IV. Data Collection and Usage
While using our Services, we may collect the following types of personal information about you which are described in more detail in the below sections:
(A) Personal information you provide to us,
(B) Personal information we may automatically collect, and
(C) Personal information we may receive from third parties.
A. Personal Information You Provide to Us
In using our Services, you may provide us with information, including, without limitation:
Contact Information
Identifiers
Social security number,
Driver’s License number and scan,
Other government issued ID numbers and scans, such as passports,
Date of birth or age,
Nationality.
Photos, Audio, and Videos
This may include face imagery or other biometric information such as genetic, physiological, behavioral, and biological characteristics,
Audio calls if you contact us by phone.
Background Information
Other Persons’ Information
Emergency contact information or relatives or other person’s Personal information
Other person’s personal Information added as your “contacts”, such as first name, last name, relationships, email address, dietary requirements and allergies, nationality,
Supporting organization, role.
Financial Information
Payment information,
Financial information, such as account balances, income information, assets, credit score, credit history and transaction history, or bank information,
Payment card numbers, expiration dates, and security codes.
Credentials/Account Log-In Information
Comments and Opinions
Survey or content submissions
Reasons why you have selected or heard about our Services,
Your Interests in Virgin Galactic or research,
When you contact us directly, e.g., by email, phone, mail, text, chat, when you post on message boards, blogs or complete an online form, we may record your comments and opinions.
Marketing and Event Information
Commercial Information
Special Information
Such as gender, or criminal history and in some cases biometric information, including for example biometric information for authentication of devices or furniture and identification badges,
certain
demographic data
that qualifies as special information, such as race, ethnicity, sexual orientation, and disability, to help us understand the diversity of our workforce as allowed under local law. We also collect this information from you as part of our reporting requirements under various local laws (for example, when you apply for a job and provide your demographic information to us). This information, when collected, is generally done so on a voluntary consensual basis, and employee and employee applicants are not required to provide this information, unless it is necessary for us to collect such information to comply with our legal obligations,
Health information, including vaccination status/proof of vaccination, medical exemption/accommodation requests and related documentation, vaccination exemption requests, drug screenings, wellness, dietary requirements, and allergies. We need this information as part of your application to fly with us, to participate to our events, or to apply to our job offers or work for us,
Note in operating our Services we do not provide medical or any other health care advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health care provider with any questions you may have regarding a medical condition, diet, fitness, or wellness program. Never disregard professional medical advice or delay in seeking it because of information you accessed on or through the Services.
Job Applicant and Employee Information
Resume, occupation, work samples, benefits, competition requirements, educational history, or other information provided in applications for employment, certifications, such as information about your employing entity, business unit, manager and management reporting structure, job title, function and the nature of your duties and responsibilities,
Languages spoken, pictures, emergency contact information, employment contracts, compensation background, disciplinary or grievance information and procedures, academic record, professional qualifications, reference letters, criminal and civil background information, right to work documentation, references, spouse, partners, beneficiary and depends information, marital status, banking information, tax information, withholdings, benefits, stock and equity grants, disabilities, illnesses, hobbies, social preferences.
Communications
Preferences for communications and services, chats, posts, or interactions, and communications with us or our third-party providers, testimonials provided, and other data to communicate with you about news about our company, products, and services, newsletter, missions, job opportunities, opinions, business operations, events and presentations, investor relation communications, and other Virgin Galactic’s communications, media and press release matters, and concerning your application to fly with us.
Preferences
Information derived from other personal information about you, which could include your preferences, interests, and other information used to personalize your experience,
Preferences set for notifications, marketing communications and how our website is displayed.
Galactic Unite Programme
Information you provide when you fill out our New Mexico, Southern California & UK Community Grants Criteria & Application Form or otherwise apply to become part of the Virgin Galactic Unite community including:
Your contact information, (e.g. your full name, email address, address and phone number);
Information you may provide in response to any survey we request that you complete (e.g. organization, role, project location, project title, sector, project goal & objectives and project timeline);
Information you provide in correspondence between us;
Information you provide as part of your enquiry (e.g. project goal & objectives and project timeline; details of other project key stakeholders and budgets
Information you provide about any outside organization (e.g. other not-for-profit groups) that may play a role in funding and executing projects
Information when you communicate with us whether in person, through our Site, via email, over the phone, through social media, Google Hangout/ SpaceChats, at one of our events/ tours or via any other medium including your profile, background, activities, and network,
photographs and videos of you at our events; the name of the event you attended and where you were sat.
Additional information as otherwise described to you at the point of collection or pursuant to your consent.
Any other information you choose to directly provide to us in connection with your use of the Services.
