Data protection declaration
Deutsche Lufthansa AG (Venloer Straße 151-153, 50672 Cologne, Germany) (hereinafter also “Lufthansa”, “we”, “us”) wishes to inform you below of how your personal data are processed within the context of the PartnerPlusBenefit program and website.
Any mention of Lufthansa Group Airlines below refers to the Lufthansa, SWISS International Airlines AG, Austrian Airlines AG and Eurowings GmbH airlines. The Lufthansa Group comprises the Lufthansa Group Airlines and the other companies that make up the Lufthansa Group.
If you have any further queries regarding data protection in connection with our website or the services offered there, please contact our data protection officer:
Group Data Protection Officer for the Lufthansa Group
Deutsche Lufthansa AG
Please send requests for information to:
Deutsche Lufthansa AG
If you contact us via email, the communication is unencrypted.
We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Data Protection Act (BDSG).
We process personal data in order to enable you to participate in the PartnerPlusBenefit program and to fulfil contractual obligations pursuant to Art. 6 (1) (b) GDPR.
We also process your data for the purposes of our legitimate interests pursuant to Art. 6 (1) (f) GDPR.
II. Use and disclosure of personal data and restriction of use
a) Use to improve our offering
PartnerPlusBenefit processes and uses your personal data for service purposes within the website www.partnerplusbenefit.com; in other words, to provide individualized offers to your needs and/or to make repetitive inputs unnecessary or to limit these to no more than the extent necessary. For this purpose we save your provided data in our Customer Relationship Tool of Deutsche Lufthansa AG.
Your data may be analyzed in a data warehouse to evaluate the preferences of the registered customers (“statistical analysis”) for the purposes of interest-led marketing, individual approaches and continuous optimization of our business processes. We undertake this processing in order to acquire a better understanding of what our customers expect from us and to offer individually tailored communication. This analysis also helps us with fraud detection, auditing and safeguarding security, which is why we perform this processing to protect our legitimate interests, Art. 6 (1) (f) GDPR.
The data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that allow the assignment of the data to a user. The storage of this data together with other personal data of the user does not take place. We use this technical information for the purposes of network security and to better understand the needs of our users, as well as to continuously improve our website.
In line with market research purposes we might invite you to participate in a survey of PartnerPlusBenefit in order to improve our services and products. The participation is always voluntary. In the context of market research projects provided data is only processed in anonymized way and will never be published nor used for Marketing purposes. For the administration of surveys and the evaluation of results Lufthansa Group Airlines cooperates with an external service provider who has access to personal data in line with the provided software.
The PartnerPlusBenefit website contains action-related pages for competitions and online promotions, as well as information pages such as the BenefitInfoLounge and other online guides. When these action-related pages and information pages are visited, our system automatically collects data and information from the computer system of the calling computer each time it is called up. The following technical data is collected: Information about the browser type and the version used, the user's operating system, the date and time of access, and websites from which the user's system accesses our website and which are accessed via our website.
b) Flight tickets
While booking airline tickets through PartnerPlusBenefit, as well as other flight related services, we will process your personal data (such as master data, contact details and payment details). Firstly this data is processed by us to fulfill the contract in order to issue your desired flight ticket and to send you the booking confirmation (Article 6 (1) (b) DSGVO), but also to safeguard our legitimate interests (Art. 6 (1) (f) DSGVO) and to provide you with relevant information about your booked flight and destination.
In that regard, we also refer to our notes on the processing of data in the context of passenger transport: Lufthansa Privacy Statement
c) Disclosure to third parties
The data which you have provided may be sent to third parties insofar as this is necessary for the purpose of concluding or processing contracts by PartnerPlusBenefit.
Within the PartnerPlusBenefit program you have the option to purchase services provided by our partners. As a part of this personal data may be transmitted to third parties within or out of Deutsche Lufthansa AG in order to offer products and services according to our contractual obligations. These third recipients can be categorized as follows:
• Service providers for contractual fulfilments
• Members of the Star Alliance or other Airlines
• Suppliers and providers of ground handling services or state agencies and bodies
For your protection and the protection of your personal data, appropriate safeguards are provided for such data transmissions as per and in accordance with legal requirements (particularly the use of EU standard contractual clauses) or an adequacy decision has been issued by the EU Commission (Art. 45 GDPR).
d) Disclosure to public authorities
Personal data are only collected and transmitted to state institutions or public authorities to the extent permitted by the legal regulations in force.
III. Option Right
If you have given us consent to the processing of your personal data, we hereby inform you that you can adapt and revoke this consent at any time in your PartnerPlusBenefit profile.
Please note that the consent you revoke has only an effect on the future and has no influence on the legality of the processing in the past.
During your registration we inquire the permission for an E-Mail option which gives you information about your account.
You can revoke your newsletter consent at any time via the "Unsubscribe" link in the newsletter.
