Cookie Policy

Lufthansa uses browser cookies, scripts, web beacons, tracking URLs, pixel tags and similar technologies (referred to below as "cookies") to provide, protect and improve our website and applications. We explain below how our cookies work, what they are used for, what type of data they each collect and how you can manage your cookie settings.

What are cookies and how do they work?

Cookies are tiny files. Whenever you visit our website or app (referred to below as our "platform"), these files are downloaded to your browser folder or the hard disk of your computer, tablet or smartphone (referred to below as your "device"). Every time you visit our platform, the cookies and platform communicate with each other so they can recognise your device. This is useful both for you and also for us. For example, with the help of a cookie, the text you enter in the fields of a form on our website can be stored so that you do not need to enter the same information all over again when you next visit the page. This makes our platforms more user-friendly. We manage the cookies using a small programme called a tool or a tag.

We use cookies from both first-party and third-party providers. First-party cookies originate from our platform and only transmit information to us; third-party cookies are placed on our website by third-party providers and transmit information about your device to other companies who can read this cookie. In most cases, the information in a cookie is pseudonymised or anonymised because cookies normally do not identify you as a person but only your device. In very few cases, certain cookies may be linked to personal data. We will only process such data if you have given us your consent to do so, or if the processing is necessary for you to be able to use a certain service, such as your lufthansa.com profile.

You will find further information about cookies at https://www.youronlinechoices.eu/

Learn more about your online choices

Glossary

Term Description Anonymised IP address An anonymised IP address is an IP address that cannot be linked to a specific customer. It is generated by removing part of the data in the original IP address. This anonymised address can then be linked to a certain area in a city. Booking details Booking details are the data that is generated when a customer books a flight. This is anonymised data about the flight, including its places of departure and destination, date, number and type of passengers, booking classes and additional services purchased. It also includes anonymised data about the form of payment (credit card or invoice), encrypted order ID (without any ticket numbers or confirmation numbers) and the time stamp. Encrypted user identifiers Encrypted user identifiers are identifiers that can be linked to a particular user profile. Encryption makes them unidentifiable and they can never be linked to an individual customer. Flight search details Flight search details are the data that is generated when a customer searches for a flight. This is anonymised data, including the places of departure and destination of the flight, the date, number and type of passengers and booking classes. IP address An IP address is a unique address that identifies a customer’s device on the internet. IP addresses are important for security and preventing fraud. Passenger details Passenger details are information about individual passengers such as their names, postal and email addresses. This data is collected when it is required to fulfil a customer’s booking request. Session identifiers Anonymised session identifiers are combinations of numbers and letters and are used to identify an individual visit (or session) to a platform. For example you can navigate forwards and backwards during the booking process without having to start a new search. User behaviour Data is generated about a user’s behaviour whenever a customer interacts with our platforms. This includes the specific sequence of pages visited, buttons or other elements clicked, scrolling behaviour or mouse movements.

Cookie settings

Most browsers automatically accept all cookies; however, you can decide for yourself whether or not we or external third parties can store cookies on your device.

a) Consent Manager

When you visit our platform for the first time, a so-called Consent Manager opens up in a pop-up window. You can select in this Consent Manager which category of cookies you wish to accept. You can change your selection at any time by clicking on the link "Change privacy settings" at the bottom of the platform. Changing the settings does not automatically lead to the deletion of the cookies. To do this, follow the instructions below.

b) Browser settings

You can change your browser settings at any time so that no more cookies are accepted or stored. You can also decide to have a warning message displayed each time before you accept cookies. Or you can set your browser only to accept cookies from specific websites. You can also delete cookies that were stored previously. If you delete all cookies, the so-called opt-out cookies, which are intended for the rejection of cookies, will also be deleted from your device. On your next visit to our platform, the Consent Manager may then be displayed again. Therefore, you may also need to reset the rejections. Below you will find a general guide to managing cookies for the most common browsers:

Google Chrome
Microsoft Internet Explorer
Mozilla Firefox
Apple Safari
Opera Web

c) Cookie blockers

You can also use cookie blockers such as "DoNotTrackMe".

