Cookie Policy
Lufthansa uses browser cookies, scripts, web beacons, tracking URLs, pixel tags and similar technologies (referred to below as "cookies") to provide, protect and improve our website and applications. We explain below how our cookies work, what they are used for, what type of data they each collect and how you can manage your cookie settings.
What are cookies and how do they work?
Cookies are tiny files. Whenever you visit our website or app (referred to below as our "platform"), these files are downloaded to your browser folder or the hard disk of your computer, tablet or smartphone (referred to below as your "device"). Every time you visit our platform, the cookies and platform communicate with each other so they can recognise your device. This is useful both for you and also for us. For example, with the help of a cookie, the text you enter in the fields of a form on our website can be stored so that you do not need to enter the same information all over again when you next visit the page. This makes our platforms more user-friendly. We manage the cookies using a small programme called a tool or a tag.
We use cookies from both first-party and third-party providers. First-party cookies originate from our platform and only transmit information to us; third-party cookies are placed on our website by third-party providers and transmit information about your device to other companies who can read this cookie. In most cases, the information in a cookie is pseudonymised or anonymised because cookies normally do not identify you as a person but only your device. In very few cases, certain cookies may be linked to personal data. We will only process such data if you have given us your consent to do so, or if the processing is necessary for you to be able to use a certain service, such as your lufthansa.com profile.
You will find further information about cookies at https://www.youronlinechoices.eu/
Glossary
An anonymised IP address is an IP address that cannot be linked to a specific customer. It is generated by removing part of the data in the original IP address. This anonymised address can then be linked to a certain area in a city.
Encrypted user identifiers
Encrypted user identifiers are identifiers that can be linked to a particular user profile. Thanks to the encryption they are unidentifiable and can never be linked to an individual customer.
Flight search details
Flight search details are the data that is generated when a customer searches for a flight. This is anonymised data, including the flight’s places of departure and destination, date, number and type of passengers, and booking classes.
An IP address is a unique address that identifies a customer’s device on the Internet. IP addresses are important for security and preventing fraud.
Passenger details
Passenger details are information about individual passengers, such as name, postal address and email address. This data is collected when required to fulfil a customer’s booking request.
Session identifiers
Anonymised session identifiers are combinations of numbers and letters and are used to identify an individual visit (or session) to a platform. For example, you can navigate forwards and backwards in the booking process without having to start a completely new search.
User behaviour
Data is generated about a user’s behaviour whenever a customer interacts with our platforms. This includes the specific sequence of pages they viewed, the buttons or other elements they clicked, scrolling behaviour or mouse movements.
Cookie settings
Most browsers automatically accept all cookies; however, you can decide for yourself whether or not we or external third parties can store cookies on your device.
a) Consent Manager
When you visit our platform for the first time, a so-called Consent Manager opens up in a pop-up window. You can select in this Consent Manager which category of cookies you wish to accept. You can change your selection at any time by clicking on the link "Change privacy settings" at the bottom of the platform. Changing the settings does not automatically lead to the deletion of the cookies. To do this, follow the instructions below.
b) Browser settings
You can change your browser settings at any time so that no more cookies are accepted or stored. You can also decide to have a warning message displayed each time before you accept cookies. Or you can set your browser only to accept cookies from specific websites. You can also delete cookies that were stored previously. If you delete all cookies, the so-called opt-out cookies, which are intended for the rejection of cookies, will also be deleted from your device. On your next visit to our platform, the Consent Manager may then be displayed again. Therefore, you may also need to reset the rejections. Below you will find a general guide to managing cookies for the most common browsers:
c) Cookie blockers
You can also use cookie blockers such as "DoNotTrackMe".
Please note that if you reject cookies, some functions of the website may either not be available at all, or only to a limited extent. We therefore recommend that you accept our cookies and those of our partners in your browser settings.
Categories of cookies
1. Essential cookies
Essential cookies are used to manage the platform. They allow it to function smoothly, for example for flight bookings, providing the correct answers to your queries and guaranteeing security functions, such as preventing malicious use of the website. Essential cookies can never be deactivated, as they are absolutely necessary to provide the website for you to use; however, you can delete them in your browser after using the website. The legal basis for the processing of these cookies is our legitimate interest pursuant to Art. 6(1)(f) GDPR. The basis for our legitimate interest is to guarantee the security and functionality of this website. In addition, storage of the essential cookies in your browser or on your device is absolutely necessary pursuant to Section 25 (2)(2) of Germany’s Telecommunications Digital Services Data Protection Act (TDDDG) in order for the website you have accessed to be made available with its services.
