Cookie Policy

An anonymised IP address is an IP address that cannot be linked to a specific customer. It is generated by removing part of the data in the original IP address. This anonymised address can then be linked to a certain area in a city.

Encrypted user identifiers

Encrypted user identifiers are identifiers that can be linked to a particular user profile. Thanks to the encryption they are unidentifiable and can never be linked to an individual customer.

Flight search details

Flight search details are the data that is generated when a customer searches for a flight. This is anonymised data, including the flight’s places of departure and destination, date, number and type of passengers, and booking classes.

An IP address is a unique address that identifies a customer’s device on the Internet. IP addresses are important for security and preventing fraud.

Passenger details

Passenger details are information about individual passengers, such as name, postal address and email address. This data is collected when required to fulfil a customer’s booking request.

Session identifiers

Anonymised session identifiers are combinations of numbers and letters and are used to identify an individual visit (or session) to a platform. For example, you can navigate forwards and backwards in the booking process without having to start a completely new search.

User behaviour

Data is generated about a user’s behaviour whenever a customer interacts with our platforms. This includes the specific sequence of pages they viewed, the buttons or other elements they clicked, scrolling behaviour or mouse movements.

Google Tag Manager

(script)

N/A

Google Tag Manager is a tag management system that enables the implementation of scripts and tracking pixels on websites and in apps. We use this script provided by Google to optimise our landing pages.

Data transfer to a third country: no

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Privacy Policy:
​http://www.google.com/privacy/

Tealium Collect

(script)

N/A

Tealium Collect is a function of the Tealium tag management system and is used to pre-process data that is to be sent to other tools we use or to third parties. Tealium Collect does not itself store any data. It transmits data to servers in Germany, where it is processed and forwarded to other tools listed in this policy.

Data transfer to a third country: no

Tealium Inc.
Sovereign House, Second Floor,
Vastern Road, Reading RG1 8BT, United Kingdom

N/A

Session identifiers,
anonymised user identifiers,
encrypted user identifiers,
IP address

RecentSearch

(Cookie)

RecentSearch

Up to 2 years

The RecentSearch cookie is implemented and was created by Lufthansa to improve the user experience on our website. It saves your most recent search so that you can go back to it on your next visit. All the data generated by this cookie remains on your computer and is not shared with any third parties.

Data transfer to a third country: no

N/A

Flight search details

HomepageMarket

_lh.cookie.persistent

This cookie is used to provide correct localisation of the website’s country page (home market). The cookie ensures that the website is automatically displayed in the correct country version and language.

This cookie automatically detects whether the browser supports cookies or not, in order to be able to provide a correctly customised website.

IP address

Yes/No value

Google Analytics

(script, cookie)

_ga
_gid

26 months

Google Analytics is a tool that analyses websites. We use Google Analytics to collect aggregated, anonymised data. Based on this data, we can see how customers are using our platforms and identify potential areas for improvement. In addition, the data performs important platform functions such as the detection of errors and fraudulent activities, and it prepares operational data. We use this information to improve the quality, effectiveness and performance of our platforms, enabling you to make the best use of them.
The Google Analytics script is used to assign values to the cookies that are necessary to collect this information. For this to work, Google Analytics places cookies on your computer. Google is not authorised to access this data. Google Analytics anonymises your IP address in order to protect your data. No other personal data is collected that would enable you to be identified.

Your consent is transmitted to Google for the following processing:​ storage of analytics (allows the storage of analysis cookies).

Data transfer to a third country: no

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Privacy Policy:
​http://www.google.com/privacy/

You can prevent the collection and processing
of your data (including your IP address) by Google Analytics
by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout?hl=en

Kayak

(script, cookie)

xp-session-seg

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Kayak, if the customers were referred to our platforms by Kayak. Kayak uses an encrypted user identifier in the form of a cookie that enables this script to link a booking to an earlier session on the Kayak website. The use of these technologies by third-party providers is governed by their own privacy policies.