Please note that if you reject cookies, some functions of the website may either not be available at all, or only to a limited extent. We therefore recommend that you accept our cookies and those of our partners in your browser settings.

Categories of cookies

1. Essential cookies

Essential cookies are used to manage the platform. They allow it to function smoothly, for example for flight bookings, providing the correct answers to your queries and guaranteeing security functions, such as preventing malicious use of the website. Essential cookies can never be deactivated, as they are absolutely necessary to provide the website for you to use; however, you can delete them in your browser after using the website. The legal basis for the processing of these cookies is our legitimate interest pursuant to Art. 6(1)(f) GDPR. The basis for our legitimate interest is to guarantee the security and functionality of this website. In addition, storage of the essential cookies in your browser or on your device is absolutely necessary pursuant to Section 25 (2)(2) of Germany’s Telecommunications Digital Services Data Protection Act (TDDDG) in order for the website you have accessed to be made available with its services.

We use the following essential cookies:

Name of tool/tag Cookie name and lifetime Purpose Business address Privacy Policy Type of data collected Monetate-Kibo Commerce
(script/cookie)
  • mt.v

2 years

59 months (cookie)

We use the Monetate tool from Kibo Commerce to personalise the appearance of the website, display locally relevant news to our customers (based on pseudonymised IP addresses), or integrate new components. We also use them to improve user-friendliness and ensure the seamless integration of new services. The cookie placed by Monetate is essential to ensure our customers a consistent user experience.

Data transfer to a third country: yes, USA

 Kibo Software, Inc.
717 N. Harwood Stree Suite 190
Dallas TX 752
USA
  • Session identifiers
  • Anonymised user identifiers
  • Anonymised IP address
 Tealium (script/cookie)
  • utag_main
  • utag_optout
  • channelcloser
  • channelflow
  • channeloriginator
  • cmv3
  • CONSENTMGR
  • tealium_0

(Up to 12 months)

Tealium is a tag management system that enables the implementation of scripts and tracking pixels on our websites and apps. It helps us send data to the tools we use and third-party vendors, but it does not store any data itself. It installs cookies that allow us to identify you as an anonymised individual user. For example these cookies mean you only have to select which cookies you accept on your first visit and not every time you move to another page.

Data transfer to a third country: no

​Tealium
11095 Torreyana Road,
San Diego, CA 92121 USA
  • Session identifiers
  • Anonymised user identifiers
 Google Tag Manager (script) N/A

Google Tag Manager is a tag management system that enables the implementation of scripts and tracking pixels on websites and apps. We use this script provided by Google to optimise our landing page.

Data transfer to a third country: yes, USA

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

​Google Privacy Policy
  • Session identifiers
  • Anonymised user identifiers
  • Flight search details
 Awin (Payback) (script/cookie)
  • userFP
  • b425

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).

This special script shares anonymised booking details with Awin and places a third-party cookie if the customers were referred to our platforms by Payback. Our Payback programme requires this script and cookie to fulfil its purpose. The use of these technologies by third-party providers is governed by their own privacy policies.

Data transfer to a third country: yes, United Kingdom

​AWIN AG
Eichhornstr. 3.
D-10785 Berlin

​Email

​Website
  • Booking details
  • Encrypted user identifiers
 First-party cookies
  • OSFlightSearch[DESTStationName]
  • OSFlightSearch[DESTStation]
  • OSFlightSearch[ORGStationName]
  • OSFlightSearch[ORGStation]
  • OSFlightSearchang
  • osses
  • sales_site#aua_country
  • sales_site#dark sitechecked
  • sales_site#lang
  • sales_site#mobile_device_checked
  • tmsee
  • _smt_uid
  • lastSearches_item0
  • lastSearches_item1
  • lastSearches_item2
  • lastSearches_item3
  • lastSearches_item4
  • lastSearches_item5
  • lastSearches_version
  • austrian-cookie-info
 First-party cookies are used to manage the platform.