We use the following essential cookies:
Lifetime
Privacy Policy
Google Tag Manager
(script)
N/A
Google Tag Manager is a tag management system that enables the implementation of scripts and tracking pixels on websites and in apps. We use this script provided by Google to optimise our landing pages.
Data transfer to a third country: no
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Privacy Policy:
http://www.google.com/privacy/
anonymised user identifiers,
flight search details
Tealium Collect
(script)
N/A
Tealium Collect is a function of the Tealium tag management system and is used to pre-process data that is to be sent to other tools we use or to third parties. Tealium Collect does not itself store any data. It transmits data to servers in Germany, where it is processed and forwarded to other tools listed in this policy.
Data transfer to a third country: no
Tealium Inc.
Sovereign House, Second Floor,
Vastern Road, Reading RG1 8BT, United Kingdom
N/A
Session identifiers,
anonymised user identifiers,
encrypted user identifiers,
IP address
RecentSearch
(Cookie)
RecentSearch
Up to 2 years
The RecentSearch cookie is implemented and was created by Lufthansa to improve the user experience on our website. It saves your most recent search so that you can go back to it on your next visit. All the data generated by this cookie remains on your computer and is not shared with any third parties.
Data transfer to a third country: no
N/A
Flight search details
2 years,
59 months (cookie)
Data transfer to a third country: yes, USA
717 N. Harwood Street Suite 1900 Dallas, TX 7520, USA
anonymised user identifier,
anonymised IP address
ak_bmsc
AKA_A2
bm_sv
bm_sz
Parkring 20-22,
85748 Garching bei München, Germany
ApplicationGatewayAffinity-PRODLUFTHANSA-443
ApplicationGatewayAffinityCORS
ApplicationGatewayAffinity
Azure cookies, working in conjunction with the active web server, are used to guarantee that the session is maintained, including buffering the website user if there is a change of server, as different IP addresses are used to which the requests must be assigned.
Data transfer to a third country: yes, USA
Redmond, WA 98052-6399
USA https://privacy.microsoft.com/de-de/privacystatement
utag_main
AMP_TOKEN
channelcloser
channelflow
channeloriginator
CONSENTMGR
Data transfer to a third country: yes, United Kingdom
IP address
HomepageMarket
_lh.cookie.persistent
This cookie is used to provide correct localisation of the website’s country page (home market). The cookie ensures that the website is automatically displayed in the correct country version and language.
This cookie automatically detects whether the browser supports cookies or not, in order to be able to provide a correctly customised website.
IP address
Yes/No value
For all the following categories (2–4), we process your data based on your consent pursuant to Art. 6(1)(a) GDPR that you give us through the choice you make in the Consent Manager. Consent given can be withdrawn at any time via the Consent Manager.
2. Analytics cookies
We use these cookies to:
- monitor data traffic on the website and improve its user-friendliness
- evaluate which marketing channels are performing best
- analyse aggregated data about the use of the website to understand our customers better. Random identifiers that are shared with partners.
You can find out more details about this in the table below:
Cookie name
Lifetime
Purpose
Privacy Policy
Type of data collected
Google Analytics
(script, cookie)
_ga
_gid
26 months
Google Analytics is a tool that analyses websites. We use Google Analytics to collect aggregated, anonymised data. Based on this data, we can see how customers are using our platforms and identify potential areas for improvement. In addition, the data performs important platform functions such as the detection of errors and fraudulent activities, and it prepares operational data. We use this information to improve the quality, effectiveness and performance of our platforms, enabling you to make the best use of them.
The Google Analytics script is used to assign values to the cookies that are necessary to collect this information. For this to work, Google Analytics places cookies on your computer. Google is not authorised to access this data. Google Analytics anonymises your IP address in order to protect your data. No other personal data is collected that would enable you to be identified.
Your consent is transmitted to Google for the following processing: storage of analytics (allows the storage of analysis cookies).
Data transfer to a third country: no
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Privacy Policy:
http://www.google.com/privacy/
You can prevent the collection and processing
of your data (including your IP address) by Google Analytics
by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout?hl=en
anonymised user identifiers,
encrypted user identifiers,
flight search details,
booking details,
anonymised IP address
Kayak
(script, cookie)
xp-session-seg
We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Kayak, if the customers were referred to our platforms by Kayak. Kayak uses an encrypted user identifier in the form of a cookie that enables this script to link a booking to an earlier session on the Kayak website. The use of these technologies by third-party providers is governed by their own privacy policies.