There are a number of ways in which we collect personal information from you directly. You may provide this information to us by completing online forms, submitting job applications and online forms, attending events, completing forms, using our Services as part of your employment to share information and documents, engaging in communications with us, our use of audio, video, and other tools to record, videotape, or collect biometric information to assist us in monitoring our physical locations, use of our information technology and other systems, for proof of transactions, training purpose, protection and security, and for compliance with legal obligations, providing our Services and products.
B. Personal Information We May Automatically Collect About You
Our Services may automatically collect certain personal information. We use this information to help us design our Services to better suit our users’ needs and for other business purposes as described in this Privacy Policy. This personal information may include:
Our automated methods of collecting information are sometimes related to or supported by manual methods. For example, we may use advanced technologies, including artificial intelligence (“AI”), which help enable our information technology systems or those through third parties to perceive, learn, reason, and assist in decision-making. To create and maintain these types of processing, we manually review some of the predictions and outcomes produced against the underlying data from which outcomes were made.
C. Technologies We Use (e.g., Cookies) to Collect Personal Information
We collect personal information directly and through third parties. We collect this information by using certain technologies, such as cookies, web beacons, and other technologies. Third-party service providers, advertisers, and/or partners may also view, edit, or set their own cookies or place web beacons. The use of these technologies by such third parties is subject to their own privacy policies and is not covered by this Privacy Policy, except as required by law.To learn more, please see our
Cookie Notice, which addresses the use of cookies, how to opt out and information about additional technologies we may use in providing our Services, such as flash cookies, web beacons, analytics tools, and mobile device technologies.
D. Personal Information We May Receive from Third Parties
We may collect additional personal information about you from our affiliates, partners or vendors, data brokers, third-party websites, social media platforms, such as, but not limited, to Facebook, Twitter, Instagram, LinkedIn, TikTok, and YouTube (“Social Media Platforms”), and/or sources providing publicly-available information (e.g., from the U.S. Postal Service) to help us provide the Services to you, confirm, enhance, or supplement our existing information about you (e.g., with your consent, background checks for credit and criminal history), help prevent fraud, maintain security, and for marketing, advertising and other business purposes.
XVIII. EU, EEA, and UK Privacy Disclosures
This section applies only to individuals coming to our Services from within the European Union (“EU”), European Economic Area (“EEA”), and the United Kingdom (“UK”) and only if we collect through the Services any personal data as defined in any applicable laws for those countries (“European Laws”) which may include some or all of your personal information as defined in this Privacy Policy.
a. Data Controller
Unless otherwise stated at the time of collection, Virgin Galactic LLC is the data controller for the personal information we process for persons in the EU, EAA, and UK as it relates to our Services.
b. Representatives
The data controller’s representatives in the UK and in the EU are:
In the UK:
Osano UK Compliance LTD
ATTN: IIXR
42-46 Fountain Street
Belfast
Antrim
BT1 – 5EF
In the EU:
Osano International Compliance Services Limited
ATTN: IIXR
3 Dublin Landings
North Wall Quay
Dublin 1
D01C4E0
c. Your Rights
To the extent the European Laws apply to you and our processing activities, and we hold such personal information in our capacity as a data controller as defined under those laws, you may request that we honor any rights provided to you under the European Laws, which may include the right to:
Access: Request access to your personal information and obtain a copy and certain other information about it.
Correction: Request that any incomplete or inaccurate information we hold about you is corrected.
Erasure: Ask us to delete or remove personal information in certain circumstances. There are also certain exceptions where we may refuse a request for erasure (e.g., where the personal information is required for compliance with law or in connection with claims).
Restriction: Ask us to suspend the processing of certain of your personal information about you (e.g., if you want us to establish its accuracy or the reason for processing it).
Transfer: Request the transfer of certain of your personal information to another party.
Objection: In addition, where we are processing your personal information based on our legitimate interests (or those of a third party) you may challenge this, e.g., revoking your consent for processing personal information. We will consider your request in accordance with applicable data protection and privacy laws. However, we may be entitled to continue processing your personal information based on our legitimate interests or where this is relevant to legal claims we may make or are made against us. You also have the right to object where we are processing your personal information for direct marketing purposes on the basis of consent.
Automated decisions: Contest any automated decision made about you where this has a legal or similar significant effect and ask for it to be reconsidered.
Communications: When we send marketing communications, you can opt-out of them. Please note that even if you unsubscribe to direct marketing messages, we still may need to send you communications relating to your use of the Site, where such communications are service or update messages, or regarding your requested transactions.
How to exercise any rights provided under European Laws, please
Contact Us.
You also have a right to lodge a complaint with a supervisory authority, in particular in the Member State in the EU where you are habitually resident where we are based or where an alleged infringement of European Law has taken place. You may view a list of supervisory authorities here:
https://edpb.europa.eu/about-edpb/about-edpb/members_enIn the UK you can make a complaint to the Information Commissioner's Office (Tel: 0303 123 1113 or at
www.ico.org.uk).
