Privacy Policy

Information on data protection

The following information on data protection is valid from 21 Jan 2022 and reflects the increased transparency requirements of the EU General Data Protection Regulation.

Who is the responsible party?

We, Deutsche Lufthansa AG (Venloer Straße 151-153, 50672 Cologne, Germany) (hereinafter also “LH”, “we, “us”), inform you about the processing of your personal data in the context of the use of our website (“website”) in the following.

Who can I contact?

If you have any further questions about data protection in regard to our website or the services offered on it, please feel free to contact our data protection officer:

Group Data Protection Officer of the Lufthansa Group
Dr. Hans-Joachim Arnold
Deutsche Lufthansa AG

Please address a request for information to:
Deutsche Lufthansa AG
Data information
60546 Frankfurt

or send an e-mail to:

If you contact us via e-mail, the communication will be unencrypted.

What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

We also process your data to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR,

  • to ensure IT security and IT operation of the website and
  • to optimise the offer for the respective users.

Given consent can be revoked at any time. The revocation of consent only takes effect for the future and does not affect the lawfulness of the data processed until the revocation.

How long will your data be stored?

Your personal data will be deleted as soon as it is no longer required for the purposes stated. However, we may have to continue to store your data until the expiry of the retention obligations and periods issued by the legislator or supervisory authorities, which may result from the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act, and which usually amount to 6 to 10 years. In addition, we may retain your data until the expiry of the statutory limitation periods (i.e. usually 3 years; in individual cases, however, up to 30 years), insofar as this is necessary for the assertion, exercise, or defense of legal claims. After that, the corresponding data is routinely deleted.

What data protection rights do you have?

It is important to LH that our processing procedures are fair and transparent. Therefore, it is important to us that data subjects can exercise the following rights in addition to the right to object if the respective legal requirements are met:

  • Right to information, Art. 15 GDPR
  • Right to rectification, Art. 16 GDPR
  • Right to erasure (“right to be forgotten”), Art. 17 GDPR
  • Right to restriction of processing, Art. 18 GDPR
  • Right to data portability, Art. 20 GDPR
  • Right to object, Art. 21 GDPR

To exercise your right, you can contact us by email at

For identification purposes, we ask you to provide the following information:

  • Name
  • Postal address
  • E-mail address and optionally: customer number

If you send us a copy of your ID card, please black out all details except for your surname, first name, and address.

In order to be able to process your application, as well as for identification purposes, we would like to point out that we will process your personal data in accordance with Art. 6 Para. 1 lit. c GDPR.

Furthermore, pursuant to Art. 77 GDPR in conjunction with. § 19 BDSG, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Deutsche Lufthansa AG is:

The Hessian Commissioner for Data Protection and Freedom of Information.
PO Box 3163
65021 Wiesbaden

How can you revoke your consent?

If you have given us consent to process your personal data, we hereby inform you that you can revoke this consent at any time.

If you have given consent on this website and would like to revoke your consent, you can contact

Please note that the consent you revoke will only have an effect on the future and will not affect the lawfulness of processing in the past. In some cases, despite your revocation, we are entitled to continue processing your personal data on another legal basis – such as for the performance of a contract.

Information about your right to object in accordance with Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.

If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

Disclaimer and limitations of this privacy notice

This privacy notice only covers the processing operations of this website. Other websites are not covered by this privacy notice and provide their own specific privacy notices.

What data do we process when you visit our website?

When users visit our website, our system automatically collects data and information from the computer system of the calling computer each time our website is called up. The following data (“technical information”) is collected:

1. date and time of access.

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

We collect and use this technical information for (network) security purposes (e.g. to combat cyber attacks) and to better understand the needs of our users, as well as to continuously improve our website and enable the delivery of the website to the user’s computer.

The legal basis for the temporary storage of the data and the log files is our legitimate interest Art. 6 para. 1 lit. f GDPR.

Use of cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user calls up a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. The user-related information stored in the cookies can be reused when the website is called up again. This means that the settings made in previous website visits are also available on a new visit.

Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Tracking tools

There is no tracking.

Social media plugins

No social media plugins are used.


The ombudsman is a freelance lawyer who is not an employee of the Lufthansa Group. As a neutral, independent point of contact, he receives tips by telephone or in writing and forwards them – if the whistleblower wishes – only in anonymous form to the Corporate Compliance Office for further processing. The identity of the whistleblower is protected both by the lawyer’s duty of confidentiality and by the ombudsman’s right to refuse to testify. The Lufthansa Group has also contractually waived the release of legal documents so that it only learns the name of the whistleblower if the whistleblower expressly permits the release.


Cabin Support