QTR-HR-PN-QA-001-TalentAcquisitionPrivacyNotice
QTR-HR-PN-QA-001-TalentAcquisitionPrivacyNotice
QTR-HR-PN-QA-001-TalentAcquisitionPrivacyNotice
1.2 Personal data relating to you will be held and processed by Qatar Airways and its subsidiaries and
associated companies, together referred to as the Qatar Airways Group. Any references in this Privacy
Notice to “Qatar Airways”, “Group”, “we” or “us” are to the relevant member(s) of the Qatar Airways
Group that you interact with or that processes your personal data (including as data controller).
1.3 This Privacy Notice relates to personal data processed by companies within the Group, whether
separately or jointly processing personal data as a controller, for the purposes of recruitment and
engagement (“Purposes”). We want to ensure you understand what information we collect about you,
how we will use it and for what purpose. We are also required by applicable data protection law to
explain certain matters to you. This Privacy Notice sets this out (and overrides anything different
previously communicated to you). This Notice does not form part of any contract of employment offered
to candidates hired by Qatar Airways.
1.4 We reserve the right to modify and/or update this Privacy Notice at any time. We will notify you when
we make any substantial updates. You may find our current Privacy Notice on our career website:
http://careers.qatarairways (our “Website”).
1.5 This Privacy Notice will apply to you if you are a current applicant or candidate (and may also apply if
you are a former candidate) of a Group company. If you provide us with personal data of a family member
or other third party in connection with your application (for example, as an emergency contact) this
Notice also covers the use of their information, and you should make this Notice available to them. For
further details please see section 6.3 below.
1.6 It is important that you read this Notice so that you are aware of how and why we are using that information.
2. Key Terms
"Criminal Offence Data” means Personal Data relating to criminal convictions and offences.
“Data Protection Law” means, to the extent applicable, the Qatari Personal Data Protection and Privacy
Law, the EU General Data Protection Regulation 2016/679 (“EU GDPR”), the UK General Data Protection
Regulation (“UK GDPR”) and any other applicable data protection and/or data privacy laws and
regulations as amended from time to time.
“Personal Data” means information about you or that relates to you, and from which you can be identified
or could be reasonably be identified as a natural person, either from such information or in combination with
any other information, including personal information and other information which may be protected under
privacy or data protection laws of the country from which you are applying and the country where the job
for which you are applying is located or your country of residence.
“Qatar Airways Group” means Qatar Airways including its subsidiaries and branches with its registered
office at Qatar Airways, Tower, PO Box 22550, Doha, State of Qatar.
Sensitivity: Internal
“Sensitive Data” means (a) special categories of Personal Data relating to your race, racial or ethnic
origin, political opinions or persuasion, religious or philosophical beliefs, Criminal Offence Data, age,
marital status, financial information, certain information (for example, social security numbers) issued by
government agencies, trade-union membership, genetic data, biometric data (where used for identification
purposes) and data concerning health (including physical or mental health), sex life or sexual orientation,
and passwords; and (b) any other “sensitive information” as defined in applicable Data Protection Laws.
i. Directly from you when for example you enter it in our Website or through other online and offline channels
for talent acquisition purposes.
ii. Internal Group companies and/or sources.
iii. CCTV cameras: the Group may have cameras on our premises for security purposes which may capture a
recording of your image and movements while you are on Group owned and/or used sites or premises.
Where this is the case, you will be notified of this through appropriate signage. Further information about
our use of CCTV can be obtained by contacting the relevant Group contact using the details provided in
section 13 below.
iv. Third parties: recruitment agencies; recruitment platforms or former employers and third parties who
recommend you as a candidate for a specific job opening; background check service providers; referees;
medical professionals; government bodies and departments; law enforcement agencies and our suppliers,
advisers and agents.
v. Social media including LinkedIn and other global media sources.
Sensitivity: Internal
5. What Personal Data does Qatar Airways collect from and about You?
5.1 During the application, selection and onboarding process we collect and use different types of Personal Data
about you, depending on the requirements of the role and in consideration of applicable laws which includes:
Information about you Name, address, date of birth, marital status, nationality, gender, driver
status, bank account details, education and, working rights, such as visa
and immigration requirements.
Information to contact you Name, location or postal address, telephone number (current work and
home), and e-mail addresses.
Information to identify you Legal identification documentation depending on the requirements and
location of the role, for example, passport, licenses, etc.