If you have a complaint, we would appreciate the chance to deal with your concerns first,
Contact Us.
d. Lawful Basis for Processing Your Personal Information
In addition to our disclosures described throughout our Privacy Policy, we believe the handling of your personal information, which may include your personal data as defined under European Laws, furthers our legitimate interests in commercial activities that are not overridden by the interest or fundamental rights and freedoms of the individuals at issue. Depending on what personal information we collect from you and how we collect it, we rely on various grounds for processing your personal information, including the following reasons:
To administer our contractual relationship, including setting up any of the Services you may request.
Because you have provided your consent for us to do so.
Because it is in our legitimate interest to operate our commercial sub-orbital spaceflight program and furthering the goal of making commercial sub-orbital spaceflight available to the public, provide you with the Services and other useful content, process employee and potential employee applicant data, provide scholarships and education concerning spaceflight, prevent against fraud, address possible criminal threats to public security, processing client, applicant, and employee data, provide technology security, and other necessary operational matters, research and analyze the engagement that our Future Astronauts want in the program and how the program experience can be improved for our Future Astronauts and potential Future Astronauts, administer and manage our operations in an efficient and effective way, including by engaging with third party technology and other service providers; and any other legitimate interests or purposes disclosed to you at the time we collect your information.
To fulfill any legal obligations including but not limited to those arising out of tort, contract, or as required by law, regulation, or rule, as ordered by a court, as provided by case law, to pursue and defend claims, to respond to regulatory inquiries or investigations, as part of audits or other professional investigations, or any other legal basis or obligation.
If the processing of your personal information is based on your consent, the European Laws also allow users the right to access, revoke or modify your consent at any time. To review or modify your consent, please
Contact Us.
e. Consent to Transfer
We primarily operate in the United States, along with a UK office, and may use service providers based in the United States or in the UK to operate our business and our relationship with you. Please be aware that information, including your personal information, that we collect will be transferred to, stored, and processed in the United States, a jurisdiction in which the privacy laws may not be as comprehensive as those in the country where you reside. We only collect and transfer to the United States. information, including personal information: (i) with your consent; (ii) to perform a contract with you; and/or (iii) to fulfill a compelling legitimate interest of ours in a manner that does not outweigh your rights and freedoms. We endeavor to apply suitable safeguards to protect the privacy and security of your personal information and to use it only consistent with your relationship with us and the practices described in this Privacy Policy. We also enter into data processing agreements and model clauses with vendors whenever feasible and appropriate.
f. Children's Information
In general, the Services are not intended for use by children under the age of sixteen (16) where applicable under relevant laws, and the terms for certain Services may specify further age-related restrictions. In cases where certain Services are intended for use by children under the age of sixteen (16) (or where applicable under relevant laws).
If you are in the EU, EEA, or UK and are over sixteen (16) years of age, you must have your parent or legal guardian’s permission to use the Services. Please have them read this agreement with you. If you are a parent or legal guardian of a user located in the EU, EEA, or UK and under the age of sixteen (16), by authorizing your child to use the Services, you are subject to the terms of this agreement and responsible for your child’s activity on the Services. You can contact us at
privacy@virgingalactic.com to help you manage your child’s experience.
For children located in jurisdictions within the EU, we comply with the age limits applicable in each EU Member State. In these instances, the references above to the age of sixteen (16) will be deemed to be references to the age limits applicable in each Member State. Where this Terms & Conditions or our Privacy Policy refers to consent, this will require the consent of a parent or legal guardian in relation to any person under the age limits applicable in each Member State.
We may link to Third-Party Websites that may collect data from children. These Third-Party Websites have their own privacy policies and Terms & Conditions. See
Third Party Website Links for more information.
For certain activities in which children are allowed to, any request for personal information (such as registration data) is intended for and directed to the parent or legal guardian.
CHILDREN: If you are under sixteen (16) years of age, please do not use or access our Services at any time or in any manner. Upon learning of the existence of information concerning persons under sixteen (16) years of age (or a higher age threshold where applicable that has been collected by us without verified parental consent, we will take appropriate steps to delete it.
PARENTS/GUARDIANS: In the event that we do begin collecting any personal information or data from children under the age of sixteen (16) (or sixteen (16) where applicable under law), we will notify parent(s)/guardian(s) first, and will seek parental or guardian consent to collect, use and/or disclose certain personal information from children under the age of sixteen (16) where applicable under law. A parent/guardian may review and have deleted their child’s personal information and may refuse to permit further collection or use of their child’s information by contacting us as noted at the end of this Privacy Policy. Parents/guardians may consent to our collection and use of their child’s personal information without consenting to the disclosure of that information to others.
We encourage parents and guardians to monitor their children’s online behavior, put parental control tools in place, and teach children not to provide their personal information through the Services without parental consent.
Contact Us if you believe that we have mistakenly or unintentionally collected information from a child under the age of sixteen (16).