IV. Collection and processing of personal data
a) Storage of IP addresses
When visiting our website, our web servers routinely save the IP address of your Internet service-provider, the website from which you have come to us, the pages visited on our website and the date and duration of your visit. The browser type and version, the operating system, the volume of data transmitted and a status quantity relating to the successful call are also saved. These data are evaluated in anonymized form in order to make our website more user-friendly, as well as to locate and remedy errors more quickly and manage our server capacities.
c) Tracking Tools
The legal basis for the use of the listed tools is our legitimate interest in accordance with Art. 6 (1) (f) GDPR for the purpose of increasing the efficiency of our website and (direct-) marketing.
The following types of personal information are collected, processed or stored, depending on which eTracker services are used: Abridged IP addresses, digital fingerprints, user agents, geo-information, mobile device codes, contact details of account users, invoice and reporting recipients, placeholder-substituted form input (UX Analytics), opt-in email addresses Dialogues (Smart Messaging).
Deutsche Lufthansa AG carries out access measurements on the PartnerPlusBenefit Website using the web analysis tool Webtrends. Cookies are used for measurement and the access data is collected in an anonymised form so that no connection can be made to a user. In particular this is done by anonymising the IP address.
This website uses Google Analytics, a web analysis service of Google Ireland Limited, (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). It includes the use of “Universal Analytics” technology, which makes it possible to assign data, web sessions and interactions on several devices to an anonymised user ID, thus enabling an analysis of a user’s activities across multiple devices.
Google Analytics uses so-called “cookies”, text files which are saved on your computer and which enable an analysis of your usage of the website. Information generated by the cookie about your usage of this website is generally transferred to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within the member states of the European Union or in other states which are party to the Agreement on the European Economic Area before the transfer takes place. Only in exceptional circumstances will the complete IP address be transferred to a Google server in the USA and shortened there. The IP address of your browser conveyed in the context of Google Analytics will not be joined with other Google data. Google will use this information on behalf of the operator of this website to evaluate your usage of the website in order to compile reports about the website activities and to provide the website operator with additional services in connection with the usage of the website and the internet. These purposes also constitute our legitimate interest in the data processing. The legal basis for the use of Google Analytics is Section 15(3) German Telemedia Act (TMG) and Art. 6(1), Subparagraph 1(f), GDPR. Sessions and campaigns are terminated on expiry of a fixed period. The fixed period for the termination of sessions is generally 30 minutes without activity, and for campaigns the limit is six months. The maximum permissible time limit for campaigns is two years. More information about conditions of use and data protection can be found at Google Analytics User Conditions or at Google Analytics Data Protection
You can prevent cookies from being installed by activating a corresponding setting in your browser software; however, we must inform you that, in this case, it is possible that you will not be able to use all the functions of this website in full. Furthermore, you can prevent the capture of data by Google relating to your use of the website generated by the cookie (including your IP address), as well as the processing by Google of this data, by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when visiting this website. To prevent the capture of your data across multiple devices by Universal Analytics, you must complete the opt-out process on all systems you use. Click here to install an opt-out cookie:
Switch of tracking
d) Duration of the data processing
Your personal data is deleted as soon as it is no longer needed for the specified purposes. In certain circumstances, personal data is kept for the period of time during which claims against Deutsche Lufthansa AG may be enforced. Personal data is also saved as long as Deutsche Lufthansa AG is legally obliged to do so. Corresponding burdens of proof and duties of retention arise from the Commercial Code, Tax Code and Money Laundering Act. These retention periods amount up to ten years.
V. Data security
PartnerPlusBenefit uses technical and organizational security measures to protect the personal data which we administer against accidental or willful manipulation, loss, destruction or unauthorized access. Our security measures are continuously improved in accordance with technological progress.
Data is encrypted for transmission (Secure Socket Layer -SSL). We cannot warrant total data security when communicating by E-Mail and therefore we recommend sending confidential information by surface Mail. If we receive an E-Mail from you, we assume that we are also entitled to reply by E-Mail.
VI. Rights of the data subject
Deutsche Lufthansa AG is committed to ensure fair and transparent data processing. That is why it is important to us that data subjects can not only exercise their right to object but also the following rights where the respective legal requirements are satisfied:
• Right of access, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure (“right to be forgotten”), Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Right to data portability, Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR
To exercise your right, please email email@example.com.
In order to process your request and for identification purposes, please note that we will process your personal data in accordance with Art. 6 (1) (c) GDPR.
At any time you have the right to object on reasons relating to your particular situation the processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) GDPR. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless processing is necessary for the establishment, exercise or defence of legal claims.
You also have the right to lodge a complaint with a supervisory authority. The relevant supervisory authority for Deutsche Lufthansa AG is:
National commissioner for data protection and freedom of information Nordrhein-Westfalen
Postfach 20 04 44
VII. Disclaimer and limitations of this data protection notices
These data protection notices only apply to processing for this website. Other websites are not covered by these data protection notices and provide their own specific data protection notices.