Data protection

Data protection Ombudsman

Information on data protection

The following information on data protection is applicable with effect from May 25, 2018 and reflects the increased transparency requirements under the EU General Data Protection Regulation.

Who is the controller?

In the following paragraphs, we, Lufthansa Industry Solutions GmbH & Co. KG (Schützenwall 1, D-22844 Norderstedt, Germany) (hereinafter also referred to as “LHIND”, “we”, “us”), are providing information on the processing of your personal data when you use our website (“website”).

Whom can I approach?

If you have any questions on data protection in connection with our website or the services offered on it, feel free to contact our Data Protection Officer:

Group Data Protection Officer for the Lufthansa Group

Requests for information can be addressed to:
Lufthansa Industry Solution GmbH & Co. KG
Information Office
Schützenwall 1
D-22844 Norderstedt

or by e-mail to:
Communications by e-mail are not encrypted.

For what purposes do we process your data (purpose of processing) and on what legal basis?

We process personal data in keeping with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (DPA).

We process personal data to comply with our contractual obligations under (b) of Article 6 (1) GDPR. In particular, this includes:

  • for event registrations and event management

We also process your data to safeguard our legitimate interests under (f) of Article 6 (1) GDPR:

  • Guaranteeing IT security and the IT operation of the website
  • Optimization of the respective online product or service and personalization/customization of the products and services offered to the user
  • Recognition of and attribution of characteristics to the user, e.g., for advertising-funded offers
  • Fraud prevention, protection against service-disrupting requests (denial-of-service attacks) and use of bots

We process your data based on your consent under (a) of Article 6 (1) GDPR for specific purposes, especially:

  • for contacting you
  • for sending you news or information with regular offers from Lufthansa Industry Solutions
  • for market research and customer surveys
  • for analytical purposes in order to optimize our offering for you.

Consent can be withdrawn at any time. This also applies to the withdrawal of informed consent forms that were filed with us before the GDPR came into effect, namely before May 25, 2018. A withdrawal of consent has prospective effect only and does not affect the lawfulness of the data processing until the date of withdrawal.

What personal data are you obligated to provide?

For statutorily prescribed or contractual requirements, we have marked the input fields in the input forms on our website that are mandatory in order to enable us to enter into a contract with you or provide you the required service.

How long is your data stored?

Your personal data is deleted once it is no longer required for the purposes specified. We may possibly need to store your data until the duties and periods of preservation prescribed by the legislature or supervisory authorities arising out of the German Commercial Code (HGB = Handelsgesetzbuch), the Fiscal Code (AO = Abgabenordnung) or the German Money Laundering Act (GWG = Geldwäschegesetz) lapse or expire; these are generally 6 to 10 years. In addition, we may preserve your data until the expiry of the statutory period of limitation (generally 3 years, but could also extend to 30 years in specific instances) if required to enforce, prosecute or defend legal claims. The data is routinely deleted thereafter.

What data protection rights do you have?

LHIND considers it important to make the procedures for processing data fair and transparent. We therefore firmly believe that affected persons should be able to exercise the following rights in addition to the right of objection, provided the statutory prerequisites in each case are met:

  • Right of access, Article 15 GDPR
  • Right to rectification, Article 16 GDPR
  • Right to erasure (“Right to be forgotten”), Article 17 GDPR
  • Right to restriction of processing, Article 18 GDPR
  • Right to data portability, Article 20 GDPR
  • Right to object, Article 21 GDPR

To exercise these rights, you can contact us by email at

We will need the following information for identification purposes:

  • Name
  • Postal address
  • E-mail address and optionally: customer number

If you send us a copy of your identity card, please blank out everything except the last name, first name and address.

Please note that in order to handle your request as well as for identification purposes, we will process your personal data in accordance with (c) of Article 6 (1) GDPR.

In addition, you have the right to lodge a complaint with a supervisory authority under Article 77 GDPR read with Article 19 DPA. The supervisory authority competent for Lufthansa Industry Solutions is

Independent National Center for Data Protection, Schleswig-Holstein
Postfach 71 16
24171 Kiel

Holstenstrasse 98
24103 Kiel

Telephone: +49 4 31/988-12 00
Fax: +49 4 31/988-12 23

How can you withdraw consent?

If you have given us consent to process your personal data, please note that you can withdraw your consent at any time.

If you have given us your consent on this website and wish to withdraw your consent, please contact

Please note that a withdrawal of consent has prospective effect only and does not affect the lawfulness of any processing performed in the past. In some cases, we are entitled to continue to process your personal data in spite of your withdrawal on some other legal basis - such as to satisfy a contract.

Information on your right to object under Article 21 GDPR

You have the right, for reasons dictated by your own circumstances, to file an objection at any time against the processing of your personal data under (e) or (f) of Article 6 (1) GDPR.

The controller will stop further processing of your personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves to establish, exercise or defend legal claims.

If your personal data is processed for purposes of direct advertising, you have the right to object at any time to your personal data being processed for such advertising.

If you object to your data being processed for direct advertising, your personal data will no longer be processed for such purposes.

You may exercise your right to object by automated means using technical specifications in the context of the use of information society services – notwithstanding Directive 2002/58/EC.

Disclaimer and limits of these data protection instructions

These data protection instructions address only processing on this website. Other websites are not covered by these data protection instructions; these provide their own specific data protection instructions.

