我们是否使用自动化决策或进行分析？

原则上，我们不使用完全自动化的决策流程，也不进行旨在评估某些个人信息（分析）的自动化流程。如有必要，我们会提前通知您。

如何向主管部门寻求协助？

如果您仍然不满意，您有权直接向数据保护监管机构提出申请。以下列出了空客运营的主要国家/地区以及相关的监管机构

法国：	CNIL：法国监管机构
德国：	每个德国联邦州都有自己的数据保护机构，可通过以下链接找到： https://www.bfdi.bund.de (参见“非公共部门的监管机构”，即私营部门的数据保护机构)
西班牙：	西班牙监管局
英国：	ICO：英国监管机构
中国：	CAC：国家互联网信息办公室

Cookies政策

空中客车公司在其网站上使用 Cookie 和其他追踪器，详见Cookies政策。

隐私声明的修改

空中客车公司的本隐私声明可能会改变，以反映我们实践和服务的变化。对于重大变更，我们还会提供通知服务来说明处理您个人信息方式的变化。隐私声明的变更始终遵守数据保护法律法规。

我们如何处理儿童的个人信息

我们的TJ Visitor Online Application主要面向成人，儿童不应提交自己的个人信息。我们将不满 14 周岁的任何人均视为儿童。对于收集儿童个人信息的情况，我们只会在受到法律允许、父母或监护人明确同意或者保护儿童所必要的情况下处理此信息。如果我们发现自己在未事先获得可证实的父母同意的情况下收集了儿童的个人信息，则会设法尽快删除相关数据。

Document issued on: 2025.12.1

Latest update on: 2025.12.1

Special Note:

This Separate Notice on Sensitive Personal Data (hereinafter referred to as "this Notice")constitutes an integral part of the relevant privacy Notice of TJ Visitor Online Application and applies to Airbus (Tianjin) Final Assembly Company Limited. (also referred to as "Airbus" or "we") in the course of company visitor registration and security operations.This separate notice and authorization constitutes your authorization to the company regarding the processing and protection of sensitive personal data. To safeguard your rights and interests, please carefully read all contents before authorizing this separate notice to ensure you fully understand it, paying particular attention to the terms highlighted in bold. By checking the box to agree to this notice, you authorize and consent to the company processing and protecting your sensitive personal data in accordance with this notice. We will not process your sensitive personal data until you have given your separate consent

I. Collection Principles

We adhere to the principles of lawfulness, propriety, and necessity, only collecting the sensitive personal data that is directly relevant to the functions of the products or services we provide.

II. Type, Purpose and Method of Data Collection

Please refer to the table below for details on the purposes, methods, and scope of our collection and use of sensitive personal data.

Business Purpose	Sensitive Personal Data	Collection method	Usage
Visitor registration, security management and export control verification	ID card number, passport number, video images or body posture	Voluntarily provided or submitted data. Indirectly obtained from the personal data you have provided to Airbus business units. Automatically captured by devices operated by relevant company departments.	Used for unique verification of company visitor information during export control inspections. Protection and security of premises, facilities, and personnel.

III. Storage Location and Period

1. Storage location: Your sensitive personal data will generally be processed and stored within the People's Republic of China (including Hong Kong, Macau, and Taiwan).
2. Storage period: We will retain your sensitive personal data only for the minimum period necessary to fulfil the purposes outlined in this notice, unless otherwise stipulated by laws and regulations. For the TJ Visitor Online Application，we will retain such data for one year from the date of collection. Upon expiry of the retention period, we shall delete or anonymise the data in accordance with legal requirements.

IV. Your Rights

1. Access, Copy and Transfer: You have the right to access, copy and transfer the above sensitive data held by the Company.
2. Corrections and Supplementation: Should you find that your sensitive data processed by us is inaccurate or incomplete, you have the right to request us to correct or supplement it.
3. Withdrawal of Consent and Deletion: Upon expiry of the retention period or fulfilment of the processing purpose, and where no legal retention requirements apply, you have the right to request deletion of your sensitive personal data. You also have the right to withdraw your consent to this Notice before entering Airbus. However, please note that such deletion or withdrawal of consent will result in your inability to enter the Company.

