Purpose & Definitions
The data controller in the sense of the European data protection laws is Lufthansa Technik AG.
Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing is any operation which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
1 Collecting and processing of personal data
It is not possible to use LHT-BMServices.com anonymously as LHT-BMServices.com requires a registration.
1.1 Data processed in the registration process
During the registration process you will be asked to provide mandatory information which includes the following personal data:
Your name (First, last name)
Your business email address
Your employer/company and its address
This mandatory information is marked as such. In the event a registration has not been completed, the data will not be saved.
1.2 Data processed while using LHT-BMServices.com
We will collect personal data that you enter or provide to us while using LHT-BMServices.com. For example the following personal data can be entered in the profile settings of your account:
additional contact details, like business phone number (optional), job title (optional)
It will be optional to provide this information.
Furthermore we will collect data related to the activities you will perform within the application. This will be a timestamped link between your user profile and the data you create / alter while using certain functions such as comments orplace/process orders.
These commercial data will be kept safely stored and not accessible to anyone not related/invited to your order. LHT as platform operator will only use the data for the purposes specified in section 2. It will not be diverted from its intended use. All LHT departments not related to the LHT-BMServices.com team will act as normal platform users and are customers to LHT-BMServices.com as all other parties.
1.3 Data automatically processed from Users
Every time you use the internet your internet browser will automatically transfer certain information that we will store in so-called log-files.
The log-files will solely be stored for the detection of malfunctions and security reasons (e.g. attack detection) for a period between seven and ten days. Log-files will be stored for a longer period of time and might be transferred to investigating authorities if they are needed as evidence if an incident took place. They will be subject to restriction of processing upon the final clearance of the matter.
In particular, log-files include the following information:
IP address of the network from which the online service is accessed,
Date and time of request,
Size of transferred data,
URI of the accessed data,
Operating system and information regarding the internet browser used, including add-ons,
HTTP Response Status Code
For special forms of automatic data processing, such as cookies, please refer to section 6.
2 Purposes of data processing
We may evaluate, retain and use the information provided to us and the data generated from your use of the services only and exclusively limited to the following purposes:
2.1 Offer our service
The main purpose to process personal data is to ensure the functionality of LHT-BMServices.com. If you use LHT-BMServices.com the above mentioned personal data as well as information about activities you performed within the application will be accessible to other users of the platform that you collaborate with (i.e. users of your company or users of another company that is assigned to yourorder).
2.2 Prevent abuse and legal defense
To comply with our legal requirements, enforce our Terms & Conditions, respond to claims that content violates the rights of others, or protect anyone's rights, property or safety we might use the personal data provided by your side.
2.3 Keep you informed
From time to time we might contact you to inform you about critical service updates or other information which is important to support our service. We may also contact you to ensure that information we have in our records is accurate or when in need of additional information to complete your profile.
2.4 Improve our services
In order to improve our service we might contact you to receive feedback and comments from you about our services and inquire about any features you would like to see in future offerings. We may also contact you to ask for your satisfaction rate.
2.5 Statistical purposes
To provide, customize, measure and improve our Services with a focus on the content we might use personal data in order to assist us for our own internal statistical and analytical purposes. No person-related analysis of the data will be carried out.
3 Transfer of data and duration storage
3.1 Transfer of personal data to third parties
Your personal data will only be transferred to third parties if we or a third party have a legitimate interest in the transfer or you granted us your consent to the transfer. A legitimate interest is the securing of a safe and stable operation of the application. We may also transfer personal data which has been rendered anonymous to third parties for statistical purposes. Commercial data will not be transferred to other providers in any case.
Additionally, personal data might be transferred to third parties if we are obliged to transfer the data by German statutory provisions or by an enforceable order of a German court or administrative authority.
3.1.1External service providers
We reserve the right to appoint external service providers for the collection and use of personal data. These service providers will only have access to data they need for the performance of their services. Service providers will generally be appointed as commissioned data processors which are only allowed to process the personal data according to our instructions.
3.2Duration of storage
We will store your personal data as long as we have a legitimate interest in the storage meaning as long as you are using the application as a registered user. In all other cases we will delete your personal data with the exception of those data that we need to store further in order to comply with contractual or statutory retention periods. Data which is only kept because it is subject to a retention period will be blocked for other uses.
