United Kingdom
United States
Saudi Arabia
Australia
This notice should be read in conjunction with the Overview
Supplier Due Diligence
-
What processing activities do you undertake that include my personal information?Before we engage with any new supplier or subcontractor, we undertake due diligence to ensure that the supplier or subcontractor is appropriate and that any associated risk is identified and managed effectively.This includes, where relevant and appropriate, vetting activities for individuals associated with such suppliers or subcontractors. These vetting activities may include anti-money laundering checks, anti-bribery and corruption checks, credit checks, identity fraud checks and criminal record checks (if and to the extent permitted by applicable laws).
-
What categories of personal information are included in these processing activities?To run the processes set out above, we process Identity Information, Contact Information, Business information and Vetting data.Depending on the checks carried out, this could include political affiliation and criminal record information.
-
What is the reason for these processing activities?We undertake supplier due diligence in order to protect our business and to ensure that only appropriately qualified and suitable individuals are engaged by the Company. The Company further carries out these checks in order to comply with applicable laws.
-
What are the legal grounds you rely on to carry these out?This processing is necessary for the compliance with legal obligations to which the Company is subject.This processing is also necessary for the purpose of the legitimate interests pursued by the Company.(See “What are the legal grounds for processing personal information?” in the Overview section.)
-
What are the 'legitimate interests' referred to above?The Company considers that it has a legitimate interest in managing its business operations in the most effective way.The Company needs to make decisions relating to the future of its business in order to preserve its business operations or grow its business. These interests include the interests of the workforce as a whole and the BAE Systems customer base.The Company considers that it has a legitimate interest in completing with all applicable laws, whether within the EEA or otherwise.The Company considers that it has a legitimate interest in ensuring that only suitable and appropriate suppliers and subcontractors are engaged.
-
As this processing may include special categories of personal information or information relating to my criminal record, in addition to the above, what are the additional legal grounds you rely on to justify this processing?This processing is necessary for substantial public interests.The processing is needed for legal claims.(See “What are the legal grounds for processing special category personal information?” in the Overview section.)
-
To the extent that you did not get this personal information from me, how did you collect this information?The results of these checks will come from the Company's external suppliers and partners. We may receive information from other sources as set out in this Notice (see “Where do you get my personal information from?” in the Overview section).In addition, we may also gather some personal information from publicly available sources.
-
Who do you share this personal information with?Your personal information is shared internally, as set out in this Notice (see “When do you share my personal information with others?” in the Overview section). This would usually include Security and management.In addition, some of your personal information will be shared with our suppliers as needed to complete the checks (including, without limitation, Experian and Dow Jones) and as otherwise set out in this Notice (see “When do you share my personal information with others?” in the Overview section).