Data transfer to a third country: yes, USA
(data transfer based on standard contractual clauses)
Kayak
7 Market Street
Stamford, CT 06902
USA
Kayak Privacy Policy:
https://www.kayak.com/privacy
encrypted user identifiers,
booking details
Skyscanner
(script)
N/A
We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Skyscanner, if the customers were referred to our platforms by Skyscanner.
Data transfer to a third country: yes, globally
(Data sharing on the basis of adequacy decision)
Skyscanner Limited
Floor 6, The Avenue
1 Bedford Avenue
London, WC1B 3AU
United Kingdom
Anonymised identifiers,
booking details
Artefact AAA
(script, cookie)
trs
aaaid
14 days
We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Artefact and all partner programmes of which you are a member, and sets an external cookie. For example, our Cashback programme requires this script and this cookie in order to run properly. The use of these technologies by third-party providers is governed by their own privacy policies.
Data transfer to a third country: no
Artefact Germany GmbH
Rothenbaumchaussee 80C
20148 Hamburg
Germany
Artefact Privacy Policy:
https://aaa.artefact.com/privacy-policyeng.do
You can also use their direct opt-out option:
https://aaa.artefact.com/privacy-optout.do?appLocale=eng
booking details,
encrypted user identifiers
· Facebook-Cookie-ID
N/A
We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
These special scripts pass anonymised booking details (no personal data) onto our marketing agency, Mindshare, to evaluate the performance of marketing campaigns in different publisher networks.
Mindshare LLC
498 7th Avenue
New York, NY 10018
USA
N/A
Anonymised identifiers,
booking details
Quantum Metrics
(script, cookie)
QuantumMetricUserID
Session 30 min., (user 1 year)
Quantum Metrics is a web analytics tool that is intended to help us track how the website is used and identify areas for improvement, in order to meet our customers’ needs better. It uses cookies to identify a visitor’s browser and track the user’s behaviour. Their mouse clicks and sessions are recorded anonymously in order to improve the website, analyse errors and create heatmaps and
behaviour reports.
Data transfer to a third country: yes, USA
corporation
10807 New Allegiance Drive, Ste 155
Colorado Springs, CO 80921 USA
Privacy Policy of
Quantum Metrics:
https://www.quantummetric.com/legal/privacy-policy/
You can also use their direct
opt-out option:
https://www.quantummetric.com/legal/privacy-policy/#:~:text=Our%20sharing%20of%20your
user behaviour
Exactag
(script, cookie)
et_gk
et_uk
Exactag GmbH collects, processes and stores data on this website and its subpages for the purposes of measuring reach, statistical analysis and improving cost optimisation. The cookie technology is used for browser recognition. Exactag cookies are processed exclusively in Germany and contain only pseudonymised data.
Data transfer to a third country: no
Wanheimer Strasse 68
40468 Dusseldorf
Germany
booking details, flight search details, encrypted user identifiers
Amadeus IT Group SA
Salvador de Madariaga 1
28027 Madrid
Spain
Lufthansa uses the Responsys Conversion Script to measure the effectiveness of newsletter and mailing campaigns.
When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.
Data transfer to a third country: yes, USA
Oracle Corporation
10 Van de Graaff Drive
Burlington
Massachusetts 01803
United States of America
365 days
Lufthansa uses the Marigold Engage Tracker Script to measure the effectiveness of newsletter and mailing campaigns.
When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.
Data transfer to a third country: no
Marigold Europe, NV
Kempische Steenweg 305 bus 401
Hasselt, Belgium 3500
3. Personalisation cookies
We use these cookies to:
- store your preferences from earlier visits
- collect user feedback to improve our website
- analyse your interests to offer you tailored content and offers
You can find details about this in the table below:
Purpose
Type of data collected
GetFeedback Digital (formerly Usabilla)
(Cookie)
N/A
Lufthansa AG uses the feedback services “GetFeedback Digital for Websites” and “GetFeedback Digital for Apps” (formerly Usabilla) to evaluate user feedback and improve the website. When a user clicks on the feedback button or fills in an online survey, a cookie is stored on their computer. The user’s browser creates a direct link to the GetFeedback Digital server and transfers the data relating to the device. You can find further information in the Survey Monkey Inc. Privacy Policy.
