Privacy Notice – APPLICANTS

Last updated on 19.08.2025

 

INTRODUCTION

We, Brussels Airlines NV/SA (the ‘controller’), are committed to inform you about the personal data use you can expect when you apply to a job, as well as about the involvement of other parties. We want you to apply within a trustworthy process and transparency about our data practices is of course a key element in this. Kindly note that at the bottom of this (web)page, we further explain the data subject rights you have as an applicant.

For any questions or remarks you have about this policy, you can contact us here.


PURPOSE AND LEGAL BASIS

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR), if we have your consent (1.a), or, if such is necessary

  • For initiating and concluding an (employment) contract (all sections)
  • To comply with statutory, or other legal provisions (1.b; 1.d; 1.e; 2.a; 2.b)
  • In our legitimate interest, or that of a third party (1.a; 1.c)
  • Or, in exceptional cases, in the public interest (1.b; 1.d)

 

a. System management: user account and further storage

When applying to Brussels Airlines for a job, you are required to register via our application management system. Each user/applicant must set up a user account. This account consists of at least the following information:

  • First name
  • Last name
  • User name
  • E-mail address

Also, your user account can store any other information you provide or are required to give (such as your cv, supporting documents, diplomas and attestations).

The user account is always retained for a period of 5 years, upon the closing of every active application. The application portal does however allow you to delete your profile yourself at any given moment.

 

b. Application history & pre-employment screening

Separately from your user account, your application history will be stored for a maximum of 5 years if your application does not lead to an employment contract. It is only used to recognise you if you apply to the same position anew.

We might also invite you to complete certain tests or a questionnaire to assess whether your profile meets the requirements of a position. However, to date, no automatic decisions are made based on the outcome of the tests and a member of the recruiting team will always review the results of the test before a decision is made.

 

c. Feedback

Before the selection process is completed, your email address may be used to ask you for feedback. We do this to continuously improve the application process and to know how you rate the experience of applying to us.

 

d. Safety and Compliance

We use your data to comply with compliance obligations and regulations to which Brussels Airlines is subject. This includes using it to help detect or prevent crime (including terrorism financing, money laundering and other financial crimes).

Under this umbrella, a pre-employment screening based on norms and values will take place, which includes compiling a psychological profile of you. We do this, as it is part of our mandatory onboarding process (and confirms your eligibility for an employment contract). For our processing of psychological personal data – which we treat as sensitive, limited and confidential - we rely on reasons of substantial public interest, based on Union or Member State law.

Only the result of this screening (“unacceptable”, or "acceptable") is passed on to the responsible personnel department, for them to register locally in the application management system and delete the full profile immediately upon registration of the result. A negative result is stored for 365 days; a positive result will be stored in your employee file as proof of having passed the test.

 

e. Onboarding

To conclude a successful application process, we will gather information directly from you, or from your user account, containing at least the following:

Identification and contact data
  • Full name
  • Date of birth
  • Place of birth
  • Sex
  • Nationality
  • Home address
  • Phone number
  • Private email address
  • Photo
  • National Registration Number
 Personal life/habits
  • Family composition (children, parents and siblings) and names (for myIDtravel staff tickets)
  • Language
  • Home-work transportation means
  • Marital status
 Professional data, including medical license and certifications
  • Department
  • Line manager
  • Name of buddy
  • Medical license
  • Certifications
 Financial data
  • Fiscal status
 Bank data
  • Bank account number

a. Particularities for Cabin Crew Member applications

In the first stages of the application process, we use an external platform to conduct an online-based, asynchronous video interview. An applicant will be given access to the platform via a unique link. Once they are connected, a video with questions from a staff member will be made available to them, to which they can then reply, in a separate video. These video responses are evaluated by Brussels Airlines’ employees, according to a fixed evaluation catalogue. The results are sent directly to the recruiters. For this video interview, the following personal information is processed:

  • Applicant’s e-mail address
  • Video responses of the applicants
  • IP address
  • A session cookie

These data are not visible to third parties. After an application is completed or terminated, the videos are no longer needed and are authorized for deletion.

Next to passing the video interview, applicants for a Cabin Crew Member position must fulfil minimum requirements with regard to i.e. age, language skills, diploma, swimming skills and certain personality traits. Do note that the answers and information you give in response to the evaluations during recruitment will therefore be stored along with your name and attestations.

