1. General terms related to personal information
Automated decision making

means a decision made by automated means without any human involvement.

Criminal offence data

 means personal information concerning criminal convictions and offences.

Data controller 

means a natural or legal person (such as a company) which determines the means and purposes of processing of personal information.  For example, the BAE Systems entity which contracts with you will be your data controller as it determines how it will collect personal information from you, the scope of data which will be collected, and the purposes for which it will be used. 

Data processor 

means a natural or legal person (such as a company) that is responsible for processing personal information on behalf of a controller.

Data Protection Law 

means the laws and regulations relating to data protection and privacy applicable to you, depending on where you are located.

Personal information 

is information that relates to a living individual. It includes information that may identify a person by name and contact details, or refer to associated information such as account activity, or personal preferences that can directly or indirectly identify an individual. 

Processing

means any and all actions we take with respect to your personal information, including (without limitation) managing, viewing, holding, storing, deleting, changing, using and saving. 

Special category personal information

means any personal information relating to your health, genetic or biometric data, criminal convictions, sex life, sexual orientation, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership.  

2. Categories of personal information
  • Business information: your business contact details (e.g. address, telephone number, e-mail); your job title; your employer; any other information relevant to conducting business on behalf of the Company.
  • Contact information: home address; email address; and telephone number/s.
  • Data related to your engagement with the Company: work contact details (e.g. address, telephone number, e-mail); work location default hours; default language, time zone and currency for location; your worker ID and various system IDs; your performance review information; your work biography; your reporting line; your employee/contingent worker type; your hire/contract begin and end dates; your cost centre; your job title and job description; your working hours and patterns; whether you are full or part time; your termination/contract end date; the reason for termination; your last day of work; exit interviews, references, status (active/inactive/terminated); position title; the reason for any change in job and date of change; your benefit coverage start date.
  • Employment claims, complaints and disclosures data: termination arrangements and payments; subject matter of employment-based litigation and complaints; employee involvement in incident reporting and disclosures.
  • Financial data: credit card information; bank account details; other relevant information about your payment information.
  • HR processes data: allegations, investigations and proceeding records and outcomes; colleague and line management feedback; appraisals; talent programmes; formal and informal performance management processes; flexible working processes; restructure and redundancy plans; consultation records; selection and redeployment data; health and safety audits; other business audits; risk assessments; incident reports; data relating to training and development needs or training received.
  • Identity information: your title; forename and surname; preferred name; photographic images; any additional names
  • Immigration information: gender; nationality; second nationality; civil/marital status; date of birth; age; national ID number; immigration data; languages spoken; next-of-kin/dependent contact information.
  • Leave information: absence records (including dates and categories of leave/time-off); holiday dates; information related to family leave.
  • Monitoring data (to the extent permitted by applicable laws): Closed Circuit television footage; system and building login and access records; keystroke, download and print records; internet browsing records; call recordings; data caught by IT security programmes and filters such as firewalls, threat hunting software and data loss prevention tools.
  • Share information: number of shares held; date joined the register; date left the share register; dividends paid/not cashed; bank mandate details; share transactions; nationality and AGM / Proxy voting.
  • Staff related data: your title, forename, middle name(s) and surname; birth name; preferred name; any additional names; gender; nationality; second nationality; residency details; civil/marital status; date of birth; age; home contact details (e.g. address, telephone number, e-mail); national ID number; immigration and eligibility to work data; languages spoken; next-of-kin/dependent contact information; passport details; driving licence; car registration details.
  • Recruitment data: Professional and educational qualifications; references, CV and application; employment history; digital and in person interview and assessment data.
  • Regulatory data: records of your registration with any applicable regulatory authority, your regulated status and any regulatory references
  • Remuneration and benefits data: your remuneration information (including salary/hourly plan/contract pay information as applicable, allowance, bonus and merit plans), bank account details, grade, social security number, tax information, third party benefit recipient information
  • Vetting data: The results of any security- and employment-related vetting and verification checks, which include checking qualifications, financial and tax information, identity and right to work data, results of required criminality checks, nationality, directorships and sanctions and publicly available social media check results; details of certain personal or business travel plans. 
     
3. Cohort glossary
  • Applicants: individuals who have applied for a role in any capacity working with the Company, or registered an interest in working with Company.
  • Employees: individuals who are employed in any capacity by the Company.
  • Contractors and workers: individuals who provide services to the Company (whether directly or via a third party service company or agency).
  • Next of kin and dependents: family members of employees, contractors and workers.
  • Board members, directors & non-executive directors: office holders and directors of BAE Systems group companies, directors and office holders of joint venture companies.
  • Shareholders: individuals holding shares in BAE Systems plc, or members of an employee share plan.
  • Pensions: members of any of the Company’s pension schemes.
  • Education and Community Partnerships: individuals involved in any of the Company’s early careers programmes (including internships, work experience, apprentice and graduate programmes), as well as any of its community partnership programmes.
  • Former employees, contractors and workers: individuals who were employed in any capacity by the Company, or who provided services to the Company (whether directly or via a third party service company or agency).
  • Customers and contacts: the Company’s customers, prospective customers or contacts.
  • Suppliers and subcontractors: suppliers or subcontractors to the Company.
  • Site visitors: individuals who visit any of the Company sites.
  • Event attendees: individuals who attend an event run or organised by or on behalf of the Company.
  • Journalists and media: journalists and other members of the media.
  • General public: members of the general public.
Further information