Information about your CVs, and/or data in application forms, professional references, records
skills or experience of academic qualifications, skills, training professional licenses,
previous employment information (including packages and benefits),
professional certifications and other compliance requirements.
Information about your Personal Data from interviews and outcomes of any recruitment
suitability to work with us exercise you complete, including tests, presentations, phone screening
records, video interview recordings, and evidence of working rights.
Personal Data provided through psychometric assessments (such as
personality profiles, aptitude tests, and emotional intelligence reports)
and pre-employment medical assessments (health data).
Backgrounds checks may be used to verify Personal Data that you
provide during the talent acquisition process. You will be told in
advance which aspects of your Personal Data will be verified including
an explanation of how the background checking process will be carried
out.
Where legally allowed, a police clearance certificate may be required.
Image and style related data in accordance with Qatar Airways’
personal grooming standards/manuals.
Information about your Information relating to any previous applications to Qatar Airways
terms of employment / Group and/or any previous employment history with Qatar Airways
previous employers / Group or employment details with other companies, salary information
previous applications before/or after tax, immigration visas, work permits, non-disclosure
agreements, separation documentation, release letters, end of service
letters.
Information that we may Where applicable details of family members or dependents, including:
need you to declare such
as dependents, relatives • Contact details such as name, addresses, telephone numbers,
and other relationships and personal email addresses;
with benefits (e.g. • Their relationships / links to you;
sponsorship, medical
Sensitivity: Internal
Information that you Information that you have provided when you apply for a role including
provide when you apply for details on social media profiles or made available on any platform
a role online including (including LinkedIn).
through LinkedIn
5.2 If the above information is not provided, our ability to consider you as a candidate may be limited. You may also
provide us with your Personal Data that we have not specifically requested (for example, your CV may contain information
about your hobbies and social preferences). This Personal Data is provided on a voluntarily basis.
6.2 If you do not provide your Personal Data or request to delete the Personal Data from Qatar Airways’ database, we
may be unable in some circumstances to comply with our obligations and we will inform you about the implications
of your decision. For example, we may require your Personal Data for completing background check processes
based on the specific role you have applied for. If you do not provide relevant Personal Data, we will not be able to
proceed with the recruitment process/offer of employment.
6.3 Where applicable, the Personal Data of your declared dependents is processed by us to enable your declared
dependents to avail themselves of certain benefits based on a contract of employment and applicable company policies.
Where you are the parent or legal guardian of a child and provide us with personal data of that child, we will only process
such personal data for the abovementioned purposes.
Sensitivity: Internal
6.4 Where you disclose Personal Data on behalf of your referees or declared dependents, you undertake and will ensure
that the individual whose Personal Data is supplied to Qatar Airways has authorized the disclosure. Where applicable, the
Personal Data of your declared dependents is processed by us to enable your declared dependents to avail themselves
of certain benefits based on a contract of employment and applicable company policies. Where the disclosure is in
respect of a child’s Personal Data, you undertake that you are providing it to us only where you are the parent or legal
guardian of that child and you consent to processing of such data by us for the purposes stated within this Privacy Notice.
Automated decision-making
6.5 We may use automated decision-making methods to increase the efficiency of our recruitment procedures. Our
automated decision-making never uses Sensitive Data and/or Criminal Offence Data to automatically screen-out
applications. Automatic screening is used to prioritise and disqualify candidates during the screening process.
Candidates should be aware that they have the right not to be subjected to automated decision making where this has
legal or other significant consequences for them, except where they have explicitly consented or where it is necessary
for entering into or performing a contract with them.
Different purpose
6.6 Generally, we will only use your Personal Data for the purposes for which we collected it. If over time we consider
that we have a different purpose we will ensure the reason is compatible with the original purpose and where appropriate
and/or permitted, seek your consent to any new or changed processing.
7.1 We will collect and process your Personal Data as permitted under applicable Data Protection Laws. Our legal basis
for collecting and processing your Personal Data is as follows:
Where a purpose of processing is required for pursuing a legitimate interest of the relevant Group company or
any third party, then the relevant Group company will make the balancing test of the underlying interests available
upon a request submitted via our Contact Us page on our Qatar Airways website;
vi. Where we are required to comply with legal obligations, such as where employment or other laws require the
processing of your Personal Data (for example the monitoring of equal opportunity and diversity);
vii. Where applicable, vital interests. For example, where we need to prevent or suspend danger to the life, body
and/or health of a person; and//or
viii. Where applicable, where we need to comply with a duty to take action for public benefit or exercise state power
conferred on us.
