Information on data protection
The following information on data protection is applicable with effect from May 25, 2018 and reflects the increased transparency requirements under the EU General Data Protection Regulation.
Who is the controller?
In the following paragraphs, we, Lufthansa Industry Solutions GmbH & Co. KG (Schützenwall 1, D-22844 Norderstedt, Germany) (hereinafter also referred to as “LHIND”, “we”, “us”), are providing information on the processing of your personal data when you use our website https://www.lufthansa-industry-solutions.com (“website”).
Whom can I approach?
If you have any questions on data protection in connection with our website or the services offered on it, feel free to contact our Data Protection Officer:
Group Data Protection Officer for the Lufthansa Group
Requests for information can be addressed to:
Lufthansa Industry Solution GmbH & Co. KG
or by e-mail to:
Communications by e-mail are not encrypted.
For what purposes do we process your data (purpose of processing) and on what legal basis?
We process personal data in keeping with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (DPA).
We process personal data to comply with our contractual obligations under (b) of Article 6 (1) GDPR. In particular, this includes:
- for event registrations and event management
We also process your data to safeguard our legitimate interests under (f) of Article 6 (1) GDPR:
- Guaranteeing IT security and the IT operation of the website
- Optimization of the respective online product or service and personalization/customization of the products and services offered to the user
- Recognition of and attribution of characteristics to the user, e.g., for advertising-funded offers
- Fraud prevention, protection against service-disrupting requests (denial-of-service attacks) and use of bots
We process your data based on your consent under (a) of Article 6 (1) GDPR for specific purposes, especially:
- for contacting you
- for sending you news or information with regular offers from Lufthansa Industry Solutions
- for market research and customer surveys
- for analytical purposes in order to optimize our offering for you.
Consent can be withdrawn at any time. This also applies to the withdrawal of informed consent forms that were filed with us before the GDPR came into effect, namely before May 25, 2018. A withdrawal of consent has prospective effect only and does not affect the lawfulness of the data processing until the date of withdrawal.
What personal data are you obligated to provide?
For statutorily prescribed or contractual requirements, we have marked the input fields in the input forms on our website that are mandatory in order to enable us to enter into a contract with you or provide you the required service.
How long is your data stored?
Your personal data is deleted once it is no longer required for the purposes specified. We may possibly need to store your data until the duties and periods of preservation prescribed by the legislature or supervisory authorities arising out of the German Commercial Code (HGB = Handelsgesetzbuch), the Fiscal Code (AO = Abgabenordnung) or the German Money Laundering Act (GWG = Geldwäschegesetz) lapse or expire; these are generally 6 to 10 years. In addition, we may preserve your data until the expiry of the statutory period of limitation (generally 3 years, but could also extend to 30 years in specific instances) if required to enforce, prosecute or defend legal claims. The data is routinely deleted thereafter.
What data protection rights do you have?
LHIND considers it important to make the procedures for processing data fair and transparent. We therefore firmly believe that affected persons should be able to exercise the following rights in addition to the right of objection, provided the statutory prerequisites in each case are met:
- Right of access, Article 15 GDPR
- Right to rectification, Article 16 GDPR
- Right to erasure (“Right to be forgotten”), Article 17 GDPR
- Right to restriction of processing, Article 18 GDPR
- Right to data portability, Article 20 GDPR
- Right to object, Article 21 GDPR
To exercise these rights, you can contact us by email at firstname.lastname@example.org.
We will need the following information for identification purposes:
- Postal address
- E-mail address and optionally: customer number
If you send us a copy of your identity card, please blank out everything except the last name, first name and address.
Please note that in order to handle your request as well as for identification purposes, we will process your personal data in accordance with (c) of Article 6 (1) GDPR.
In addition, you have the right to lodge a complaint with a supervisory authority under Article 77 GDPR read with Article 19 DPA. The supervisory authority competent for Lufthansa Industry Solutions is
Independent National Center for Data Protection, Schleswig-Holstein
Postfach 71 16
Telephone: +49 4 31/988-12 00
Fax: +49 4 31/988-12 23
How can you withdraw consent?
If you have given us consent to process your personal data, please note that you can withdraw your consent at any time.
If you have given us your consent on this website and wish to withdraw your consent, please contact email@example.com.
Please note that a withdrawal of consent has prospective effect only and does not affect the lawfulness of any processing performed in the past. In some cases, we are entitled to continue to process your personal data in spite of your withdrawal on some other legal basis - such as to satisfy a contract.
Information on your right to object under Article 21 GDPR
You have the right, for reasons dictated by your own circumstances, to file an objection at any time against the processing of your personal data under (e) or (f) of Article 6 (1) GDPR.
The controller will stop further processing of your personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves to establish, exercise or defend legal claims.
If your personal data is processed for purposes of direct advertising, you have the right to object at any time to your personal data being processed for such advertising.
If you object to your data being processed for direct advertising, your personal data will no longer be processed for such purposes.
You may exercise your right to object by automated means using technical specifications in the context of the use of information society services – notwithstanding Directive 2002/58/EC.
Disclaimer and limits of these data protection instructions
These data protection instructions address only processing on this website. Other websites are not covered by these data protection instructions; these provide their own specific data protection instructions.
What data do we process when you visit our website?
When a user visits our website, our system collects data and information from the user’s computer during each visit using automated means. The following data (“technical information”) is collected:
- Information about the type and version of browser used
- The user’s operating system
- Device information (type, model, resolution)
- The IP address of the user
- Date and time of access
- Websites from which the user accesses our website
- Websites accessed by the user through our website
This data is also stored in our system logfile. The data is not stored along with the user’s other personal data.
We collect and use this technical information for purposes of (network) security (in order to fight cyber attacks, for instance) and for marketing purposes as well as to gain a better understanding of our users’ needs and to continually enhance our website and facilitate delivery of the website on the user’s system.
The legal basis for the temporary storage of data and log files is our legitimate interest under (f) of Article 6 (1) GDPR.
The following tracking tools and social media plugins are used on our website: