Privacy Policy

1. Controller

We, Lufthansa Innovation Hub GmbH (hereinafter also “LIH”, we”, “us”), wish to  inform you how your personal data is processed when you use our website / App (“website”).  

If you have any further queries regarding data protection in connection with  our website or the services offered, please contact our data protection  officer:  

Contact details for the exercise of data subject rights:
Lufthansa Innovation Hub GmbH
Rosenthaler Str. 32
10178 Berlin

Contact details of the data protection officer of the Lufthansa Group:
Deutsche Lufthansa AG
Airportring - LAC
60546 Frankfurt

A data protection officer is not bound by instructions of the management.

2. Scope, purpose and legal basis of processing personal data

 We collect and use personal data directly from our users and other sources  (mentioned below) in the following situations:

2.1. Provision of the website and log file creation

By visiting our website, the system automatically records data and information  about the user’s computer system each time the website is accessed. The  following data (“technical information”) are collected:
(1) Information on the browser type and version used
(2) The user’s operating system
(3) The user’s Internet service provider
(4) The user’s IP address
(5) Date and time of access
(6) Websites from which the user’s system accesses our website
(7) Websites accessed by the user’s system via our website

The data are also saved in our system’s log files. These data are not stored  together with other personal data of the user. We collect and use this  technical information for the purposes of (network) security (to for example  ward off cyber-attacks), marketing and to better understand our users’ needs  as well as to continuously improve our website and enable users to access the  website from their computers.

The data are saved to log files to ensure website functionality. The data also  help us improve the website and safeguard our information technology systems.  The data are not analysed for marketing purposes in this context. Art. 6(1)(f)  GDPR forms the legal basis for the temporary storage of the data and log  files.

2.1.1. Use of cookies

Our website uses cookies. Cookies are text files stored in the web browser or  by the web browser on the user’s computer system. When a user accesses a  website, a cookie may be stored on the user’s operating system. This cookie  contains a distinctive character string which allows for unique identification  of the browser when the website is accessed again.

Cookies are stored on the user’s computer, which transmits these to our  website. Therefore, users have full control over the use of cookies. You may  disable or restrict the transmission of cookies by changing your web browser  settings. Previously stored cookies can be deleted at any time. This may also  be done automatically. If cookies are disabled for our website, you may no  longer be able to use all of its functionality.

2.1.2. Tracking tools

We use the following tracking and (re)marketing tools on our website: Google  Analytics (visitor measurement on the website); Link for more information: - Data Hub Service for tracking user behavior (website and app; Link for more  information: - Behavioural platform for product analytics; Link for more  information:

Our legitimate interest pursuant to Art. 6(1)(f) GDPR for the purposes of  increasing the efficiency of our website and (direct) marketing is the legal  basis for the use of the tools listed.

2.1.3. Social Media Plugins

On our website, we use a “two-click solution” for the following social media  plugins:
Google Plus

With the two-click solution, your data are only transmitted to the relevant  social networking provider after initial activation (approval) of the  respective plugin button, Art. 6(1)(a) GDPR.

The basic provision of the plugin on our website is based on our legitimate  interest for marketing purposes, Art. 6(1)(f) GDPR.

2.2. Use of the services offered on our website

We offer a range of different services on our website and in our app. We must collect and process user or customer personal data in order to perform these.

2.2.1. Scanning of tickets / Scandit

We process the data of the scanned tickets to record and incentivize the  uploaded tickets. These data are processed by us first to fulfil the contract  (Article 6 paragraph 1 letter b DSGVO) and to safeguard our legitimate  interests (Article 6 paragraph 1 lit. f DSGVO).

2.2.2 Newsletter / Mailjet

In connection with the processing of data for the sending of newsletters,  there is no disclosure of the data to third parties. The data will be used  exclusively for sending the newsletter.

The legal basis for the processing of the data after the user has registered  for the newsletter is the consent of the user Art. 6 para. 1 lit. a GDPR.

2.3. Our legitimate interest in processing personal data

If Art. 6(1)(f) GDPR forms the legal basis for the processing, our legitimate  interests are, in addition to the purposes listed above: To protect the  company against material and immaterial damage Professionalism (of our  products and services) Cost optimisation (control and minimisation)

2.4. Other processing commitments

If obliged to do so by law, we process personal data in order to meet duties  of retention under commercial or tax law or to meet legal security  requirements (such as Section 7 of the Aviation Security Act [LuftSiG]). For  further information on retention periods, please refer to “Duration of the  data processing”.