8.2 Where we are processing your data based on your consent, for example health data, you have the right to withdraw
that consent at any time.
9.2 We have SOC 2 Type II certification. For an organisation to achieve this certification, it has to meet the following
criteria:
• Security - The organization’s system must have controls in place to safeguard against unauthorized physical and
logical access.
• Availability - The system must be available for operation and must be used as agreed.
• Processing Integrity - The system processing must be complete, accurate, well-timed, and authorized.
• Confidentiality - The information held by the organization that is classified as “confidential” by a user must be
protected.
• Privacy - All personal information that the organization collects, uses, retains, and discloses must be in
accordance with their privacy notice and principles.
9.3 We will only disclose Personal Data about you or your dependents to third parties if we are legally obliged to do so or
where we need to comply with our contractual duties to you, for instance we may need to pass on your Personal Data
to our external service providers or third parties (for example, pension, health insurance, hotels, other airlines,
government institutions for visa related formalities or arranging your interview). For further details please see section
11 below.
Sensitivity: Internal
10.2 If you are based in the UK or the European Economic Area (“EEA”), we will only send your Personal Data outside
the UK and/or the EEA to:
10.3 If we transfer your Personal Data outside the UK and/or EEA to one of our suppliers, service providers or Group
companies, we will implement one of the following safeguards:
i. Transfers to a non-UK/EEA country that has been deemed to provide an adequate level of protection for personal
data as a matter of UK law or by the European Commission (as applicable). For further details, see A guide to
international transfers | ICO or European Commission: Adequacy of the protection of personal information in
non-EU countries (as applicable); or
ii. Put in place a contract with the recipient that means they must protect Personal Data to essentially equivalent
standards as the UK and/or EEA including Standard contractual clauses for data transfers between EU and non-
EU countries; the UK Information Commissioner’s International Data Transfer Agreement / Addendum and any
other appropriate safeguard in place from time to time.
i. Qatar Airways Group companies, where that company is responsible for processing related to the Purposes and
on our behalf (or on behalf of the Group as a whole);
ii. Third party service providers who provide services to us such as recruiters or executive search agencies,
auditors, banks, video interview providers, background check or psychometric assessment service providers, IT
support service providers, medical insurance, payroll and other benefits providers;
iii. Vetting agencies: depending on your role and location, we may need to check your Criminal Offence Data. We
may only carry out criminal record checks in compliance with applicable local law;
iii. Government officials including in order to respond to a lawful government request, court order, administrative or
judicial process (such as a subpoena or search warrant);
iv. Suppliers, service providers and agents such as IT: where the relevant third party is responsible for providing
services to us, in connection with the performance of those services;
Sensitivity: Internal
v. Advisers: with legal, tax, accounting and other professional advisers for the provision of advice;
vi. Companies House (UK): Registering your role as a director or secretary (or member) of the relevant Group or
affiliate company.
11.2 Our suppliers, service providers and agents are only permitted to process your Personal Data for specified
purposes, in accordance with our instructions in connection with the functions or services these parties will be
performing for Qatar Airways, on a “need-to-know” and confidential basis.
12.2 To determine the appropriate retention period for Personal Data, we consider:
i. the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or
disclosure of your Personal Data;
ii. the purposes for which we process your Personal Data and whether we can achieve those purposes through
other means;
iii. if you have made a request to have your Personal Data deleted (see Section 13 of this Notice);
iv. guidelines issued by relevant data protection authorities; and
v. legal obligation(s) under applicable law to retain data for a certain period of time.
12.3 We retain this information for various reasons, including business purposes, compliance with applicable laws, audit
requirements, to allow us to defend legal claims in respect of a recruitment decision, to consider you for other
current or future jobs at Qatar Airways Group and to help us better understand, analyze and improve our talent
acquisition processes.
12.4 Where you are successful and accept employment with us, we retain your Personal Data for the duration of your
employment (subject to applicable laws) for as long as is legally required to fulfill the specified purpose for which it
was collected as described in this Privacy Notice and in line with our data retention policies and procedures or as
necessary to protect ourselves from legal claims.