Data transfer to a third country: no
2 Shelbourne Buildings,
2nd Floor Shelbourne Road,
Ballsbridge, Dublin, D04W3V6,
Ireland
Flight search details
(script, cookie)
Data transfer to a third country: yes, USA
encrypted user identifiers,
anonymised IP address,
flight search details,
user profile,
user behaviour
Lufthansa uses the Responsys Conversion Script to track the effectiveness of newsletter and mailing campaigns and to achieve improvement in the user experience through personalisation, segmentation, remarketing and/or retargeting.
When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.
Data transfer to a third country: yes, USA
Oracle Corporation
10 Van de Graaff Drive
Burlington
Massachusetts 01803
United States of America
365 days
When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.
Data transfer to a third country: no
Marigold Europe, NV
Kempische Steenweg 305 bus 401
Hasselt, Belgium 3500
4. Advertising cookies
We use these cookies to:
- carry out online advertising and advertising in social networks that are more relevant to you
- invite certain groups of customers to revisit our products at a later time
- share data with our advertising and social media partners via their external cookies to follow up on your interests
You can find out more details about this in the table below:
Purpose
Type of data collected
Google Analytics
Advertising functions
(script, cookie)
_ga
_gat
Up to 2 years
Google Analytics is a web analytics tool that also offers integration with Google advertising products on the Google marketing platform. We use this script to create remarketing lists or target groups in order to personalise our online advertising campaigns. If you give us your consent, Google Analytics will add your cookie to one or more target group lists. We can create lists of users who have visited a particular page or searched for a particular destination. These cookies may also be combined with location information or interest segments provided by Google. These lists allow us to contact you again with relevant, personalised advertising elsewhere on the Internet. No personal data is collected during this process and we are not able to identify either you or your device. However, during this process the information from our first-party cookie is combined with cookies from external providers and is shared with them.
Google can use the data collected in combination with data that Google collects about you to personalise advertising on its own network. You will find further information in the Google Privacy Policy.
Google can use the data collected together with the data that Google collects about you to personalise advertising on its own network. You will find further information in the Google Privacy Policy.
Your consent is transferred to Google for the following processing:
storage of advertising (allows the storage of advertising cookies and information about advertising interactions)
personalisation of advertising (allows the personalisation of advertising)
advertising user data (use of user data for the personalisation of advertising).
Data transfer to a third country: no
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Privacy Policy:
http://www.google.com/privacy/
You will find further information about data protection measures taken
by Google in relation to advertising
at:
http://www.google.com/privacy/ads/
You can amend your advertisement settings
with Google at:
http://www.google.com/settings/ads/
encrypted user identifiers
Google Ads
Remarketing
(script, cookie)
_ga
Up to 2 years
We use this script from Google Adwords to create remarketing lists or similar target groups to personalise our online advertising. Google links sessions on our website (first-party cookie) to one of the Google advertising cookies on users’ browsers (external cookie). If you later perform a search on google.com using the same browser, you may see customised ads based on your earlier sessions on our platform.
Google can use the data collected in combination with data that Google collects about you to personalise advertising on its own network. You will find further information in the Google Privacy Policy.
Google can use the data collected together with the data that Google collects about you to personalise advertising on its own network. You will find further information in the Google Privacy Policy.
Your consent is transferred to Google for the following processing:
storage of advertising (allows the storage of advertising cookies and information about advertising interactions)
personalisation of advertising (allows the personalisation of advertising)
advertising user data (use of user data for the personalisation of advertising).
Data transfer to a third country: no
EW Discover GmbH as the second data controller uses Google Ads Remarketing on this site for the purpose of retargeting advertising.
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Privacy Policy:
http://www.google.com/privacy/
You will find further information about data protection measures taken
by Google in relation to advertising
at:
http://www.google.com/privacy/ads/
You can amend your advertisement settings
with Google at:
http://www.google.com/settings/ads/
Legal notice for Discover Airlines:
https://www.discover-airlines.com/de/impressum/
Discover Airlines Privacy Notice:
https://www.discover-airlines.com/de/datenschutzerklaerung/
Floodlight
(script, cookie)
_IDE
_ga
_gcl_au
Up to 2 years
Floodlight is the conversion tracking system for the Google Marketing Platform. We use the Floodlight script (formerly DoubleClick Floodlight) to track the performance of our own campaigns for the Google search engine and display advertising on Google. Floodlight uses data about your visit and your click behaviour on our website and on third-party websites for this purpose. If you visit certain subpages of our website, then the Google Marketing Platform may report that you accessed our website via one of these advertisements.
Google DoubleClick sets an external cookie. Google can use the data collected in combination with data that Google collects about you to personalise advertising on its own network. You will find further information in the Google Privacy Policy.