V. Risk Warning

1. ID card or passport information constitute your sensitive personal data. In the event of leakage or unlawful use, it may result in infringing on personal dignity or harm to personal and property safety
2. We undertake to maintain strict confidentiality regarding your personal data and have implemented encryption, access control, in accordance with national laws and regulations.

VI. How to contact us

Should you have any questions, comments, suggestions about this privacy notice, or wish to exercise your personal data rights, please contact us through the following means:

• Contact Department: Airbus China Data Governance Team
• Contact Email: dataprivacy.china@airbus.com

We will process and respond to your request promptly.

签发文件日期：2025.12.1

最新更新：2025.12.1

特别提示：

本《敏感个人信息单独声明》（以下简称“本声明”）是TJ Visitor Online Application相关隐私声明的重要组成部分，适用于空中客车（天津）总装有限公司（也称为“空中客车”或“我们”）在公司访客登记与安保工作中处理和保护敏感个人信息的情形。本单独声明与授权是您向公司就敏感个人信息处理事宜出具的授权书，为了维护您的权益，请在授权本单独说明前，仔细阅读所有内容，确认充分了解本声明，特别是以加粗形式标注的条款，应重点阅读。在您勾选同意本声明，即表示您已授权并同意公司根据本声明处理和保护您的敏感个人信息。在您明确同意之前，我们将不会处理您的敏感个人信息。

一、 收集原则

我们遵循合法、正当、必要的原则，仅收集与我们提供的产品或服务功能直接相关的敏感个人信息。

二、 收集信息类型、目的及方式

我们收集和使用您敏感个人信息的目的、方式和范围详见下表。

业务目的	敏感个人信息	收集方式	用途/依据
访客登记、安保管理与出口管制核查	身份证号或护照号，视频影像、体态	由您主动提供或填写提交相关信息； 由您已向空客业务部门提供的个人信息间接获取； 由空客相关部门的设备主动采集	用于公司访客信息在出口管制检查中的唯一性验证； 场所、设施和人员的安全保护

三、 存储地点和期限

1. 存储地点：我们仅在中华人民共和国境内存储收集到的您的敏感个人信息。
2. 存储期限：我们只会在达成本说明所述目的所需的最短期限内保留您的敏感个人信息，法律法规另有规定的除外。对于 TJ Visitor Online Application，我们会自收集之日起，将您的数据保留1年。一旦存储期限届满，我们将依法删除或进行匿名化处理。

四、 您的权力

1. 访问、复制和转移：您有权查阅、复制和转移本公司持有的您如上敏感信息（法律法规另有规定的除外）。
2. 更正和补充：当您发现我们处理的您敏感信息不准确或不完整时，您有权要求我们进行更正或补充。
3. 删除和撤回同意：在存储期限届满或处理目的已实现、且没有法律强制留存要求时，您有权要求我们删除您的敏感个人信息。您有权随时撤回您对本说明的同意。但请注意，删除或撤回同意将可能影响此前基于您的同意已开展的个人信息处理活动，导致您无法继续使用与授权相关的产品或服务。

五、 风险提示

1. 身份证或护照信息为您的敏感个人信息。一旦泄露或非法使用，可能导致人格尊严受到侵害或人身财产安全受到危害等。
2. 我们承诺对您的个人信息严格保密，并按国家法律法规规定，采用数据加密、访问控制等保护个人信息安全的措施。

六、 如何联系我们

如果您对本说明书有任何疑问、意见、建议，或希望行使您的个人信息权利，请通过以下方式联系我们：

• 联系部门： [空中客车中国数据治理团队]
• 联系邮箱： [dataprivacy.china@airbus.com]

我们将及时对您的请求进行处理和答复。