Data Protection at AirPlus
1. Your data in good hands
The information below provides you with an overview of what happens to your personal data when you visit our website.
2. General information
The term personal data includes all data through which you can be identified. For detailed information on data protection, please refer to the privacy statement at the end of this document.
3. Data collection on our website
Who is responsible for collecting data on this website?
This website is operated by and the protection of data herein is the responsibility of
Lufthansa AirPlus Servicekarten GmbH
Phone: +32(0)70 22 30 15
Board of Management: Patrick W. Diemer (Chairman), Andreas Hagenbring and Spencer Hanlon
Chairman of the Supervisory Board: Ulrik Svensson
Court of Registration: Offenbach/Main District Court, HRB 8119
4. How is your data collected?
Every time you access our website, our system automatically collects data and information from the computer system you are using. The following data (“Technical Information”) is collected:
- the type and version of the browser you are using;
- the operating system on the computer from which you are sending the inquiry;
- the Internet services provider;
- the IP address;
- the date and time the server sends the inquiry;
- the website from which the system you are using accesses our website; and
- websites your system accesses from our website.
The data also will be saved in the log files in our system. This data will not be saved with any of your other personal data.
Moreover, your data can be collected if it is provided by you, for example, in a contact form.
5. For what purposes do we use your data?
We collect and use Technical Information to increase the security of our network (e.g., prevent cyberattacks), for our marketing activities, to get a better understanding of users’ requirements, to enhance our website continuously, and to facilitate access to our website by the user’s computer.
The legal basis for such temporary saving of data and log files is Art. 6 (1) f) of the GDPR.
Most of the cookies we use are session cookies which are erased automatically when you finish your visit to our website. Other cookies are saved on your computer until you delete them. Those cookies enable us to recognize your browser the next time you visit our website.
You can configure your browser settings in a number of ways:
- to notify you when cookies are saved and allow cookies to be saved in individual cases only,
- to accept cookies in specific cases or exclude them in general,
- or to erase cookies automatically when you close your browser.
Please note that when you deactivate cookies you may not be able to use all the functions of this website.
Cookies required to be saved for the execution of electronic communication or for the provision of specific functions are saved based on Art. 6 (1) f) of the GDPR. The operator of this website has a legitimate interest in saving cookies so it can provide its services in an optimized manner and without fault. Cookies required to be saved so your browsing behavior can be analyzed are regulated separately in this privacy statement.
We use the following cookies:
|_gat_UA||Google Analytics uses this Google Analytics cookie to monitor the number of inquiries relating to its servers.||1 minute|
|_ga||This Google Analytics cookie facilitates user identification.||2 years|
|_gid||This Google Analytics cookie facilitates user identification.||1 day|
|AL_SESS-S||This cookie is used to associate a unique ID with each user of this website. The ID then serves to identify the user session so any sessions that already have started can continue.||the duration of the session|
|aplus_country||This cookie is used to save the country settings selected by the user.||1 year|
|aplus_language||This cookie is used to save the language settings selected by the user.||1 year |
|apluscountryflag||This cookie is used to save the flag of the country selected by the user.||1 year|
|apluscountryname||This cookie is used to save the name of the country selected by the user.||1 year|
|cb-enabled||This cookie is used to determine whether the user acknowledged the data protection declaration.||1 year|
|alertId||This cookie is used to determine whether the user closed the message, if any, displayed in the header of the website.||1 year|
|pactive||This cookie is used to determine the last time the user opened or closed the login menu in the AirPlus Business Travel Portal.||1 year|
|aplus_fold||This cookie is used to determine whether the user opened or closed the contact menu in the display for mobile devices.||1 year|
7. Analysis tools and third-party tools
This website uses functions delivered by web analysis services provider Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. Google Analytics uses small text files, referred to as cookies, which are saved on your computer to facilitate analysis of your website use. The information generated by cookies regarding your use of this website typically is transmitted to and saved on a Google server located in the United States.