4 Rights of the data subject
You have the right of access to your personal data and - if certain prerequisites are present - also to correction, to erasure, to limitation of the data processing and a right to data portability.
In case you gave us your consent for the processing of personal data you may withdraw your consent at any time. Please address your request by using our "Contact us" form on: https://www.lht-bmservices.com/contactus. Please note that you might also be able to correct your data in LHT-BMServices.com by yourself.
4.1 Access to Data
You have the right to be informed whether your personal data is being processed by us, and, if this is the case, to what extent. You are able to access your personal data within your user profile and other parts of the application. If you require information beyond that visible in the application, please contact us at https://www.lht-bmservices.com/contactus.
4.2 Rectification of Data
You have the right to rectification of inaccurate personal data. In your profile settings you are able to see, review and change your personal informationafter signing in to your account. Please update your personal information immediately if it changes or is inaccurate. The personal data which is relevant for the registration process like your name, your company or your email address can only be modified by authorized LHT-BMServices.com system administrators. In order to request the modification of the above mentioned and further data please contactus via our "Contact us" form on: https://www.lht-bmservices.com/contactus.
4.3 Erasure of Data
You have the right to erasure of your personal data processed in LHT-BMServices.com (‘right to be forgotten'). In case you want to delete your personal data please contact us via our "Contact us" form on: https://www.lht-bmservices.com/contactus. We will close your account and make sure that your personal data is deleted as soon as reasonably possible. The data related to your activities as described under section 1.2 of this policy will be anonymized after the closure of your account.
4.4 Restriction of Processing of Data
You have the right to demand a restriction of processing of your personal data under certain preconditions. At any time, you may ask that your preferences as to the type and amount of communication that you receive from us are modified. You can also do this by following the instructions included in each communication or newsletter. For claims beyond such case, please contact us via our "Contact us" form on: https://www.lht-bmservices.com/contactus.
4.5 Data Portability
you have the right to Data Portability, i.e. to receive all personal data that you provided to us in a structured format for your use. In case you want to receive an overview of your personal data which has been collected in accordance with section 1 and 2 of this policy please contact us via our "Contact us" form on: https://www.lht-bmservices.com/contactus. We will then provide you the requested information within a reasonable period of time.
You have the right to object at any time to processing of personal data concerning you. You can do so by contacting us via our "Contact us" form on: https://www.lht-bmservices.com/contactus. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you as the data subject or for the establishment, exercise or defense of legal claims. You especially have the right to object if personal data concerning you is processed for direct marketing purposes.
4.7 Automated individual decision-making, including profiling
LHT-BMServices.com does not use any automated individual decision-making, including profiling.
5 Data security
At Lufthansa Technik we take reasonable technical and organizational measures to guard against unauthorized or unlawful processing of the information collected and against accidental loss or destruction of, or damage to, your personal data.
While no system is completely secure, we believe the measures implemented by our side reduce the likelihood of security problems to a level appropriate to the type of data involved. This includes encrypting the transmission of information using transport socket layer technology at our website, as well as safeguarding your data through firewalls, data encryption and authentication procedures in order to maintain the security of your active session and to protect your personal data and the Services from unauthorized access.
6 Cookies, Tracking and Web analysis tools
Acookie is a small element of data that can be exchanged between an Internet website and a client's browser. It can be stored on either side to enable the Internet application to recognize the client on return. You can set your browser to notify you when you receive a cookie, and you may choose to accept the cookie or not. If you do not accept the cookie, our website cannot be accessed. If you accept the cookie, you can delete it after the session.
LHT-BMServices.com does not use any tracking tools, behavioral remarketing or social plugins such as Google Analytics, Google Ads, Facebook etc.
7 Complaints to data protection authorities
You have the right to lodge a complaint with a supervisory authority.
The following European legislation applies to the subject of data privacy:
REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)
For Germany this regulation is supplemented by the "Bundesdatenschutzgesetz (neu)"
Lufthansa Technik has appointed Dr. Barbara Kirchberg-Lennartz as the data protection officer for Lufthansa Technik. She can be reached as follows:
Dr. Barbara Kirchberg-Lennartz
Deutsche Lufthansa AG
Dep.: FRA CJ/D
8 Contact information
If you have comments or questions, any concerns or a complaint regarding the collection and use of your personal data, please feel free to contact us via our "Contact us" form on: https://www.lht-bmservices.com/contactus