Your consent is transferred to Google for the following processing: storage of advertising (allows the storage of advertising cookies and information about advertising interactions), personalisation of advertising (allows the personalisation of advertising),
advertising user data (use of user data for the personalisation of advertising).
Data transfer to a third country: no
EW Discover GmbH as the second data controller uses Floodlights on this site for the purpose of measuring the effectiveness of advertising.
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Privacy Policy:
http://www.google.com/privacy/
You will find further information about Google’s Privacy Policy
in relation to advertising
at:
http://www.google.com/privacy/ads/
You can amend your advertisement settings
with Google at:
http://www.google.com/settings/ads/
Discover Airlines legal notice: https://www.discover-airlines.com/de/impressum/
Discover Airlines Privacy Policy: https://www.discover-airlines.com/de/datenschutzerklaerung/
search details,
booking details,
encrypted user identifiers, anonymised IP address
Google Flights
(script, cookie)
_gcl_gf
Up to 2 years
We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Google Flights, if the customers were referred to our platforms by Google Flights. Google Flights uses first- and third-party cookies and can therefore link a booking with an earlier session on the Google Flights website.
Google can use the data collected in combination with data that Google collects about you to personalise advertising on its own network. You will find further information in the Google Privacy Policy.
Data transfer to a third country: no
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Privacy Policy:
http://www.google.com/privacy/
You can amend the settings for Google advertisements at any time at:
http://www.google.com/settings/ads
booking details,
encrypted user identifiers
Tealium AudienceStream
(script)
Tealium AudienceStream processes signals from your website interaction by using pseudonymised usage profiles that are combined with your booking behaviour by Tealium on behalf of Lufthansa Group when you are logged in. Your identification as a customer is carried out using three items of personal data (Miles & More service card number, UCID as LHG customer number and email address). This data is encrypted and transmitted to Tealium using only patented cryptographic technologies.
Data transfer to a third country: no
This data processing leads to the creation of target groups that Lufthansa uses for the roll-out of advertising formats such as display advertising or similar. This helps to make the offers in the advertising more relevant to the customer. Lufthansa may also decide in some cases not to display any advertising.
Second Floor, Vastern Road, Reading RG1 8BT, United Kingdom
N/A
anonymised user identifiers,
encrypted user identifiers,
flight search details.
booking details,
IP address
Hashed email
Meta
(pixel/web beacon)
_fbp
(90 days)
The Meta pixel is a JavaScript code, activated when a website is accessed, that is used to optimise Lufthansa campaigns on Meta platforms.
1. Personalised advertising (targeting):
The Meta pixel enables user data to be collected in order to display targeted advertising on Facebook, Instagram and in the Meta advertising network. This allows Lufthansa to target users with customised advertisements based on their behaviour and interests.
2. Conversion tracking:
The Meta pixel measures whether users perform certain actions on the website (e.g. purchase) after interacting with an advertisement (e.g. on Facebook). This is used to track the success of advertising campaigns and to evaluate the effectiveness of advertisements.
3. Retargeting:
With the Meta pixel, Lufthansa can retarget users who have previously visited lufthansa.com. This makes it possible to reshow relevant advertisements to these users, for example to remind them about abandoned purchase transactions.
4. Optimising advertising campaigns:
The data collected makes it possible to optimise advertising campaigns and create better target groups based on user behaviour and conversions. This serves to increase the efficiency of marketing measures.
You will find further details in the Facebook Privacy Policy.
Data transfer to a third country: yes, globally
Facebook, Inc.
1 Hacker Way
Menlo Park, CA 94025 USA
https://www.facebook.com/about/privacy
You can amend your advertising settings on Facebook here: https://www.facebook.com/ads/about/?entry_product=ad_preferences
You can also remove the right of third parties to use your information via these platforms:
To your advertising selection: https://optout.aboutads.info/?c=2&lang=EN
To your online selection: https://www.youronlinechoices.com/
· Session identifiers
· search details
· length of stay and interactions
· booking details
· encrypted user identifiers
· technical data (IP address, browser type, referrer- & visited URL)
· Facebook-Cookie-ID
Changes to the Cookie Policy
We update our Cookie Policy from time to time. Check back regularly to ensure you are always kept up to date with the latest version.
Any questions?
Further information about cookies is available from the Data Protection Officer at datenschutz@dlh.de. Please refer to our Privacy Policy if you would like to know more about how we use your personal data in general.
Last updated: 11/10/2024