In this section, you can find all the information about the processing of personal data carried out by Canary Fly S.L. during the selection process for which you have registered or in future selection processes that are activated while you are part of the job pool.
Entity: CANARY FLY, S.L.
CIF (Fiscal ID): B76013481
Registered office: Aeropuerto de Gran Canaria, Hangar L, Apartado No. 84, 35230, Telde.
In the different applications that may fit your profile, we will process the following data:
Certain positions will require the submission of specific documentation. For pilot, flight attendant, maintenance technician, and operational staff positions, applicable aviation regulations (EASA/AESA) require the processing of additional data related to licenses, ratings, certificates, and airport security clearances. This data is collected as a direct result of the air operator's legal obligations under current aviation legislation, and not as a discretionary decision by Canaryfly. If you are ultimately selected for this kind of position, you will be required to provide documentation proving the relevant licenses.
| Purpose | Legal basis | What happens if you don't provide the data? |
|---|---|---|
| Manage your application in the active selection process | Art. 6.1.a GDPR — Free, specific and informed consent | Without this data, we cannot include you in the process. Participation is voluntary. |
| Keep your profile in the job bank for future openings | Art. 6.1.a GDPR — Free, specific and informed consent | You can participate in the active process without checking this option. You can withdraw your consent at any time. |
| Verification of licenses, ratings and ICAO level required by aeronautical regulations | Art. 6.1.c GDPR — Legal obligation (EASA/AESA) | Mandatory for regulated positions. Without this, the hiring is not possible, due to regulatory requirements. The processing will be carried out if you are a finalist in the process. |
| Verification of the aeronautical medical certificate (fitness) | Art. 6.1.c GDPR — Legal obligation of the air operator | Mandatory for pilots and flight attendants. The air operator has a legal obligation to verify it. |
| Airport security accreditation for access to restricted areas | Art. 6.1.c GDPR — Legal obligation | Mandatory for positions with access to the airside. |
| Formalization of hiring and management of the employment relationship | Art. 6.1.b and 6.1.c GDPR — Execution of the contract and legal labour obligations | Necessary if the person is a finalist. |
| Scenario | Active retention period | Subsequent processing |
|---|---|---|
| Candidate not selected — no consent for pool | Until the end of the selection process | Blocking during the claims limitation period. After that period: secure deletion. |
| Candidate not selected — WITH consent for the pool | Up to 12 months from the date the profile was received or last updated | Notice prior to expiration. After 12 months without renewal: secure deletion. |
| Candidate selected and hired | The process data is transferred to the employment file | They are kept in accordance with current labour, tax, and Social Security regulations. |
| Aeronautical license and certificate data | For the duration of the process and, if hired, during the employment relationship | In accordance with the air operator's documentation obligations. |
During the selection process, your data will not be disclosed to third parties unless it becomes necessary to conduct a suitability assessment in later stages. This may involve a psychometric or medical test. In such cases, you will be referred to our partner medical centre, where you will receive detailed information about the data processing that will take place.
If you are hired, we will need to submit your data to certain organizations to validate the suitability of your profile, as well as to authorities to process access credentials for restricted areas if your job requires it.
| Right | What it involves |
|---|---|
| Access (Art. 15 GDPR) | To know what personal data we hold about the data subject, the purpose for which we hold it, how long we have kept it, and to whom it has been disclosed. |
| Rectification (Art. 16 GDPR) | Correct inaccurate data or complete any incomplete data. |
| Erasure (Art. 17 GDPR) | Request the deletion of personal data when it is no longer necessary or withdraw consent. |
| Objection (Art. 21 GDPR) | You may also object to the processing of your data under certain circumstances. |
| Restriction (Art. 18 GDPR) | To request that we suspend processing while we resolve an issue. |
| Portability (Art. 20 GDPR) | To receive your data in a structured format to transfer it to another data controller. |
You may withdraw your prior consent at any time you deem appropriate, without this affecting any processing that has already taken place.
To exercise the rights outlined in this section, you will need to contact the Data Protection Officer via email at lopd@canaryfly.es.
If the requester's identity cannot be verified, and there are reasonable doubts about the request, additional information may be asked for.
This content may be modified at any time either to update it in relation to new processing purposes, or due to changes in legislation, guidelines or case law (JURISPRUENCIA) of the EU Data Protection Authorities, or for reasons of improving transparency and quality of service.
Last modified: 14/05/26