Austrian Airlines AG
Office Park 2
PO Box 100
A-1300 Vienna Airport

Registered office: Vienna

Legal form: Limited liability company (GmbH)

​Website
  • Session identifiers
  • search details,
  • Encrypted user identifiers

For all the following categories (2–4), we process your data based on your consent pursuant to Art. 6(1)(a) GDPR that you give us through the choice you make in the Consent Manager. Consent given can be withdrawn at any time via the Consent Manager.

2. Analytics cookies

We use these cookies to:

  • monitor data traffic on the website and improve its user-friendliness
  • evaluate which marketing channels are performing best
  • analyse aggregated data about the use of the website to understand our customers better. Random identifiers that are shared with partners.

You can find out more details about this in the table below:

Name of the type of tool/tag Cookie name/Lifetime Purpose
 Business address
Privacy Policy Type of data collected

Google Analytics

(script, cookie)

_ga
_gid

26 months

Google Analytics is a tool that analyses websites. We use Google Analytics to collect aggregated, anonymised data. Based on this data, we can see how customers are using our platforms and identify potential areas for improvement. In addition, the data performs important platform functions such as the detection of errors and fraudulent activities, and it prepares operational data. We use this information to improve the quality, effectiveness and performance of our platforms, enabling you to make the best use of them.
The Google Analytics script is used to assign values to the cookies that are necessary to collect this information. For this to work, Google Analytics places cookies on your computer. Google is not authorised to access this data. Google Analytics anonymises your IP address in order to protect your data. No other personal data is collected that would enable you to be identified.

Your consent is transmitted to Google for the following processing:​ storage of analytics (allows the storage of analysis cookies).

Data transfer to a third country: no

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

​Google Privacy Policy

You can prevent the collection and processing
of your data (including your IP address) by Google Analytics
by downloading and installing the ​browser plug-in available

 Session identifiers,
anonymised user identifiers,
encrypted user identifiers,
flight search details,
booking details,
anonymised IP address

Kayak

(script, cookie)

xp-session-seg

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Kayak, if the customers were referred to our platforms by Kayak. Kayak uses an encrypted user identifier in the form of a cookie that enables this script to link a booking to an earlier session on the Kayak website. The use of these technologies by third-party providers is governed by their own privacy policies.

Data transfer to a third country: yes, USA
(data transfer based on standard contractual clauses)

Kayak
7 Market Street
Stamford, CT 06902
USA

​Kayak Privacy Policy



encrypted user identifiers,
booking details

Skyscanner

(script)

 N/A

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Skyscanner, if the customers were referred to our platforms by Skyscanner.

Data transfer to a third country: yes, globally
(Data sharing on the basis of adequacy decision)

Skyscanner Limited
Floor 6, The Avenue
1 Bedford Avenue
London, WC1B 3AU
United Kingdom


Anonymised identifiers,
booking details

Artefact AAA

(script, cookie)

trs
aaaid

14 days

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
This special script shares anonymised booking details with Artefact and all partner programmes of which you are a member, and sets an external cookie. For example, our Cashback programme requires this script and this cookie in order to run properly. The use of these technologies by third-party providers is governed by their own privacy policies.

Data transfer to a third country: no

Artefact Germany GmbH
Rothenbaumchaussee 80C
20148 Hamburg
Germany

​Artefact Privacy Policy

​You can also use their direct opt-out option

booking details,
encrypted user identifiers

· Facebook-Cookie-ID

 N/A

We use conversion scripts to track the success/completion of a promotion (purchases, newsletter subscriptions, effectiveness of advertising campaigns).
These special scripts pass anonymised booking details (no personal data) onto our marketing agency, Mindshare, to evaluate the performance of marketing campaigns in different publisher networks.