2.5. Obligation to provide personal data

The input fields which are mandatory to be filled out for performing the  requested service are marked accordingly on the website. The input is either  mandatory because of legal or contractual requirements.

3. Duration of the data processing

Your personal data are deleted as soon as they are no longer needed for the  specified purposes. In certain circumstances, personal data are kept for the  period of time during which claims against Lufthansa Innovation Hub GmbH may  be enforced (statutory limitation period of three to thirty years). Personal  data are also saved to the extent that and for so long as Lufthansa Innovation  Hub GmbH is legally obliged to do so. Corresponding burdens of proof and  duties of retention arise from, among others, the Commercial Code, Tax Code  and Money Laundering Act. These prescribe retention periods up to ten years.

4. Right to object pursuant to Art. 21 GDPR

You have the right to object, on reasons relating to your particular  situation, at any time to processing of personal data concerning you which is  based on point (e) or (f) of Article 6(1) GDPR, including profiling based on  those provisions.

The controller shall no longer process your personal data unless the  controller demonstrates compelling legitimate grounds for the processing which  override your interests, rights and freedoms or processing is necessary for  the establishment, exercise or defence of legal claims.

Where your personal data are processed for direct marketing purposes, you have  the right to object at any time to processing of personal data, which includes  profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, the personal  data concerning you shall no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding  Directive 2002/58/EC, you may exercise your right to object by automated means  using technical specifications.

5. Disclosure of personal data to third parties

In order to offer you our products and services, based on our contractual  obligations or in accordance with our legitimate interests, we may have to  disclose your personal data to third parties internal or external to the  Lufthansa Group. These recipients can be categorised as follows:
Lufthansa Group

Personal data may be transmitted to third countries or international  organisations as part of this. For your protection and the protection of your  personal data, appropriate safeguards are provided for such data transmissions  as per and in accordance with legal requirements (particularly, the use of EU  standard contractual clauses) or an adequacy decision has been issued by the  EU Commission (Art. 45 GDPR).

For information on EU standard contractual clauses, please visit  [].  The EU Commission provides the relevant information relating to its adequacy  decisions at  [].  

A copy of the security precautions used may also be requested from

We are also legally obliged to provide personal data to German and  international authorities, Art. 6(1)(c) GDPR together with local and  international regulations and agreements.

6. Rights of the data subject

 Lufthansa Innovation Hub GmbH is committed to ensuring fair and transparent  processing. That is why it is important to us that data subjects can not only  exercise their right to object but also the following rights where the  respective legal requirements are satisfied:
Right of access, Art. 15 GDPR
Right to rectification, Art. 16 GDPR
Right to erasure (“right to be forgotten”), Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR

To exercise your right, please email In  order to process your request and for identification purposes, please note  that we will process your personal data in accordance with Art. 6(1)(c) GDPR.  

You also have the right to lodge a complaint with a supervisory authority. The  relevant supervisory authority for Lufthansa Innovation Hub GmbH is:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
Visitors entrance: Puttkamerstr. 16 - 18 (5th floor)
10969 Berlin  

Telephone: 030 13889-0
Fax: 030 2155050


7. Consent

If you give your consent to us for processing your personal data, please note  that you may withdraw this consent at any time.

If you gave this consent on the website, please visit the page where you  originally gave consent or log in using your LH ID in order to withdraw  consent in the settings.

If you have consented to receive our newsletter, you may withdraw this consent  by using the “Unsubscribe” link in the newsletter.

In all other cases or if you have problems withdrawing your consent on the  website, you can contact

Please note that your consent can only be withdrawn with future effect and  such a withdrawal does not have any influence on the lawfulness of past  processing. In some cases, we may be entitled in spite of your withdrawal to  continue to process your personal data on a different legal basis – e.g. to  perform a contract.

8. Disclaimer and limitations of these data protection notices

These data protection notices only apply to processing for the website Other websites are not covered by these data protection notices  and provide their own specific data protection notices.

Appendix – notices on social media plugins

Lufthansa Innovation Hub GmbH uses remarketing services to advertise on third  party web sites to you after you visited our Service. We, and our third-party  vendors, use cookies to inform, optimise and serve ads based on your past  visits to our Service.


Google AdWords remarketing service is provided by Google Inc.

You can opt-out of Google Analytics for Display Advertising and customise the  Google Display Network ads by visiting the Google Ads Settings page:

Google also recommends installing the Google Analytics Opt-out Browser Add-on  – – for your web browser. Google  Analytics Opt-out Browser Add-on provides visitors with the ability to prevent  their data from being collected and used by Google Analytics.

