Data protection

This is the data protection information for the website of Lufthansa Industry Solutions, which is operated by Lufthansa Industry Solutions GmbH & Co. KG (Schützenwall 1, 22844 Norderstedt, Germany).

Information on data protection

The following information on data protection is applicable with effect from May 25, 2018 and reflects the increased transparency requirements under the EU General Data Protection Regulation.

Who is the controller?

In the following paragraphs, we, Lufthansa Industry Solutions GmbH & Co. KG (hereinafter also referred to as “LHIND”, “we”, “us”), are providing information on the processing of your personal data when you use our website https://www.lufthansa-industry-solutions.com (“website”).

Whom can I approach?

If you have any questions on data protection in connection with our website or the services offered on it, feel free to contact us:

Data Protection Officer

Our Group Data Protection Officer for the Lufthansa Group can be reached as follows:
E-Mail: datenschutz@dlh.de

Data Protection Controller

Requests for information can be addressed to:
Lufthansa Industry Solution GmbH & Co. KG
Information Office
Schützenwall 1
D-22844 Norderstedt
Germany

or by e-mail to:
dataaccess@lhind.dlh.de

Communications by e-mail are not encrypted.

For what purposes do we process your data (purpose of processing) and on what legal basis?

We process personal data in keeping with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (DPA).

We process personal data to comply with our contractual obligations under (b) of Article 6 (1) GDPR. In particular, this includes:

  • event registrations and event management

We also process your data to safeguard our legitimate interests under (f) of Article 6 (1) GDPR:

  • Guaranteeing IT security and the IT operation of the website
  • Optimization of the respective online product or service
  • Fraud prevention, protection against service-disrupting requests (denial-of-service attacks) and use of bots

We process your data based on your consent under (a) of Article 6 (1) GDPR for specific purposes, especially:

  • for contacting you
  • for sending you news or information with regular offers from Lufthansa Industry Solutions
  • for market research and customer surveys
  • for personalization/customization of the products and services offered to the user
  • for analytical purposes in order to optimize our offering for you.

Consent can be withdrawn at any time. This also applies to the withdrawal of informed consent forms that were filed with us before the GDPR came into effect, namely before May 25, 2018. A withdrawal of consent has prospective effect only and does not affect the lawfulness of the data processing until the date of withdrawal.

What personal data are you obligated to provide?

For statutorily prescribed or contractual requirements, we have marked the input fields in the input forms on our website that are mandatory in order to enable us to enter into a contract with you or provide you the required service. If the required data is not provided, the contract cannot be concluded.

How long is your data stored?

Your personal data is deleted once it is no longer required for the purposes specified. We may possibly need to store your data until the duties and periods of preservation prescribed by the legislature or supervisory authorities arising out of the German Commercial Code (HGB = Handelsgesetzbuch), the Fiscal Code (AO = Abgabenordnung) or the German Money Laundering Act (GWG = Geldwäschegesetz) lapse or expire; these are generally 6 to 10 years. In addition, we may preserve your data until the expiry of the statutory period of limitation (generally 3 years, but could also extend to 30 years in specific instances) if required to enforce, prosecute or defend legal claims. The data is routinely deleted thereafter.

Length of retention of

  • Contact data from contact requests or arranged appointments – 12 months
  • Contact data from events (free of charge and in return for payment), training requests and competitions – 36 months
  • Contact data provided as part of advertising consent – until consent is withdrawn or within two years if no activity has taken place (email, appointments, telephone calls, tasks, website activity). Activity data (email, appointments, tasks, website activity) is also erased when contact data is erased.

Plus

  • In the event of billing and/or prize allocation – 10 years

How can you withdraw consent?

If you have given us consent to process your personal data, please note that you can withdraw your consent at any time.

You may amend or withdraw consent for cookies that you have given in our consent management tool. If the cookie banner is no longer displayed, you will find a small circle containing a shield and check mark on the bottom left edge of the page, provided you are on our website. Clicking on this symbol will open our consent management tool for you to make your changes.