Data transfer to a third country: yes, USA
(data transfer based on standard contractual clauses)

Kayak
7 Market Street
Stamford, CT 06902
USA

Kayak Privacy Policy:
​https://www.kayak.com/privacy

encrypted user identifiers,
booking details

Skyscanner

(script)

 N/A

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Skyscanner, if the customers were referred to our platforms by Skyscanner.

Data transfer to a third country: yes, globally
(Data sharing on the basis of adequacy decision)

Skyscanner Limited
Floor 6, The Avenue
1 Bedford Avenue
London, WC1B 3AU
United Kingdom

Anonymised identifiers,
booking details

Artefact AAA

(script, cookie)

trs
aaaid

14 days

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Artefact and all partner programmes of which you are a member, and sets an external cookie. For example, our Cashback programme requires this script and this cookie in order to run properly. The use of these technologies by third-party providers is governed by their own privacy policies.

Data transfer to a third country: no

Artefact Germany GmbH
Rothenbaumchaussee 80C
20148 Hamburg
Germany

Artefact Privacy Policy:
​https://aaa.artefact.com/privacy-policyeng.do

You can also use their direct opt-out option:
​https://aaa.artefact.com/privacy-optout.do?appLocale=eng

booking details,
encrypted user identifiers

· Facebook-Cookie-ID

 N/A

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
These special scripts pass anonymised booking details (no personal data) onto our marketing agency, Mindshare, to evaluate the performance of marketing campaigns in different publisher networks.

Mindshare LLC
498 7th Avenue
New York, NY 10018
USA

N/A

Anonymised identifiers,
booking details

Quantum Metrics

(script, cookie)

Quantum Metrics is a web analytics tool that is intended to help us track how the website is used and identify areas for improvement, in order to meet our customers’ needs better. It uses cookies to identify a visitor’s browser and track the user’s behaviour. Their mouse clicks and sessions are recorded anonymously in order to improve the website, analyse errors and create heatmaps and
behaviour reports.

Data transfer to a third country: yes, USA

Exactag

(script, cookie)

​

et_gk

et_uk

Exactag GmbH collects, processes and stores data on this website and its subpages for the purposes of measuring reach, statistical analysis and improving cost optimisation. The cookie technology is used for browser recognition. Exactag cookies are processed exclusively in Germany and contain only pseudonymised data.

Data transfer to a third country: no

Amadeus IT Group SA
Salvador de Madariaga 1
28027 Madrid
Spain

Lufthansa uses the Responsys Conversion Script to measure the effectiveness of newsletter and mailing campaigns.

When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: yes, USA

Oracle Corporation
10 Van de Graaff Drive 
Burlington 
Massachusetts 01803
United States of America

​https://www.oracle.com/legal/privacy/privacy-policy.html

Lufthansa uses the Marigold Engage Tracker Script to measure the effectiveness of newsletter and mailing campaigns.

When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: no

Marigold Europe, NV
Kempische Steenweg 305 bus 401
Hasselt, Belgium 3500

​​https://meetmarigold.com/privacy-notices/

GetFeedback Digital (formerly Usabilla)

(Cookie)

N/A

Lufthansa AG uses the feedback services “GetFeedback Digital for Websites” and “GetFeedback Digital for Apps” (formerly Usabilla) to evaluate user feedback and improve the website. When a user clicks on the feedback button or fills in an online survey, a cookie is stored on their computer. The user’s browser creates a direct link to the GetFeedback Digital server and transfers the data relating to the device. You can find further information in the ​Survey Monkey Inc. Privacy Policy.

Data transfer to a third country: no

Flight search details

Lufthansa uses the Responsys Conversion Script to track the effectiveness of newsletter and mailing campaigns and to achieve improvement in the user experience through personalisation, segmentation, remarketing and/or retargeting.