12.5 Where you are considered unsuccessful, to the extent allowed by applicable law, Personal Data shall be stored for
a maximum of twelve (12) months in line with our data retention policies and procedures or as necessary to protect
ourselves from legal claims. If applicable law allows, Personal Data may be stored for a longer period.
12.6 When erasing Personal Data, we will take commercially reasonable and technically possible measures to make the
Personal Data irrecoverable or irreproducible in accordance with applicable laws.
12.7 In some circumstances we may anonymise your personal information so that it can no longer be associated with
you, in which case we may use such information without further notice to you.
Sensitivity: Internal
You can exercise any of these rights by contacting the relevant Group contact using the details provided in
section 14 below.
The right to be You have the right to be provided with clear, transparent and easily
informed understandable information about how we use your information, your rights,
and any infringements of these rights or your Personal Data. This Notice is an
example of this right.
The right of You have the right to obtain a copy of Personal Data relating to you (and other
access information) from us where we are processing it, and to request the disclosure
of any Personal Data obtained without your consent. This is so you are aware
and can check that we are using your information in accordance with any
applicable Data Protection Law.
The right to You are entitled to have your information corrected if it is inaccurate or
rectification incomplete. It is important that the personal information we hold about you is
accurate and current. Please keep us informed if your personal information
changes during your working relationship with us.
The right to This enables you to request the deletion or removal of your Personal Data where
erasure there is no compelling reason for us to keep using it. This right is subject to
exceptions in accordance with applicable Data Protection Law, for example
where we need to use your Personal Data in defence of a legal claim.
Sensitivity: Internal
You have the right to ‘block’ or suppress further use of your Personal Data that
The right to
we process. This means that it can only be used for certain things, such as legal
restrict claims or to exercise legal rights.
processing
You can ask us to restrict the use of your personal information if:
1. it is not accurate;
2. it has been used unlawfully but you don’t want us to delete it;
3. it is no longer needed for the purposes of the processing, but you
want us to keep it for use in legal claims; or
4. you have already objected to our use of your data but you are waiting
for us to consider if we are allowed to keep on using it.
If we do restrict your information in this way, we will not use or share it in
other ways while it is restricted.
The right to You have the right to object to the collection, use or disclosure of your
object the personal data at any time.
processing
As referred to above, where you have given your consent to us for the
The right to
processing of any Personal Data, you have the right to withdraw your
withdraw consent at any time (although this does not mean that any processing
consent of Personal Data carried out by us with your consent up to that point is
unlawful).
Sensitivity: Internal
14. Contact Us
14.1 You can exercise your rights or contact us with any questions about this Privacy Notice or how we handle your
Personal Data please contact us via our Contact Us page on our Qatar Airways website.
14.2 If you added information to your applicant profile, you can access your relevant account profile to correct your
Personal Data or request us to do so. If you no longer want to receive our job alerts, you can unsubscribe at any
time on our Website which will be effective immediately.
14.3 Should you have any questions about the processing of your Personal Data or this Privacy Notice, please contact
our Data Protection Officer: Qatar Airways Group, Qatar Airways Tower 1, PO Box 22550, Doha, State of Qatar,
Attention: Data Protection Officer. To send an email to our Data Protection Officer click here.
You confirm that you have read this Privacy Notice and understand how your personal data will be used in relation to
the application, recruitment and onboarding process by Qatar Airways.
Signed Date
You:
• confirm that you have read this Privacy Notice and understand how your Personal Data will be used in relation to the
application, recruitment and onboarding process by Qatar Airways;
• grant your express consent to the collection, use, processing, disclosure, transfer (including international transfer),
sharing, retention, and deletion of your Personal Data and Sensitive Data in accordance with this Privacy Notice
(other than for marketing purposes), so far as is legally permissible or required; and
• acknowledge and understand that you may withdraw your consent at any time subject to applicable laws and the
terms of this Privacy Notice.
Signed Date
Sensitivity: Internal
Appendix 1
List of Supervisory Authorities
Australia – Office of the Australian Information Commissioner Postal address: GPO Box 5288, Sydney NSW 2001,
Telephone: 1300 363 992, Website: www.oaic.gov.au.
Qatar - the National Cyber Governance and Assurance Affairs, National Cyber Security Agency (NCSA), P.O. Box
24100, Wadi Al Sail Street, Doha, Qatar (privacy@ncsa.gov.qa).
United Kingdom - Information Commissioner’s Office (ICO) – website: www.ico.org.uk