If you consented to your data being processed on this website and you wish to withdraw this consent, please contact marketing.sales@lhind.dlh.de. There is also an opt-out link in advertising emails sent from LHIND that you can use. Here, you can specify whether you only wish to withdraw your consent for advertising or for data processing as well.

Please note that a withdrawal of consent has prospective effect only and does not affect the lawfulness of any processing performed in the past. In some cases, we are entitled to continue to process your personal data in spite of your withdrawal on some other legal basis - such as to satisfy a contract.

Information on your right to object under Article 21 GDPR

You have the right, for reasons dictated by your own circumstances, to file an objection at any time against the processing of your personal data under (e) or (f) of Article 6 (1) GDPR.

The controller will stop further processing of your personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves to establish, exercise or defend legal claims.

If your personal data is processed for purposes of direct advertising, you have the right to object at any time to your personal data being processed for such advertising.

If you object to your data being processed for direct advertising, your personal data will no longer be processed for such purposes.

You may exercise your right to object by automated means using technical specifications in the context of the use of information society services – notwithstanding Directive 2002/58/EC.

What data do we process?

Hosting and Logfile(-analysis)

When a user visits our website, our system collects data and information from the user’s computer during each visit using automated means. This data is also stored in our system logfile. The data is transmitted to our hosting provider and processed as part of the website delivery. The data is not stored along with the user’s other personal data.We collect and use this technical information for purposes of (network) security (in order to fight cyber attacks, for instance) and to continually enhance our website and facilitate delivery of the website on the user’s system.

The legal basis for the temporary storage of data and log files is our legitimate interest under (f) of Article 6 (1) GDPR.

The following data (“technical information”) is collected:

  1. Information about the type and version of browser used
  2. The user’s operating system
  3. Device information (type, model, resolution)
  4. The IP address of the user
  5. Date and time of access
  6. Websites from which the user accesses our website
  7. Websites accessed by the user through our website

Statistical website usage analysis

When you visit our website, we use cookies to collect pseudonymous statistical usage data (e.g. the number of pages that are accessed).

The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR/our legitimate interest in accordance with Art. 6 (1) (f) GDPR.

The following data (“technical information”) may be collected:

  1. Information about the browser type and the version used
  2. The user’s operating system
  3. Device information (type, model, resolution)
  4. Anonymized user’s IP address
  5. Date and time of access
  6. Websites the user’s system visited before our website
  7. Websites the user’s system traveled to from our website

Use of cookies

Our website uses cookies. Cookies are text files that are stored in your internet browser and/or in the internet browser of the computer system you are using. When a user calls up a website, a cookie may be stored within that user’s operating system. This cookie contains a unique string of characters that enables the browser to be identified when the website is viewed again. The information related to the user stored in the cookies can be reused when the website is accessed again. This means that the settings made in previous website visits are also available on a new visit.

Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all website functions to their full extent.

Cookies are stored on the user's computer and transmitted to our website. As a user, therefore, you have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing settings in your Internet browser. Cookies saved previously can be deleted at any time. This can also happen automatically. If cookies are disabled for our website, it is possible that not all features on the website will be fully usable.

For more information on the cookies we use, their purposes and the legal basis for their use, please see the following overview or in our cookie policy.

Matomo web analysis tool

LHIND uses the web analysis tool Matomo without cookies (cookieless), to optimize our offer. The information generated without cookies about your use of our website is stored on our server in Germany. In order not to be able to draw any conclusions about your specific person, LHIND uses the function "Activation of IP anonymization" on this website.

Receiving news and information

You can consent to receiving current information, interesting news or marketing materials from LHIND by providing your contact details on the website.

When you give consent, the following data from the input form is sent to us and processed:

  • Email address
  • Salutation
  • Title
  • First name
  • Last name
  • Company Name
  • Phone number

Plus the following necessary technical information

  • Date and time of registration
  • Technical information (websites the user’s system visited before our website)
  • Type of download/contact form
  • Status of advertising consent

Your consent for processing data is obtained during the registration process, at which time this data privacy statement is brought to the user’s attention.

