Legal claims and risk management

We use your personal information in order to administer and manage the relationship between the Company and the entity you represent or are employed by, which is a supplier or subcontractor of BAE Systems.

This notice should be read in conjunction with the Overview

Legal Claims and Risk Management

What processing activities do you undertake that include my personal information?

We use your personal information in connection with our legal rights and obligations.

This includes taking steps to enforce or defend any legal claims made by, against or otherwise involving you.

However, it also includes complying with lawful requests by public authorities (including without limitation to meet national security or law enforcement requirements), discovery requests, or where otherwise required or permitted by applicable laws, court orders, government regulations, or regulatory authorities (including without limitation data protection, tax and employment), whether within or outside your country.

This will also include investigations into security or compliance concerns, as appropriate.

What categories of personal information are included in these processing activities?

What is the reason for these processing activities?

What are the legal grounds you rely on to carry these out?

What are the 'legitimate interests' referred to above?

The Company considers that it has a legitimate interest in ensuring that it complies with all legal requirements placed on it, whether those are EU obligations or non-EU obligations.

It wishes to maintain its reputation as a good corporate citizen and to act appropriately in all the countries in which it does business. This includes cooperating with authorities and government bodies. Indeed, the Company is required to comply with laws and regulations in those countries in which it does business and to require otherwise would lead to conflicts of laws issues.

In addition, the Company considers that it has a legitimate interest in protecting its organisation from breaches of legal obligations owed to it and to defend itself from litigation. This is needed to ensure that the Company’s legal interests and rights are managed appropriately.

As this processing may include special categories of personal information or information relating to my criminal record, in addition to the above, what are the additional legal grounds you rely on to justify this processing?

To the extent that you did not get this personal information from me, how did you collect this information?

Some of the information processed in these activities may be generated by the Company (see “Where do you get my personal information from?” in the Overview section).

In addition, we may work with external advisers and authorities to carry out this activity. We may receive information from other sources as set out in this Notice (see “Where do you get my personal information from?” in the Overview section).

Who do you share this personal information with?

Your personal information is shared internally, as set out in this Notice (see “When do you share my personal information with others?” in the Overview section). This would usually include Legal, Security and your business contact.

In addition, some of your personal information will be shared externally with regulatory or governmental authorities or legal advisers as needed and as otherwise set out in this Notice (see “When do you share my personal information with others?” in the Overview section).