We, Lufthansa Innovation Hub GmbH (hereinafter also “LIH”, we”, “us”), wish to inform you how your personal data is processed when you use our website / App www.rydes.com (“website”).
If you have any further queries regarding data protection in connection with our website or the services offered, please contact our data protection officer:
Contact details for the exercise of data subject rights:
Lufthansa Innovation Hub GmbH
Rosenthaler Str. 32
Contact details of the data protection officer of the Lufthansa Group:
Deutsche Lufthansa AG
Airportring - LAC
A data protection officer is not bound by instructions of the management.
We collect and use personal data directly from our users and other sources (mentioned below) in the following situations:
By visiting our website, the system automatically records data and information
about the user’s computer system each time the website is accessed. The
following data (“technical information”) are collected:
(1) Information on the browser type and version used
(2) The user’s operating system
(3) The user’s Internet service provider
(4) The user’s IP address
(5) Date and time of access
(6) Websites from which the user’s system accesses our website
(7) Websites accessed by the user’s system via our website
The data are also saved in our system’s log files. These data are not stored
together with other personal data of the user. We collect and use this
technical information for the purposes of (network) security (to for example
ward off cyber-attacks), marketing and to better understand our users’ needs
as well as to continuously improve our website and enable users to access the
website from their computers.
The data are saved to log files to ensure website functionality. The data also help us improve the website and safeguard our information technology systems. The data are not analysed for marketing purposes in this context. Art. 6(1)(f) GDPR forms the legal basis for the temporary storage of the data and log files.
by the web browser on the user’s computer system. When a user accesses a
website, a cookie may be stored on the user’s operating system. This cookie
contains a distinctive character string which allows for unique identification
of the browser when the website is accessed again.
We use the following tracking and (re)marketing tools on our website: Google
Analytics (visitor measurement on the website); Link for more information:
Segment.io - Data Hub Service for tracking user behavior; Link for more information: https://segment.com/product
Amplitude.com - Behavioural platform for product analytics; Link for more
Our legitimate interest pursuant to Art. 6(1)(f) GDPR for the purposes of increasing the efficiency of our website and (direct) marketing is the legal basis for the use of the tools listed.
On our website, we use a “two-click solution” for the following social media
With the two-click solution, your data are only transmitted to the relevant social networking provider after initial activation (approval) of the respective plugin button, Art. 6(1)(a) GDPR.
The basic provision of the plugin on our website is based on our legitimate interest for marketing purposes, Art. 6(1)(f) GDPR.
We offer a range of different services on our website. We must collect and process user or customer personal data in order to perform these.
We process the data of the scanned tickets to record and incentivize the uploaded tickets. These data are processed by us first to fulfil the contract (Article 6 paragraph 1 letter b DSGVO) and to safeguard our legitimate interests (Article 6 paragraph 1 lit. f DSGVO).
In connection with the processing of data for the sending of newsletters,
there is no disclosure of the data to third parties. The data will be used
exclusively for sending the newsletter.
The legal basis for the processing of the data after the user has registered for the newsletter is the consent of the user Art. 6 para. 1 lit. a GDPR.
If Art. 6(1)(f) GDPR forms the legal basis for the processing, our legitimate interests are, in addition to the purposes listed above: To protect the company against material and immaterial damage Professionalism (of our products and services) Cost optimisation (control and minimisation)
If obliged to do so by law, we process personal data in order to meet duties of retention under commercial or tax law or to meet legal security requirements (such as Section 7 of the Aviation Security Act [LuftSiG]). For further information on retention periods, please refer to “Duration of the data processing”.
The input fields which are mandatory to be filled out for performing the requested service are marked accordingly on the website. The input is either mandatory because of legal or contractual requirements.
Your personal data are deleted as soon as they are no longer needed for the specified purposes. In certain circumstances, personal data are kept for the period of time during which claims against Lufthansa Innovation Hub GmbH may be enforced (statutory limitation period of three to thirty years). Personal data are also saved to the extent that and for so long as Lufthansa Innovation Hub GmbH is legally obliged to do so. Corresponding burdens of proof and duties of retention arise from, among others, the Commercial Code, Tax Code and Money Laundering Act. These prescribe retention periods up to ten years.
You have the right to object, on reasons relating to your particular
situation, at any time to processing of personal data concerning you which is
based on point (e) or (f) of Article 6(1) GDPR, including profiling based on
The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or processing is necessary for the establishment, exercise or defence of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
In order to offer you our products and services, based on our contractual
obligations or in accordance with our legitimate interests, we may have to
disclose your personal data to third parties internal or external to the
Lufthansa Group. These recipients can be categorised as follows:
Personal data may be transmitted to third countries or international organisations as part of this. For your protection and the protection of your personal data, appropriate safeguards are provided for such data transmissions as per and in accordance with legal requirements (particularly, the use of EU standard contractual clauses) or an adequacy decision has been issued by the EU Commission (Art. 45 GDPR).
For information on EU standard contractual clauses, please visit [https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32010D0087&from=DE]. The EU Commission provides the relevant information relating to its adequacy decisions at [https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en#dataprotectionincountriesoutsidetheeu].
A copy of the security precautions used may also be requested from email@example.com
We are also legally obliged to provide personal data to German and international authorities, Art. 6(1)(c) GDPR together with local and international regulations and agreements.
Lufthansa Innovation Hub GmbH is committed to ensuring fair and transparent
processing. That is why it is important to us that data subjects can not only
exercise their right to object but also the following rights where the
respective legal requirements are satisfied:
Right of access, Art. 15 GDPR
Right to rectification, Art. 16 GDPR
Right to erasure (“right to be forgotten”), Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR
To exercise your right, please email firstname.lastname@example.org. In order to process your request and for identification purposes, please note that we will process your personal data in accordance with Art. 6(1)(c) GDPR.
You also have the right to lodge a complaint with a supervisory authority. The relevant supervisory authority for Lufthansa Innovation Hub GmbH is:
Berlin Commissioner for Data Protection and Freedom of Information
Visitors entrance: Puttkamerstr. 16 - 18 (5th floor)
Telephone: 030 13889-0
Fax: 030 2155050
If you give your consent to us for processing your personal data, please note
that you may withdraw this consent at any time.
If you gave this consent on the website, please visit the page where you originally gave consent or log in using your LH ID in order to withdraw consent in the settings.
If you have consented to receive our newsletter, you may withdraw this consent by using the “Unsubscribe” link in the newsletter.
In all other cases or if you have problems withdrawing your consent on the website, you can contact email@example.com.
Please note that your consent can only be withdrawn with future effect and such a withdrawal does not have any influence on the lawfulness of past processing. In some cases, we may be entitled in spite of your withdrawal to continue to process your personal data on a different legal basis – e.g. to perform a contract.
These data protection notices only apply to processing for the website www.rydes.com Other websites are not covered by these data protection notices and provide their own specific data protection notices.
Google AdWords remarketing service is provided by Google Inc.
You can opt-out of Google Analytics for Display Advertising and customise the Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads
Google also recommends installing the Google Analytics Opt-out Browser Add-on – https://tools.google.com/dlpage/gaoptout – for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.
If IP anonymization is enabled on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatories of the agreement in the European economic zone. Only in cases of exception will the complete IP address be transferred to a Google server in the USA and shortened there. On assignment from the operator of this website, Google will use this information to evaluate your usage of the website to create reports about website activities and in order to provide further services affiliated with website usage and internet usage. The IP address transferred from your browser within the scope of Google Analytics is not merged with other data from Google.
For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/
Facebook remarketing service is provided by Facebook Inc.
You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950
To opt-out from Facebook’s interest-based ads follow these instructions from Facebook: https://www.facebook.com/about/ads/#568137493302217
Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA http://www.aboutads.info/choices/, the Digital Advertising Alliance of Canada in Canada http://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe http://www.youronlinechoices.eu/, or opt-out using your mobile device settings.
For more information on the privacy practices of Facebook, please visit Facebook’s Data Policy: https://www.facebook.com/privacy/explanation
The mobile barcode scanning service is provided by Scandit AG.
You can learn more about the mobile barcode scanning solution by visiting this page: https://www.scandit.com
When you use the Scandit Software and / or Services, certain information (depending on the software and / or services you use) will be sent to Scandit. Unless required by law, Scandit will not disclose the usage data to third parties. You acknowledge that the Scandit Software will transfer the usage data as long as you use the Software and / or Services.
For more information on Scandit's privacy practices, please visit: https://ssl.scandit.com/terms/terms.pdf
Mailjet's Email Marketing service is provided by Mailjet GmbH.
You can learn more about the email marketing solution by visiting this page: https://www.mailjet.de
Segment Data Hub service is provided by Segment.io, Inc. The service provides
us with support in analyzing user behavior, which enables us to improve the
You can learn more about the Data Hub Service by visiting this page: https://segment.com
Amplitudes' behavioural platform for product analytics is provided by
Amplitude, Inc. The service provides us with support in analyzing user
behavior, which enables us to improve the user experience.
You can learn more about Amplitude visiting this page: https://amplitude.com