If IP anonymization is enabled on this website, your IP address will be  shortened beforehand by Google within member states of the European Union or  in other signatories of the agreement in the European economic zone. Only in  cases of exception will the complete IP address be transferred to a Google  server in the USA and shortened there. On assignment from the operator of this  website, Google will use this information to evaluate your usage of the  website to create reports about website activities and in order to provide  further services affiliated with website usage and internet usage. The IP  address transferred from your browser within the scope of Google Analytics is  not merged with other data from Google.

For more information on the privacy practices of Google, please visit the  Google Privacy & Terms web page:


Facebook remarketing service is provided by Facebook Inc.

You can learn more about interest-based advertising from Facebook by visiting  this page:

To opt-out from Facebook’s interest-based ads follow these instructions from  Facebook:

Facebook adheres to the Self-Regulatory Principles for Online Behavioral  Advertising established by the Digital Advertising Alliance. You can also  opt-out from Facebook and other participating companies through the Digital  Advertising Alliance in the USA, the Digital  Advertising Alliance of Canada in Canada or the  European Interactive Digital Advertising Alliance in Europe, or opt-out using your mobile device  settings.

For more information on the privacy practices of Facebook, please visit  Facebook’s Data Policy:


The mobile barcode scanning service is provided by Scandit AG.

You can learn more about the mobile barcode scanning solution by visiting this  page:

When you use the Scandit Software and / or Services, certain information  (depending on the software and / or services you use) will be sent to Scandit.  Unless required by law, Scandit will not disclose the usage data to third  parties. You acknowledge that the Scandit Software will transfer the usage  data as long as you use the Software and / or Services.

For more information on Scandit's privacy practices, please visit:


Mailjet's Email Marketing service is provided by Mailjet GmbH.

You can learn more about the email marketing solution by visiting this page:

By registering with RYDES you will receive email information and an e-mail  newsletter. We use MailJet services to maintain mailing lists and to send  newsletters. Newsletter subscribers will record the IP address, the emails you  open, and the links you click on in those emails, so we can better recommend  and optimize content. It is therefore important that we provide your e-mail  address, first name and last name to MailJet (if the latter is provided).  First and last names are used for the personal address in the mail. The  privacy policy of MailJet can be found at the following link:


Segment Data Hub service is provided by, Inc. The service provides  us with support in analyzing user behavior, which enables us to improve the  user experience.

You can learn more about the Data Hub Service by visiting this page:

The privacy policy of Segment can be found at the following link:


This cookie policy has been created and updated by

Updated: 28.10.2020 03:52

What are cookies?

Cookies and similar technologies are very small text documents or pieces of code that often contain a unique identification code. When you visit a website or use a mobile application, a computer asks your computer or mobile device for permission to save this file on your computer or mobile device and gain access to information. Information collected through cookies and similar technologies may include the date and time of the visit and how you use a particular website or mobile application.

Why do we use cookies

Cookies make sure that during your visit of our online shop you remain logged in, all items remain stored in your shopping cart, you can shop safely and the website keeps running smoothly. The cookies also ensure that we can see how our website is used and how we can improve it. Furthermore, depending on your preferences our own cookies may be used to present you with targeted advertisements that match your personal interests.

What type of cookies do we use?

Necessary cookies

These cookies are necessary for the website to function properly. Some of the following actions can be performed by using these cookies.
- Store articles in a shopping cart for online purchases
- Save your cookie preferences for this website
- Saving language preferences
- Log in to our portal. We need to check whether you are logged in.


These cookies are still in the classification process. They will show up in one on the following categories; Necessary, Performance, Functional or Advertising.

How can I switch off or remove cookies?

You can choose to opt out of all but the necessary cookies. In the settings of the browser, you can change the settings to ensure that cookies will be blocked. Most browsers provide you with an explanation on how to do this in the so-called ‘help-function’. However, if you block the cookies, it is possible that you will not be able to enjoy all the technical features our website has to offer and it may negatively affect your user experience.

We have made it easy to manage your consents.

If you want to view your consents audit please contact the website administrator.

The cookies we use on our website


Domain name
Expiration time
This cookie saves your cookie preferences for this website. You can change these or withdraw your consent easily.
a year
This cookie contains your unique ID so CookieFirst can identify unique visitors to this website.
a year


Domain name
Expiration time
This cookie is associated with Shopify's analytics suite.
a year


Domain name
Expiration time
This cookie has not yet been given a description. Our team is working to provide more information.
This cookie policy has been created and updated by