Mindshare LLC
498 7th Avenue
New York, NY 10018
USA

N/A

Anonymised identifiers,
booking details

Quantum Metrics

(script, cookie)

 QuantumMetricSessionID,
QuantumMetricUserID
Session 30 min., (user 1 year)

Quantum Metrics is a web analytics tool that is intended to help us track how the website is used and identify areas for improvement, in order to meet our customers’ needs better. It uses cookies to identify a visitor’s browser and track the user’s behaviour. Their mouse clicks and sessions are recorded anonymously in order to improve the website, analyse errors and create heatmaps and
behaviour reports.

Data transfer to a third country: yes, USA

 Quantum Metric, Inc., a Delaware
corporation
10807 New Allegiance Drive, Ste 155
Colorado Springs, CO 80921 USA

​Privacy Policy of Quantum Metrics
​You can also use their direct opt-out option


 Session identifiers,
user behaviour

Exactag

(script, cookie)




​

et_gk

et_uk

Exactag GmbH collects, processes and stores data on this website and its subpages for the purposes of measuring reach, statistical analysis and improving cost optimisation. The cookie technology is used for browser recognition. Exactag cookies are processed exclusively in Germany and contain only pseudonymised data.

Data transfer to a third country: no

 Exactag GmbH
Wanheimer Strasse 68
40468 Dusseldorf
Germany Anonymised user identifiers,
booking details, flight search details, encrypted user identifiers Session ID booking application Session duration 30 min. The session ID is a session identifier: a temporary session cookie (clear alphanumerical code) generated when you access the booking application and stored in your browser. It is allocated to a user to track their interaction with the website during a session and used, for example, for functional and performance analyses of the website. The session ID is deleted again as soon as the user leaves the website or the session is terminated automatically (session timeout).

Amadeus IT Group SA
Salvador de Madariaga 1
28027 Madrid
Spain


 Session ID/session identifiers Oracle Responsys (pixel/web beacon) N/A

Lufthansa uses the Responsys Conversion Script to measure the effectiveness of newsletter and mailing campaigns.

When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: yes, USA

 ​Oracle Corporation
10 Van de Graaff Drive 
Burlington 
Massachusetts 01803
United States of America Anonymised details about flight searches and flight bookings, such as the departure and arrival airport, passenger number, travel class, price, currency, booking country Marigold Engage Pixel M_trk
365 days

Lufthansa uses the Marigold Engage Tracker Script to measure the effectiveness of newsletter and mailing campaigns.

When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: no

 ​Marigold Europe, NV
Kempische Steenweg 305 bus 401
Hasselt, Belgium 3500 Anonymised details about flight searches and flight bookings, such as the departure and arrival airport, passenger number, travel class, price, currency, booking country

3. Personalisation cookies

We use these cookies to:

  • store your preferences from earlier visits
  • collect user feedback to improve our website
  • analyse your interests to offer you tailored content and offers

You can find details about this in the table below:

Name of tool/tag Cookie name Purpose
 Business address Type of collected data

GetFeedback Digital (formerly Usabilla)

(Cookie)

N/A

Lufthansa AG uses the feedback services “GetFeedback Digital for Websites” and “GetFeedback Digital for Apps” (formerly Usabilla) to evaluate user feedback and improve the website. When a user clicks on the feedback button or fills in an online survey, a cookie is stored on their computer. The user’s browser creates a direct link to the GetFeedback Digital server and transfers the data relating to the device. You can find further information in the ​Survey Monkey Inc. Privacy Policy

Data transfer to a third country: no

 Momentive Europe Unlimited Company
2 Shelbourne Buildings,
2nd Floor Shelbourne Road,
Ballsbridge, Dublin, D04W3V6,
Ireland

Flight search details

 Monetate-Kibo Commerce
(script, cookie) mt.v With your consent, we use Monetate from Kibo Commerce to personalise your user experience on our website. This process is based on customer profile data and your interactions with the website. This allows us to present personalised content and product recommendations for you to view.
 