You may refuse the saving of cookies by selecting the appropriate settings in your browser software; however, please note that if you do so you may not be able to use the full functionality of this website. In addition, you can object to Google’s collection of data generated by cookies which data relates to your use of this website (including your IP address) as well as to Google’s processing of the data. To do so, download and install the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.
You can prevent the collection of your data by Google Analytics by clicking on the following link: deactivate Google Analytics. If you do so, an opt-out cookie will be saved. This opt-out cookie will prevent your data from being collected when you access our website in the future. For more information on how Google Analytics handles user data, please refer to Google’s privacy statement available at https://support.google.com/analytics/answer/6004245?hl=en.
The use of Google Analytics is based on Art. 6 (1) f) of the GDPR. The operator of this website has a legitimate interest in analyzing user behavior – to optimize its website and its advertising.
Find more information in item 15 “Google Analytics” below.
8. Social media plug-ins
On our website we use a two-click solution for plug-ins for the following social media:
- Google Plus
With the two-click solution your data is not transmitted to the respective social media network company until you activate the respective plug-in button to confirm your consent to such transmission.
The two-click solution used on this website is the Social Sharing Button provided as part of the Shariff project of c’t magazine. It protects your privacy from curious social media such as Facebook, Google+ and Twitter. To share a page with friends, all you need to do is click the button.
Shariff allows you to use social media without compromising your privacy unnecessarily. It replaces the buttons typically used by social media and protects your browsing activities from inquisitive scrutiny. Yet, with only one click on the button you can share information with others.
Typically, every time you access a website the social media buttons transmit your user data to Facebook and other networks, thus providing them with details about your browsing activities (user tracking). For this to happen, you need not be logged in or be a member of the social medium. In contrast, the Shariff button does not establish direct contact between you and the social medium until you click the Social Sharing Button. In this way, Shariff prevents you from leaving a digital footprint on every website you access.
Please note that AirPlus has no knowledge of or way to influence how social media handle the information you share or whether this information is provided to other websites. We recommend that you read the individual data protection declarations carefully.
The provision of plug-ins on our website is based on our legitimate interest for marketing purposes (Art. 6 (1) f) of the GDPR).
9. Use of services on our website
We offer additional services on our website. To be able to provide these services, we have to collect and process the personal data of users or customers.
9.1 Contact form
If you want to contact us, you can use the form provided on our website. To process your inquiry, we will collect information regarding your form of address, last name, first name, and e-mail address. If you provide your telephone number and check the Phone Call Requested box, we will be happy to call you to answer your question. You can provide your postal address if you so choose; this will make it easier for us to associate and process your inquiry.
All data collected based on the information contained in the contact form you submit will be used exclusively to process your inquiry. To do so, we may have to forward your inquiry and the information you provide to the AirPlus company in charge of providing customer support to you.
If you send an inquiry to us using the contact form, we will save the data you entered in that form including the contact information you provided so we can process your inquiry and answer any questions you may have in the future. We will not share this data.
Hence, the data you provided on the contact form will be processed exclusively to fulfill a contract to which you are a party to or in order to take steps at your request prior to entering into a contract (Art. 6 (1) b) GDPR).
The data you provide on the contact form will be erased when the purpose for saving such data becomes void (e.g., after your inquiry has been processed). Mandatory legal provisions including, but not limited to, retention periods will remain unaffected.
9.2 Registering in the customer portal
Please register if you want to use additional functions in our customer portal. We will use the data you provide at the time of registration for authentication purposes only. You will be required to complete all the mandatory fields during registration; otherwise your application will be rejected.
We will inform you about important changes, for example, to the scope of our services or in the event technical modifications are necessary, by sending an e-mail to the address you provide during registration.
The data you provide at registration will be processed to fulfill a contract to which you are a party to or in order to take steps at your request prior to entering into a contract (Art. 6 (1) b) GDPR).
We will save the data collected during registration for as long as you remain registered as a user of the customer portal, after which the data will be erased. Statutory retention periods will remain unaffected.
10. When will we erase your data?
We will erase your personal data as soon as we no longer need it for the aforementioned purposes. Personal data may be saved for the period of time in which claims can be asserted against Lufthansa AirPlus Servicekarten GmbH (statute of limitations: between three and 30 years).
In addition, personal data will be saved to the extent to which and for those periods of time for which Lufthansa AirPlus Servicekarten GmbH is legally required to do so. Our obligations regarding proof and retention are stipulated by Germany’s Commercial Code (Handelsgesetzbuch), Fiscal Code (Abgabenordnung), and Anti-Money Laundering Act (Geldwäschegesetz). According to these laws, retention periods can be up to ten years.
11. What are your rights regarding your data?
Ensuring our processing is fair and transparent is important to us. Therefore, it is imperative that in addition to the right to object, data subjects can exercise the following rights if and when the relevant legal requirements have been met. As a data subject you have the right to
- access data (Art. 15 of the GDPR),
- rectify data (Art. 16 of the GDPR),
- erase data (be forgotten) (Art. 17 of the GDPR),
- restrict the processing of data (Art. 18 of the GDPR), and
- your data’s portability (Art. 20 of the GDPR).
To exercise your rights, you can send an e-mail to firstname.lastname@example.org . To be able to process your application and for identification purposes, we advise you that we will process your personal data pursuant to Art. 6 (1) c) of the GDPR.
12. Right to object (Art. 21 of the GDPR)
At any time, you have the right to object to, on the grounds relating to your particular situation, the processing of your personal data which is based on Art. 6 (1) e) or f) of the GDPR, including profiling based on those provisions.
The controller will no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Where personal data is processed for direct marketing purposes, you will have the right to object, at any time, to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, your personal data no longer will be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object, by automated means, to using technical specifications.
13. Right to lodge a complaint
In addition, you have the right to lodge a complaint with the supervisory authority responsible.
You can reach the supervisory authority responsible for us at:
Der Hessische Datenschutzbeauftragte / Data Protection Officer of the State of Hesse
Phone: +49 611 1408 - 0
Fax: +49 611 1408 - 611
14. Links to AirPlus’ offerings in social media
Links on airplus.com to any of our social media offerings, for example, our Facebook page, are simple links to other providers’ pages. We do not use these links to transmit personal information to such providers. However, please note that third-party online offerings generally can determine the origins of a visit. Because we cannot influence the processing of data by third parties, our privacy statement does not apply to third-party websites.
15. Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses small text files, referred to as cookies, which are saved on your device to facilitate analysis of your website use. The information generated by cookies regarding your use of this website typically is transmitted to and saved on a Google server located in the United States. However, if and when IP anonymization is activated on this website, Google will truncate your IP address for transmission among member states of the European Union or to other member states of the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the United States and then truncated. At the request of AirPlus, Google will use the information to evaluate your use of the website, to compile reports on website activity, and to provide AirPlus with other services relating to website activity and Internet use.
The IP address transmitted from your browser as part of Google Analytics will not be merged with any other data held by Google. You may refuse the saving of cookies by selecting the appropriate settings in your browser software; however, please note that if you do so you may not be able to use the full functionality of this website. In addition, you can object to Google’s collection of data generated by cookies which data relates to your use of this website (including your IP address) as well as to Google’s processing of the data. To do so, download and install the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=en.
In addition to the option to install the browser add-on, there is an option to prevent the collection of data by Google Analytics. By clicking on this link you are installing an opt-out cookie that prevents data tracking on this website. This function will remain active only until the cookie is erased. Once the cookie has been erased, all you need to do is click on the link again.
This website uses Google Analytics with the addendum _anonymizeIp(). This means that IP addresses are truncated before being processed and cannot be associated with individual persons. For more information on the usage terms and data protection, please go to http://www.google.com/analytics/terms/us.html or https://policies.google.com/?hl=en.
If you have any questions regarding data protection in connection with our website or the services we offer on our website, please contact our Data Protection Officer at
Lufthansa AirPlus Servicekarten GmbH
Datenschutzbeauftragter / Data Protection Officer