When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: yes, USA

Oracle Corporation
10 Van de Graaff Drive 
Burlington 
Massachusetts 01803
United States of America

​https://www.oracle.com/legal/privacy/privacy-policy.html

Marigold Europe, NV
Kempische Steenweg 305 bus 401
Hasselt, Belgium 3500

​​https://meetmarigold.com/privacy-notices/

Google Analytics
Advertising Features

(script, cookie)

_ga
_gat

Up to 2y.

Google Analytics is a web analytics tool which also offers an integration with Google advertising products in the Google Marketing Platform. We use this script to create remarketing lists or audiences in order to personalise our online advertising campaigns. If you give us your consent, Google Analytics will add your cookie to one or several audiences lists. We can create lists of users that visited a specific page or looked for a specific destination. Those cookies can also be combined with location information or interests' segments provided by Google. With these lists, we can re-engage you with relevant, personalised advertisement elsewhere on the internet. No personally identifiable information is collected in this process and we are not able to identify you, nor your device. However, during this process, the information from our first party cookie will be combined with third party cookies and shared with third-party vendors.

Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: No

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google’s privacy policy:
​http://www.google.com/privacy/

For further information on Google’s
privacy policy relating to ads,
please go to:
​http://www.google.com/privacy/ads/

You can adjust your Google
advertisements settings by visiting:
​http://www.google.com/settings/ads/

encrypted user identifier

Google Ads
Remarketing

(script, cookie)

_ga

Up to 2y.

We use this script from Google Adwords to create remarketing lists or similar audiences in order to personalise our online advertisement. Google associates sessions on our site (first-party cookie) with one of Google’s advertising cookies on users’ browsers (third-party cookie); when you later perform a search on google.com from the same browser, you may see customised ads based on your previous sessions on our platform.

Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: No

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google’s privacy policy:
​http://www.google.com/privacy/

For further information on Google’s
privacy policy relating to ads,
please go to:
​http://www.google.com/privacy/ads/

You can adjust your Google
advertisements settings by visiting:
​http://www.google.com/settings/ads/

search details,
encrypted user identifier

Floodlight

(script, cookie)

_IDE
_ga
_gcl_au

Up to 2y.

Floodlight is the conversion tracking system for the Google Marketing Platform. We use the Floodlight script (formerly DoubleClick Floodlight) to track the performance of our own Google search engine and display advertising campaigns. To do this, Floodlight uses data about your visit to and click behaviour on our website and third-party websites. If you visit certain pages on our website, Google Marketing Platform can report that your visit was a result of one of these ads.
A third-party cookie is set by Google DoubleClick. Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: No

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google’s privacy policy:
​http://www.google.com/privacy/

For further information on Google’s
privacy policy relating to ads,
please go to:
​http://www.google.com/privacy/ads/

You can adjust your Google
advertisements settings by visiting:
​http://www.google.com/settings/ads/

sessions identifiers,
search details,
booking details,
encrypted user identifier

Google Flights

(script, cookie)

_gcl_gf

Up to 2y.

We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns).
This specific script shares anonymised booking details with Google Flights when customers have been referred to our platforms by Google Flights. It uses first and third-party cookies that allows Google Flights to connect a booking to a previous session on their website.
Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: No

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google’s privacy policy:
​http://www.google.com/privacy/

You can always adjust your Google advertisements settings by visiting:
​http://www.google.com/settings/ads

booking details,
encrypted user identifier

Uplift is committed to your online privacy and security. Uplift (“Uplift”, “we”, “us”, and/or “our”) uses this Privacy Policy to provide you with information about our service and application (“App”) (the service and App together, the “Uplift Service” or “Service”). We also use it to set out our policy and commitments regarding data collection, use, and sharing for websites and applications that use the Uplift Service and reference this Privacy Policy, offer Uplift’s Pay Monthly, use the Uplift JavaScript tag, the Uplift Software Development Kit (SDK) and/or the Uplift Application Programming Interfaces (API’s), collectively (“Site” or “Sites”).

Data transmission to a third country: Yes