We, DEUTSCHE LUFTHANSA AG (Venloer Straße 151-153, 50672 Cologne, Germany) inform you in the following about the processing of personal data processed in connection with the creation and provision of the "Medialounge" service on the Internet.
Should you have any further questions regarding data protection in connection with this service, you can send them to the following e-mail addresses:
Responsible department: FRA CI/ PD
Privacy Officer of the Lufthansa Group
2. the scope, purpose and legal basis of the processing of personal data
SSL: encrypted communication over the Internet
For your security: SSL - the Secure Socket Layer procedure. We only use SSL.
If you use the Medialounge without transmitting data to us in any other way (e.g. by registering or using the contact form), we only collect technically necessary personal data which is automatically transmitted to our server (IP address, date and time of the request, browser type and operating system). The purpose of the processing in this case is the provision of a functioning website. The legal basis for the processing of this personal data is our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO.
You can register on our website. When you register, we collect and store the data that you enter in the input mask (surname, first name, e-mail address) for the purpose of using the shopping cart function and to activate certain media content that you as a user would like to see. The legal basis for this processing is our legitimate interest pursuant to DSGVO Art. 6 Para. 1 lit. f DSGVO.
3. Duration of storage
We only process and store your data for as long as is necessary for processing. Your data will be deleted once the purpose for which it was processed no longer applies.
4. Disclosure of personal data to third parties or permitted recipients
Your personal data will not be passed on to third parties. Permitted recipient is: Serviceplan Solutions GmbH & Co. KG (Processor according to article 28 DSGVO)
There is no data transfer to the third country.
5. Rights of the data subject
Data subjects may exercise the following rights by contacting the person responsible or the data protection officer:
Right of access (Art. 15 DSGVO)
Right to rectification (Art. 16 DSGVO)
Right to cancellation (right to be "forgotten") (Art. 17 DSGVO)
Right to limitation of processing (Art. 18 DSGVO)
Right to data transferability (Art. 20 DSGVO)
Right of objection (Art. 21 DSGVO)
6. The existence of a right of appeal to a supervisory authority:
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular to the Member State of your habitual residence, place of work or place of presumed infringement, if you consider that the processing of your personal data is contrary to this Regulation.
The supervisory authority responsible for DLH AG is the Hessian Commissioner for Data Protection and Freedom of Information:
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany