Who is the Controller?
Lufthansa Ground Services Portugal (Avenida da Boavista 1837 - 13.4 4100-133 Porto) (hereinafter also “LGSP”, “we”, “us”), wishes to inform you how your personal data is processed when you use our website www.lufthansa-lgsp.com (“website”).
Whom can I contact?
If you have any further queries regarding data protection in connection with our website or the services offered, please contact our data protection officer:
Group Data Protection Officer for the Lufthansa Group
Dr Barbara Kirchberg-Lennartz
Deutsche Lufthansa AG
Email: datenschutz@dlh.de
Scope, purpose and legal basis of processing personal data
We collect and use personal data directly from our users and other sources (mentioned below) in the following situations: 3.1 Provision of the website and log file creation
By visiting our website the system automatically records data and information about the user’s computer system each time the website is accessed. The following data (“technical information”) are collected:
Information on the browser type and version used
The user’s operating system
The user’s Internet service provider
The user’s IP address
Date and time of access
Websites from which the user’s system accesses our website
Websites accessed by the user’s system via our website
The data are saved to log files to ensure website functionality. The data also help us improve the website and safeguard our information technology systems. The data are not analysed for marketing purposes in this context.
Art. 6(1)(f) GDPR forms the legal basis for the temporary storage of the data and log files.
How long are your data stored?
Your personal data are deleted as soon as they are no longer needed for the specified purposes. In certain circumstances, personal data are kept for the period of time during which claims against LGSP may be enforced (statutory limitation period of three to thirty years). Personal data are also saved to the extent that and for so long as LGSP is legally obliged to do so. To ensure the correct function of the website the log files are kept for a period of 30 days. Corresponding burdens of proof and duties of retention arise from, among others, the Commercial Code, Tax Code and Money Laundering Act. These prescribe retention periods up to ten years.
Right to object pursuant to Art. 21 GDPR
You have the right to object, on reasons relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or processing is necessary for the establishment, exercise or defence of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
What are your data protection rights?
LGSP is committed to ensuring fair and transparent processing. That is why it is important to us that data subjects can not only exercise their right to object but also the following rights where the respective legal requirements are satisfied
Right of access, Art. 15 GDPR
Right to rectification, Art. 16 GDPR
Right to erasure (“right to be forgotten”), Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR
What are your data protection rights?
LGSP is committed to ensuring fair and transparent processing. That is why it is important to us that data subjects can not only exercise their right to object but also the following rights where the respective legal requirements are satisfied:
Right of access, Art. 15 GDPR
Right to rectification, Art. 16 GDPR
Right to erasure, Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR
Right to withdraw consent, Art. 7(3) GDPR
Do you have to provide your personal data?
In the case of visiting the website, you are not obliged to provide personal data. If you do not provide personal data, however, we may not be able to offer you our website, or you may not be able to use certain features.
Processing of personal data in third countries
In general, we do not transfer your personal data to third countries or international organisations. The data collected via our website are hosted exclusively on servers in the European Union.
Amendments to this Data Protection Notice
This Data Protection Notice may be updated from time to time. We will inform you of significant changes and their scope.
Exercise of Rights
You may exercise any of these rights by sending an email to lgsp.geral@dlh.de, including the reference “Request regarding the processing of my personal data” in the email subject line. All communications addressed to LGSP in this regard shall include your name, contact information (email and/or telephone number) and a detailed explanation of your request. In order to process your request and for identification purposes, please note that we will process your personal data in accordance with Art. 6(1)(c) GDPR. If you do not provide the necessary information, we cannot proceed with the request made.
You also have the right to lodge a complaint with a supervisory authority. The relevant supervisory authority for LGSP is Comissão Nacional de Proteção de Dados (Portuguese Data Protection Authority).
Consent
If you give your consent to us for processing your personal data, please note that you may withdraw this consent at any time.
In all other cases or if you have problems withdrawing your consent on the website, you can contact lgsp.geral@dlh.de.
Please note that your consent can only be withdrawn with future effect and such a withdrawal does not have any influence on the lawfulness of past processing. In some cases, we may be entitled in spite of your withdrawal to continue to process your personal data on a different legal basis – e.g. to perform a contract.
Disclaimer and limitations of these data protection notices
These data protection notices only apply to processing for the website www.lufthansa-lgsp.com. Other websites are not covered by these data protection notices and provide their own specific data protection notices.