Privacy statement

The protection of your personal data is very important to us and we want you to feel comfortable when visiting our website. Our biggest concern is the protection of your privacy when processing personal data and we monitor this very closely in any business operations.


Data privacy statement:


In this section you can find information on how your personal data is used when you visit our media center (www.mediacenter.lufthansa-technik.com). Personal data concerning you must be collected so as to ensure the features and services can be provided. We then explain what personal data concerning you we gather, what it is required for, and what rights you have. You can also contact our Data Protection Officer at datenschutz(at)dlh.com at any time if you have questions about data protection.

The controller responsible for processing personal data on this website is:

Lufthansa Technik AG
Corporate Communications
Weg beim Jaeger 193
22335 Hamburg
Germany
E-mail: press.pr(at)lht.dlh.de


1. Encrypted communication over the Internet (SSL)


For your security: SSL – the Secure Socket Layer method. We use SSL exclusively.


2. Use of our media platform to obtain information


If you use our media center without otherwise disclosing data to us (such as by registering or using the contact form), we only collect data that is technically necessary. This data (such as your IP address, the date and time of your request, the type of browser you use and your operating system) is automatically sent to our servers and is technically necessary for displaying the media platform to you. The legal basis in this case is Article 6(1) point (f) GDPR.

3. Use of cookies


Our website uses cookies. Cookies are text files that are stored in your web browser. If you call a website, a cookie may be stored on your operating system. This cookie contains a characteristic string that allows your browser to be identified unambiguously when you call the website the next time.

There are two types of cookies:

- Session cookies. They are temporary and are deleted when you close your browser after you finish surfing. When you visit our website the next time, they are no longer detected and you are treated as a new visitor.

- Persistent cookies are kept in a sub-folder of your browser and can be deleted manually by you or are automatically deleted on the basis of the expiry date entered in the cookie.

Cookies are stored on your computer system and transferred to our website. That means that you, the user, have full control over the use of cookies. You can disable or restrict the transfer of cookies by changing the settings in your web browser. Cookies that have already been stored can be deleted again at any time. This process can be automated. If cookies are disabled for our website, you may no longer be able to use all of the media platform’s features in full.

We use cookies to provide you with the following features or information:

- Your latest search terms (up to five)
- Management of various banners
- Geolocation

You can delete the information our website has stored at any time by deleting the cookies.

4. Contact form


The form on our media center can be used to enter personal data (surname, first name, e-mail address). We collect and store the data you enter. It is not passed on to third parties. The legal basis for processing is your consent in accordance with Article 6(1) point (a) GDPR.


5. Registration form


You can register on our website. As part of that, we collect and store all the data you enter in the input screen (surname, first name, e-mail address). It is not passed on to third parties. The legal basis for processing is your consent in accordance with Article 6(1) point (a) GDPR. You must register in order to obtain content and services from our media center.


6. Collection and processing of personal data


We store your personal data as part of registration. We also analyze visits to our media center so that we can understand our users’ needs better and keep on improving our platform. We deploy a web analytics service that uses cookies and text files. As part of that, usage information generated by the cookie (including your truncated IP address) is transferred to our server and stored so that usage of the website can be analyzed in order to help us optimize our website. You as the user remain anonymous and your IP address is anonymized immediately each time. The information generated by the cookie and relating to your use of this media center is not disclosed to third parties.


7. Period of storage of the data


We store and process your data only for specific purpose in question and only as long as is necessary to achieve that purpose (Article 5(1) point (e) GDPR).


8. Your rights


The following provides you with information on your rights in relation to personal data.

8.1. Right to access personal data and obtain information (Article 15 GDPR)
You as the data subject have the right to obtain information on whether we process your personal data. If we do, you have the right to request information on that, such as the purposes for which it is processed, the recipients and the planned length of time for which it is to be stored (and the criteria used to determine that length of time).

8.2. Right to rectification (Article 16 GDPR)
You as the data subject have the right to demand that inaccurate data be rectified. You can demand that incomplete personal data be completed, taking into account the purposes of the processing.

8.3. Right to erasure (“right to be forgotten”) (Article 17 GDPR)
If processing of your personal data is no longer necessary, you have the right to demand that it be erased. That is the case if your data is no longer necessary for the original purposes or you withdraw your declaration of consent under data protection law.

8.4. Right to restriction of processing (Article 18 GDPR)
You as the data subject have the right to demand that we restrict processing of your data if:
- You contest the accuracy of the personal data (Article 18(1) point (a) GDPR)
- Processing of your data is unlawful and you as the data subject oppose the erasure of the personal data and request restriction of its use instead (Article 18(1) point (b) GDPR)
- We no longer need your personal data for the purposes of the processing, but you require it for the establishment, exercise or defense of legal claims (Article 18(1) point (c) GDPR)
- You have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject (Article 18(1) point (d) GDPR).

8.5. Right to data portability (Article 20 GDPR)
You as the data subject have the right to receive your personal data in a structured, commonly used and machine-readable format.

8.6. Right to object (Article 21 GDPR)
You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you.
Where personal data is processed for direct marketing purposes, you likewise have the right to object at any time to processing of personal data concerning you for such marketing.

8.7. Right to withdraw your consent under data protection law (Article 7 GDPR)
You can withdraw your consent to processing of your personal data at any time with future effect. However, the withdrawal of consent shall not affect the lawfulness of processing prior to such consent being withdrawn.

If you believe that processing of your personal data is not in compliance with data protection law, you may also file a complaint with the responsible data protection supervisory authority at any time.

9. Website tracking


We use the tracking technologies from AT Internet (https://www.atinternet.com/en/company/data-protection/) for the media center.

How visits to the media center are measured:
AT Internet measures activities on the websites, mobile sites and apps using cookies that are linked to our URLs. To learn more about cookies, please read the section “Use of Cookies.” Our cookies comply with European Union legislation on data privacy and protection of personal information (EU GDPR).

9.1. What is measured
When an Internet user visits a medium that is monitored by a solution from AT Internet, AT Internet uses cookies to measure statistical data relating to calling of the offering in question. Examples of what is measured:
· The type of browser used
· The number of page views
· The exact navigational path a visitor takes on the site
· The amount of time spent on a page or the entire site
· Shopping cart activity (items placed in the cart, abandonments, etc.)
· IP addresses (processed so that personal identification is not possible)
What is not measured when the offering is called:
· Personal information that may permit identification of a person, such as the names of users
· Users’ contact information, such as phone numbers or e-mail addresses

9.2. Processing, storage and disclosure of data
AT Internet collects the data using local servers in France, Australia, Brazil, Canada, Japan and Singapore. By collecting data on servers that are located all over the world near to Internet users, IT Internet improves the speed and performance with which data is collected for its customers.
All the collected data is then stored securely on AT Internet’s servers in France. All data processing activities are carried out in France. No third-party offerings are used to process data.

9.3. Geolocation
Calls in the Web and on mobile sites are geolocated using the IP address.
During collection and processing of the data, AT Internet (like most offerings for digital analysis and marketing) tracks the IP addresses of users. AT Internet collects the IP addresses of mobile users regardless of how the user’s mobile device accesses the Internet – whether by WiFi or the nearest 3G/4G cell tower.
AT Internet uses IP addresses solely for determining the geographical location of website visitors at the regional level and, in some countries, also for individual cities. AT Internet never links the IP address with information that might enable a person to be identified.
In order to ensure even better protection for personal information, AT Internet offers the possibility of anonymizing visitors’ IP addresses: The last three digits of the IP address are then deleted immediately after the data has been collected and before the geolocation is determined.
The IP addresses are anonymized and truncated by default for users who visit this website.
AT Internet stores IP addresses for a maximum of 6 months.

9.3.1. Use of GPS for geolocation of users who visit the website using a mobile deviceAT Internet has developed a technology based on GPS coordinates truncated to two decimal places in order to enable geolocation of mobile devices. These coordinates are converted into a graphical representation (heatmap). Complete details are never presented on the web interface that is shown.
There is a strict double opt-in procedure for geolocation of mobile devices by GPS: So that users can be tracked by GPS, they must generally have activated the GPS services and also enable the GPS services specifically for the apps. So that the features of AT Internet GPS geolocation can be used, your app must have an option for permitting geolocation. The decision of users must be respected. They must be able to exercise their right to see, change and erase personal data concerning them that has been collected.

9.4. Your rights
You have the right to access your personal data AT Internet may have collected, to change it and to have it erased. If you wish to exercise these rights, we ask you to contact AT Internet by sending

an e-mail to dpo@atinternet.com, or
a letter to AT Internet. The following address is available:

For all inquiries:

AT Internet
Attn: Nicolas Boudillon, Data Protection Officer
85 avenue John Fitzgerald Kennedy
33700 Mérignac
France

You can decide here whether an explicit web analytics cookie is allowed to be stored in your browser so as to enable the website operator to record and analyze various statistical data.
If you decide against that, click the following link in order to store the opt-out cookie in your browser.
http://www.xiti.com/en/opt-out

http://www.xiti.com/en/opt-out