If the initial evaluation of your application during recruitment is successful, you will receive an invitation to participate in the Cabin Crew Member training. However, we do require that you first pass a medical examination that looks into your flight fitness – a so-called ‘Fit to Fly’- test. This is a comprehensive pre-employment examination and covers certain occupational medical precaution measures in accordance with the criteria and conditions of EU Regulation 1178/2011. Only the result of this ‘Fit to Fly’ examination is passed on to the responsible personnel department (being “yes”, “no”, or “with limitations”), for further storage in the application management system until the application process has been fully completed. When you complete the training successfully, you will be offered a contract and we will transfer your data to your employee file.

 

b. Particularities for Pilot Training applications

Within the context of applications for pilot training positions, personal data is passed on to third parties within or outside the Lufthansa Group:

  • Deutsche Lufthansa AG
  • SWISS
  • Deutsches Zentrum für Luft- und Raum fahrt e.V.
  • European Flight Academy (EFA)
  • Skywings Flight Training bv

Lufthansa Aviation Training GmbH has engaged Deutsche Lufthansa AG to process online applications and administer the screenings/aptitude tests for the European Flight Academy’s ab initio courses.

If you submit an application – but are not accepted onto a course yet - we save a recognition record in the application management system. This recognition record contains the following information: your last name, first name, date of birth, and history of your participation in screenings/aptitude tests. In a next step - when you are invited to the selection process, your data is transferred to another SN-controlled environment for further follow-up by the Selection Team. The data security measures we implement for storing and transferring your data will always correspond to the current state of the art.

Do note that the answers and information you have given in response to the evaluations during your application process will also be stored along with your name and recognition record. Finally, following the completion of the application process, we will ask for your consent to store your results for the purpose of further statistical evaluation. To do this safely, we will of course take your name out of the dataset. Also, and in order to avoid any identification further down the process, any type of inference to the actual person with regard to the data is forbidden (and actively avoided), next to the application of other technical and organisational measures securing a maximized degree of pseudonymization/anonymisation.

DATA SHARING

1. Internal

Your personal data will be shared internally with our legal department if they deem it necessary for defence in legal proceedings where it is in our legitimate interest. In these instances, we reserve the right to process the following data: your basic identity data such as name, e-mail address, postal address and telephone number; information you have made public on social media; information you have included in your CV and cover letter as well as any other personal data you have chosen to include in the context of your application.

 

2. Third Parties

  • We share your data with external mental health professionals as responsible controllers of the psychological aptitude test.
  • We partner with Attentia Aviation Medical as responsible controller for all aeromedical examinations required.
  • Occasionally, we partner with external recruitment agencies.
  • We may be required to forward your data to supervisory authorities and other authorities to which the companies of the LH Group are subject to (in the context of helping to detect or prevent crime, including terrorism financing, money laundering and other financial crimes).
  • Within the context of the MPL Cadet Program, the executives in charge of staff selection for both Skywings and Brussels Airlines are authorized to inspect the assessment results of previous and current aptitude tests for employment as a pilot.

 

SECURITY WHEN DEALING WITH PERSON-RELATED DATA

Your data is automatically encrypted during its transfer into our application management system. The precautions taken to protect data always correspond to the current status of technology.

Your personal data may be transferred to third countries or international organizations. For your protection and the protection of your personal data, such data transfers are subject to appropriate safeguards pursuant to and in accordance with the applicable legal requirements (in particular application of EU standard contractual clauses) or an adequacy decision adopted by the EU Commission (article 45 of the GDPR).


YOUR DATA PROTECTION RIGHTS AS AN APPLICANT

If we rely on your consent to process your data (e.g. storing application details for an extended period), it can be withdrawn at any time. The various ways of how you can do this, depend on which way you provided us with your consent. We invite you to first verify the various tools made available to you (e.g. checkboxes, unsubscribe options, …) to withdraw your consent. However, do not hesitate to contact us via the form mentioned below in case of questions or issues.

When we rely on a legitimate interest to process your data, you can let us know that you wish to object. Please note that in the case of an objection to the aptitude tests or any other security-related legitimate interest pursued, the application process cannot be continued.

You have the right to request information regarding any of your stored personal data along with the right to correction or deletion of your personal data. However, since the data given is required within the framework of your application until the completion of the application process, should you demand the deletion or limitation of, or objection to the processing, you will also be automatically retracting your application.

For any questions or remarks you have about data protection, you can contact us via our webform. For any other remarks you may have about the procedures described in this policy, we invite you to contact the recruitment team.

If you are not satisfied with how we have dealt with your data protection-related question, we would appreciate you reaching out to us first. However, note that you have the right to lodge a complaint with the supervisory authority in the European member state of your habitual residence, place of work or place of alleged breach of applicable data protection regulations. You can reach the Belgian Data Protection Autority via their websiteThe link will be opened in a new browser tab or via regular mail (Rue de la presse 35, 1000 Brussels).