What data do we process when you visit our website?

When a user visits our website, our system collects data and information from the user’s computer during each visit using automated means. The following data (“technical information”) is collected:

  1. Information about the type and version of browser used
  2. The user’s operating system
  3. Device information (type, model, resolution)
  4. The IP address of the user
  5. Date and time of access
  6. Websites from which the user accesses our website
  7. Websites accessed by the user through our website

This data is also stored in our system logfile. The data is not stored along with the user’s other personal data.

We collect and use this technical information for purposes of (network) security (in order to fight cyber attacks, for instance) and for marketing purposes as well as to gain a better understanding of our users’ needs and to continually enhance our website and facilitate delivery of the website on the user’s system.

The legal basis for the temporary storage of data and log files is our legitimate interest under (f) of Article 6 (1) GDPR.

Use of cookies

Our website uses cookies. Cookies are text files that are stored within the Internet browser or by the Internet browser on the user's computer. When a user visits a website, a cookie may be stored within the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again. The user-related information that is stored in the cookies can be reused when called up again. This means that the settings made in previous website visits are also available for a revisit.

Cookies are stored on the user's computer and transmitted to our website. As a user, therefore, you have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing settings in your Internet browser. Cookies saved previously can be deleted at any time. This can also happen automatically. If cookies are disabled for our website, it is possible that not all features on the website will be fully usable.

You can find more information about our cookies, the purposes for which they are used and their legal basis/bases in our cookie policy.

Tracking tools

LHIND analyzes visits to the website to understand the needs of its customers and continually enhance the online platform on the basis of such analysis. For this purpose, we routinely store data such as domain name, pages viewed, number of visits, and time spent on a page. The data analysis respects the anonymity of all our customers.

Only anonymous, aggregated data is evaluated for statistical purposes as part of the web analytics.

We use the following tracking and re-marketing tools on our website:

  • Piwik
  • Google Analytics
  • Google AdWords
  • DoubleClick
  • Hotjar
  • Facebook Page Insights

The legal basis for the use of the above tools are our legitimate interests under (f) of Article 6 (1) GDPR for the purposes of increasing website effectiveness and (direct) marketing.

You can find more information on the individual tools in the “Tracking Tool Policy”.

Social Media Plug-ins

We incorporate social network functionalities on our website and in our mobile applications at various places. These include:

  • links to Lufthansa Industry Solutions offerings on social networks
  • features for sharing and recommending Lufthansa Industry Solutions content (such as “Share” and “Like” buttons)

All online offerings from Lufthansa Industry Solutions can in principle be accessed and used even without social networks.

We use the following social media plug-ins on our website:

  • Facebook
  • LinkedIn
  • Twitter
  • Xing
  • YouTube

Links to Lufthansa Industry Solutions offerings on social networks

The links that LHIND provides to our offerings on social networks, such as our Facebook page, are simple links to the pages of other providers. We do not transmit any personal information to these providers over such links. However, you should be aware that in principle, online offerings by third parties may be able to detect the origin of a visit at a minimum. We have no control over data processing by third parties; consequently, the LHIND data privacy statement does not extend to third party websites.

Features for sharing and recommending Lufthansa Industry Solutions content (such as “Share” and “Like” buttons)

At various places in our online offering, you can share and recommend your content on social networks. This offers a convenient alternative to copying and sending links.

When you use the recommendation features on our web pages, we forward the URL to the social network specified by you. Some networks then immediately add an excerpt of our content to the link. With most social networks, you are asked to provide confirmation before data is saved or forwarded.

Please note that we at LHIND have no knowledge of or control over how social networks act on the information provided by you and whether this information is shared with other websites. We recommend you read the data protection instructions carefully in each case.

In principle, we provide plug-ins on our website in pursuance of our legitimate interests for marketing purposes under (f) of Article 6 (1) GDPR.

You can find more information about the individual plug-ins in the “Tracking tool policy”.

What happens when you consent to receiving news and information from us?

You can consent to receiving current information, interesting news or marketing materials from LHIND by providing your contact details on the website.

When you give consent, the following data from the input form is sent to us and processed:

  • Email address
  • Salutation
  • Title
  • First name
  • Last name
  • Company Name
  • Date and time of registration

Your consent for processing data is obtained during the registration process, at which time this data privacy statement is brought to the user’s attention.

No data is shared with third parties in connection with the processing of the input form data. The data is used exclusively to send news or informational material.

We process the data you provide above in connection with news, information or marketing materials in order to communicate with you and keep you informed about interesting topics from the world of Lufthansa. We also process and use the e-mail address you entered to deliver personalized offerings in connection with the news, information or marketing materials.

If a link in the news, information or marketing materials sent to you brings you to our web pages, you also give us permission to process and use your IP address as well as geo-data, web beacons or similar technologies to check if the offers made meet your requirements.

The legal basis for processing is your consent under (a) of Article 6 (1) GDPR.



The Ombudsman is a freelance attorney who is not an employee of the Lufthansa Group. As a neutral, independent contact, the Ombudsman takes complaints in writing or by telephone and provides them to the Corporate Compliance Office in an anonymized form, if this is what the complainant wishes. The identity of the complainant is protected by attorney-client privilege. Moreover, the Lufthansa Group has contractually agreed not to request access to any legally privileged information and to be informed of the complainants´ name only following his/her express consent.

Contact details: