Condiciones de candidatos

1. Purpose and acceptance

In this section, you can find all the information about the processing of personal data carried out by Canary Fly S.L. during the selection process for which you have registered or in future selection processes that are activated while you are part of the job pool.

Entity: CANARY FLY, S.L.

CIF (Fiscal ID): B76013481

Registered office: Aeropuerto de Gran Canaria, Hangar L, Apartado No. 84, 35230, Telde.

2. Personal data that we process

In the different applications that may fit your profile, we will process the following data:

  • Identification and contact details: first and last name, DNI/NIE/passport, telephone number, email address and, where applicable, postal address.
  • Academic and professional: degrees, additional training, work experience, languages, and curriculum vitae.
  • Cover letter and any information that the candidate voluntarily provides.
  • Availability in terms of time, location, and mobility between operational bases.

Certain positions will require the submission of specific documentation. For pilot, flight attendant, maintenance technician, and operational staff positions, applicable aviation regulations (EASA/AESA) require the processing of additional data related to licenses, ratings, certificates, and airport security clearances. This data is collected as a direct result of the air operator's legal obligations under current aviation legislation, and not as a discretionary decision by Canaryfly. If you are ultimately selected for this kind of position, you will be required to provide documentation proving the relevant licenses.

PurposeLegal basisWhat happens if you don't provide the data?
Manage your application in the active selection processArt. 6.1.a GDPR — Free, specific and informed consentWithout this data, we cannot include you in the process. Participation is voluntary.
Keep your profile in the job bank for future openingsArt. 6.1.a GDPR — Free, specific and informed consentYou can participate in the active process without checking this option. You can withdraw your consent at any time.
Verification of licenses, ratings and ICAO level required by aeronautical regulationsArt. 6.1.c GDPR — Legal obligation (EASA/AESA)

Mandatory for regulated positions. Without this, the hiring is not possible, due to regulatory requirements.

The processing will be carried out if you are a finalist in the process.

Verification of the aeronautical medical certificate (fitness)Art. 6.1.c GDPR — Legal obligation of the air operatorMandatory for pilots and flight attendants. The air operator has a legal obligation to verify it.
Airport security accreditation for access to restricted areasArt. 6.1.c GDPR — Legal obligationMandatory for positions with access to the airside.
Formalization of hiring and management of the employment relationshipArt. 6.1.b and 6.1.c GDPR — Execution of the contract and legal labour obligationsNecessary if the person is a finalist.

4. Retention periods

ScenarioActive retention periodSubsequent processing
Candidate not selected — no consent for poolUntil the end of the selection processBlocking during the claims limitation period. After that period: secure deletion.
Candidate not selected — WITH consent for the poolUp to 12 months from the date the profile was received or last updatedNotice prior to expiration. After 12 months without renewal: secure deletion.
Candidate selected and hiredThe process data is transferred to the employment fileThey are kept in accordance with current labour, tax, and Social Security regulations.
Aeronautical license and certificate dataFor the duration of the process and, if hired, during the employment relationshipIn accordance with the air operator's documentation obligations.

5. Recipients of the personal data we process

During the selection process, your data will not be disclosed to third parties unless it becomes necessary to conduct a suitability assessment in later stages. This may involve a psychometric or medical test. In such cases, you will be referred to our partner medical centre, where you will receive detailed information about the data processing that will take place.

If you are hired, we will need to submit your data to certain organizations to validate the suitability of your profile, as well as to authorities to process access credentials for restricted areas if your job requires it.

6. Rights relating to the personal data we process

RightWhat it involves
Access (Art. 15 GDPR)To know what personal data we hold about the data subject, the purpose for which we hold it, how long we have kept it, and to whom it has been disclosed.
Rectification (Art. 16 GDPR)Correct inaccurate data or complete any incomplete data.
Erasure (Art. 17 GDPR)Request the deletion of personal data when it is no longer necessary or withdraw consent.
Objection (Art. 21 GDPR)You may also object to the processing of your data under certain circumstances.
Restriction (Art. 18 GDPR)To request that we suspend processing while we resolve an issue.
Portability (Art. 20 GDPR)To receive your data in a structured format to transfer it to another data controller.

You may withdraw your prior consent at any time you deem appropriate, without this affecting any processing that has already taken place.

To exercise the rights outlined in this section, you will need to contact the Data Protection Officer via email at lopd@canaryfly.es.

If the requester's identity cannot be verified, and there are reasonable doubts about the request, additional information may be asked for.

7. Modification and updating of the policy

This content may be modified at any time either to update it in relation to new processing purposes, or due to changes in legislation, guidelines or case law (JURISPRUENCIA) of the EU Data Protection Authorities, or for reasons of improving transparency and quality of service.

Last modified: 14/05/26