We, Lufthansa Technik AG , Weg beim Jaeger 193, 22335 Hamburg, Germany, (hereinafter also referred to as "we" or "us"), hereby provide you with information on the processing of your personal data collected directly from you (e.g. when you enter into an agreement with us or when you visit our website https://www.lufthansa-technik.com/ ("website")) or as well as from third parties and/or other sources.
If you have further questions on the subject of data protection in connection with our website or the services offered on it, please contact our data protection officer:
Deutsche Lufthansa AG
Data Protection Officer
or by e-mail to: firstname.lastname@example.org
If contact is made by e-mail, communication is unencrypted.
2. Scope and purpose of and legal basis for the processing of personal data
We collect and use personal data directly from our users or from other sources (see below) in the following situations:
2.1. Provision of the website and creation of log files
Whenever users visit our website, our system automatically records data and information from the computer system used to call our website. The following data ("technical information") is collected in the process:
- Information on the type of browser used and its version
- The user's operating system
- The user's Internet service provider
- The user's IP address
- The date and time of access
- Websites from which the user's system accesses our website
- Websites that the user's system calls from our website
We collect and use this technical information for purposes of (network) security (such as to combat cyberattacks), marketing, and to be able to better understand our users' needs, as well as to continuously improve our website and to enable us to deliver the website to the user's computer system.
The log files contain IP addresses or other data that may, in some cases, be able to be associated to a user. That may be the case, for example, if personal data is contained in the link to the website from which the user enters our website, or the link to the website to which the user switches.
The data is likewise stored in our system's log files. This data is not stored together with other personal data of the user.
The data is stored in log files in order to ensure that the website functions properly. This data also helps us optimize the website and ensure the security of our IT systems. It is not analyzed for marketing purposes in this connection.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the EU General Data Protection Regulation (GDPR).
- session cookies, which are temporary and are erased when you close your browser at the end of your surfing session. The next time you visit our website it will not recognize you and will treat you as a new visitor.
- persistent cookies, which stay in one of your browser's subfolders until you delete them manually or your browser deletes them based on the duration period contained within the persistent cookie's file.
We use the following categories of cookies to provide you with the following functionality or information:
- Essential: These cookies are necessary to run the core functionalities of this website, e.g. security related functions and consent management. In addition, the application CLIP uses shopping cart cookies.
- Marketing: In order to improve continuously our website, we anonymously track data for statistical and analytical purposes. With these cookies we can, for example, track the number of visits or the impact of specific pages of our web presence and therefore optimize our content. (see section 8)
- Personalization: We do not use any cookies of the category Personalization.
The legal basis for storing essential cookies in your webbrowser is Article 6(1)(f) of the GDPR. For all other cookies we ask for your consent, i.e. the legal basis is Article 6(1)(a) of the GDPR.
By deleting the cookies you are able to delete the stored information of our website at any time.
2.2. Use of the services offered on our website
We offer a number of services on our website. To provide those services, we must collect and process personal data from our users.
On our website you can subscribe to free newsletters. The data entered in the input screen when registering for the newsletter is sent to us and processed:
- E-mail address
- First name
- Last name
- Company name
The following data is also collected during registration:
- The date and time of registration
The following data on usage behavior is collected:
- Opening patterns
- Clicking patterns
During registration, your consent to the processing of the data is obtained and your attention is drawn to this data privacy statement.
Contact data and data on usage behavior are stored electronically at a German service provider and analyzed and processed solely by Lufthansa Technik for the purpose of improving its customer service and sending out newsletters.
We process your data in connection with the newsletters in order to send you news on interesting topics from the world of Lufthansa Technik and/or media information.
The following only applies to the registration for the newsletters: We also process and use registration and usage data to send you your newsletter with personalized and tailored content. If a link from the newsletter takes you to our website, you also give us your permission to process and use your IP address as well as geodata, web beacons or similar technologies, in order to check whether the offers made to you met your requirements.
The legal basis for processing data after the user has registered for the newsletter is Article 6(1)(a) of the GDPR.
2.2.2. Contact form
You can address inquiries to us and get in touch with a specific contact person using our contact form. To do this, you must provide your contact information. You will find the following contact form on our website:
submit your request - form within the application CLIP to send a Request For Quotation (RFQ)
The data you insert there is not stored, it is only used for generating an email for your Request For Quotation.
The legal basis for using your contact data to answer your requests is Article 6(1)(a) of the GDPR.
2.2.3. Customer contact data
Contact data which a sales employee at a Lufthansa Technik Group company receives from the employees of our potential or actual customers for the purpose of business communication is recorded in our shared CRM system and is thus also available to other companies in the Lufthansa Technik Group for that purpose.
The legal basis for processing this data are Article 6(1)(a) and Article 6(1)(f) of the GDPR.
The processing of user data on our customer platforms is described in the privacy policies there.
2.2.4 Supplier contact data
Contact data of our potential or actual suppliers which we or another company of Lufthansa Group receive from these suppliers for the purpose of business communication is recorded in our shared supplier management system and is thus also available to other companies in the Lufthansa Group for that purpose.
The legal basis for processing this data are Article 6(1)(a) and Article 6(1)(f) of the GDPR.