Data transfer to a third country: yes, USA Kibo Software, Inc. 717 N. Harwood Street Suite 1900 Dallas, TX 7520, USA Session identifier,
encrypted user identifiers,
anonymised IP address,
flight search details,
user profile,
user behaviour Oracle Responsys (pixel/web beacon)   N/A

Lufthansa uses the Responsys Conversion Script to track the effectiveness of newsletter and mailing campaigns and to achieve improvement in the user experience through personalisation, segmentation, remarketing and/or retargeting.

When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: yes, USA

 ​Oracle Corporation
10 Van de Graaff Drive 
Burlington 
Massachusetts 01803
United States of America Details about flight searches and flight bookings, such as the departure and arrival airport, passenger number, travel class, price, currency, booking country Marigold Engage Pixel
 M_trk
365 days Lufthansa uses the Marigold Engage Tracker Script to track the effectiveness of newsletter and mailing campaigns and to achieve improvement in the user experience through personalisation, segmentation, remarketing and/or retargeting.

When a user clicks on a link from a Lufthansa newsletter or mailing which directs them to lufthansa.com, an encrypted user identifier is stored in a pixel/web beacon. If a booking is made, this script links the booking to the corresponding newsletter or mailing campaign.

Data transfer to a third country: no ​Marigold Europe, NV
Kempische Steenweg 305 bus 401
Hasselt, Belgium 3500 Details about flight searches and flight bookings such as the departure and arrival airport, passenger number, travel class, price, currency, booking country destinationFinderHistory (Cookie) destinationFinderHistory
Up to 1 year To improve the user experience on our website the destinationFinderHistory cookie was implemented. It saves your last clicked destinations on the Offers-and-Destination pages so that you can find them more easily on your next visit. All the data generated by this cookie remains on your computer and is not shared with any third parties.
Data transfer to a third country: no N/A Clicks on and searches for destinations on the Offers-and destination pages

4. Advertising cookies

We use these cookies to:

  • carry out online advertising and advertising in social networks that are more relevant to you
  • invite certain groups of customers to revisit our products at a later time
  • share data with our advertising and social media partners via their external cookies to follow up on your interests

You can find out more details about this in the table below:

Name of tool /tag Cookie name

Purpose

 Business Address

Type of data collected

Google Analytics
Advertising Features

(script, cookie)

_ga
_gat

Up to 2y.

Google Analytics is a web analytics tool which also offers an integration with Google advertising products in the Google Marketing Platform. We use this script to create remarketing lists or audiences in order to personalise our online advertising campaigns. If you give us your consent, Google Analytics will add your cookie to one or several audiences lists. We can create lists of users that visited a specific page or looked for a specific destination. Those cookies can also be combined with location information or interests' segments provided by Google. With these lists, we can re-engage you with relevant, personalised advertisement elsewhere on the internet. No personally identifiable information is collected in this process and we are not able to identify you, nor your device. However, during this process, the information from our first party cookie will be combined with third party cookies and shared with third-party vendors.

Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: No

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google’s privacy policy:
​http://www.google.com/privacy/

For further information on Google’s
privacy policy relating to ads,
please go to:
​http://www.google.com/privacy/ads/

You can adjust your Google
advertisements settings by visiting:
​http://www.google.com/settings/ads/

encrypted user identifier

Google Ads
Remarketing

(script, cookie)

_ga

Up to 2y.

We use this script from Google Adwords to create remarketing lists or similar audiences in order to personalise our online advertisement. Google associates sessions on our site (first-party cookie) with one of Google’s advertising cookies on users’ browsers (third-party cookie); when you later perform a search on google.com from the same browser, you may see customised ads based on your previous sessions on our platform.


Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: No

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google’s privacy policy:
​http://www.google.com/privacy/


For further information on Google’s
privacy policy relating to ads,
please go to:
​http://www.google.com/privacy/ads/

You can adjust your Google
advertisements settings by visiting:
​http://www.google.com/settings/ads/

search details,
encrypted user identifier

Floodlight

(script, cookie)

_IDE
_ga
_gcl_au

Up to 2y.

Floodlight is the conversion tracking system for the Google Marketing Platform. We use the Floodlight script (formerly DoubleClick Floodlight) to track the performance of our own Google search engine and display advertising campaigns. To do this, Floodlight uses data about your visit to and click behaviour on our website and third-party websites. If you visit certain pages on our website, Google Marketing Platform can report that your visit was a result of one of these ads.
A third-party cookie is set by Google DoubleClick. Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: No

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google’s privacy policy:
​http://www.google.com/privacy/

For further information on Google’s
privacy policy relating to ads,
please go to:
​http://www.google.com/privacy/ads/

You can adjust your Google
advertisements settings by visiting:
​http://www.google.com/settings/ads/

sessions identifiers,
search details,
booking details,
encrypted user identifier

Google Flights

(script, cookie)

_gcl_gf

Up to 2y.

We use conversion scripts to track the successful completion of an action (purchases, newsletter subscriptions, effectiveness of ad campaigns).
This specific script shares anonymised booking details with Google Flights when customers have been referred to our platforms by Google Flights. It uses first and third-party cookies that allows Google Flights to connect a booking to a previous session on their website.
Google may use the data they collect in connection with data they have about you and personalise the advertising on their own network. For more details, see Google’s Privacy Policy.

Data transmission to a third country: No

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google’s privacy policy:
​http://www.google.com/privacy/

You can always adjust your Google advertisements settings by visiting:
​http://www.google.com/settings/ads


booking details,
encrypted user identifier

 Tealium AudienceStream
(script)   When you log in to our website with your customer profile (LH iD profile, Miles & More profile, or Travel iD profile) and have consented to receive advertising cookies when using our website, we will tailor our marketing communications to offers that are relevant to you, based on your browsing and booking activity, using Tealium AudienceStream.
 
Tealium AudienceStream processes signals of your website interaction to create pseudonymous usage profiles that Tealium, on behalf of the Lufthansa Group (LHG), combines with your booking activity when you are logged in. Customer identification is based on three pieces of personal data (Miles & More service card number, UCID in the form of your LHG customer number, and email address). This data is encrypted exclusively using patented cryptographic technologies and sent to Tealium.
 
Data transfer to a third country: no Tealium Inc. overeign House,
Second Floor, Vastern Road,Reading UK RG1 8BT
N/A session identifiers,
anonymous user identifiers,
encrypted user identifiers,
flight search details,
booking details,
IP address,
hashed email Uplift Inc.
(script, cookie) _up

Up to 2y.

Uplift is committed to your online privacy and security. Uplift (“Uplift”, “we”, “us”, and/or “our”) uses this Privacy Policy to provide you with information about our service and application (“App”) (the service and App together, the “Uplift Service” or “Service”). We also use it to set out our policy and commitments regarding data collection, use, and sharing for websites and applications that use the Uplift Service and reference this Privacy Policy, offer Uplift’s Pay Monthly, use the Uplift JavaScript tag, the Uplift Software Development Kit (SDK) and/or the Uplift Application Programming Interfaces (API’s), collectively (“Site” or “Sites”).

Data transmission to a third country: Yes

 Uplift
440 N. Wolfe Road Sunnyvale, CA 94085

Uplifts Privacy Policy:​https://www.uplift.com/privacy/ encrypted user identifiers,
flight search details,
booking details,
hashed email

Changes to the Cookie Policy

We update our Cookie Policy from time to time. Check back regularly to ensure you are always kept up to date with the latest version.

Any questions?

Further information about cookies is available from the Data Protection Officer at ​datenschutz@dlh.de. Please refer to our Privacy Policy if you would like to know more about how we use your personal data in general.

To the Privacy Policy

Last updated: 11/10/2024