This data is stored in our system. The data is transmitted and processed in the context of contacting and sending current information and interesting news to our mailing and dispatch providers as well as providers for sales activities.

We process the data you provide above in connection with news, information or marketing materials in order to communicate with you and keep you informed about interesting topics from the world of Lufthansa. We also process and use the e-mail address you entered to deliver personalized offerings in connection with the news, information or marketing materials.

The legal basis for processing is your consent under (a) of Article 6 (1) GDPR.

Links to Lufthansa Industry Solutions offerings on social networks

The links that LHIND provides to our offerings on social networks, such as our Facebook page, are simple links to the pages of other providers. We do not transmit any personal information to these providers over such links. However, you should be aware that in principle, online offerings by third parties may be able to detect the origin of a visit at a minimum. We have no control over data processing by third parties; consequently, the LHIND data privacy statement does not extend to third party websites.

Features for sharing and recommending Lufthansa Industry Solutions content (such as “Share” and “Like” buttons)

At various places in our online offering, you can share and recommend your content on social networks. This offers a convenient alternative to copying and sending links.

When you use the recommendation features on our web pages, we forward the URL to the social network specified by you. Some networks then immediately add an excerpt of our content to the link. With most social networks, you are asked to provide confirmation before data is saved or forwarded.

Please note that we at LHIND have no knowledge of or control over how social networks act on the information provided by you and whether this information is shared with other websites. We recommend you read the data protection instructions carefully in each case.

In principle, we provide plug-ins on our website in pursuance of our legitimate interests for marketing purposes under (f) of Article 6 (1) GDPR.

What data protection rights do you have?

LHIND considers it important to make the procedures for processing data fair and transparent. We therefore firmly believe that affected persons should be able to exercise the following rights in addition to the right of objection, provided the statutory prerequisites in each case are met:

  • Right of access, Article 15 GDPR
  • Right to rectification, Article 16 GDPR
  • Right to erasure (“Right to be forgotten”), Article 17 GDPR
  • Right to restriction of processing, Article 18 GDPR
  • Right to data portability, Article 20 GDPR
  • Right to object, Article 21 GDPR

To exercise these rights, you can contact us by email at dataaccess@lhind.dlh.de.

We will need the following information for identification purposes:

  • Name
  • Postal address
  • E-mail address and optionally: customer number

If you send us a copy of your identity card, please blank out everything except the last name, first name and address.

Please note that in order to handle your request as well as for identification purposes, we will process your personal data in accordance with (c) of Article 6 (1) GDPR.

In addition, you have the right to lodge a complaint with a supervisory authority under Article 77 GDPR read with Article 19 DPA. The supervisory authority competent for Lufthansa Industry Solutions is

Independent National Center for Data Protection, Schleswig-Holstein
Postfach 71 16
24171 Kiel

Holstenstrasse 98
24103 Kiel

Telephone: +49 4 31/988-12 00
Fax: +49 4 31/988-12 23
E-mail: mail@datenschutzzentrum.de

Disclaimer and limits of these data protection instructions

These data protection instructions address only processing on this website. Other websites are not covered by these data protection instructions; these provide their own specific data protection instructions.

 

Ombudsman:

The Ombudsman is a freelance attorney who is not an employee of the Lufthansa Group. As a neutral, independent contact, the Ombudsman takes complaints in writing or by telephone and provides them to the Corporate Compliance Office in an anonymized form, if this is what the complainant wishes. The identity of the complainant is protected by attorney-client privilege. Moreover, the Lufthansa Group has contractually agreed not to request access to any legally privileged information and to be informed of the complainants´ name only following his/her express consent.

Contact details: https://investor-relations.lufthansagroup.com/en/corporate-governance/compliance/whistleblowing-system/ombudsman.html