Information on our privacy statement

The following information on data protection is valid from May 25, 2018 and reflects the increased transparency requirements of the EU General Data Protection Regulation (GDPR).

Controller

The Deutsche Lufthansa AG (Venloer Straße 151-153, 50933 Cologne, Germany) (hereinafter also “Lufthansa”, “we”, “us”) would like to inform you how your personal data is processed when you vistit our website according to our services (“website”).

When we are talking of Lufthansa Group Airlines hereinafter, the airlines Lufthansa AG, SWISS International Airlines AG, Austrian Airlines AG and Eurowings GmbH will be meant.The Lufthansa Group comprises the Lufthansa Group Airlines and the other companies in the Lufthansa Group.

Contact

If you have any further queries regarding data protection in connection with our website or the services offered, please contact our data protection officer:

Group Data Protection Officer for the Lufthansa Group

Dr. Hans-Joachim Arnold
Deutsche Lufthansa AG
Email: datenschutz@dlh.de

Requests regarding further information please send to:

Deutsche Lufthansa AG
Datenauskunft
FRA CJ/C
60546 Frankfurt

Email: datenauskunft@dlh.de

If you contact us by email, the communication is unencrypted.

Purpose and legal basis of processing personal data

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).We use your personal data for the purpose of encrypted communication by email in accordance with article 6 (1)(b) of GDPR. This includes in particular:

• email address
• certificate file
• name and company (optional)

We process your personal data based on your consent in accordance with article 6 (1)(a) GDPR for certain purposes, in particular:

• encrypted communication via email

A given consent can be revoked at any time. This also applies to the revocation of declarations of consent that were issued to us before the application of the GDPR, i.e. before May 25th, 2018. The revocation of consent only takes effect in the future and does not affect the legality of the data processed until the revocation.

Scope of data processing

Upon visiting our website, the system automatically records data and information about the user’s computer each time the website is accessed. The following data (“technical information”) is collected:

1. The user's IP address
   
2. Date and time of access
   

To ensure the functionality of the website the data is saved in the system's log files. In addition, we use the data to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. The legal basis for the temporary storage of data and log files is article 6 (1)(f) of GDPR.

Additional reasons for data processing

The data will be processed to protect our legitimate interests (article 6 (1)(f) of GDPR). Specifically, this means ensuring security in email communication. For more information on retention periods please see "Duration of data processing".

Duration of data processing

Your personal data will be deleted as soon as it is no longer required for the purposes mentioned.

Sharing personal data

We will not share any of your personal data with third parties. For the purpose of secure email communication, only the certificate you provided will be made available to all Lufthansa Group employees within the internal address book.

Rights of the data subject

Deutsche Lufthansa AG is committed to ensuring fair and transparent processing. That is why it is important to us that data subjects can not only exercise their right to object but also the following rights where the respective legal requirements are satisfied:

• Right of access, article 15 GDPR
• Right to rectification, article 16 GDPR
• Right to erasure (“right to be forgotten”), article 17 GDPR
• Right to restriction of processing, article 18 GDPR
• Right to data portability, article 20 GDPR
• Right to object, article 20 GDPR

To exercise your rights, please email datenauskunft@dlh.com. In order to process your request and for identification purposes, please note that we will process your personal data in accordance with article 6 (1)(c) of GDPR. You also have the right to lodge a complaint with a supervisory authority. The relevant supervisory authority for Deutsche Lufthansa AG is:

Postfach 3163
65021 Wiesbaden
Telefon: +49 611 1408 - 0
Telefax: +49 611 1408 - 900 / 901
E-Mail: poststelle@datenschutz.hessen.de

If you send us a copy of your identity card or passport, please black out all the information except for the surname, first name, address.

In order to be able to process your request and for identification purposes, we would like to point out that we will process your personal data in accordance with article 6 (1)(c) of GDPR.

Withdraw of consent

If you have given us your consent to process your personal data, we would like to point out that you can withdraw this consent at any time. To exercise your right, you can send an email to datenauskunft@dlh.de. For identification, please provide the following information:

• First and Last name
• Postal address
• Email address
• Subject: Encrypted email communication

Please note that your revoked consent only will have an effect for the future and has no impact on the legality of processing in the past.In some cases, despite your revocation, we are entitled to process your personal data on another legal basis - such as to fulfill a contract.

Information about your right to object according to article 21 GDPR

You have the right, for reasons that arise from your particular situation, to object at any time against the processing of your personal data, which is based on article 6 (1)(e or f) of GDPR. This also applies to profiling based on these provisions.

The controller will no longer process your personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is based on the establishment, exercise or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected to such direct advertising.

In connection with the use of information society services and regardless of Directive 2002/58 / EC, you have the option of exercising your right to object using automated procedures that use technical specifications.

Disclaimer and limitations of these data protection notices

These data protection notices only apply to processing for this particular website. Other websites are not covered by these data protection notices and provide their own specific data protection notices.