2.3. Our legitimate interests in processing personal data
Where Article 6(1)(f) of the GDPR is the legal basis for processing, our legitimate interests – apart from the purposes stated above – are:
- Protecting the company against material or non-material damage
- Making our products and services more professional
- Optimizing (controlling and minimizing) costs
2.4. Other processing obligations
Where we are obligated by law, we process personal data to comply with retention obligations under commercial law or to meet statutory requirements relating to security (such as those pursuant to Section 7 of the German Aviation Security Act (LuftSiG)). You can find more information on retention periods in the section "Duration of data processing" below.
3. Duration of data processing
Your personal data is erased as soon as it is no longer required for the specified purposes. It may be the case that personal data is retained for the period of time in which claims may be asserted against Lufthansa Technik AG. In addition, personal data is stored if and for as long as Lufthansa Technik AG is obligated by law to do so. Such documentation and retention obligations are stipulated by the German Commercial Code (HGB), the German Fiscal Code (AO) and the German Money Laundering Act (GwG), among others. Under this legislation, storage may be required for up to ten years.
4. Right to object in accordance with Article 21 of the GDPR
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions.
The controller shall no longer process the personal data concerning you unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
5. Disclosure of personal data to third party
We may be required to forward your personal data to third parties within or outside the Lufthansa Group in order to be able to offer you our products and services on the basis of our contractual obligations or our legitimate interests. These recipients can be categorized as follows:
- Service providers
- Transportation and logistics
- Government bodies and authorities
- Members of the Lufthansa Group
In the process, personal data may be transferred to third countries or international organizations. In order to protect you and your personal data, there are suitable safeguards in such cases as stipulated by and in compliance with statutory requirements (in particular the use of EU standard contractual clauses) or there is an adequacy decision adopted by the EU Commission (Article 45 of the GDPR).
You can find information on EU standard contractual clauses at:
The EU Commission provides information on its adequacy decisions at
We are also obligated by law to provide personal data to German and international authorities (Article 6 (1) point (c) of the GDPR in conjunction with local and international regulations and agreements).
6. Rights of data subjects
Lufthansa Technik AG is committed to the fair and transparent processing of data. We therefore believe it to be important that data subjects not only have the right to object, but can also exercise the following rights if the relevant legal requirements are fulfilled:
- Right to access personal data and obtain information (Article 15 of the GDPR)
- Right to rectification (Article 16 of the GDPR)
- Right to erasure ("right to be forgotten") (Article 17 of the GDPR)
- Right to restriction of processing (Article 18 of the GDPR)
- Right to data portability (Article 20 of the GDPR)
You can contact email@example.com by e-mail to exercise your rights. To handle your request and for the purpose of identification, we note that we will process your personal data in accordance with Article 6(1)(c) of the GDPR.
You also have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Lufthansa Technik AG is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str 22, 7. OG
Phone: +49 40 42854-4040
Fax: +49 40 42854-4000
If you have given us your consent to process your personal data, we note here that you can revoke this consent at any time.
If you have given us your consent to send you the newsletter, you can revoke it by clicking on the "Unsubscribe" link in the newsletter itself.
You can contact firstname.lastname@example.org in all other cases or if you have problems revoking your consent on this website.
Please note that any revocation of your consent is valid only with future effect and does not have an impact on the lawfulness of past processing of your data. In some cases we have the right despite the revocation of your consent to continue processing your personal data on another legal basis, such as to fulfill a contract.
8. Consent tool: Usercentrics
In the context of order processing, we transmit personal data (consent data) to Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich as a processor. Consent data means the following data:
- Date and time of the visit and consent / refusal
- Device information.
The processing of the data is carried out for the purpose of compliance with legal obligations (obligation to provide evidence pursuant to Art. 7 (1) GDPR) and the associated documentation of consents and thus on the basis of Art. 6 (1) lit. c) GDPR. Local storage in the European Union is used to store the data.
The consent data is stored for 1 year.
For more information about the collected data and contact options, please visit https://usercentrics.com/privacy-policy/.
9. Tracking tool: eTracker
We use eTracker as a tracking tool.
The legal basis for using it is our legitimate interests in accordance with Article 6(1)(f) of the GDPR for the purpose of enhancing the efficiency of our website and (direct) marketing.
Its functions are explained in the following paragraphs.
eTracker stores data on visitors, IP addresses and the device and domain data of visitors. This data is stored in truncated form or encrypted so that it is not possible to identify the individual user from it.
The collected data is administered in a data center located in Hamburg, Germany using the highly secure, high-quality and highly available data center infrastructure of IPHH Internet Port Hamburg GmbH, which is certified as complying with ISO/IEC 27001:2013.
eTracker gives us insights into the following data:
- When the website was accessed (month, year, week, day, time of day)
- What devices were used to access the website and what browser and operating system those devices use
- What individual pages of the website are visited
- Visitors' regions and languages
- Visitors' click behavior: Click paths, click frequency
- Dwell times on the individual pages of the website
- Most-clicked pages on the website
- Where the website was accessed from (referrer)
- How often the website or its individual pages were called
- Whether and how visitors return to the website or its individual pages
You can obtain more information on this tracking tool at: https://www.etracker.com/
You can see videos on our website. Some of these videos are not hosted on our infrastructure. Instead we're using services from Youtube to embed these Videos on our website. If you would like to learn more about how Youtube is potentially dealing with personal information and privacy regulation, please contact YouTube LLC directly or refer to their website (https://youtube.com, 901 Cherry Ave., San Bruno, CA 94066, United States of America). Youtube is part of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America) For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/
last modified: 28 February 2023